Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
File: iWrQtRYJef6sUMY4TL_BYtQD540.mft (raw, json)
Hash identifier: rJvMC3274vd/9K8ms6X2Fu/rc2s9t3OCRhXhtl0cpWM=
Subject key identifier: 4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
Authority key identifier: 89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
Certificate issuer: /CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Certificate serial: 0E37
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
Manifest number: 0E16
Signing time: Sun 10 May 2026 11:39:22 +0000
Manifest this update: Sun 10 May 2026 11:39:22 +0000
Manifest next update: Tue 12 May 2026 11:39:22 +0000
Files and hashes: 1: SGLF6BdYcKQblGX3rLa2mwtdpMw.roa (hash: UmN+XS99A9NwcsXV4t/Ywa+ehJf/2L7mPjGeFjYvg4g=)
2: _xvEwnLVdHp7MhGQ4Zdx7lKyeqc.roa (hash: pSErrwEjV+xssAeSKBwXCchpjAvKMwLdIR+XEDTY/24=)
3: iWrQtRYJef6sUMY4TL_BYtQD540.crl (hash: pQIDRmS08JcAqfQG3Kd0/B/Pg2Fxy4nFM3+S5BRfVvE=)
4: pVJcaYZpvAK5nxu3T7dlKhDzgLo.roa (hash: mlcRhjsVGOM9KvSd6dMa/LWhL7xNmsFW5DbNF4fHfvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3639 (0xe37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Validity
Not Before: May 10 11:39:22 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4EFEC9884FCADF72FA01ABA023732C6D88E481D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:14:a0:ba:97:b0:ab:dd:56:8d:78:b2:e8:
24:0e:c7:87:2d:cf:c6:23:89:a5:e1:87:44:1a:eb:
6b:94:fa:e7:b5:0f:58:aa:69:de:d2:1a:fc:03:68:
8b:8d:51:59:83:54:ce:d0:d8:63:c3:58:69:3f:85:
bc:0b:b6:fe:84:54:28:77:61:c1:4c:aa:b6:b3:11:
83:5b:7f:ae:ac:60:65:cf:aa:40:b2:d9:1b:5c:95:
8d:59:77:b0:53:56:9a:a5:6e:a8:0e:18:e1:c9:21:
d9:da:1b:6a:3c:7b:d4:bf:06:7e:9a:ce:da:d8:d7:
33:a3:10:fa:f1:ff:8c:b3:3b:da:4c:50:34:b0:e4:
2a:a8:41:44:20:41:c3:0d:0d:92:95:56:97:f6:c8:
99:34:91:3d:d7:ed:46:04:1d:bd:7f:3e:c4:8f:69:
ae:9f:61:30:95:63:99:02:8c:a8:be:3e:e3:72:82:
8d:f7:8c:d0:0a:9e:dd:2e:b4:de:c1:58:95:98:af:
71:0d:8f:20:05:68:1a:16:ad:82:c9:7f:e0:2e:ec:
14:ef:04:f4:b6:26:00:44:cb:1e:e8:bb:7a:40:f5:
71:1c:f5:79:5c:23:9c:34:6b:28:e3:0c:5f:a4:d9:
70:5a:fe:7b:7f:7f:bd:7c:d2:88:c0:e5:48:f8:94:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
X509v3 Authority Key Identifier:
keyid:89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:ea:51:25:3a:2b:df:3e:05:16:8c:de:b7:b7:8b:23:02:
5d:d9:93:7c:2a:77:d1:3e:9a:73:00:91:0c:62:7c:f9:d5:3b:
b1:62:87:4d:fe:cb:89:ce:3e:7f:51:cc:b6:c5:04:aa:e6:c6:
17:c4:dd:22:99:92:88:2f:bb:30:36:49:1b:a9:df:37:3b:86:
29:cf:34:22:f3:93:54:80:66:a7:75:57:a0:e5:73:9e:2e:5c:
83:86:71:58:34:84:7e:6a:3b:d8:f6:9f:f7:7b:f8:10:fc:9b:
46:dc:f1:fe:2d:73:d2:b0:6e:c8:e2:25:68:ed:d9:f6:43:b9:
ec:33:49:d8:80:9e:8c:45:4b:b0:7f:00:7a:e8:db:81:00:51:
2f:c5:15:d1:b8:ae:46:2c:4e:bc:a7:0a:d3:9f:38:04:94:fa:
fe:b3:cc:8c:b1:12:7b:c0:84:27:d4:71:b4:64:0d:47:fc:e1:
56:b4:53:f0:ac:98:84:6f:53:bd:65:74:dc:f5:0a:21:4d:fb:
9b:8b:33:e1:da:c6:d8:3c:fa:76:20:f9:36:0a:57:71:f6:b6:
9b:28:a7:da:e7:39:8d:cd:81:16:a4:1c:e1:9c:03:70:7f:b3:
b9:08:d7:cd:08:01:38:8b:b0:b3:d6:13:22:52:7e:27:85:d3:
9c:fe:2f:06
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICDjcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk2
QUQwQjUxNjA5NzlGRUFDNTBDNjM4NENCRkMxNjJENDAzRTc4RDAeFw0yNjA1MTAx
MTM5MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRFRkVDOTg4NEZDQURG
NzJGQTAxQUJBMDIzNzMyQzZEODhFNDgxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBSRSgupewq91WjXiy6CQOx4ctz8YjiaXhh0Qa62uU+ue1D1iq
ad7SGvwDaIuNUVmDVM7Q2GPDWGk/hbwLtv6EVCh3YcFMqrazEYNbf66sYGXPqkCy
2RtclY1Zd7BTVpqlbqgOGOHJIdnaG2o8e9S/Bn6aztrY1zOjEPrx/4yzO9pMUDSw
5CqoQUQgQcMNDZKVVpf2yJk0kT3X7UYEHb1/PsSPaa6fYTCVY5kCjKi+PuNygo33
jNAKnt0utN7BWJWYr3ENjyAFaBoWrYLJf+Au7BTvBPS2JgBEyx7ou3pA9XEc9Xlc
I5w0ayjjDF+k2XBa/nt/f7180ojA5Uj4lGfFAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUTv7JiE/K33L6AaugI3MsbYjkgdUwHwYDVR0jBBgwFoAUiWrQtRYJef6sUMY4
TL/BYtQD540wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFM
SUZFL2lXclF0UllKZWY2c1VNWTRUTF9CWXRRRDU0MC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvaVdyUXRSWUplZjZzVU1ZNFRMX0JZdFFENTQwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFMSUZFL2lXclF0UllKZWY2
c1VNWTRUTF9CWXRRRDU0MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuXupRJTor3z4FFozet7eLIwJd2ZN8KnfRPppzAJEMYnz51TuxYodN/suJ
zj5/Ucy2xQSq5sYXxN0imZKIL7swNkkbqd83O4YpzzQi85NUgGandVeg5XOeLlyD
hnFYNIR+ajvY9p/3e/gQ/JtG3PH+LXPSsG7I4iVo7dn2Q7nsM0nYgJ6MRUuwfwB6
6NuBAFEvxRXRuK5GLE68pwrTnzgElPr+s8yMsRJ7wIQn1HG0ZA1H/OFWtFPwrJiE
b1O9ZXTc9QohTfubizPh2sbYPPp2IPk2Cldx9rabKKfa5zmNzYEWpBzhnANwf7O5
CNfNCAE4i7Cz1hMiUn4nhdOc/i8G
-----END CERTIFICATE-----
Generated at Tue Jun 16 14:24:21 2026 by rpki-client