Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
File: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft (raw, json)
Hash identifier: k7wdrjVPGffViWJpKxEjdeSyJabGk0tKD/2VRUEewGE=
Subject key identifier: 50:73:92:43:7A:86:C7:D5:8A:87:00:C8:18:D6:8D:F4:E6:ED:3C:68
Authority key identifier: 8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
Certificate issuer: /CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Certificate serial: 0DF7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
Manifest number: 0DE9
Signing time: Sun 10 May 2026 08:38:33 +0000
Manifest this update: Sun 10 May 2026 08:38:33 +0000
Manifest next update: Tue 12 May 2026 08:38:33 +0000
Files and hashes: 1: 6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa (hash: 2X8j4tdHGu8yZowcoPwww7IklQabTy1cLRjctghTwv8=)
2: V2fVwgLecyKu7SMicrJV4I0B42k.roa (hash: UyFSVPkkfoqOuEbmNVhceP+dKKpgZM5IQ7bPaFwveVg=)
3: hhdkJLO7067VsUs97A0bf5U8JQc.roa (hash: vlO1zpnezKgnyNMX42nXqsn9ph8GR+mcssr1Tn1eBOc=)
4: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl (hash: AuY1p2jbg4jihDkXFPb2DBXCToBPbtw1KevdATtgt0A=)
5: iOQRTOW94B-UFGZIs_PrZtuNmZ8.roa (hash: 8yE0wvs5bk5aETxomeYl31mO0eVT4gtLV1kMu1NkYic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3575 (0xdf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Validity
Not Before: May 10 08:38:33 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=507392437A86C7D58A8700C818D68DF4E6ED3C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:d3:cc:71:5e:c5:26:f0:47:6c:e5:79:5a:
fc:77:4a:ed:b9:cf:38:d0:c4:38:bc:cd:ec:e9:8b:
c8:ef:40:8b:af:79:22:90:30:c8:b1:04:91:69:c1:
e0:39:4b:54:2c:82:07:f5:ef:84:89:26:ff:f4:17:
b7:34:a3:f2:a7:2f:57:4d:23:99:89:c3:5f:5c:f4:
a0:ed:20:3e:04:9c:1c:d3:79:7b:7b:1e:88:ff:13:
92:d7:46:85:bc:b6:3c:f0:82:39:28:42:e3:ce:d2:
41:8c:54:5e:b9:45:af:af:ff:c5:49:6a:d6:0d:95:
0a:b6:ed:bc:2c:97:1f:cc:99:0c:7b:6b:b2:53:03:
97:b7:5c:c0:94:27:b6:d3:0a:ff:f4:76:b1:77:b1:
84:62:b2:c5:51:9f:91:0d:3a:24:ac:a4:60:d6:c7:
7f:ab:72:89:95:bc:df:b7:5d:01:2e:2d:2f:83:a5:
da:67:e0:22:d6:a8:66:36:d8:86:d7:db:16:a0:09:
b9:f6:f1:b8:1e:dc:2b:e2:90:bf:20:b7:df:b1:74:
67:e3:a1:1b:18:b2:5e:23:de:83:c1:99:2a:c5:1b:
66:c9:59:5e:7d:32:14:dc:c9:79:0a:bc:51:9a:b2:
03:f7:0e:13:69:e5:3d:4f:27:0d:ae:28:be:99:fd:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:73:92:43:7A:86:C7:D5:8A:87:00:C8:18:D6:8D:F4:E6:ED:3C:68
X509v3 Authority Key Identifier:
keyid:8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:48:fe:ca:3a:8e:4a:96:3d:0f:33:f7:39:70:ff:a5:51:
e3:9b:c9:c3:72:a0:e8:02:38:ad:0b:0f:2f:4d:a3:ab:92:5f:
13:d6:29:a4:d5:42:b4:59:92:7a:fc:a4:1d:50:9e:df:e1:f5:
af:bd:4d:e9:3c:99:2b:a6:a6:94:cb:e7:6a:45:48:7b:b7:3d:
10:bd:e1:10:0f:15:01:3e:2a:12:fe:83:0e:4e:48:2c:cd:17:
ff:aa:2d:4f:0d:cc:20:02:b6:91:8b:b9:98:64:fe:1f:ca:8d:
64:d4:31:0d:2c:0e:05:8e:64:47:9f:02:21:51:f0:3b:6f:29:
c1:ee:16:46:dd:54:6c:51:e5:61:d0:56:99:33:f2:f3:f0:54:
c0:c8:b6:55:09:b1:b5:b7:2e:88:76:c9:63:17:a7:f1:f5:8c:
3f:8b:6f:47:f1:a4:1b:24:c5:0b:f0:07:93:c1:4a:31:5d:fa:
cc:33:fa:41:bc:9b:df:db:44:7d:c7:3d:16:95:41:97:cc:23:
6e:81:09:e1:96:eb:cd:c0:65:af:e9:a5:18:1e:77:61:d3:16:
b3:d1:2f:52:9d:68:66:b1:c8:65:69:2f:94:55:cf:60:94:ee:
62:01:06:b4:2e:b8:57:a7:a4:78:f7:d9:1b:8a:e8:a6:9e:50:
72:74:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:21:54 2026 by rpki-client