Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
File: RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft (raw, json)
Hash identifier: vnnLktyszNZesR+dWQawCKeIw9ZRfoof+Ja5xLOIpu0=
Subject key identifier: EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 0D86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
Manifest number: 0D64
Signing time: Sat 23 Aug 2025 21:14:56 +0000
Manifest this update: Sat 23 Aug 2025 21:14:56 +0000
Manifest next update: Mon 25 Aug 2025 21:14:56 +0000
Files and hashes: 1: FYcm3-BAzLarrqeCYV2whY0U-zo.roa (hash: BaTk+IlRTMk3VliwXqlPH52YkxVtp5DBAOqd4jq6OiU=)
2: RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl (hash: PL608m89/3a1IAOLgzNGDw1QPPKMvu0YRvGWoTOwMww=)
3: TsN0H5pD6Qm0_O0vCqm-6LmqAwg.roa (hash: QK6bO3POqwYLqN6of1UT1LdwgPFXVK0OJbizi519XWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3462 (0xd86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Aug 23 21:14:56 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EBA3972CCF2AC197E586C0AD8B740DC36C79B1B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:70:15:e8:47:0b:5c:cf:90:8c:df:cd:69:
20:52:4c:f0:94:21:ba:af:0c:c8:7d:b3:9b:43:3f:
a9:ba:1e:ea:bc:53:ef:72:c0:4f:fc:bb:b9:9a:63:
79:52:fb:a7:80:e8:c1:45:c6:9f:2b:43:84:a0:c5:
20:e4:5a:c2:1f:e2:2f:06:cf:d2:d6:16:05:26:af:
e6:d6:76:af:7b:84:98:e9:6d:b6:84:92:6e:0b:b1:
f7:2a:ab:94:42:e0:f3:c1:28:a4:7d:ce:c5:f8:f3:
9f:b6:1e:78:f0:7f:9b:f2:1d:4e:23:b0:22:0b:cf:
90:b5:e3:4f:ab:e9:1e:9b:c3:da:13:ce:3b:20:c2:
56:9c:d7:48:31:f2:1c:f3:95:6e:63:09:be:69:92:
fa:07:ca:5d:c5:72:72:26:72:b5:f9:f5:4b:ac:40:
b1:5a:53:c3:7b:be:8c:5e:cd:fb:81:9a:aa:3f:f3:
de:98:2d:3e:77:8f:d9:20:67:13:31:1f:47:ad:a1:
87:11:a7:34:8c:72:b1:03:28:9b:b8:7d:4b:28:ed:
0c:37:e8:ea:75:bb:56:19:d8:b9:76:70:39:cc:11:
35:de:13:3d:c1:36:5b:5b:5e:7f:8f:7e:b9:4e:b7:
a4:aa:a5:25:16:70:65:b2:40:fa:01:44:f0:f8:7c:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:14:c6:30:51:d5:7e:91:58:c9:23:b8:29:5f:72:6f:c2:d9:
83:b1:44:b7:33:bc:ea:b5:aa:f1:a2:b1:df:1d:a8:d0:72:d4:
a0:30:ab:7d:d2:8f:24:46:d2:1e:ab:1f:f6:aa:2d:9d:b8:0e:
ed:fe:1b:a6:b5:f9:64:06:08:14:5b:3a:fb:cc:89:41:03:50:
1a:3a:66:44:7f:6d:e0:97:1e:8f:d7:4c:61:12:ad:12:59:49:
f6:9e:84:22:e9:2e:f8:f6:e1:eb:ca:15:4b:89:ca:7d:9f:0b:
77:f7:18:45:33:2e:94:bc:06:93:d2:25:4b:c3:73:89:c2:9d:
61:f4:28:0c:18:be:69:bf:f6:3e:bd:df:27:c8:ab:60:b3:c0:
22:f6:56:e1:ef:72:a0:cd:d1:1f:70:5c:3f:b3:d3:bd:4b:c4:
13:fa:88:7d:e9:0f:71:5d:6a:65:d4:49:46:4a:a2:6f:01:ee:
4a:b9:9b:93:83:72:d3:a2:bd:b9:b1:18:cc:34:98:7b:bf:07:
8f:b2:e3:bb:65:5f:84:21:e6:0f:6b:ac:50:2e:53:45:dc:b1:
31:29:68:57:3d:90:82:27:8a:7d:74:42:ee:4d:85:bb:c6:d3:
c6:27:f0:c2:f6:dc:91:e7:b8:85:1d:1f:32:20:de:c4:ce:db:
ae:4a:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:56:31 2025 by rpki-client