Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
File:                     aJO3oCNNDm2_QupgVacUVov9-KU.mft (raw, json)
Hash identifier:          3BSIomvJzkg3RgPx6YyQM9brHr6yOuZUvvjq7jyndzY=
Subject key identifier:   5A:63:CF:14:0D:00:74:06:C6:40:81:04:B7:F3:71:7C:AA:07:CE:3D
Authority key identifier: 68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
Certificate issuer:       /CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Certificate serial:       01D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
Manifest number:          01D0
Signing time:             Mon 11 May 2026 08:09:29 +0000
Manifest this update:     Mon 11 May 2026 08:09:29 +0000
Manifest next update:     Mon 11 May 2026 14:09:29 +0000
Files and hashes:         1: 0-awy_8w4O6KARzR5fDujPDfF5A.roa (hash: 5WdSHPlqZUPxCtiJHluPiITdZeXgddc8vHtpMDKVaH8=)
                          2: 31btbv2Ne8dB_h51f-ZOUVwUSZw.roa (hash: Y56OZQa3eZGYKDu8PQz4+IDeemXTxTI0WG0dKZMEIvw=)
                          3: VVbqlGmA_ek_QsoEHmuFJ_hL1C4.roa (hash: mc465NWIk7BAgpNQYFMh9PMdcYx/MBi79jxA0RgEMhk=)
                          4: aJO3oCNNDm2_QupgVacUVov9-KU.crl (hash: oM1ePFlnCxeour1SVMDFK5QP5kXJ3MDKech4vEK8qNE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
        Validity
            Not Before: May 11 08:09:29 2026 GMT
            Not After : Feb 10 15:30:20 2027 GMT
        Subject: CN=5A63CF140D007406C6408104B7F3717CAA07CE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:42:68:9f:f6:1a:07:e4:cd:87:a5:22:4c:
                    75:46:a1:a9:ad:c0:c8:b9:5b:31:73:9a:1c:8c:65:
                    ae:32:8c:7a:65:ac:1a:6d:88:aa:a4:6c:d8:dd:c0:
                    41:f1:82:8a:e0:6c:2c:5a:14:51:91:dd:db:16:6b:
                    5c:fc:94:90:23:da:b2:2b:ac:d8:0b:dc:3d:c2:34:
                    73:62:70:c0:5e:06:51:05:c9:e2:66:75:b8:9d:50:
                    62:28:9c:9d:48:6e:79:6b:14:b3:7b:9a:c4:2f:dd:
                    cf:2e:b1:96:6d:ac:f0:1c:17:72:af:21:34:1c:06:
                    c1:8c:c5:2e:5f:7e:04:22:a0:30:7c:ce:9a:6f:a4:
                    1f:92:7f:ca:be:eb:73:46:94:3d:bb:15:a1:6b:39:
                    ea:dd:39:f1:62:1e:71:c3:d0:ee:37:73:ed:44:19:
                    cb:89:08:89:35:66:ae:7c:b9:90:cc:74:67:98:0e:
                    59:ba:6a:4b:93:e1:88:ff:85:b5:f0:e7:eb:2b:0c:
                    f5:04:55:42:d4:93:8d:96:31:cf:fc:98:cf:16:8d:
                    6e:ef:d1:46:3c:f7:75:65:1c:7e:23:c5:26:dc:3a:
                    d1:84:51:b9:12:c2:2b:f7:dd:9e:1f:97:95:9a:2e:
                    67:27:78:8e:ed:08:8f:93:e0:53:c4:c6:41:43:7e:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:63:CF:14:0D:00:74:06:C6:40:81:04:B7:F3:71:7C:AA:07:CE:3D
            X509v3 Authority Key Identifier:
                keyid:68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:63:b9:b4:22:31:05:0f:f2:ed:7c:07:59:0d:cd:80:7b:
         b4:b4:c0:a1:2a:03:31:fb:35:fc:e9:55:51:fd:c4:1b:d0:82:
         25:be:b9:7a:d2:26:c7:3a:7e:b4:ce:93:de:6a:64:d2:0f:41:
         d9:22:d1:d5:d5:81:f1:8d:a3:5c:8e:30:5b:e9:eb:b8:1b:fb:
         a4:76:0b:fe:c7:82:03:98:68:8e:00:af:8f:9c:4b:98:30:45:
         ae:fe:33:15:21:ba:15:0c:73:c4:be:81:f9:e7:91:22:17:9f:
         c0:35:5a:75:a1:bc:83:bd:10:05:26:79:d0:77:dd:a9:3a:e1:
         9a:b9:a9:32:86:3a:65:f5:e3:9f:e8:af:0e:56:aa:1d:b3:00:
         ec:d8:44:0f:44:7a:16:51:f1:8e:c7:65:c2:73:0d:1c:2e:49:
         15:3a:97:9c:4e:63:cd:81:1b:2e:60:a9:0c:b2:28:e8:e2:44:
         01:93:7d:1e:3e:43:71:f3:07:3c:78:ab:5c:1f:fc:d2:b7:a0:
         b7:79:a7:46:71:eb:94:91:06:8d:96:7d:3f:53:b1:28:b0:f7:
         21:e6:fc:4b:69:8a:5d:fa:d4:a9:48:f2:86:94:eb:9b:5c:47:
         63:95:04:cf:ee:15:dc:9a:89:9d:07:8a:04:16:07:06:3d:e6:
         ac:3c:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:24:26 2026 by rpki-client