Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
File: 0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json)
Hash identifier: 1f8RGDpY7WY049gP5HPXwePY1GY86VdElF6I/Ts/+8o=
Subject key identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial: 0523
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
Manifest number: 0500
Signing time: Sun 10 May 2026 11:07:57 +0000
Manifest this update: Sun 10 May 2026 11:07:57 +0000
Manifest next update: Tue 12 May 2026 11:07:57 +0000
Files and hashes: 1: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: JiuucRDzn2DFoLacg9vrXZ9VRhlG5OmXkWbcE+L/LAk=)
2: H76Yqjd_qsLu02XHlrkdTb6cO4g.roa (hash: 8R3MORDwytvIMNic9SLQgH9B3ARyUty0xVBqwyW73ZU=)
3: QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa (hash: 0lcn7A1+ZL5XJgqQCmzarNJs8CwPigObmEAryjQ0dO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Validity
Not Before: May 10 11:07:57 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d:
ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e:
f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5:
8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93:
33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3:
2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc:
cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84:
85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e:
c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10:
a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb:
bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36:
88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00:
37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14:
92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08:
03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32:
4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59:
31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
X509v3 Authority Key Identifier:
keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:32:43:be:d0:28:b5:0f:69:93:e0:0f:8b:fb:ad:f8:c4:
bd:c0:45:05:2f:c6:bb:8b:7d:72:7c:c0:4a:32:7d:08:78:ac:
41:1b:ae:41:68:03:af:f0:97:53:97:73:31:35:48:dc:4e:73:
4b:93:af:2a:31:49:47:16:2e:7f:dc:d2:00:e3:36:40:90:53:
4e:55:1c:0c:d7:43:f7:59:00:1f:9b:59:36:3b:42:88:30:87:
91:26:a2:9c:cf:e4:04:e9:cd:fd:c7:44:7e:fa:11:20:3e:53:
c6:ae:87:11:87:39:12:94:fb:c8:9f:98:27:02:ea:ce:4c:83:
75:fd:73:82:2c:84:bc:18:64:a7:73:e8:ee:96:a0:9b:70:f1:
57:8e:cf:15:d9:43:80:09:4b:19:06:43:3c:8a:d0:ca:4d:b4:
9b:54:89:68:dd:40:61:8b:94:56:47:f4:ec:b7:ad:55:78:78:
2f:49:24:6e:39:71:12:cc:56:0b:85:ec:59:bb:b0:20:45:3f:
61:8e:ae:b7:e4:d9:5d:34:1e:aa:97:2a:fd:b4:3a:4e:b6:c5:
8d:ea:d7:c1:9a:f9:53:1d:f8:ba:ec:ea:8d:8f:7f:7d:d3:68:
1b:13:3a:b4:83:9e:f1:ea:d7:d5:f8:92:8b:8f:8b:68:51:af:
6d:a5:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:25:09 2026 by rpki-client