Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
File: P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json)
Hash identifier: 5uIQ9ci203TwwLqfs9ZuHLeUHHoIk5J4SKDr00eszUQ=
Subject key identifier: C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial: 01EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
Manifest number: 01E3
Signing time: Fri 13 Jun 2025 22:00:19 +0000
Manifest this update: Fri 13 Jun 2025 22:00:19 +0000
Manifest next update: Sun 15 Jun 2025 22:00:19 +0000
Files and hashes: 1: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: L8w4erA5mvJWAuGawqQER2u0v+ZfpWZMUjtK+9B9WGc=)
2: ok9BNTlr8zllkLmhpMWa7wsAAc0.roa (hash: qKkb+N05tfHOvmVIj8XG1Ddu4jYqKsPQyO4D2CXXHtM=)
3: pN7ZwF0LW42ypsIbS8fY9Glr7Ew.roa (hash: DHYfLzt6gQwuLU3/IqtIYmxooHQs9QYn28KSHiQPB3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Validity
Not Before: Jun 13 22:00:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39:
92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71:
d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04:
f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17:
6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65:
ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad:
41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac:
56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46:
36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe:
29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86:
0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2:
66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77:
d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52:
a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5:
7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c:
eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11:
7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
X509v3 Authority Key Identifier:
keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:09:75:47:2c:ae:35:79:28:b4:56:28:79:bc:1c:48:af:8c:
a9:e5:56:35:c1:62:04:72:3f:eb:09:56:27:2d:92:dc:64:52:
b4:50:69:6d:60:f6:5f:c5:c8:b3:e3:7f:07:09:d1:dc:46:59:
98:41:66:80:c7:7b:06:33:5a:40:45:ae:11:b2:41:bf:28:26:
a7:6f:50:04:c9:4f:ed:24:f3:84:69:43:b1:bb:1c:cc:ea:1e:
c8:e1:38:e5:f9:e5:fd:34:0f:f4:57:e8:75:29:a9:b2:b7:6e:
b2:38:6a:70:13:e0:2b:5e:f4:bd:54:75:2d:e2:0e:0a:97:5b:
54:4d:2e:0b:0b:b4:f7:f9:f2:bf:55:5b:59:1e:7c:6e:1e:ab:
43:05:58:2d:cf:04:aa:ef:68:66:f1:b4:41:ad:86:81:b8:5b:
e1:8f:f0:2a:51:13:39:59:bd:a7:cf:e5:ad:07:06:35:70:bf:
3d:89:76:1b:ea:48:bc:28:a0:d9:29:df:d3:bf:f2:a5:cd:b2:
02:08:90:84:73:7b:e3:c4:a9:b9:12:6a:0f:a0:8c:18:fb:49:
ce:48:d2:52:1b:73:6c:76:8c:38:d8:fd:ed:a4:89:94:ef:68:
ae:86:aa:1d:62:c5:7e:ec:cc:44:72:89:36:71:02:bc:6f:a1:
e1:43:a8:61
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICAewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y4
NEZBRUQ2Q0I0N0UxMTJGMjRDNkIwMjc3QTQ4NjIyNzA2NzJDQTAeFw0yNTA2MTMy
MjAwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2MjkzNUJERUUyODY4
OUY0N0EzN0E3NzZFRjY5MUYyRkQ5NTIyQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5b1op0J0UNzuUMem2OZI1GyXea5GrqXU8OsVzcdlHuSH+FCpO
+cS/0h9LBPkexTjlgS9hZdg19FW6F28dq+5gNvmr87lGQlagZc5oF0923rsuzG/J
AN06rUEdr79beO8pXxV5SddTrFZtnLg3JY/2J05U2cqrRjau6q201huyRA5hhKkt
/ilHOP8E44zR54XPjszXhg1LW4ZI1vzNIZbkNAmMoma5Om6ancmpqGbpv5Thd9C4
rdMItStzcQEGSfFAUqPzwEVA1EqgpXGKGdHhpX4VeGZ6BvyYFcioja/STOuD4646
3IH4rM46jMZ0EX2Zw1bIjq9iOq+o/RQJTLsTAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUxik1ve4oaJ9Ho3p3bvaR8v2VIqAwHwYDVR0jBBgwFoAUP4T67Wy0fhEvJMaw
J3pIYicGcsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1JPTk9T
VEVDSC9QNFQ2N1d5MGZoRXZKTWF3SjNwSVlpY0djc28uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1A0VDY3V3kwZmhFdkpNYXdKM3BJWWljR2Nzby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tST05PU1RFQ0gvUDRUNjdXeTBm
aEV2Sk1hd0ozcElZaWNHY3NvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHoJdUcsrjV5KLRWKHm8HEivjKnlVjXBYgRyP+sJVictktxkUrRQaW1g
9l/FyLPjfwcJ0dxGWZhBZoDHewYzWkBFrhGyQb8oJqdvUATJT+0k84RpQ7G7HMzq
HsjhOOX55f00D/RX6HUpqbK3brI4anAT4Cte9L1UdS3iDgqXW1RNLgsLtPf58r9V
W1kefG4eq0MFWC3PBKrvaGbxtEGthoG4W+GP8CpREzlZvafP5a0HBjVwvz2Jdhvq
SLwooNkp39O/8qXNsgIIkIRze+PEqbkSag+gjBj7Sc5I0lIbc2x2jDjY/e2kiZTv
aK6Gqh1ixX7szERyiTZxArxvoeFDqGE=
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:15:24 2025 by rpki-client