
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
File: aisTlsFC2mcRUYh16QxK7JCw9cQ.mft (raw, json)
Hash identifier: GgOY9EVuuv1eIxPOklJT/5EgMu8lurg3nMmrPkNtRdc=
Subject key identifier: 9F:47:34:C3:CD:35:94:AB:90:5D:6D:78:39:04:3E:E0:FA:32:05:A8
Authority key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4
Certificate issuer: /CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4
Certificate serial: 045C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
Manifest number: 0456
Signing time: Sat 07 Mar 2026 04:53:45 +0000
Manifest this update: Sat 07 Mar 2026 04:53:45 +0000
Manifest next update: Mon 09 Mar 2026 04:53:45 +0000
Files and hashes: 1: HG50Z4mnylO2rBaAVQEO35v5iD0.roa (hash: qGoiUCLURpyrfS7ud7SynCARbDJ6QoAovz+p+U5aqNs=)
2: aisTlsFC2mcRUYh16QxK7JCw9cQ.crl (hash: 5Rp49RTrxAd3NTYrHIONv1DzvzhDkzcgwwcVGB0057c=)
3: cgzqrp99TG0Rtm3l52EMUxDNdk0.roa (hash: 3gHKkREtYGQ5jTwcVCkLwsVjRndJl4KD3UhNSxFPkbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4
Validity
Not Before: Mar 7 04:53:45 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9F4734C3CD3594AB905D6D7839043EE0FA3205A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:c0:17:a9:80:f0:17:d6:5d:7b:06:2e:93:
f9:fe:04:dc:02:7f:1f:bf:f1:f6:a0:03:c6:e9:09:
bd:0f:e0:61:54:43:72:e7:64:30:ec:35:13:3f:ef:
38:5e:48:e2:18:e1:9c:de:af:a6:27:04:ca:24:e7:
99:db:51:e3:4b:d8:dc:74:83:3f:9a:7d:e3:5d:c0:
14:b5:61:8f:7c:33:69:59:33:a8:bd:c8:8e:6c:24:
bc:c2:1f:59:25:5d:ed:fd:8b:7a:01:75:13:e3:8e:
d2:7c:ad:13:d1:46:3c:ae:9b:55:bf:a0:63:a6:aa:
ca:bb:b1:c4:5c:f0:73:4c:b6:76:dd:3a:4b:dd:96:
30:9d:85:a9:b1:b2:a7:b3:5a:b6:19:ec:16:76:cf:
7a:dd:d1:64:4d:25:51:72:6d:f0:4e:53:2d:65:a0:
1c:9a:67:d3:97:65:83:9a:d6:07:a0:36:9a:9f:e2:
d1:88:77:c0:a9:9d:ed:90:a6:26:55:dd:9a:a1:ac:
9c:82:53:f8:b0:1f:db:4b:4a:4b:a2:f5:cc:93:43:
38:5e:d6:a5:32:d5:95:2f:bd:21:1d:2f:b0:15:70:
f0:d8:6d:96:b5:1e:f8:c3:3a:7c:38:1f:f1:78:a2:
5b:a5:83:98:0c:b2:c9:08:52:39:86:ed:f9:f7:b6:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:34:C3:CD:35:94:AB:90:5D:6D:78:39:04:3E:E0:FA:32:05:A8
X509v3 Authority Key Identifier:
keyid:6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5c:51:4e:b9:95:58:b5:23:ce:fe:e3:08:8b:9f:ea:c1:dd:
f1:40:e7:fd:37:4f:6b:03:92:56:94:3e:f5:39:36:15:cc:1b:
96:dd:90:11:e2:51:29:7e:39:40:07:34:35:c5:25:ed:c0:ff:
99:2e:0b:9f:f2:11:7b:52:98:1d:79:d8:85:27:59:17:e2:d9:
7d:5a:54:00:65:53:4b:bb:f7:04:c7:17:25:d0:c8:95:1c:41:
f0:63:22:f8:1b:cb:75:b7:01:bb:49:84:23:56:6b:e9:e8:5e:
a2:8a:01:51:c1:11:88:1d:c4:c6:75:aa:44:26:c8:21:31:c0:
c1:f2:ab:c4:7d:e7:96:ce:f1:f4:26:0b:2e:c5:b8:46:cf:ea:
a8:6c:9e:82:2e:f1:75:3a:0b:07:21:c3:64:7a:bb:f7:fc:50:
39:72:eb:6b:b8:75:46:64:09:1f:22:f5:fe:65:21:8e:bc:29:
d5:8b:11:25:8f:2b:f0:8e:b4:8a:39:95:70:d7:f0:4c:d0:20:
df:b4:da:0b:a6:eb:4f:83:39:79:7d:ff:2a:fa:db:f4:a0:0e:
c5:46:d1:e5:0c:af:40:d4:96:62:69:9d:05:9f:f7:07:19:be:
ad:06:00:9b:53:22:fc:b1:ee:38:e5:fb:8f:f9:66:37:11:24:
c3:45:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:28:27 2026 by rpki-client