Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
File: 7hlBw3vR4s8SUS-YqzZsKdp5txg.mft (raw, json)
Hash identifier: 99fVBF6rBxV1RSiuwaeO83DgFjQbrIyIDSi66cmlNvE=
Subject key identifier: D5:DF:0F:7C:01:4A:8C:87:2F:3B:4E:76:51:55:75:4E:C0:3D:DC:EA
Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18
Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718
Certificate serial: 017E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
Manifest number: 0170
Signing time: Sat 23 Aug 2025 21:15:08 +0000
Manifest this update: Sat 23 Aug 2025 21:15:08 +0000
Manifest next update: Mon 25 Aug 2025 21:15:08 +0000
Files and hashes: 1: 7hlBw3vR4s8SUS-YqzZsKdp5txg.crl (hash: q4Kuxzdq8lwnXHlQXFAbmgjqPVVxBzOeigoiNhD87B8=)
2: BFZq29P4G61G9dB2gT7QhvFZa0A.roa (hash: 61xvZhTI5MepO8IgJc98rUkdG57VQkd0YnzlrT5TyMQ=)
3: KeEv1a3cK6Uy8x3vvtD6JuVyx0s.roa (hash: HDAP0p1s+g/rBYIuRwxgRd52AcMdANrslW48+uC6UtA=)
4: USAdAEn3Rzx9qlpWrNbcXmp_5cw.roa (hash: TKCJvFXS1LHLJIzpSoTS5yFLG/fRMJPB/nsppzyesQ4=)
5: _V-PNVuyFEKeosK_LpuLs1zLMiI.roa (hash: S6iqj00ZFyP368cf2wvvCwSyiuKxO5Jz3xIgGqcTPzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718
Validity
Not Before: Aug 23 21:15:08 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D5DF0F7C014A8C872F3B4E765155754EC03DDCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:78:93:dc:aa:bf:81:24:26:6e:55:29:aa:
c4:53:41:7c:4d:94:bf:c6:51:69:4d:57:9b:22:d0:
17:7b:ff:e5:37:6e:a4:ad:bf:c7:91:8b:6e:b9:d8:
d7:7a:b6:c4:f5:04:c4:c5:c4:a6:2f:91:0c:9f:84:
88:f8:50:46:a1:b1:7b:ed:1f:d4:ef:dc:ce:c8:36:
af:22:f8:eb:28:1c:22:03:f7:65:f2:d5:6f:d0:5a:
5d:35:f1:79:4c:de:a1:a0:48:a7:5f:16:46:f5:12:
5e:11:32:e1:bc:7d:78:be:1e:ae:44:23:c0:5b:9f:
b4:b6:10:57:22:1e:73:82:cd:e1:04:58:db:01:b4:
f0:14:9c:5d:7c:de:aa:4d:22:97:7e:b9:68:f1:8b:
49:0f:f6:3f:af:44:47:76:86:92:f5:c9:40:ad:c8:
dd:58:ae:e1:5b:3b:96:bb:73:26:d9:17:5e:a2:12:
34:82:d9:ab:a2:bf:9a:ee:5e:fd:3a:98:92:61:74:
2c:0b:24:12:f7:7d:89:0c:2f:dd:d7:64:06:6b:ad:
b5:be:df:51:c9:93:aa:40:91:3e:dc:34:5a:00:fe:
95:de:92:5e:3b:91:ba:9c:70:bf:f7:07:59:77:f6:
2a:51:f2:f7:9e:38:fa:bd:40:4c:ee:c1:21:53:b3:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:0F:7C:01:4A:8C:87:2F:3B:4E:76:51:55:75:4E:C0:3D:DC:EA
X509v3 Authority Key Identifier:
keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:30:7b:5e:6e:71:4c:46:da:b0:24:a6:1d:52:cf:8b:f1:5b:
a2:e6:c2:52:fc:79:e9:16:55:31:4a:dd:b0:ba:7e:0f:97:29:
45:aa:28:04:e4:79:f8:67:f2:0c:8f:56:7c:cc:f1:80:be:3e:
91:d6:00:66:48:c8:6d:21:48:5f:74:6c:92:14:c7:61:d7:e9:
00:07:72:da:54:51:a4:27:40:e9:bf:15:52:7c:55:db:b7:7d:
56:59:65:42:fc:4e:28:4c:82:97:6c:ab:7a:f9:ac:90:ab:10:
0b:14:80:24:de:63:96:96:a5:c4:33:c5:2b:ab:d4:b9:00:e3:
2b:c2:d3:bc:84:38:f5:0a:6a:16:6e:39:42:ac:c8:d7:4f:f0:
72:ba:90:2e:a6:9f:d6:09:e2:fe:6e:87:f4:e0:5f:2d:b1:d8:
42:16:87:66:b9:0a:2e:54:24:31:75:53:2b:32:95:af:44:58:
2c:85:51:1a:74:f8:00:b6:42:16:54:6a:18:88:e2:fe:50:37:
37:65:32:26:91:8e:20:7e:bc:55:53:1c:4b:a6:6c:ce:6b:82:
6c:87:4f:05:81:4b:18:0e:50:7e:d4:f7:84:0f:48:cd:0e:4b:
7a:c2:34:71:71:8a:de:91:9a:9e:71:29:d9:be:11:b2:8e:92:
b7:9a:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:46:13 2025 by rpki-client