Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
File:                     _HUspZ646u8j0iXcZ6oIUgHx95w.mft (raw, json)
Hash identifier:          xp6AMzmbsXqUXzgEC1AIZlS0QDRV8uZFYZJ8QWUciKI=
Subject key identifier:   DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       0311
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
Manifest number:          02E9
Signing time:             Mon 11 May 2026 10:07:46 +0000
Manifest this update:     Mon 11 May 2026 10:07:46 +0000
Manifest next update:     Mon 11 May 2026 16:07:46 +0000
Files and hashes:         1: 5PX3XPInRwLdrxjNJFjpDmV_YWE.roa (hash: oZRkpZSmBjyDmZ2aKyrQVa9J3wZO7SNOQisdVK+47NQ=)
                          2: 5R7-cVCAF-siafJrsFpLMo5QwAI.roa (hash: TNahB6rZrA74mKx05W5b/7mY0h3f5HFKLhMN37gRl+Q=)
                          3: FI_l4-13QP9OGl6Mb5mklqo6scA.roa (hash: 6XXI7Jhd9lXAImf1MeS6P7d+O2EVvcvFLkcH2BaNDoU=)
                          4: KIITV7eWhVy2oyjflPz5VX2jgW4.roa (hash: lWCYvPowyiiCW0rJqficFkjP3myn6ivGv6yghD3b/2M=)
                          5: QRnbkM5AcAl5FgR7GO9y9QtvHIc.roa (hash: RrTZzOTPCCr5VdsUJACfpPtRGltHjXfTFa3k7aCF36U=)
                          6: QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa (hash: sLB/lAuXpVWxEYttjxjEfkV/SwqGJLAlO66H053YWyQ=)
                          7: _HUspZ646u8j0iXcZ6oIUgHx95w.crl (hash: OfEJTSAVIvtyV8+bXVwBVOjscdyqp2WdTha7jWxletY=)
                          8: lUaY_JEWtwFgjXPk3_IXElPh0M4.roa (hash: 9yCAHj8MGJgzdhapiacSfGMjjtQdLpCJs+djqKk8ZOk=)
                          9: tpH271p44tFxIoooS8Y6JbCVsC4.roa (hash: Z0Kbx5ZrwKvQdCFKt2vuEDClyylwA8Wh7Aymeh8HVtk=)
                          10: wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (hash: 36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: May 11 10:07:46 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=DEFF8141E2DE64B1118927328C2D59C66278E59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:4e:5c:da:be:9e:de:b7:29:af:72:f2:25:
                    5d:77:d2:2d:f8:c9:e6:cb:72:b1:9b:a4:cd:57:f6:
                    36:0f:be:04:d2:08:d2:3b:b2:40:d9:05:22:dc:e6:
                    ab:90:56:72:d2:20:d6:b0:cf:3c:33:9f:34:e7:d9:
                    fd:56:0e:28:f3:4a:e2:5e:13:23:56:26:80:01:ce:
                    e5:1a:04:81:b4:72:54:19:1f:cb:0d:c1:2d:40:a9:
                    68:21:e0:89:87:35:3e:d3:ac:06:dd:58:3e:46:96:
                    a6:fd:60:eb:26:b8:fa:d6:64:74:bb:cc:de:ed:a1:
                    5d:28:d6:1d:26:ac:65:65:66:2b:8d:42:7a:85:a0:
                    f7:cf:13:d8:12:d5:cd:88:f2:ba:0f:40:52:24:ef:
                    23:eb:93:bc:40:a0:74:2c:ff:26:16:d9:52:ea:e2:
                    0d:de:e7:e8:ca:4c:08:80:c3:60:5a:26:13:0f:9a:
                    7f:cc:ce:42:81:55:a3:d0:52:b3:fe:a9:65:43:8d:
                    e3:0f:5b:d9:8f:7e:1e:a0:24:93:4e:b2:74:c6:3a:
                    44:e4:91:6a:49:a2:df:12:5c:16:19:0a:8b:a1:52:
                    15:ea:d3:80:87:8a:52:fe:7e:ba:af:44:4b:8f:a7:
                    17:97:d9:e4:1c:90:20:b3:32:c9:ca:0e:6d:f7:5f:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:41:7b:27:bf:f2:3c:2b:48:b7:d2:c6:a4:9c:cc:e8:d9:
         ea:00:7d:e1:55:f6:ed:21:cd:21:20:cc:86:cf:a5:f8:d1:4b:
         f2:54:1c:4f:2c:db:6f:ff:c8:77:37:01:6d:7b:73:04:d0:21:
         3f:1f:a7:63:a0:68:e9:25:82:dc:5a:c3:3c:06:5d:03:df:b6:
         8b:e4:20:80:bf:0a:e4:a5:3d:11:86:bd:8d:d5:a5:79:a8:e7:
         a4:e8:2d:55:cc:9c:2e:a7:d1:2c:9e:36:a8:2a:be:3c:84:da:
         fd:9d:7a:5f:02:a9:50:10:d2:5f:8c:09:07:c5:d4:77:76:2f:
         a3:ad:bb:3c:a2:26:5c:da:c4:b5:39:03:05:46:0c:ad:3a:34:
         a2:5e:ff:66:10:47:fb:95:c7:6c:fa:59:7e:12:d7:03:59:82:
         73:a3:50:de:b0:ff:24:64:26:73:36:d3:29:fb:f3:e5:00:c6:
         80:6a:0d:d9:89:f4:bc:76:be:4a:b7:d1:b2:3d:6e:37:92:4e:
         f8:6b:38:45:6a:52:b4:bb:3d:eb:d3:9d:05:79:f1:6b:ff:7a:
         c6:1d:f1:3e:ce:ef:f9:fa:fd:49:68:f7:f8:f6:cd:2c:9c:95:
         44:17:3b:af:ec:b3:59:7a:cd:07:7a:3d:37:7d:f5:bc:27:5e:
         af:a4:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:22:19 2026 by rpki-client