Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
File: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft (raw, json)
Hash identifier: C6q2hVWneaAq7e7INx7qCBe8q6u3y2/AYfONAZndmf0=
Subject key identifier: 70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Certificate serial: 0E0D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
Manifest number: 0DF7
Signing time: Sun 10 May 2026 11:37:42 +0000
Manifest this update: Sun 10 May 2026 11:37:42 +0000
Manifest next update: Tue 12 May 2026 11:37:42 +0000
Files and hashes: 1: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl (hash: Lw7nvcD9gZ/fU6nvUPb6MPz46Jv0Y2TI8TGFq041qhs=)
2: J0pWNyrCWIY5k8mT7IBIHZfpIjs.roa (hash: WEYg+S9Vq+N0Tlw4O8T7f46l6ys1QRnoL/fR7I/cM2A=)
3: bi_TDVubJ9njomx5EkHYpLdeCa8.roa (hash: DS7gFBCUdGBOKW8JeVI0o+OQfH3D+ozjXhDup8iSXDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3597 (0xe0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9
Validity
Not Before: May 10 11:37:42 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=704A3696F22835EA5A0B27271E18C2E98E9AD438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:c5:a6:90:83:ba:c9:33:73:e8:69:43:f8:
bb:83:eb:a6:a2:4a:28:ce:b5:e4:27:a2:bb:07:2a:
49:83:99:dd:f9:1b:95:6d:13:a9:90:73:56:f8:81:
c5:bd:c3:b0:6c:18:54:d3:e6:64:20:84:17:a6:28:
7f:ab:4c:7b:33:a5:16:48:5b:83:a8:ba:17:9c:28:
33:bc:43:92:f7:f2:04:68:1e:f4:aa:4c:0d:d4:5d:
6a:35:02:99:3c:d1:93:2c:f2:4e:e7:d6:ea:82:ee:
93:fc:6c:65:da:9b:c4:3a:53:e9:11:4f:7b:30:09:
37:34:85:48:eb:34:e2:16:40:c0:a7:33:71:eb:98:
1a:73:75:d7:1a:f3:29:5b:6d:4d:6d:c9:43:00:4e:
12:72:9d:0a:0b:a5:82:31:0c:3e:0a:69:0d:df:54:
83:e7:ca:d8:96:e9:c9:1f:05:09:8d:b2:4b:3b:a8:
be:de:8d:2c:35:58:6e:37:05:08:d5:f7:b8:e8:f1:
c9:16:11:1e:a4:79:08:1f:19:74:47:ba:6e:1e:b1:
6d:fe:7c:c0:e7:23:cf:27:7d:cc:9d:b4:bc:cc:90:
ee:52:f1:1b:e2:49:27:77:22:2b:7f:c0:d0:a1:ef:
63:b8:cf:40:3b:69:0b:24:48:31:9a:db:1e:29:c3:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38
X509v3 Authority Key Identifier:
keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4a:ea:56:4e:66:04:cd:91:6c:9b:5b:39:ca:b9:91:d7:7b:
b2:fe:00:9d:bb:1b:30:be:4b:27:8d:75:01:58:d1:0b:ce:5f:
f0:cf:83:0c:5e:b3:1b:84:25:26:7d:07:ca:85:6a:e5:32:6c:
dd:1d:93:d7:b3:88:6c:02:19:70:65:68:1f:0c:fe:5f:0a:e7:
82:21:61:b3:44:f8:d0:ee:8f:3b:af:7f:3b:1a:ca:a1:b2:25:
a4:f6:60:87:73:bd:20:8c:61:f2:1e:30:f7:8f:25:fc:69:ed:
a3:49:6c:d6:80:2c:8c:10:4a:6d:dc:24:35:00:56:ec:84:40:
79:70:35:d3:c5:8e:9d:f1:40:8c:cb:f8:89:00:53:6e:e3:e3:
14:5d:b2:0a:9f:ba:73:7a:c0:ad:55:c5:72:fe:da:22:de:c4:
68:7e:c5:c9:33:62:80:27:ca:81:98:79:28:00:fc:41:44:19:
15:a7:be:14:57:db:2a:38:6f:9d:8a:c9:e7:7d:d1:af:5a:a1:
4d:1b:c7:9a:81:65:75:06:c6:17:b8:4d:23:1d:da:03:34:d8:
50:4d:ab:f8:d6:3b:18:da:64:60:4c:c3:3e:88:19:c9:cb:ee:
0e:66:76:b8:e1:8b:8e:b8:ab:67:0e:ec:e5:95:11:e2:de:60:
ee:53:9e:cb
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDg0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ5
MkJFMEFDRjk4ODdCMUE4MTkyODc1Q0ZFNzMyMjM4REUzMjJBOTAeFw0yNjA1MTAx
MTM3NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcwNEEzNjk2RjIyODM1
RUE1QTBCMjcyNzFFMThDMkU5OEU5QUQ0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY6sWmkIO6yTNz6GlD+LuD66aiSijOteQnorsHKkmDmd35G5Vt
E6mQc1b4gcW9w7BsGFTT5mQghBemKH+rTHszpRZIW4OouhecKDO8Q5L38gRoHvSq
TA3UXWo1Apk80ZMs8k7n1uqC7pP8bGXam8Q6U+kRT3swCTc0hUjrNOIWQMCnM3Hr
mBpzddca8ylbbU1tyUMAThJynQoLpYIxDD4KaQ3fVIPnytiW6ckfBQmNsks7qL7e
jSw1WG43BQjV97jo8ckWER6keQgfGXRHum4esW3+fMDnI88nfcydtLzMkO5S8Rvi
SSd3Iit/wNCh72O4z0A7aQskSDGa2x4pwwvHAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUcEo2lvIoNepaCycnHhjC6Y6a1DgwHwYDVR0jBBgwFoAUHZK+Cs+Yh7GoGSh1
z+cyI43jIqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RV
L0haSy1Dcy1ZaDdHb0dTaDF6LWN5STQzaklxay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSFpLLUNzLVloN0dvR1NoMXotY3lJNDNqSXFrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RVL0haSy1Dcy1ZaDdHb0dTaDF6
LWN5STQzaklxay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC
SupWTmYEzZFsm1s5yrmR13uy/gCduxswvksnjXUBWNELzl/wz4MMXrMbhCUmfQfK
hWrlMmzdHZPXs4hsAhlwZWgfDP5fCueCIWGzRPjQ7o87r387GsqhsiWk9mCHc70g
jGHyHjD3jyX8ae2jSWzWgCyMEEpt3CQ1AFbshEB5cDXTxY6d8UCMy/iJAFNu4+MU
XbIKn7pzesCtVcVy/toi3sRofsXJM2KAJ8qBmHkoAPxBRBkVp74UV9sqOG+disnn
fdGvWqFNG8eagWV1BsYXuE0jHdoDNNhQTav41jsY2mRgTMM+iBnJy+4OZna44YuO
uKtnDuzllRHi3mDuU57L
-----END CERTIFICATE-----
Generated at Tue Jun 16 14:25:03 2026 by rpki-client