Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft
File: 9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft (raw, json)
Hash identifier: 8N/5eJ5lZt8Nq7IaFJ0HB6Ht8BCx1/u1aptPDCiOVSA=
Subject key identifier: 4B:2A:49:AD:9B:38:17:4C:A6:85:B9:07:4B:95:5C:0C:AB:2A:D8:B2
Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
Certificate issuer: /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Certificate serial: 0487
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft
Manifest number: 0476
Signing time: Sun 10 May 2026 12:08:44 +0000
Manifest this update: Sun 10 May 2026 12:08:44 +0000
Manifest next update: Tue 12 May 2026 12:08:44 +0000
Files and hashes: 1: 0J4QgNYkoU7V1k7qNM-t3v04ZLs.roa (hash: BW4oROUm6fEtjDfPz49L80iovHKj795S6n+xrzlEl88=)
2: 9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl (hash: KSyaYZLWt+ojnhOvkVBcuuGLZnGeR5ARtHrE9iToHa0=)
3: ZbUxmDkJey6NiDTTZTNeHNA0qDs.roa (hash: 5ZruKMXS1tVdVG4FaFYgYPFfcyxANsM4+O+Z4TEOeOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E
Validity
Not Before: May 10 12:08:44 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4B2A49AD9B38174CA685B9074B955C0CAB2AD8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:c4:26:df:6e:e9:bf:43:2d:2c:0d:27:06:
9f:47:cd:df:94:75:89:60:69:aa:45:a5:5e:e6:de:
46:e6:ba:e2:c4:40:dc:91:66:6a:99:cb:8b:4b:4a:
80:30:da:28:cd:ef:b8:b2:80:2b:09:9b:b8:fa:6e:
39:12:d7:fd:5e:90:22:02:48:24:77:e5:46:75:92:
71:3a:c6:77:77:c6:57:18:6a:51:2e:66:f1:88:0e:
c9:0f:bc:29:cb:81:6c:10:d3:b2:2a:5b:26:ca:80:
21:73:ac:b7:c8:14:90:5e:b9:3e:50:52:d1:61:b3:
54:4c:5c:b3:2d:16:3c:f9:57:d9:a0:e2:f6:11:54:
7f:af:5c:e2:24:8c:b0:bf:4f:f8:f2:2f:37:c9:40:
e4:28:a3:35:64:d4:ee:91:5a:0d:ad:ef:08:ab:8c:
4a:86:c7:60:15:cf:2a:0a:bb:e2:3a:cd:43:6c:bc:
2e:1d:79:c0:c8:2e:e5:48:01:30:51:92:9b:56:b9:
42:bb:8e:e0:b3:2f:82:54:cb:be:42:85:f2:ed:f3:
06:06:5c:1c:98:92:bf:96:d6:8d:25:c3:d1:79:1f:
59:1c:a9:26:64:a5:83:8a:53:67:3c:8b:96:09:89:
f2:18:c5:ee:24:3f:74:63:97:84:ad:59:1b:5f:92:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:49:AD:9B:38:17:4C:A6:85:B9:07:4B:95:5C:0C:AB:2A:D8:B2
X509v3 Authority Key Identifier:
keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:05:21:35:72:11:f1:21:ab:4a:6e:3a:06:ca:4c:be:25:
06:c5:c4:42:d2:38:87:4c:6e:6d:6e:92:39:c6:7f:a3:28:e2:
62:3f:fb:af:6e:9b:13:27:2f:65:99:0c:0d:22:0a:45:98:7d:
7b:5c:ed:c8:58:d5:59:c2:7c:97:31:9b:39:24:a7:87:e5:86:
b3:9b:47:33:8d:7e:70:ee:a7:f4:f8:dc:ee:de:84:4d:09:de:
06:f8:26:fe:47:1b:b7:d0:0f:6b:aa:88:34:95:c1:26:c7:df:
e1:d4:24:22:d2:bb:ad:66:ce:73:3d:25:51:3d:ce:7e:30:e0:
81:f4:70:be:5f:00:3e:15:f3:d5:18:b1:cd:ff:13:0f:b7:56:
7d:54:38:cf:c1:67:d4:af:80:33:f5:f8:5e:19:bb:87:0f:ac:
8e:e9:70:35:56:c0:29:b7:c0:23:f0:42:47:fb:69:fe:5e:08:
d8:43:96:54:e8:db:f7:71:d5:ca:b7:c2:e9:9d:6f:d5:4c:25:
07:a1:66:07:d5:e4:8b:2a:6b:11:c5:dc:16:be:47:a0:da:75:
73:4b:ae:26:fa:b0:22:f1:88:d3:57:8f:dd:3c:86:1a:80:9c:
c3:5e:1a:6e:34:9b:a8:a1:87:5d:9e:be:a8:d4:7c:3b:1e:53:
68:71:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:25:03 2026 by rpki-client