Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
File:                     x1hCDPdi5IrXyqYOs53NYisftPY.mft (raw, json)
Hash identifier:          vyT8TWgpcsJZogMMG22owAfYl8bbXuCwh40+6zYAkBY=
Subject key identifier:   3B:2E:15:28:E7:5A:4B:9A:45:45:79:55:8F:70:25:41:85:67:56:33
Authority key identifier: C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6
Certificate issuer:       /CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6
Certificate serial:       01E3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
Manifest number:          01E0
Signing time:             Fri 06 Mar 2026 15:54:50 +0000
Manifest this update:     Fri 06 Mar 2026 15:54:50 +0000
Manifest next update:     Sun 08 Mar 2026 15:54:50 +0000
Files and hashes:         1: bBSNn9sCzQJ-c6W6pbNOAisjYJQ.roa (hash: GMv3c2c3ddPdnP9XF6uQx6H8RorOB3gRV/gTV4C48uA=)
                          2: ctbYvQlOL6j448wTy_8FTGZ-sBI.roa (hash: XQt96vsMeGS6Wi8KdRRheyyn73riNaI61YlxOlZq/b8=)
                          3: x1hCDPdi5IrXyqYOs53NYisftPY.crl (hash: G4ZRNVcF6DJ+OX22TzQWK5fU/1ih42mWz/T9KJIzf2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6
        Validity
            Not Before: Mar  6 15:54:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3B2E1528E75A4B9A454579558F70254185675633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:1f:bc:16:1d:9c:c6:2f:56:f4:ff:ba:2b:
                    b1:61:05:0c:4e:14:c0:9c:13:62:be:3b:df:1a:59:
                    cb:cd:fd:61:c0:19:fb:93:ab:60:63:c7:76:cc:39:
                    d8:3a:0b:9a:a2:36:65:53:87:76:e5:66:ec:6a:14:
                    02:39:f0:02:2b:ce:80:59:ab:34:53:30:8f:90:74:
                    46:c6:98:c9:40:8d:c7:ef:66:f9:0a:ed:63:06:0d:
                    bc:a2:b8:ff:ce:72:47:4a:2a:b4:87:aa:50:c2:c0:
                    c7:b3:24:54:c7:dc:9f:85:94:77:8c:94:eb:f3:74:
                    00:bc:5f:1b:71:75:f4:3e:c1:3d:44:9a:e8:50:96:
                    6e:5f:e8:f8:fb:78:08:0f:4e:bb:ec:a8:d5:ec:5e:
                    d3:04:6f:f3:13:2e:55:7a:48:f1:42:df:6e:eb:c0:
                    35:87:5e:0e:53:c8:c1:52:27:0d:de:34:32:6a:66:
                    fb:9b:71:f2:98:b6:fa:97:39:b3:6e:ed:9a:4e:1f:
                    8d:b4:ed:d7:58:20:d0:98:49:39:6c:b5:92:b9:54:
                    0f:b2:5a:d8:00:96:3e:d5:62:81:8a:67:a3:f5:68:
                    c5:92:a5:cf:1a:dd:ee:5f:55:54:60:73:dc:6d:41:
                    09:c8:87:f3:e2:18:b5:55:42:38:20:97:12:c5:f9:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2E:15:28:E7:5A:4B:9A:45:45:79:55:8F:70:25:41:85:67:56:33
            X509v3 Authority Key Identifier:
                keyid:C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c2:c9:3a:da:0d:0b:27:a4:c4:45:bc:85:13:c3:37:dd:1a:
         f4:e7:a7:e4:fe:3c:f3:de:b9:98:44:c1:35:65:f6:1e:8e:fe:
         02:9e:25:ac:0c:2d:84:c4:2b:2e:f0:cf:16:ca:c4:29:cb:74:
         cc:7f:e3:1d:90:08:d2:ae:99:9b:85:73:5b:ea:2e:8c:12:5b:
         e1:14:ad:57:d8:91:e3:9e:ef:42:ef:d6:f8:fd:d4:32:c7:c7:
         07:29:8d:c0:bb:90:06:d6:62:64:27:fe:e1:c3:c1:83:75:85:
         b6:5a:4e:1e:b8:d3:70:8d:7c:0a:34:69:cd:2a:e3:08:8e:3d:
         55:a1:a4:48:49:c9:60:00:f4:44:1f:e6:da:32:f6:4b:7c:3e:
         cc:42:1c:74:d2:8c:48:52:9e:de:49:7e:97:a1:5a:df:ae:82:
         10:4a:ad:4c:c8:86:d1:dd:04:a5:d8:4e:e5:5b:a7:e5:3a:b9:
         dc:a2:6c:9f:fc:11:b4:ad:fa:91:dc:24:2e:91:c3:f7:7e:91:
         cd:6b:ea:7b:47:53:2a:a0:ba:57:41:ee:2d:d3:06:43:d2:3b:
         9c:33:23:57:b9:ba:ed:fb:e3:0a:61:3f:5d:73:4e:1d:ed:a4:
         e2:65:03:40:a2:b9:5d:87:cf:c3:a2:34:29:d7:96:ec:0a:19:
         21:32:f7:62
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc1
ODQyMENGNzYyRTQ4QUQ3Q0FBNjBFQjM5RENENjIyQjFGQjRGNjAeFw0yNjAzMDYx
NTU0NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCMkUxNTI4RTc1QTRC
OUE0NTQ1Nzk1NThGNzAyNTQxODU2NzU2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYHB+8Fh2cxi9W9P+6K7FhBQxOFMCcE2K+O98aWcvN/WHAGfuT
q2Bjx3bMOdg6C5qiNmVTh3blZuxqFAI58AIrzoBZqzRTMI+QdEbGmMlAjcfvZvkK
7WMGDbyiuP/OckdKKrSHqlDCwMezJFTH3J+FlHeMlOvzdAC8XxtxdfQ+wT1EmuhQ
lm5f6Pj7eAgPTrvsqNXsXtMEb/MTLlV6SPFC327rwDWHXg5TyMFSJw3eNDJqZvub
cfKYtvqXObNu7ZpOH4207ddYINCYSTlstZK5VA+yWtgAlj7VYoGKZ6P1aMWSpc8a
3e5fVVRgc9xtQQnIh/PiGLVVQjgglxLF+XuHAgMBAAGjggIBMIIB/TAdBgNVHQ4E
FgQUOy4VKOdaS5pFRXlVj3AlQYVnVjMwHwYDVR0jBBgwFoAUx1hCDPdi5IrXyqYO
s53NYisftPYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1RXL3gx
aENEUGRpNUlyWHlxWU9zNTNOWWlzZnRQWS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
eDFoQ0RQZGk1SXJYeXFZT3M1M05ZaXNmdFBZLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvU1RXL3gxaENEUGRpNUlyWHlxWU9zNTNOWWlz
ZnRQWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCywsk62g0L
J6TERbyFE8M33Rr056fk/jzz3rmYRME1ZfYejv4CniWsDC2ExCsu8M8WysQpy3TM
f+MdkAjSrpmbhXNb6i6MElvhFK1X2JHjnu9C79b4/dQyx8cHKY3Au5AG1mJkJ/7h
w8GDdYW2Wk4euNNwjXwKNGnNKuMIjj1VoaRISclgAPREH+baMvZLfD7MQhx00oxI
Up7eSX6XoVrfroIQSq1MyIbR3QSl2E7lW6flOrncomyf/BG0rfqR3CQukcP3fpHN
a+p7R1MqoLpXQe4t0wZD0jucMyNXubrt++MKYT9dc04d7aTiZQNAorldh8/DojQp
15bsChkhMvdi
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:28:29 2026 by rpki-client