Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.mft
File: 3aLaM9-QiLaO3G906oscDu4uJsE.mft (raw, json)
Hash identifier: oBjzE0pXYO6JsMl27DYAGVO9KAeJrt7dtn+WHlg6coM=
Subject key identifier: 0C:0F:CA:02:AC:71:C3:41:AA:DE:AB:C5:94:A9:1A:53:19:00:3D:D7
Authority key identifier: DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1
Certificate issuer: /CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1
Certificate serial: 034A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.mft
Manifest number: 0343
Signing time: Sun 19 Oct 2025 21:25:34 +0000
Manifest this update: Sun 19 Oct 2025 21:25:34 +0000
Manifest next update: Tue 21 Oct 2025 21:25:34 +0000
Files and hashes: 1: 3aLaM9-QiLaO3G906oscDu4uJsE.crl (hash: WLWp6ZxOHhux9dlwD2WgiuLMETGgZ0/k4uP4JxFqWcc=)
2: evf1DT2fjxvoH3_T_hTn6IQ9sy8.roa (hash: W48f8vYpFHbY/x+a6n10xXrpBorWv2iBUqBGExPiJ3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1
Validity
Not Before: Oct 19 21:25:34 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0C0FCA02AC71C341AADEABC594A91A5319003DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:0f:52:dd:76:e6:27:85:fe:14:c7:8a:1c:
9e:0b:d7:6d:81:99:44:79:b0:96:eb:74:17:f5:74:
b0:a1:5c:7b:4e:17:ee:a1:c4:e1:30:fd:73:39:37:
a4:5f:a4:42:dd:5a:d0:5d:c9:73:ad:d1:27:eb:08:
89:6b:ec:79:d2:13:61:3f:49:76:52:5a:95:65:88:
b2:23:e5:1e:cf:87:cb:e0:51:b6:d3:fe:29:ee:54:
c0:7a:23:0a:f8:33:99:ad:e3:58:c2:c3:32:49:45:
35:ed:3d:d2:e7:2d:30:ef:3c:94:25:90:9a:41:b1:
df:3a:63:6d:8c:b0:95:ec:bb:e6:a4:b8:ac:1a:32:
4a:5d:a2:34:00:d3:b5:07:8a:51:90:97:db:a6:c7:
be:ea:07:ee:69:c8:3d:bb:18:cb:7f:a8:ce:3b:b0:
27:44:19:74:9b:87:de:05:df:df:d8:bb:f5:cc:c4:
8f:03:07:ab:b3:78:96:83:79:e6:0f:cb:5b:51:f9:
7b:58:74:ea:44:80:58:0f:59:a9:93:db:0d:9b:5a:
0b:a9:6e:d9:ce:3b:64:07:40:c8:e5:bb:bb:d3:76:
c8:a1:e9:cf:70:f4:c1:fe:3d:26:d5:d8:00:60:1c:
1f:de:2f:63:01:37:16:c6:72:8e:2d:66:17:a1:c9:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:CA:02:AC:71:C3:41:AA:DE:AB:C5:94:A9:1A:53:19:00:3D:D7
X509v3 Authority Key Identifier:
keyid:DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:74:8d:68:66:a6:d4:4d:40:96:e6:9d:3c:fd:91:b8:44:51:
83:05:57:fc:d6:1c:9c:67:25:b5:8a:09:39:83:61:fb:3d:9c:
df:6c:27:ae:5e:d9:d8:dd:ea:38:43:2e:fb:2b:db:7d:ba:bb:
e7:e6:3b:c0:9d:b1:ab:d0:3d:ad:18:4c:30:95:d5:38:68:35:
b9:16:52:61:6b:c8:21:9a:cb:ba:e5:b2:7d:30:23:b7:3f:ef:
56:71:2b:e1:28:05:f3:07:c4:dd:77:00:85:1a:32:4e:50:05:
1d:16:0e:37:cf:df:54:11:ab:08:c0:4e:dd:d6:f2:23:ba:e6:
9e:35:9f:09:3d:69:bb:39:1a:12:1b:af:4c:b8:4f:6b:15:6a:
e7:0e:cb:43:37:d4:02:31:7e:d4:83:d6:6b:e1:5f:9d:06:ee:
4e:5f:6e:0f:85:58:b8:14:ef:cb:51:ce:f9:23:6b:b8:9d:46:
e8:e8:1c:48:57:67:91:a8:57:3e:9a:48:60:6c:49:1c:c8:ea:
36:b0:84:e3:d0:2f:f1:ff:ec:57:a3:fe:5d:22:ec:b7:3f:e3:
64:95:1f:03:61:91:1c:79:65:cf:eb:cf:b0:fc:14:54:40:19:
99:8a:85:90:68:5d:c6:ac:61:96:d0:3d:52:87:89:85:2d:12:
a8:fb:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:13 2025 by rpki-client