Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
File:                     UwFoEtCVY1enrwWL7_Krcq8UPY4.mft (raw, json)
Hash identifier:          D/Ci4xa6vLfF+5k68Tr78VWF9CgXKv6jQ4FmTQDy5jU=
Subject key identifier:   67:F5:EF:0E:68:17:C9:D6:2D:5B:5F:0E:FF:CD:EA:88:77:46:3A:4B
Authority key identifier: 53:01:68:12:D0:95:63:57:A7:AF:05:8B:EF:F2:AB:72:AF:14:3D:8E
Certificate issuer:       /CN=53016812D0956357A7AF058BEFF2AB72AF143D8E
Certificate serial:       20
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UwFoEtCVY1enrwWL7_Krcq8UPY4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
Manifest number:          20
Signing time:             Sun 10 May 2026 04:37:46 +0000
Manifest this update:     Sun 10 May 2026 04:37:46 +0000
Manifest next update:     Tue 12 May 2026 04:37:46 +0000
Files and hashes:         1: UwFoEtCVY1enrwWL7_Krcq8UPY4.crl (hash: IeM75zLaxCWFc6ogAYCJgTDnlmLClbVfMk86RTNu7OM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53016812D0956357A7AF058BEFF2AB72AF143D8E
        Validity
            Not Before: May 10 04:37:46 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=67F5EF0E6817C9D62D5B5F0EFFCDEA8877463A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:0f:c8:d2:b8:ca:3e:2e:a5:74:ea:e7:be:
                    fa:62:5f:ad:d7:a4:7e:30:d8:a6:da:62:93:a7:49:
                    e3:0c:28:43:2f:da:a8:c3:d1:47:0e:73:bf:3a:a0:
                    f1:f7:8b:f2:60:56:e3:d5:4f:b2:61:1a:d5:44:cc:
                    66:41:cb:c1:e9:e8:93:e0:8c:0a:5e:37:64:09:76:
                    b5:dd:60:c5:1d:d2:00:71:8c:46:28:90:05:77:b6:
                    a6:65:09:54:08:59:e9:5f:c9:62:34:4e:cd:b7:ab:
                    dd:f2:a9:cf:62:5f:1a:a5:92:c2:e0:52:68:4c:e9:
                    96:8c:ae:38:12:eb:01:0a:1e:d4:ab:59:f2:3f:fa:
                    89:de:c3:c9:e4:65:3b:a0:82:60:5e:1d:dc:77:40:
                    95:85:83:fe:e0:cb:87:7f:43:fa:0a:74:1c:24:d2:
                    0f:d3:71:bf:fb:da:5a:8c:45:26:46:ba:22:56:cb:
                    33:c5:ed:e1:a8:b2:d5:43:f9:b6:e6:22:e4:0d:f7:
                    2d:2e:76:61:3a:3a:fc:9a:5c:1c:a3:a3:f7:7d:a8:
                    e7:58:80:87:83:d8:88:34:ea:66:aa:35:51:c4:31:
                    73:13:a3:ab:53:30:91:32:36:65:6e:ba:eb:1f:2d:
                    97:8c:e7:0b:1e:c2:42:37:8a:94:eb:93:d9:51:3a:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F5:EF:0E:68:17:C9:D6:2D:5B:5F:0E:FF:CD:EA:88:77:46:3A:4B
            X509v3 Authority Key Identifier:
                keyid:53:01:68:12:D0:95:63:57:A7:AF:05:8B:EF:F2:AB:72:AF:14:3D:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UwFoEtCVY1enrwWL7_Krcq8UPY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GLOBALPLUS/UwFoEtCVY1enrwWL7_Krcq8UPY4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:56:d8:59:ae:6b:1d:96:28:db:0a:04:b6:36:ab:31:6c:
         d6:56:84:9c:47:97:d6:d4:8e:b9:cc:3f:8d:e2:39:1e:24:11:
         36:a3:fd:c8:37:79:76:54:17:51:f8:29:f2:30:2a:94:b7:0f:
         56:52:15:bc:53:42:26:8a:50:d2:e7:b2:2f:07:d4:41:fc:1a:
         2f:2f:10:93:22:ee:e3:ea:4f:37:e2:60:ec:32:88:49:9d:00:
         b9:2b:9f:34:aa:9d:6f:44:7f:20:1a:b5:4a:4e:68:72:80:b6:
         53:5b:f8:4f:3a:6f:d9:2a:32:6c:26:86:5d:16:e5:c4:16:00:
         d5:d1:89:fe:fb:b4:e2:d0:73:32:8e:dc:64:32:f7:93:80:98:
         06:1c:41:e8:f9:7a:c8:24:31:83:c1:02:ee:59:2e:2d:c3:cb:
         23:c2:08:0d:6b:71:83:87:cd:02:d6:a8:da:3c:00:6c:bc:c8:
         46:4e:98:57:99:2a:bf:07:42:fe:dc:59:d7:d5:da:4e:d8:45:
         ce:05:bf:2c:d6:cb:d5:7a:74:70:9d:99:21:f8:4e:29:d3:a5:
         42:13:90:42:a5:60:4f:fb:2d:22:93:67:c8:fa:d8:97:db:f3:
         b4:88:be:58:fc:c8:9d:3e:f6:80:6d:f8:d5:b3:61:60:12:5e:
         42:14:70:7b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzAx
NjgxMkQwOTU2MzU3QTdBRjA1OEJFRkYyQUI3MkFGMTQzRDhFMB4XDTI2MDUxMDA0
Mzc0NloXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoNjdGNUVGMEU2ODE3QzlE
NjJENUI1RjBFRkZDREVBODg3NzQ2M0E0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKarD8jSuMo+LqV06ue++mJfrdekfjDYptpik6dJ4wwoQy/aqMPR
Rw5zvzqg8feL8mBW49VPsmEa1UTMZkHLwenok+CMCl43ZAl2td1gxR3SAHGMRiiQ
BXe2pmUJVAhZ6V/JYjROzber3fKpz2JfGqWSwuBSaEzployuOBLrAQoe1KtZ8j/6
id7DyeRlO6CCYF4d3HdAlYWD/uDLh39D+gp0HCTSD9Nxv/vaWoxFJka6IlbLM8Xt
4aiy1UP5tuYi5A33LS52YTo6/JpcHKOj932o51iAh4PYiDTqZqo1UcQxcxOjq1Mw
kTI2ZW666x8tl4znCx7CQjeKlOuT2VE6KEkCAwEAAaOCAg8wggILMB0GA1UdDgQW
BBRn9e8OaBfJ1i1bXw7/zeqId0Y6SzAfBgNVHSMEGDAWgBRTAWgS0JVjV6evBYvv
8qtyrxQ9jjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HTE9CQUxQ
TFVTL1V3Rm9FdENWWTFlbnJ3V0w3X0tyY3E4VVBZNC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvVXdGb0V0Q1ZZMWVucndXTDdfS3JjcThVUFk0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0xPQkFMUExVUy9Vd0ZvRXRDVlkx
ZW5yd1dMN19LcmNxOFVQWTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEALxVW2Fmuax2WKNsKBLY2qzFs1laEnEeX1tSOucw/jeI5HiQRNqP9yDd5
dlQXUfgp8jAqlLcPVlIVvFNCJopQ0ueyLwfUQfwaLy8QkyLu4+pPN+Jg7DKISZ0A
uSufNKqdb0R/IBq1Sk5ocoC2U1v4Tzpv2SoybCaGXRblxBYA1dGJ/vu04tBzMo7c
ZDL3k4CYBhxB6Pl6yCQxg8EC7lkuLcPLI8IIDWtxg4fNAtao2jwAbLzIRk6YV5kq
vwdC/txZ19XaTthFzgW/LNbL1Xp0cJ2ZIfhOKdOlQhOQQqVgT/stIpNnyPrYl9vz
tIi+WPzInT72gG341bNhYBJeQhRwew==
-----END CERTIFICATE-----
Generated at Tue Jun 16 14:22:25 2026 by rpki-client