Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
File:                     govRnvqOvlnvQHu3-raJj3VMfsE.mft (raw, json)
Hash identifier:          albE+cz8833XA9vyaUb8WFcnSAlZJOBTOFrYK7CDKXM=
Subject key identifier:   19:94:35:E3:FC:72:37:4E:8E:7A:C2:AD:5B:08:20:DA:50:D3:E8:D6
Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
Certificate issuer:       /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Certificate serial:       11BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
Manifest number:          11A0
Signing time:             Sun 10 May 2026 09:38:10 +0000
Manifest this update:     Sun 10 May 2026 09:38:10 +0000
Manifest next update:     Tue 12 May 2026 09:38:10 +0000
Files and hashes:         1: F-uIqLUJ2DofwkNp7jRcP9Rb0qU.roa (hash: qxhjM03lflZoUJobv28e2CqjaJUBiXRNnEpHgSf1MKI=)
                          2: fAA_7kU5d-eAsYyb4t9T_m-K9so.roa (hash: 0ssxX45r2zal8T5TYsBqjtxaxF/5kSi/C5RnyqK7E4Q=)
                          3: govRnvqOvlnvQHu3-raJj3VMfsE.crl (hash: YzQ6tYQDPvecj5TdPx2vKGamQFyPFpzwDGe3FWSQ1tk=)
                          4: gswIJVnHvj1YUxuz_vWKd1fkfGM.roa (hash: FjCc5t+/MKmt4eTep1SuaHgKfSc3Wo0s0FQ+kwue/H0=)
                          5: zElcDX8txAiKF_nW3UuL27WFm-o.roa (hash: +K7BgWnfJX1+YlJoSHdk6dprDkM4g/+Bv/t19+nc8zA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4541 (0x11bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
        Validity
            Not Before: May 10 09:38:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=199435E3FC72374E8E7AC2AD5B0820DA50D3E8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:3e:fa:9b:5a:dd:40:06:17:54:cf:46:56:
                    c6:00:75:aa:0d:85:0d:78:43:77:58:47:f9:72:9d:
                    ef:f1:76:2d:a0:b1:2c:0e:d4:8c:0e:07:0a:26:79:
                    1c:06:fa:b5:0c:58:5d:11:7b:e2:92:67:8a:33:a4:
                    a0:bc:ac:2e:35:35:80:48:80:8b:f1:e7:0a:ca:23:
                    9c:f4:1b:ca:6f:af:e1:a2:1f:69:4d:05:d4:9c:ed:
                    11:75:0c:bb:76:5c:cf:b8:d4:d8:da:f5:58:75:a0:
                    c4:9b:f5:b2:a5:eb:2e:34:4a:a9:8f:44:66:0c:fe:
                    6d:d3:6f:68:ab:c2:88:ed:8d:b3:f6:cb:7e:31:69:
                    9c:88:b0:53:07:b6:7f:85:13:0e:e6:47:a3:33:28:
                    9b:23:ed:0e:ab:62:df:f8:06:e3:8b:2f:a2:0c:57:
                    e1:3e:db:33:7f:ad:2f:7e:39:71:ac:52:fe:62:f5:
                    0e:b4:cd:18:f6:65:1d:e7:c3:8b:ee:d3:61:ff:ea:
                    d8:4f:ca:de:81:48:ae:19:24:47:2d:75:1b:18:b3:
                    5d:46:53:04:0c:21:de:3c:e4:eb:e2:7a:2c:39:22:
                    83:d6:7c:f3:92:af:c4:11:70:d2:c8:da:a9:8d:49:
                    7a:cf:f9:3d:1b:03:b3:af:e8:07:04:9d:22:60:a8:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:94:35:E3:FC:72:37:4E:8E:7A:C2:AD:5B:08:20:DA:50:D3:E8:D6
            X509v3 Authority Key Identifier:
                keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f3:ab:d3:a9:db:94:19:7f:86:9d:8d:7a:e9:16:bf:cf:45:
         7d:d7:79:57:10:5a:43:d5:b4:68:e0:01:21:86:7b:1c:60:ac:
         6b:5a:17:2e:38:58:3b:6f:42:c6:ce:82:8f:81:89:f0:da:a4:
         e1:fe:44:8c:fc:90:17:a6:5a:ed:a9:65:85:ca:d5:70:ce:f1:
         7f:e2:01:39:8d:66:16:12:9b:07:52:af:76:ab:29:55:82:3d:
         7c:8a:f8:56:f9:e6:40:a2:5a:7c:de:d2:11:d5:0e:ad:14:de:
         68:ff:33:00:94:98:aa:9b:b0:53:ba:b6:91:50:59:aa:9e:98:
         35:0e:fb:6b:83:7d:39:03:ed:a1:4e:ce:ba:49:86:15:68:63:
         2f:89:bf:04:90:33:fe:6c:a4:ec:52:79:92:28:80:53:44:31:
         ae:63:be:b2:95:ad:a6:6b:9c:9c:ce:0f:db:b3:65:d8:00:0c:
         78:b6:5a:01:54:a5:62:4d:46:82:3c:43:37:1c:18:3b:3d:87:
         e3:0e:c5:39:3c:66:8a:23:79:4f:50:df:c2:67:6c:63:25:59:
         f8:8a:40:53:d5:81:96:57:ff:d2:fa:51:82:93:5f:c7:15:fe:
         2d:14:54:1b:9d:6a:e3:03:6c:ab:cc:cf:02:96:e5:f9:b5:af:
         5b:49:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:27:13 2026 by rpki-client