Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
File: 7hlBw3vR4s8SUS-YqzZsKdp5txg.mft (raw, json)
Hash identifier: eQKY5Z/XYeJIU5U7kP5h6D6MW2vpuDqut/rhCmahOkI=
Subject key identifier: D5:DF:0F:7C:01:4A:8C:87:2F:3B:4E:76:51:55:75:4E:C0:3D:DC:EA
Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18
Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718
Certificate serial: 0136
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
Manifest number: 012C
Signing time: Wed 14 May 2025 22:51:48 +0000
Manifest this update: Wed 14 May 2025 22:51:48 +0000
Manifest next update: Fri 16 May 2025 22:51:48 +0000
Files and hashes: 1: 5KD70o2wBfuM-Vrx7EUKh-PRqXw.roa (hash: g0dYMwEUFHDZxs+/F0x6eLArAsq3AjWNqhGQD5OrSTU=)
2: 7hlBw3vR4s8SUS-YqzZsKdp5txg.crl (hash: t923lKSVfzT+OKAJprSVXU23/Nzzz7hxuDg2sm8MAzI=)
3: daGBGJrwdBl4z43G3Zi4pF7DFIE.roa (hash: Wsm69+xBxrozsqLxCABjfSPK8PoYJtnV8biTyo5pqOA=)
4: elNhJZb2hLl4XPYlqU3ogzzB2CM.roa (hash: p7UGRnIY+61/0ajZGnKLlyLEBTNcRhvi4lFw27G/bi8=)
5: zehvSacnQKNz7VfldSt3IAq6LZI.roa (hash: 1wA81Es220eAFSc3A30SiIyxCE+n+FI5Sl7xsWf2wzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718
Validity
Not Before: May 14 22:51:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D5DF0F7C014A8C872F3B4E765155754EC03DDCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:78:93:dc:aa:bf:81:24:26:6e:55:29:aa:
c4:53:41:7c:4d:94:bf:c6:51:69:4d:57:9b:22:d0:
17:7b:ff:e5:37:6e:a4:ad:bf:c7:91:8b:6e:b9:d8:
d7:7a:b6:c4:f5:04:c4:c5:c4:a6:2f:91:0c:9f:84:
88:f8:50:46:a1:b1:7b:ed:1f:d4:ef:dc:ce:c8:36:
af:22:f8:eb:28:1c:22:03:f7:65:f2:d5:6f:d0:5a:
5d:35:f1:79:4c:de:a1:a0:48:a7:5f:16:46:f5:12:
5e:11:32:e1:bc:7d:78:be:1e:ae:44:23:c0:5b:9f:
b4:b6:10:57:22:1e:73:82:cd:e1:04:58:db:01:b4:
f0:14:9c:5d:7c:de:aa:4d:22:97:7e:b9:68:f1:8b:
49:0f:f6:3f:af:44:47:76:86:92:f5:c9:40:ad:c8:
dd:58:ae:e1:5b:3b:96:bb:73:26:d9:17:5e:a2:12:
34:82:d9:ab:a2:bf:9a:ee:5e:fd:3a:98:92:61:74:
2c:0b:24:12:f7:7d:89:0c:2f:dd:d7:64:06:6b:ad:
b5:be:df:51:c9:93:aa:40:91:3e:dc:34:5a:00:fe:
95:de:92:5e:3b:91:ba:9c:70:bf:f7:07:59:77:f6:
2a:51:f2:f7:9e:38:fa:bd:40:4c:ee:c1:21:53:b3:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:0F:7C:01:4A:8C:87:2F:3B:4E:76:51:55:75:4E:C0:3D:DC:EA
X509v3 Authority Key Identifier:
keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:64:43:2e:55:ec:09:8d:01:a8:40:89:8f:31:df:6d:51:
fa:1d:af:64:d2:1b:d1:7d:f4:8d:64:93:38:12:1f:be:c3:1c:
a8:1f:cc:cb:ea:bf:96:5f:8f:41:c7:2c:ce:e0:c5:a4:28:68:
85:e1:4e:6f:c8:86:bf:41:35:26:0a:6e:b6:82:ad:6e:74:5c:
ee:84:fc:52:ad:8c:ca:c5:f0:f1:4f:36:81:bb:1a:6a:a6:6e:
e9:99:f2:fa:70:36:b9:6b:37:eb:64:8e:c2:81:b5:f4:e0:1b:
28:42:52:45:4e:e9:29:a9:89:79:7e:77:62:88:6d:41:e6:2c:
5d:64:75:cf:24:d5:9c:00:95:04:4f:53:1c:e4:10:01:e1:4c:
66:13:b0:bb:fb:f0:f8:df:f1:21:0e:21:67:4e:76:8e:47:3b:
12:39:03:36:92:b9:c5:3a:80:2c:89:a2:42:a5:86:d5:dc:c9:
32:57:84:5f:8a:db:04:95:52:ad:bd:c2:0b:4f:24:1a:8d:2f:
42:dc:18:64:e4:a4:71:2b:9d:68:9a:94:ae:e1:58:9d:4b:77:
56:bb:35:10:ae:d3:0d:3a:f3:a5:13:e5:23:34:92:bc:f3:21:
ce:65:4e:0a:62:d3:83:9b:aa:d0:06:22:26:07:0b:3e:b4:7d:
a5:44:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:11:34 2025 by rpki-client