Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
File:                     8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json)
Hash identifier:          GbqyZXOHAWPksNKFbTkdKhJw5cT8J47s12x6V707uUo=
Subject key identifier:   F0:2E:2E:87:42:AA:C8:8C:C3:F4:5F:D9:13:7D:84:16:F3:31:94:F1
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Certificate issuer:       /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial:       577A629A5344749A429F3A4B4BD1AC7081324956
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:58:01 +0000
Manifest this update:     Mon 11 May 2026 17:53:01 +0000
Manifest next update:     Tue 12 May 2026 20:09:01 +0000
Files and hashes:         1: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=)
                          2: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: k1eeQ16cZkqRvKB3tigjDIEgSpLT3Z2T0z59RqAn+HU=)
                          3: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=)
                          4: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=)
                          5: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=)
                          6: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=)
                          7: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=)
                          8: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7a:62:9a:53:44:74:9a:42:9f:3a:4b:4b:d1:ac:70:81:32:49:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Validity
            Not Before: May 11 17:53:01 2026 GMT
            Not After : May 12 20:09:01 2026 GMT
        Subject: CN=F02E2E8742AAC88CC3F45FD9137D8416F33194F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:d8:6f:7c:4e:b2:98:bb:d1:13:c0:cb:65:
                    c5:d6:8d:58:b7:fa:ac:ac:cc:15:e7:02:04:50:55:
                    58:5a:ca:52:4a:cd:57:5c:04:40:02:8d:3d:13:a3:
                    ab:9b:f6:f7:41:38:c3:9a:7e:b9:51:9b:cc:78:c9:
                    2f:b2:6c:95:1a:f1:4a:2a:2b:1c:ad:4e:39:7c:86:
                    2e:e9:52:b0:76:80:12:3a:10:94:95:30:08:4f:a5:
                    16:e8:a7:a3:5c:75:62:10:5e:cc:aa:eb:6f:8d:f4:
                    1d:8e:8f:3b:5b:67:de:b4:17:b6:6c:6a:e8:e3:1b:
                    ae:61:2d:f6:0b:c3:0c:38:26:cd:42:2e:01:f7:4e:
                    96:ed:b4:26:33:c4:d4:95:46:0e:3c:3b:52:61:e0:
                    c5:61:00:4a:16:1a:02:1b:19:3d:c1:ff:a5:ce:86:
                    9c:c2:de:fe:8f:69:64:40:9d:f4:12:d6:26:b6:e0:
                    af:82:11:17:1f:aa:db:18:65:2d:e1:70:e3:20:0d:
                    3b:03:63:fb:31:66:eb:e9:77:fd:40:74:3a:f3:07:
                    4a:52:f2:2f:e4:3c:b1:d0:61:1a:52:16:b4:61:0c:
                    22:f8:1a:64:4d:83:23:d7:fb:af:61:10:18:35:55:
                    9a:87:12:4a:49:ee:7f:2d:7d:21:06:56:c8:4d:6a:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:2E:87:42:AA:C8:8C:C3:F4:5F:D9:13:7D:84:16:F3:31:94:F1
            X509v3 Authority Key Identifier:
                keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:02:54:3d:1d:c6:e1:20:d2:99:84:ac:2a:e1:34:1d:6c:
         77:2d:71:ef:8c:0b:c6:9b:a7:1f:dd:5f:9b:02:cc:d1:91:34:
         ad:73:55:f8:38:97:32:7d:6e:ac:74:3f:5f:e6:76:69:6d:d7:
         b8:1f:50:e0:2f:ec:cf:14:88:41:e2:b4:6e:fb:1c:34:f5:77:
         d4:bd:6e:2e:c6:08:21:0b:78:10:fa:7a:56:a1:5b:8f:b9:eb:
         70:3b:cc:63:c2:4a:e7:4b:13:9c:3c:24:98:99:6a:b1:37:2a:
         df:5a:9d:be:8a:97:ca:7f:42:22:15:3b:d5:22:37:2c:39:1c:
         a9:dd:5a:fa:20:9d:94:e8:6b:4f:f4:b8:d5:6d:21:2d:40:83:
         b9:48:63:69:75:b0:ad:5c:eb:8d:f3:e5:96:de:b3:c3:d0:0d:
         9e:0f:c2:16:90:74:dd:50:fc:74:0d:fb:e4:21:4f:dc:a3:3d:
         a4:ad:34:e5:42:55:5d:f8:5d:60:9d:80:6d:03:d2:38:03:63:
         3b:40:5f:77:d9:58:43:a6:bd:29:71:70:1b:3d:13:37:49:c8:
         d7:d0:be:20:ad:2d:e0:44:b9:69:b5:65:6b:86:73:51:7f:b1:
         b9:8f:b8:b4:f4:fc:9a:4f:90:c6:eb:b0:c4:5c:81:58:c9:8a:
         85:35:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----