Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
File: P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json)
Hash identifier: pbeEIAV1WJnVqcxQwNdgpuSAtb7C7csNvcjUFhyaswg=
Subject key identifier: C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial: 0125
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
Manifest number: 0120
Signing time: Thu 30 Jan 2025 16:08:30 +0000
Manifest this update: Thu 30 Jan 2025 16:08:30 +0000
Manifest next update: Sat 01 Feb 2025 16:08:30 +0000
Files and hashes: 1: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: KQVvr/sDtODh27U1N7P2zUyfXXQM0UbdOM/ek/JGHIA=)
2: RSkC3Zs91hkj5Q54c_Mz6hsF104.roa (hash: lzJCM4zH7l35IsWMVU5YTg4lMzYzJgsnFX16v5d9eaI=)
3: az3BSCe7ZsGTD-uTFz-tisiDkT4.roa (hash: 4aM9tcwdSly7ivIZBxn7u/BptxfSdpYYUUhRq4PWSPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Validity
Not Before: Jan 30 16:08:30 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39:
92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71:
d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04:
f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17:
6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65:
ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad:
41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac:
56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46:
36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe:
29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86:
0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2:
66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77:
d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52:
a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5:
7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c:
eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11:
7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
X509v3 Authority Key Identifier:
keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:1d:5e:fb:ba:1f:e2:47:90:91:49:3b:b1:8f:75:60:8d:cc:
7c:58:68:2e:c2:67:c7:19:d2:ff:e0:88:3e:75:4d:62:28:27:
52:58:60:34:61:98:5b:db:79:f5:fc:95:b7:47:b0:83:40:9f:
18:cd:59:e1:09:78:d4:68:bf:65:16:a3:c3:cd:d9:e4:6a:a3:
2c:60:d1:0b:b6:c1:97:70:9b:46:50:f1:78:fd:e1:7d:be:45:
05:6e:0b:6e:57:d7:7c:73:13:b3:f1:cd:52:c0:33:e2:a3:f7:
c9:bd:97:29:7a:ce:ba:d9:ef:ec:4c:40:41:d3:66:ce:38:ca:
06:37:74:90:01:f3:3d:c4:49:52:e2:2c:fb:7e:21:9e:0d:e2:
b0:71:68:b2:45:62:ee:a5:05:f0:49:29:f0:d5:7b:a8:34:88:
a5:39:1d:f1:9a:0b:1e:6d:ca:32:63:48:d1:61:61:86:55:76:
3d:99:d9:06:ec:0f:5f:2c:4c:24:0e:a9:49:74:57:e2:00:f6:
17:75:e0:dd:60:7a:b7:8d:9d:7a:8e:84:3c:63:e0:ae:2e:cd:
ff:35:a7:b0:0c:bf:b0:81:d5:63:c4:ec:84:24:63:c0:95:56:
98:2f:5b:99:45:04:6c:29:49:44:d5:33:3f:da:50:f6:4f:de:
a0:05:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:39:33 2025 by rpki-client