Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
File: RR75NZqYT2pM-R_pAE6usImphMA.mft (raw, json)
Hash identifier: IbuR6uGQWyXyPLawAGCwOuW1y/du1gF6fdm/kSYaRO0=
Subject key identifier: D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0E9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
Manifest number: 0E23
Signing time: Sun 10 May 2026 12:38:17 +0000
Manifest this update: Sun 10 May 2026 12:38:17 +0000
Manifest next update: Tue 12 May 2026 12:38:17 +0000
Files and hashes: 1: CW3FD_TRmwzrR5Jpt7o0abja2JM.roa (hash: GlTKZP/hOiZTcp9R5UgObTobUqRvgQ62iUZSERW23PI=)
2: HIn29CGuAQNtrj9OXBhIijXsgBE.roa (hash: PcZYhGaMl/1BgPxPji5pTYLO5Gaswp9aGi2I5xIZSgc=)
3: RR75NZqYT2pM-R_pAE6usImphMA.crl (hash: CC735+JnSE6u2du+MJmtyHpYuML1EJzdmTsTpDEvby4=)
4: VjDU2J7rmEn3_o9XZDDvUKAynYk.roa (hash: knJ2LltoiM/NmGRfnUGfd1y70/tR4qWdTRyPp/xwdRQ=)
5: Ztqj2vutrtxn91_xBwETU95khs4.roa (hash: YIU3Ann+HCAVJ2BsdytckBIw3NnX0kuthRii/YGQkoE=)
6: atUwJIKFrDyvVHD-_XMj0YDtvmI.roa (hash: SapC8vJuEGKRwGQlQcjqEo9/M2fJ6wGFGEG9eLaA+2I=)
7: lDXkCpHVcwy4jmBk1-5_Fgv0zCM.roa (hash: RvOTlLd/g2+74MOjMOGFkca9kSPWYkMR8fo0fSOYGMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3738 (0xe9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: May 10 12:38:17 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D228D03188795DA5398BB6194C4813512F74727E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:f7:a4:1c:54:16:63:3c:5d:6c:66:8b:c2:
bb:16:10:4a:c4:ab:96:08:10:8d:49:cb:9e:79:5a:
d6:02:eb:09:b6:0f:23:f8:1b:2f:00:9f:55:9a:80:
d6:a6:8d:bd:89:3a:39:d3:cc:fa:6d:29:81:75:5b:
26:e9:29:a9:31:d7:cc:3b:23:c9:70:9f:28:4b:99:
3d:04:25:85:9a:48:24:3a:e7:da:c4:52:f9:2b:c8:
90:75:97:c8:3d:a0:ef:e5:47:17:71:ed:bd:c1:13:
8a:1c:f9:29:1a:45:9b:ed:c9:88:77:3a:4a:db:03:
00:e8:dc:64:e6:ff:16:69:c7:63:db:f7:12:50:18:
bc:05:64:51:60:e3:e8:f9:58:10:cb:01:e1:29:7e:
4e:0e:cb:ec:10:98:d4:f6:de:9b:a7:89:6c:0b:f2:
50:a6:02:63:57:35:60:1b:f0:c0:c8:f5:69:f9:23:
dc:fe:9c:82:be:8b:1f:ca:a2:ac:30:be:54:3e:75:
d4:a4:51:7b:45:bd:0a:d8:8b:b7:d9:b5:07:87:8f:
86:f9:57:68:0b:20:bc:69:93:8b:06:1c:88:d1:1d:
50:11:93:02:e0:a3:e9:06:67:f5:41:91:8f:f8:1d:
46:67:78:58:9d:c9:82:f7:e9:3f:fd:b6:4c:c7:23:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:D0:31:88:79:5D:A5:39:8B:B6:19:4C:48:13:51:2F:74:72:7E
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:46:ea:a1:7d:4c:7c:c5:ae:4e:aa:ad:66:46:39:d6:80:6e:
5d:6c:07:cb:65:5d:92:aa:56:1e:65:82:d0:38:2e:18:8d:61:
9c:9f:9e:8c:7c:be:64:87:ac:39:b9:49:d5:0f:cd:87:b7:8f:
ec:51:f0:0d:3f:3c:f3:68:82:72:e0:84:20:4d:ff:4f:88:14:
7b:21:8a:4d:46:d6:3b:c6:ef:0f:24:a7:ca:d4:69:7b:3f:d9:
7e:e9:0b:d8:17:61:ee:8f:38:04:65:d5:55:43:96:cb:4f:3f:
59:52:63:17:41:00:93:5a:84:51:03:ed:4c:9b:be:79:a6:74:
55:b5:67:ab:fb:dc:8f:5e:3b:d8:5c:da:7d:89:72:f0:d7:51:
f7:86:54:1b:5e:71:57:12:ff:27:87:f9:24:98:5b:14:0e:f3:
55:3a:ab:86:5b:c5:52:b0:78:1d:24:ed:cd:49:5d:d6:ac:b9:
7f:1a:6f:77:3c:4b:7e:6d:b7:cf:0c:72:c5:98:1f:ae:f6:c1:
cf:db:ca:d4:27:6e:68:eb:53:6d:10:8c:cf:7f:1b:d7:2d:5d:
26:a8:6d:ee:30:66:ae:b1:6a:dd:f6:05:6f:bd:5f:ba:1b:9c:
97:1a:b2:d6:9b:fc:32:76:1d:96:7c:9e:99:59:39:dc:4a:f2:
dc:45:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:10:10 2026 by rpki-client