Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.mft
File: -FjQAAx8RqmGsuuWgV8GriaTqdA.mft (raw, json)
Hash identifier: GFbi0RTp75TLYMK8VsY04OsTVJBP0caj4KB1E9ilx/M=
Subject key identifier: F2:EC:2A:9B:B1:6F:DF:9E:E2:25:92:79:BC:60:C2:12:E6:E9:E6:6E
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0D90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.mft
Manifest number: 0D7A
Signing time: Wed 02 Jul 2025 23:31:45 +0000
Manifest this update: Wed 02 Jul 2025 23:31:45 +0000
Manifest next update: Fri 04 Jul 2025 23:31:45 +0000
Files and hashes: 1: -FjQAAx8RqmGsuuWgV8GriaTqdA.crl (hash: Q0c6Tik0Q606xpmbwL8Yr4lAkPMJQOI4CFBZldirvUw=)
2: 6M67JmSEoaeUKxvtWpD-49a5JGo.roa (hash: 5IVv+j9HV8IsUWqwbiGKgH1ePVhxkXF8oORytispBLM=)
3: iUv9_WKZnnKO1LrJjOFge-ueXCU.roa (hash: xGKLcVSQpMXj9CPj5AclUmYYElMlKOlPw/NOLDN07gQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3472 (0xd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Jul 2 23:31:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F2EC2A9BB16FDF9EE2259279BC60C212E6E9E66E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:f7:15:1f:f2:f9:59:9b:e6:61:5a:6a:74:
df:af:6a:ea:40:c0:55:37:66:9d:94:7f:b2:bc:ae:
73:48:48:14:3e:ad:81:6e:cf:c5:d4:d2:ea:cd:27:
d2:95:ff:cf:4c:fe:53:9e:77:94:6a:14:64:57:d9:
ab:d4:5b:3b:65:d7:45:da:7b:7c:59:f0:93:b5:9b:
a0:37:3c:12:00:e6:c7:22:67:05:a2:df:fe:e1:d2:
1b:09:57:16:d2:8b:ed:22:ff:ff:58:e5:ac:c3:4a:
3b:6a:63:1a:16:a2:58:0d:bb:b8:7e:53:f0:4b:8a:
fd:52:e1:b6:60:1d:f6:02:b5:54:f6:ae:0b:66:b3:
4b:a5:af:d6:be:fe:a1:78:c6:fb:5b:41:6d:42:79:
45:9c:c7:fe:71:9c:37:e8:64:14:5b:d0:9f:5f:e8:
e0:19:74:e8:24:fb:50:b1:c3:24:18:7f:81:ae:2c:
10:21:06:ec:10:ff:a8:0d:99:08:a1:36:d2:5b:19:
3f:3f:a4:d9:2b:27:74:39:ab:d1:3f:0d:a0:5a:31:
fd:9b:34:68:c9:04:06:7a:0d:4f:70:de:53:f5:18:
c8:a5:0c:1a:16:4e:41:50:b8:a9:c4:41:b3:96:b2:
47:4b:8a:2e:78:0e:16:60:b7:b9:bc:d9:96:27:8e:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EC:2A:9B:B1:6F:DF:9E:E2:25:92:79:BC:60:C2:12:E6:E9:E6:6E
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5e:a8:b7:93:3b:f8:45:2c:3f:1c:24:08:5d:10:5f:3c:09:
61:5f:cf:6e:37:c6:0d:f7:df:ec:30:98:b6:03:4d:14:0f:41:
87:0c:df:b4:58:3f:fb:fe:d0:15:04:7d:50:d6:81:24:30:60:
5c:e9:7e:8b:e6:54:df:3c:91:16:c2:75:0e:a0:89:37:55:58:
f8:0a:d3:ea:46:72:4a:0a:00:c7:91:68:c0:66:d7:db:0e:4f:
d2:6e:02:d7:5e:95:92:0f:ae:33:b3:5c:f2:88:4f:11:b9:0c:
a1:b4:bb:d0:be:68:47:96:80:82:38:1b:35:a2:90:2b:41:c8:
b9:57:57:06:b2:d6:f4:57:06:b8:46:9c:59:c5:70:08:17:f1:
54:ce:59:2f:20:a0:c0:24:4f:36:16:8f:ee:ff:8d:42:c0:21:
63:3c:97:a1:ee:1b:fd:9e:3b:16:a2:0d:91:9f:4d:8d:a4:ba:
73:c5:59:a3:59:a8:c7:b3:f5:ef:44:15:22:f0:7a:7d:44:35:
52:66:39:6e:62:db:f9:d5:fa:57:a6:80:06:7c:f2:44:f9:62:
29:9a:6a:36:65:b4:ae:e1:24:23:ca:d3:29:1f:ef:67:2f:c5:
da:ee:6d:6a:6a:78:86:67:c0:93:f9:a9:ad:35:25:41:16:fc:
c3:68:91:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:46:12 2025 by rpki-client