Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
File: IKzKhxhQA3Ov93tBSyPcal8UdO4.mft (raw, json)
Hash identifier: IJxOeu4oNjPbmIuRsRA+/nqYxxtjoeI/gZwvWQYcL5Q=
Subject key identifier: 63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Certificate serial: 03F4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
Manifest number: 03E7
Signing time: Fri 06 Mar 2026 18:23:37 +0000
Manifest this update: Fri 06 Mar 2026 18:23:37 +0000
Manifest next update: Sun 08 Mar 2026 18:23:37 +0000
Files and hashes: 1: 1ggHK1IkhoOxtBSrUg3Xnr8uAk8.roa (hash: 3Civudfo9eoGwO7EGAk38gWI2lQFtW1A9lWlLw/BfWU=)
2: FJkrjvet6pnYVHl1JNbcizxL0g8.roa (hash: BzeMzMG841+F32q3IBheqxZDU5E0CWxvuV3d5ezHa3s=)
3: IKzKhxhQA3Ov93tBSyPcal8UdO4.crl (hash: vw1vJAHfAri13vAY99sQz/pv7IhYgwYK/rZjJ1W41/Y=)
4: gn1GKghR4XaGzZzd9cX9fOI1Ek4.roa (hash: Eezi5ToGvvbLs3N8RzG6qj/i/tM/Y7p/7lECmZ5IsHE=)
5: s9tu_pDnJrSyKspE2pwZIYBI6D0.roa (hash: 77p9GLnmkRIDPz0ypfQ8Zc8Oh+HTvViv2j8ygqdj+Pg=)
6: wXFlY0DS7Tk9YVdbACjaAPlhD4M.roa (hash: UwyRgcLRscTitWw39H2TO4FRgn7CFSoaLuxrQlQibBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1012 (0x3f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Validity
Not Before: Mar 6 18:23:37 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=637434BF3B3405E77125FEE5E8A7A7A80946E0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:74:48:cc:64:3a:a9:1e:7b:4b:a2:fc:06:
0c:d3:28:19:9c:e0:4f:77:be:b4:98:24:2d:4a:2a:
c8:39:4a:2c:16:95:9a:a7:6f:a7:15:21:ba:05:b5:
43:04:10:65:e2:f2:34:2a:90:32:12:80:a2:3a:30:
b5:35:a8:1a:bf:29:b0:01:c3:1b:7b:07:75:fb:b1:
7c:db:72:54:69:49:0a:d6:cf:de:ff:f5:72:4c:a3:
c1:04:88:1e:dc:37:70:0e:9e:76:60:03:1b:d7:53:
c6:cc:12:8d:28:df:db:dd:92:d7:71:d1:49:75:09:
5e:cb:b2:48:bb:11:46:ca:c3:4a:1a:e3:d1:a8:5e:
49:16:22:ab:f1:52:d8:1b:83:19:60:b6:b5:98:9f:
db:52:3a:bc:db:26:20:7d:92:12:d6:77:ed:64:56:
dc:77:0f:67:f0:27:9f:96:44:41:65:ab:31:1e:9c:
eb:20:51:79:68:0f:fe:04:d1:9f:35:d7:47:c4:42:
b2:2a:26:33:22:2d:ee:c1:de:e9:8c:67:af:34:b0:
c5:50:9c:e0:48:4a:c6:bb:8b:31:b0:bc:67:0d:33:
f5:b4:0e:ee:5d:4f:7c:50:20:93:9c:a3:c1:cd:42:
3a:d1:7a:a6:6a:3b:d7:1b:05:99:7e:79:71:6f:4a:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
X509v3 Authority Key Identifier:
keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:52:a2:04:50:fe:7a:35:3c:b6:0c:fe:0a:f2:5f:f0:14:1e:
3a:ee:44:d9:84:8a:4d:94:a9:1a:b8:0a:b1:1f:fb:bf:2e:23:
3e:0b:ee:d1:b7:75:c3:b5:f1:a4:91:22:ad:a3:2c:ab:eb:1a:
28:5a:6a:9f:7a:5c:05:dd:40:7e:e7:92:d8:70:98:b4:de:a0:
2d:8f:31:0c:2d:3d:ad:2a:a9:ea:51:c4:0e:e3:27:80:45:ca:
98:66:93:05:e7:80:e9:f1:51:30:ac:15:13:b1:20:89:3c:51:
48:b0:f3:05:de:f2:1f:49:3a:97:c7:61:8b:13:b9:0b:39:d9:
04:d8:4c:b3:e5:7d:f8:ee:51:2e:af:03:b9:13:b9:10:73:49:
e4:9d:64:f7:eb:73:ce:f5:d5:89:42:79:52:ea:b6:07:a7:8a:
6e:c3:e9:f7:7f:89:90:d8:e3:bc:5b:f0:11:3c:e2:cc:1e:b4:
5a:3a:7a:76:62:29:d5:2f:34:74:e6:6c:e4:20:78:58:b5:e0:
a7:4b:81:bb:a1:c9:9e:2b:46:95:1e:d9:3d:ac:7d:41:56:bf:
e4:7c:56:61:42:9e:ff:d9:a9:d8:74:70:74:c5:ad:2a:df:cc:
27:27:08:9a:44:7a:5e:02:9c:fe:09:e0:97:9e:ef:f7:36:92:
60:09:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:29:55 2026 by rpki-client