Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
File: aisTlsFC2mcRUYh16QxK7JCw9cQ.mft (raw, json)
Hash identifier: lvos5bgX1S0P3kVJkyXzpCXZrkDgUWbZ0zJZs0Thsho=
Subject key identifier: 9F:47:34:C3:CD:35:94:AB:90:5D:6D:78:39:04:3E:E0:FA:32:05:A8
Authority key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4
Certificate issuer: /CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4
Certificate serial: 0390
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
Manifest number: 038B
Signing time: Thu 08 May 2025 21:50:32 +0000
Manifest this update: Thu 08 May 2025 21:50:32 +0000
Manifest next update: Sat 10 May 2025 21:50:32 +0000
Files and hashes: 1: WPCDryNAk5NkAWpGy7MQmm_WC1I.roa (hash: hXfnFDjGFgvVMa/VXwbJuZzPNTjNGozvF2aXMOz7Msk=)
2: aisTlsFC2mcRUYh16QxK7JCw9cQ.crl (hash: v1TrFhbtCDS1dvmz0Tqbmk7Zh8LAc6dVXK9CZSO1XTQ=)
3: z-H2E_TH0q2gzkcFxIBMZ9V7Wu8.roa (hash: kUEhDixYI/i3vdN+mSXb3mi/8wrHM8TPrKE2FwoBz5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912 (0x390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4
Validity
Not Before: May 8 21:50:32 2025 GMT
Not After : Sep 23 15:30:20 2025 GMT
Subject: CN=9F4734C3CD3594AB905D6D7839043EE0FA3205A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:c0:17:a9:80:f0:17:d6:5d:7b:06:2e:93:
f9:fe:04:dc:02:7f:1f:bf:f1:f6:a0:03:c6:e9:09:
bd:0f:e0:61:54:43:72:e7:64:30:ec:35:13:3f:ef:
38:5e:48:e2:18:e1:9c:de:af:a6:27:04:ca:24:e7:
99:db:51:e3:4b:d8:dc:74:83:3f:9a:7d:e3:5d:c0:
14:b5:61:8f:7c:33:69:59:33:a8:bd:c8:8e:6c:24:
bc:c2:1f:59:25:5d:ed:fd:8b:7a:01:75:13:e3:8e:
d2:7c:ad:13:d1:46:3c:ae:9b:55:bf:a0:63:a6:aa:
ca:bb:b1:c4:5c:f0:73:4c:b6:76:dd:3a:4b:dd:96:
30:9d:85:a9:b1:b2:a7:b3:5a:b6:19:ec:16:76:cf:
7a:dd:d1:64:4d:25:51:72:6d:f0:4e:53:2d:65:a0:
1c:9a:67:d3:97:65:83:9a:d6:07:a0:36:9a:9f:e2:
d1:88:77:c0:a9:9d:ed:90:a6:26:55:dd:9a:a1:ac:
9c:82:53:f8:b0:1f:db:4b:4a:4b:a2:f5:cc:93:43:
38:5e:d6:a5:32:d5:95:2f:bd:21:1d:2f:b0:15:70:
f0:d8:6d:96:b5:1e:f8:c3:3a:7c:38:1f:f1:78:a2:
5b:a5:83:98:0c:b2:c9:08:52:39:86:ed:f9:f7:b6:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:34:C3:CD:35:94:AB:90:5D:6D:78:39:04:3E:E0:FA:32:05:A8
X509v3 Authority Key Identifier:
keyid:6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:db:e2:99:ad:b0:6e:b4:e6:f6:a4:40:df:26:cf:3a:57:
9d:d5:d3:78:20:68:cc:46:7a:20:7c:49:a2:25:a4:c6:77:e3:
dc:6c:89:f8:5a:87:d9:a8:58:3b:15:89:42:1f:52:36:84:63:
9c:9d:b5:03:3d:53:f8:c1:15:4e:6d:86:7b:12:81:bd:b2:57:
f6:04:34:ef:ee:d7:23:3a:99:20:7e:b1:3f:d3:a4:be:d0:d3:
dd:6e:20:e6:c0:13:e5:06:c4:78:6c:c8:e7:05:29:9f:c9:39:
7c:c4:ef:ad:62:d3:b8:46:76:9e:36:c3:3c:2e:de:a1:89:d7:
fd:6a:1f:35:37:d2:7c:d4:cf:21:00:c5:61:26:0b:a2:a3:fd:
31:6f:76:5d:b0:56:1b:11:d6:51:e8:10:1e:51:84:92:58:7e:
bb:80:ef:e9:85:e1:72:35:2a:70:1f:6a:13:3d:2f:37:a8:48:
04:c6:c0:20:ae:ce:9a:a5:da:83:97:1c:02:cf:3d:0b:fa:92:
4c:ec:6b:b7:6f:36:6d:e8:94:57:8e:cd:63:b0:d7:7b:a2:04:
f5:ad:12:84:96:88:7f:fb:8b:e3:1d:e9:a1:4b:92:b4:7a:0e:
0b:3d:79:39:8d:86:0e:2b:64:d8:28:12:8f:8b:d7:02:e2:58:
13:f8:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:32:56 2025 by rpki-client