Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
File:                     0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json)
Hash identifier:          X63ZJw/fE48w39EfjpmrQqbom6Xg7U16KRS2JXrXHuE=
Subject key identifier:   87:A7:19:8B:10:50:DF:64:3D:32:1C:D3:EB:27:CB:C6:BA:63:88:E5
Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73
Certificate issuer:       /CN=0CA9C32F7806470F750EC53431D4F322F0851573
Certificate serial:       709D46F57A4DEE8B92DB018F8D7822B632ECA9B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:19:44 +0000
Manifest this update:     Mon 11 May 2026 17:14:44 +0000
Manifest next update:     Tue 12 May 2026 19:15:44 +0000
Files and hashes:         1: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: zQUhTCfCs105FhfZWCkzJgzM4ulFNmNNUvOWubV16lE=)
                          2: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:46:f5:7a:4d:ee:8b:92:db:01:8f:8d:78:22:b6:32:ec:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573
        Validity
            Not Before: May 11 17:14:44 2026 GMT
            Not After : May 12 19:15:44 2026 GMT
        Subject: CN=87A7198B1050DF643D321CD3EB27CBC6BA6388E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:ca:17:ce:6a:4f:67:6e:5e:57:53:9e:65:
                    1c:82:3c:92:26:80:f0:0f:e5:c3:c9:45:80:e2:fd:
                    eb:91:ef:65:e6:0b:c2:ed:dd:4d:43:7b:77:4c:b2:
                    83:d2:35:df:89:49:bc:3e:d3:cd:f8:ae:72:4c:8c:
                    f4:1a:bf:8f:d1:35:7f:15:41:c0:79:8e:8c:47:93:
                    84:81:64:a0:dd:ab:0e:2c:b2:93:18:34:27:9c:77:
                    76:18:96:b8:05:b0:b8:68:ae:c8:7f:89:5f:6d:5f:
                    90:6f:f3:26:d4:18:a6:f0:79:40:0c:6b:43:a0:83:
                    0f:07:16:5c:57:6a:37:ef:dc:c6:8b:2a:fd:bb:a2:
                    9d:22:ae:51:23:7e:bd:1c:f8:01:f6:60:85:75:8a:
                    7c:a7:02:14:1e:22:fe:aa:aa:99:63:4a:ab:69:52:
                    33:1d:c9:51:66:fb:74:e7:df:21:0b:28:43:9f:4f:
                    1b:d3:a3:31:5f:a3:89:15:62:1b:42:7d:ec:14:64:
                    bb:aa:4b:11:cd:43:31:4f:8b:59:73:d3:54:35:b7:
                    27:c2:e2:08:96:a3:91:9c:56:68:39:53:bd:1c:f4:
                    26:fb:b9:0b:d1:a0:8e:0a:3c:18:0c:f0:d1:44:94:
                    f3:d1:cf:37:3f:e1:54:8b:84:91:3d:a0:90:b5:13:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A7:19:8B:10:50:DF:64:3D:32:1C:D3:EB:27:CB:C6:BA:63:88:E5
            X509v3 Authority Key Identifier:
                keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f4:99:8e:c2:e4:6e:68:1a:ca:7c:88:cf:42:bd:57:40:a1:
         13:29:f3:fa:16:06:7a:66:c5:78:0b:b7:4a:2e:b2:16:39:f6:
         48:2d:4b:d4:0c:0a:5d:df:66:a8:74:75:5b:41:39:0c:09:18:
         f9:93:d7:db:f8:66:9c:07:aa:68:e7:92:fe:0f:c3:de:d4:81:
         68:88:31:d1:98:33:a6:1a:b9:a6:e4:88:b3:7b:06:f6:96:38:
         ec:2e:69:a8:0c:e5:6c:25:c0:8f:ce:f2:ef:ee:c3:71:15:83:
         6c:b2:55:14:37:3d:49:51:9a:4e:fc:2e:67:17:72:b5:71:ef:
         87:33:eb:0c:2d:e1:d1:7c:d5:38:0a:2b:ed:16:3a:a9:39:24:
         3c:98:db:a2:c5:fb:f7:6b:41:ab:1b:bf:9d:25:cd:31:2e:5f:
         3a:35:03:93:82:63:64:7a:ca:59:ca:7e:38:06:55:c2:53:5c:
         31:9f:47:f7:ce:6a:63:22:08:5b:a1:51:f5:78:4f:8e:c4:bb:
         c6:ab:c9:c0:f0:8e:ef:28:97:27:2c:ec:55:88:9c:8f:6f:ba:
         57:06:2e:3e:fa:57:94:17:f7:a7:0b:ce:f0:a7:8e:4c:80:c3:
         f2:d9:7b:ce:50:ff:82:e8:d6:1d:ae:40:55:14:e8:70:66:1b:
         7d:21:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----