Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft
File:                     O-iWz_LAFpeEhFDat_IaHhSk8IY.mft (raw, json)
Hash identifier:          bNrdU+Im5klF/Z5izfKw/L0yleyLHy6M63/ERJNWm08=
Subject key identifier:   E0:A5:01:66:7A:13:08:4F:F4:32:4A:30:C4:7F:0A:37:60:F8:74:83
Authority key identifier: 3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86
Certificate issuer:       /CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086
Certificate serial:       011A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft
Manifest number:          0111
Signing time:             Tue 21 Apr 2026 23:34:07 +0000
Manifest this update:     Tue 21 Apr 2026 23:34:07 +0000
Manifest next update:     Wed 22 Apr 2026 05:34:07 +0000
Files and hashes:         1: 09d502GqBlO6UFO__wIHIFyjhgI.roa (hash: zyr7C8qbHHFmR/n5OUbqGTyrJATI+n7mgzriRst5agE=)
                          2: GceKaS9g56vHe4-DWtVp9VFNRbs.roa (hash: IADfD7dKHx58hJaUGz9Tj2JOjhdoDF2pk5p9WgPp2FA=)
                          3: Mm5QnjlCbD6JSnEDpdQND2hWSmU.roa (hash: eniA0BdI4FyR8WrUJnDAn0O8u1X4txhXxkKq+zHyiqc=)
                          4: NQU0pAKssuJOBCwSQVQOoXK4O5w.roa (hash: NwabWRN2eLMl2+XcmwshBr7FOAgGwc4On1Tomt6cJwc=)
                          5: O-iWz_LAFpeEhFDat_IaHhSk8IY.crl (hash: NM4T7XzlzZrp+5hv11GV1kcDprYzVy25rjLlFeYm79s=)
                          6: Ra0L6udvSwDXP1V7qelnfXRirI4.roa (hash: w5I0taoY/8Sfi8/8DgzCehHrZJwECkB2rlozlasrkj0=)
                          7: rUYs0iTQAKoyh6qLZ6k7FH3bDbQ.roa (hash: gE3yOxnBAx9u7VyCzB06YIxi4KXeqtUTVrppiefmZ2U=)
                          8: v40XBXqfd3t5DHYPrbNNGVx46mM.roa (hash: VonTp+3WmJGa85ebTKpA0St4xfZW6QoaDyConcZ2xKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086
        Validity
            Not Before: Apr 21 23:34:07 2026 GMT
            Not After : Feb 24 15:30:19 2027 GMT
        Subject: CN=E0A501667A13084FF4324A30C47F0A3760F87483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:21:c7:95:00:2d:cb:d9:c7:9d:f3:a1:73:
                    ca:61:79:ce:54:6e:ac:0e:dc:19:4f:9d:68:71:a3:
                    5f:a8:84:c7:f7:c3:74:f1:26:86:84:6c:e0:6c:f4:
                    19:07:4f:9d:9d:0e:10:76:19:7a:a0:ba:3b:6e:f9:
                    88:d0:a9:f4:00:f7:6e:fa:69:f2:da:f4:36:59:47:
                    a2:c3:8c:51:c3:12:e6:62:da:1f:8e:1f:d5:6d:f3:
                    60:a1:d3:19:96:30:ba:f2:f4:7d:ce:bf:7f:e9:ff:
                    0f:0b:8e:ae:c6:29:95:dd:6e:d0:bd:97:e0:2b:68:
                    49:dc:fa:c4:c0:ec:e2:b5:53:a8:21:00:fb:bd:88:
                    e2:ad:47:e3:00:97:09:2e:1c:4a:06:17:ce:df:7e:
                    25:de:eb:5f:24:b6:c6:bf:fc:12:45:27:1c:e6:8a:
                    23:3b:12:10:cb:18:41:6a:9f:dd:cf:d2:95:70:81:
                    66:f2:ce:5c:74:b7:23:07:89:0a:7e:73:e7:49:54:
                    f6:d7:cd:4a:18:ad:32:4d:b9:03:71:95:cb:1d:93:
                    58:e1:8d:4e:b3:87:5e:7d:52:e4:1a:67:7f:da:aa:
                    c3:e2:97:2b:71:ea:3c:e3:83:63:c1:15:a1:83:52:
                    ca:4c:6d:80:33:19:83:37:e6:d0:f4:fd:6b:96:f5:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A5:01:66:7A:13:08:4F:F4:32:4A:30:C4:7F:0A:37:60:F8:74:83
            X509v3 Authority Key Identifier:
                keyid:3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:c1:8b:f8:0f:97:43:38:e9:4b:3d:85:12:4b:bf:28:95:
         63:31:54:96:31:9d:33:51:83:ec:93:e6:fb:d8:59:e3:e2:2d:
         3c:3d:1c:65:c8:bb:3c:c8:a2:e7:80:20:74:08:4e:ea:57:e1:
         9b:30:cf:52:8a:62:c8:2f:58:da:96:99:4c:24:45:ac:4e:66:
         44:b6:44:ed:99:eb:a5:6d:b6:cc:c2:0f:74:a9:d1:aa:c7:56:
         fe:5d:ec:6c:09:01:c4:7e:45:32:14:ee:7d:bb:5d:83:1c:83:
         d9:23:db:02:a1:5e:35:2d:ff:16:ee:c0:2e:32:28:aa:97:2c:
         05:04:01:2f:00:c8:af:66:0d:7b:8a:74:7a:58:0e:77:cb:b3:
         5e:d1:a8:50:af:52:69:c9:fa:9a:da:95:63:ee:f6:b5:cb:6f:
         de:cb:cb:6d:e1:4f:4e:90:3b:5c:f7:94:5e:1c:a7:b1:ec:25:
         05:b6:ad:1f:c6:e8:a7:71:a1:72:98:41:7d:c4:37:d3:44:11:
         ae:38:39:9e:b1:ac:bf:ed:ab:47:02:0e:8d:66:4a:1f:92:8c:
         69:ff:7e:0b:dc:17:51:af:68:b4:68:04:e9:2a:2f:5a:42:7a:
         6f:6d:72:09:52:5f:2c:33:e7:0f:c0:b5:c9:51:9e:57:f3:61:
         9d:7f:e8:4e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICARowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
ODk2Q0ZGMkMwMTY5Nzg0ODQ1MERBQjdGMjFBMUUxNEE0RjA4NjAeFw0yNjA0MjEy
MzM0MDdaFw0yNzAyMjQxNTMwMTlaMDMxMTAvBgNVBAMTKEUwQTUwMTY2N0ExMzA4
NEZGNDMyNEEzMEM0N0YwQTM3NjBGODc0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbLyHHlQAty9nHnfOhc8phec5UbqwO3BlPnWhxo1+ohMf3w3Tx
JoaEbOBs9BkHT52dDhB2GXqgujtu+YjQqfQA9276afLa9DZZR6LDjFHDEuZi2h+O
H9Vt82Ch0xmWMLry9H3Ov3/p/w8Ljq7GKZXdbtC9l+AraEnc+sTA7OK1U6ghAPu9
iOKtR+MAlwkuHEoGF87ffiXe618ktsa//BJFJxzmiiM7EhDLGEFqn93P0pVwgWby
zlx0tyMHiQp+c+dJVPbXzUoYrTJNuQNxlcsdk1jhjU6zh159UuQaZ3/aqsPilytx
6jzjg2PBFaGDUspMbYAzGYM35tD0/WuW9X4ZAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU4KUBZnoTCE/0MkowxH8KN2D4dIMwHwYDVR0jBBgwFoAUO+iWz/LAFpeEhFDa
t/IaHhSk8IYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEFaQ08v
Ty1pV3pfTEFGcGVFaEZEYXRfSWFIaFNrOElZLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWlXel9MQUZwZUVoRkRhdF9JYUhoU2s4SVkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MQVpDTy9PLWlXel9MQUZwZUVoRkRhdF9J
YUhoU2s4SVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPnB
i/gPl0M46Us9hRJLvyiVYzFUljGdM1GD7JPm+9hZ4+ItPD0cZci7PMii54AgdAhO
6lfhmzDPUopiyC9Y2paZTCRFrE5mRLZE7ZnrpW22zMIPdKnRqsdW/l3sbAkBxH5F
MhTufbtdgxyD2SPbAqFeNS3/Fu7ALjIoqpcsBQQBLwDIr2YNe4p0elgOd8uzXtGo
UK9Sacn6mtqVY+72tctv3svLbeFPTpA7XPeUXhynsewlBbatH8bop3GhcphBfcQ3
00QRrjg5nrGsv+2rRwIOjWZKH5KMaf9+C9wXUa9otGgE6SovWkJ6b21yCVJfLDPn
D8C1yVGeV/NhnX/oTg==
-----END CERTIFICATE-----