Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft
File: 3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft (raw, json)
Hash identifier: fDQm6ILEdYcbwnvtYd86Y9Z67A5HRNIzxMUbMjjKg6g=
Subject key identifier: C5:F8:D2:DE:44:75:18:16:47:59:D8:47:AF:45:70:F9:D6:22:90:BE
Authority key identifier: DD:87:44:6D:41:50:D1:45:3C:4A:14:2A:49:EB:A1:07:DA:5D:19:99
Certificate issuer: /CN=DD87446D4150D1453C4A142A49EBA107DA5D1999
Certificate serial: 0242
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft
Manifest number: 023F
Signing time: Sun 10 May 2026 17:08:01 +0000
Manifest this update: Sun 10 May 2026 17:08:01 +0000
Manifest next update: Tue 12 May 2026 17:08:01 +0000
Files and hashes: 1: 3YdEbUFQ0UU8ShQqSeuhB9pdGZk.crl (hash: SoeC8jswzzxmCGtpwX4LXBvfqcvDzCLewNnx0xtN0uY=)
2: aDEfBpv3M_J2d5qjQVTW6AViuyU.roa (hash: uUwZjNGpelrGUnZbVxeVowuVP9o5hqPbYvrVVF3rQiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD87446D4150D1453C4A142A49EBA107DA5D1999
Validity
Not Before: May 10 17:08:01 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C5F8D2DE447518164759D847AF4570F9D62290BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:73:96:ca:2f:0f:76:4b:e2:ba:f7:0b:30:
3b:b8:b0:97:21:cf:80:24:6d:54:3a:e0:3e:98:04:
66:62:70:48:c5:8d:52:7c:b4:db:9f:a9:a1:07:af:
ef:5a:6f:50:b3:54:7d:ee:0f:13:71:b0:dc:a4:bb:
b8:63:33:75:aa:65:62:0a:c0:4c:82:58:9c:2d:8b:
2b:ab:50:67:2b:f5:0d:8c:0e:86:20:bd:17:fc:51:
7b:8b:7b:13:f3:8b:c9:36:b7:4b:db:0f:35:66:41:
68:ca:79:49:b9:46:47:18:fb:fe:12:76:6d:53:13:
a7:0c:11:20:08:25:7f:42:34:d2:08:75:31:27:0f:
8b:1c:25:bd:26:29:c6:21:ed:6b:d9:55:c0:79:e6:
86:f5:6c:c6:ac:e0:92:3f:c9:d2:45:f2:3d:ce:8d:
99:3c:9b:cc:c8:61:58:19:36:fc:9d:38:c5:ee:3e:
cc:0b:6c:50:09:9c:3c:ee:87:73:50:c7:c6:b8:19:
75:4e:dc:d9:65:6f:8b:e5:84:fc:32:e7:8d:58:e7:
b7:8c:fb:2a:55:36:10:a4:a3:fe:c5:32:1d:86:da:
e3:9f:21:0c:3a:8a:65:3f:62:87:44:a6:f4:36:da:
f8:6b:19:c9:ab:98:ee:fb:76:16:4e:0a:dc:63:d5:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:D2:DE:44:75:18:16:47:59:D8:47:AF:45:70:F9:D6:22:90:BE
X509v3 Authority Key Identifier:
keyid:DD:87:44:6D:41:50:D1:45:3C:4A:14:2A:49:EB:A1:07:DA:5D:19:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/3YdEbUFQ0UU8ShQqSeuhB9pdGZk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:81:9e:fa:19:e8:cd:b6:cc:b0:41:57:2f:40:20:a0:db:e7:
bd:0c:d0:5e:05:84:e7:fc:c6:1c:d1:ff:4e:00:5d:ab:2b:17:
47:cb:da:14:05:5f:fc:16:35:d4:3c:58:60:d2:70:f5:ec:74:
21:f1:12:53:84:49:10:4c:72:4b:31:77:da:48:ed:9d:1f:b0:
d5:f7:79:97:dc:2e:1d:6d:07:18:bc:65:73:dd:ef:c8:1b:77:
d4:5c:41:51:e5:22:2c:4b:13:b0:76:53:c4:4d:bd:e4:1f:41:
cf:56:31:44:6d:4b:fa:d2:09:80:ee:a1:95:5c:1b:ff:79:b7:
09:b5:ff:79:ef:12:f2:17:35:22:3e:a6:95:e3:85:9f:2a:b4:
9e:14:89:72:41:18:58:17:a6:bc:bb:7b:7b:44:89:9f:b4:c3:
1a:a8:73:d3:fc:8d:42:e6:06:ea:c3:26:86:77:4b:1a:d7:80:
1b:fc:42:3c:1d:bf:77:eb:06:bf:0f:cb:11:a8:f7:ca:c8:84:
0a:d5:cb:6c:f1:f3:31:1a:da:8b:01:40:32:a5:19:2b:a2:71:
ff:7c:b3:c8:be:39:27:27:47:c3:bd:b1:23:3b:a7:68:6c:1e:
54:ab:ad:35:45:9a:c3:97:00:b0:ef:9b:88:ed:56:b5:ce:ec:
86:e6:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:26:07 2026 by rpki-client