Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.mft
File: 4ndJ6qVXvKVkWidePeCjr1NH98M.mft (raw, json)
Hash identifier: zBRTHdG+of4tLp9gw20IxULWixQ569FyIrq9IeYbh6c=
Subject key identifier: 15:8D:AB:34:52:F3:A4:3E:73:54:06:39:2D:83:F2:D0:DB:1E:B3:09
Authority key identifier: E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
Certificate issuer: /CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Certificate serial: 0229
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.mft
Manifest number: 021D
Signing time: Mon 08 Jan 2024 12:36:55 +0000
Manifest this update: Mon 08 Jan 2024 12:36:55 +0000
Manifest next update: Wed 10 Jan 2024 12:36:55 +0000
Files and hashes: 1: 4ndJ6qVXvKVkWidePeCjr1NH98M.crl (hash: f4R/YKwIXEAp1kswEke9vlRxTK+p6vINkHXoW7+Y4jI=)
2: 8h9XpPiTeseqxChpyx3GbAjDwPM.roa (hash: lHUEw4awwziGPPcLQ6laRiqxh/vCOPtcdECYZObs18g=)
3: JzEYkv4NZlf6qbEgsSGFrZmVeH8.roa (hash: qmPEAcyTVoUTiZtYWCEhlD0+RO2CzCW89S6N2LDjmWE=)
4: pgUfqXuUdb9aMQHsQKyA4xQEEnM.roa (hash: FjJuPSTg4iQpSfe15NH+W8pcQavYVQSs32pLXlOXVF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Validity
Not Before: Jan 8 12:36:55 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=158DAB3452F3A43E735406392D83F2D0DB1EB309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:c9:11:0b:6d:ed:11:9d:15:a3:97:9f:29:
d6:07:c1:05:7f:df:95:b9:fc:ec:81:f5:a4:a1:18:
17:3f:21:a2:5c:1b:b1:08:1c:ae:d1:14:3a:c1:23:
9e:3e:81:39:29:92:07:b0:20:31:7b:b2:b4:60:ff:
0b:e9:85:66:7b:d1:a5:b3:b4:bf:e3:36:15:17:b3:
e3:7e:9a:fa:02:10:c1:ae:8d:77:22:01:a4:b7:61:
cb:73:b6:bb:dd:27:f4:ee:fe:5d:cc:c6:b7:e5:b8:
6e:54:8e:02:a4:ba:6a:4c:fe:f3:70:68:72:53:58:
2f:53:68:e8:c9:34:6c:8b:af:2e:3d:42:09:a3:d7:
ed:4d:9e:be:53:16:0d:7b:4a:ab:87:ae:e8:e8:c4:
95:96:ef:26:1e:7f:98:78:2d:3c:c9:e1:fa:da:c1:
05:22:a0:c6:ce:a1:4b:70:61:2a:9e:c5:4a:f0:9c:
df:9d:36:c1:55:80:ef:c2:ca:65:25:42:5d:77:87:
05:98:e0:f5:05:63:4f:82:90:e9:55:7f:6c:a7:cf:
04:c5:87:62:cd:91:5f:40:6b:54:9d:90:33:13:cc:
6f:e0:ce:58:24:52:56:b6:64:f8:47:57:e5:0e:19:
44:2b:82:f7:49:68:30:97:f0:20:72:13:61:27:a0:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:AB:34:52:F3:A4:3E:73:54:06:39:2D:83:F2:D0:DB:1E:B3:09
X509v3 Authority Key Identifier:
keyid:E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:2f:22:4d:ab:af:d8:55:17:53:9e:21:04:03:cb:d5:30:96:
ba:0e:c8:08:72:62:f2:d7:7d:be:53:a6:e4:37:04:27:fc:0e:
a3:59:4e:7b:24:1e:dd:8e:c8:7e:36:50:6d:f7:e6:60:c4:c2:
e1:a9:7a:7f:ef:ed:f6:94:97:08:65:e6:11:59:de:f0:0e:ba:
e0:52:29:1e:6e:6a:a1:7f:bb:93:38:b1:1f:c8:68:c2:e5:4b:
40:5c:f8:c8:f1:f4:d3:e4:43:95:87:be:ec:be:37:67:c2:28:
43:39:77:d4:72:bc:4b:c7:dc:03:f1:8b:b7:f5:c7:31:07:1b:
f4:1a:7b:09:85:c1:b7:f9:8a:55:ef:53:a0:1a:eb:83:af:e0:
1e:16:3f:f7:77:d7:2a:b3:0d:fe:c7:b0:59:52:bb:9f:ed:d1:
5b:74:21:8c:b3:e4:95:70:46:89:4d:cc:3c:23:96:29:74:82:
e8:d7:ae:05:b0:bc:23:97:99:24:d5:45:21:fa:73:88:6b:6e:
4a:f4:57:cf:67:12:5b:7c:aa:e4:51:e0:d8:81:89:a7:06:77:
c3:e8:b4:ab:84:54:93:49:4e:7c:e0:b5:e3:f0:61:36:1c:76:
f0:e2:f7:00:99:01:c4:4a:7c:37:ff:e3:ba:32:48:f1:a8:a4:
b3:54:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:50 2024 by rpki-client on console.sobornost.net