
Error: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer: RFC 3779 resource not subset of parent's resources
Manifest
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.mft
File: E5012B68C820EFC5CDC103851BAB3C1C17C258CE.mft (raw, json)
Hash identifier: G7oEbHr+Wro9JBKkxXhpxEnteF4XxJSGmqCOHia4hwE=
Subject key identifier: D4:50:D6:21:4B:59:2A:29:EA:0B:0D:AF:6E:D4:F3:74:1C:67:D4:E5
Authority key identifier: E5:01:2B:68:C8:20:EF:C5:CD:C1:03:85:1B:AB:3C:1C:17:C2:58:CE
Certificate issuer: /CN=E5012B68C820EFC5CDC103851BAB3C1C17C258CE
Certificate serial: 076C8EB3752D0A91AFD679BC391EC09436203FA0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.mft
Manifest number: 70
Signing time: Fri 31 Jul 2026 06:52:02 +0000
Manifest this update: Fri 31 Jul 2026 06:47:02 +0000
Manifest next update: Sat 01 Aug 2026 06:55:02 +0000
Files and hashes: 1: 3130332e3136392e3231322e302f32342d3234203d3e203230343733.roa (hash: EgHFUBcAnOkBZbWNrk7WdFfc+d5xPoQ+Z8y85tEUpgw=)
2: 3130332e3136392e3231322e302f32342d3234203d3e203338383532.roa (hash: 6F7GRz2ivVc7gTC1LjGrMJwd2u8TzSzX1M8kl8Ks4pg=)
3: E5012B68C820EFC5CDC103851BAB3C1C17C258CE.crl (hash: EZaH4o89G7A4yeJkI050l8lQVGTYLHuAmqB7fr1GHEo=)
4: 3130332e3136392e3231332e302f32342d3234203d3e20333936393832.roa (hash: ZxvAmy4henJ71v/ldShglvyMUbXVA/JGcArJBanwC7w=)
5: 323430373a613734303a3a2f33322d3438203d3e203338383532.roa (hash: X4uapcuGdgotzCVpeoXFMMY6ih/Nck9xAqtZt0gDXLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6c:8e:b3:75:2d:0a:91:af:d6:79:bc:39:1e:c0:94:36:20:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5012B68C820EFC5CDC103851BAB3C1C17C258CE
Validity
Not Before: Jul 31 06:47:02 2026 GMT
Not After : Aug 1 06:55:02 2026 GMT
Subject: CN=D450D6214B592A29EA0B0DAF6ED4F3741C67D4E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:0b:ac:88:36:57:b9:c0:3d:ed:ef:19:8f:
fa:67:68:b6:7e:db:f7:0c:c5:40:d8:1d:e7:4d:ee:
75:13:57:11:54:22:db:61:ca:4e:fc:5b:cf:f9:1a:
41:78:79:38:84:39:9a:f0:e9:fa:e2:23:83:94:07:
6c:e5:16:83:f5:ed:c6:0d:40:1d:48:fd:a5:24:ad:
78:72:d2:86:f7:bd:00:fd:67:94:34:bf:d8:28:cb:
78:bd:60:7d:c0:8a:1f:28:c4:fd:10:26:d1:3d:ae:
1d:65:56:fb:f6:ef:7b:56:7f:ba:72:c2:58:60:17:
bd:8e:88:c2:45:15:6b:44:e2:2f:f5:07:bb:bf:ab:
ff:52:b6:f3:40:3b:1c:52:60:ed:5a:60:47:64:4f:
e2:1d:97:d1:70:10:2b:06:a0:3a:ad:90:d0:7f:3f:
80:be:8b:1c:b6:a9:d7:fe:24:74:46:8e:b4:f0:6b:
6c:cc:75:0d:70:6e:51:4c:5c:97:40:23:1e:f2:ea:
f0:bd:ca:51:42:25:8f:64:60:77:48:63:44:1f:c1:
85:fa:25:e0:5c:e3:b2:16:35:63:5e:6d:d1:e5:d1:
5d:45:24:e2:44:bd:e7:67:9f:fc:b5:23:d7:45:bd:
39:93:49:78:1a:be:83:41:ba:6d:71:ed:98:ca:d9:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:50:D6:21:4B:59:2A:29:EA:0B:0D:AF:6E:D4:F3:74:1C:67:D4:E5
X509v3 Authority Key Identifier:
keyid:E5:01:2B:68:C8:20:EF:C5:CD:C1:03:85:1B:AB:3C:1C:17:C2:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fe:c1:56:ca:2f:b0:e6:2c:51:0e:58:81:a0:bb:52:05:6d:
30:85:85:18:36:fc:ba:05:54:0d:84:83:8f:11:d0:7e:78:33:
40:c3:c4:f4:bd:20:fe:da:cb:f0:f0:e2:f5:7c:22:2a:1a:b9:
3f:63:67:07:d7:3c:a1:73:43:e8:7a:02:38:a1:34:d0:5a:44:
fb:9f:e2:10:09:e2:7f:0d:bc:ff:06:78:5b:60:c2:fd:a6:c1:
44:d8:f7:cd:90:da:03:be:0b:96:73:bc:66:1d:18:38:73:dc:
cc:df:f6:b1:73:19:4e:fd:d7:f1:9e:c9:73:11:27:c2:c2:73:
25:01:5a:06:f8:a7:a0:10:94:1b:5a:f6:bc:d5:1f:0d:01:b3:
b2:a4:1e:57:ef:48:8b:ec:57:53:02:a7:5d:11:a1:80:dc:57:
b5:b5:10:8c:00:3f:28:cf:42:76:04:e3:b2:01:c0:91:cc:2e:
7e:56:f7:2a:d8:34:38:33:c7:0a:1b:a7:ca:93:c2:a7:44:74:
fc:42:16:44:bf:7b:08:0c:3c:e3:17:2d:9a:56:20:fb:cf:33:
8f:3e:01:b3:26:79:56:59:78:e9:67:21:67:bd:3e:f8:47:d4:
80:9c:e1:ab:83:1e:c6:8d:04:85:b7:c1:d6:6b:77:f8:3c:f5:
86:69:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:26:07 2026 by rpki-client