Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
File: RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft (raw, json)
Hash identifier: 9+SoYDx71KBFqUEPKcPJ5tHFM45ZEMcnNrDLGV/Pppw=
Subject key identifier: EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Certificate issuer: /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial: 0E14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
Manifest number: 0DF2
Signing time: Tue 24 Mar 2026 22:59:40 +0000
Manifest this update: Tue 24 Mar 2026 22:59:40 +0000
Manifest next update: Thu 26 Mar 2026 22:59:40 +0000
Files and hashes: 1: FYcm3-BAzLarrqeCYV2whY0U-zo.roa (hash: BaTk+IlRTMk3VliwXqlPH52YkxVtp5DBAOqd4jq6OiU=)
2: RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl (hash: CN+Bnf6C1xjI7nyB4AEfHs6vW7NXPwUqHgweUHS5eGE=)
3: TsN0H5pD6Qm0_O0vCqm-6LmqAwg.roa (hash: QK6bO3POqwYLqN6of1UT1LdwgPFXVK0OJbizi519XWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3604 (0xe14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Validity
Not Before: Mar 24 22:59:40 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EBA3972CCF2AC197E586C0AD8B740DC36C79B1B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:70:15:e8:47:0b:5c:cf:90:8c:df:cd:69:
20:52:4c:f0:94:21:ba:af:0c:c8:7d:b3:9b:43:3f:
a9:ba:1e:ea:bc:53:ef:72:c0:4f:fc:bb:b9:9a:63:
79:52:fb:a7:80:e8:c1:45:c6:9f:2b:43:84:a0:c5:
20:e4:5a:c2:1f:e2:2f:06:cf:d2:d6:16:05:26:af:
e6:d6:76:af:7b:84:98:e9:6d:b6:84:92:6e:0b:b1:
f7:2a:ab:94:42:e0:f3:c1:28:a4:7d:ce:c5:f8:f3:
9f:b6:1e:78:f0:7f:9b:f2:1d:4e:23:b0:22:0b:cf:
90:b5:e3:4f:ab:e9:1e:9b:c3:da:13:ce:3b:20:c2:
56:9c:d7:48:31:f2:1c:f3:95:6e:63:09:be:69:92:
fa:07:ca:5d:c5:72:72:26:72:b5:f9:f5:4b:ac:40:
b1:5a:53:c3:7b:be:8c:5e:cd:fb:81:9a:aa:3f:f3:
de:98:2d:3e:77:8f:d9:20:67:13:31:1f:47:ad:a1:
87:11:a7:34:8c:72:b1:03:28:9b:b8:7d:4b:28:ed:
0c:37:e8:ea:75:bb:56:19:d8:b9:76:70:39:cc:11:
35:de:13:3d:c1:36:5b:5b:5e:7f:8f:7e:b9:4e:b7:
a4:aa:a5:25:16:70:65:b2:40:fa:01:44:f0:f8:7c:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3
X509v3 Authority Key Identifier:
keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:9c:d3:f8:9f:0c:65:93:bb:c5:e3:b7:19:6e:ea:53:24:d3:
0b:c3:20:3e:09:66:01:8a:d2:49:49:cb:26:b0:32:ef:8b:56:
63:cf:3d:b8:fd:ea:42:8a:c0:2d:cc:49:ce:2c:70:c1:2f:f2:
d1:5d:5c:e0:0e:32:ed:6d:75:b9:6f:94:d0:87:ae:19:c7:6b:
2c:6b:f5:9c:53:e1:dc:76:d2:4b:b8:88:0b:e9:8e:6a:91:db:
0b:f7:04:da:2c:af:d6:38:92:b4:a5:8f:07:5a:d3:42:71:19:
56:64:25:85:9a:06:69:9b:13:75:29:f2:f4:90:d6:97:30:66:
f4:96:c2:6b:ee:f9:00:82:bb:33:87:4d:a8:8f:94:f5:33:23:
9f:3e:47:ce:e0:26:e9:f1:a0:48:df:b6:cb:9d:6c:51:d2:09:
9b:ad:2e:7e:5c:fe:38:80:ee:46:40:f6:bb:5b:6e:a6:75:37:
3d:e5:50:43:43:bc:a7:50:9e:42:6d:03:a6:92:a6:da:7c:03:
e6:76:35:ad:e3:f0:55:e4:3d:3a:9d:c2:ce:13:41:d3:8d:17:
d6:32:87:99:7b:1d:b2:a6:69:41:83:8b:21:2c:49:a9:5d:96:
b6:34:f5:57:36:9f:95:36:49:5c:cf:86:5c:63:9d:80:f2:ee:
e2:84:36:8f
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDY0
MEQ5ODhFQzgxNDZCQTQzMDU5NjAxMjEyMkQxQTFDRkMxQzM2QjAeFw0yNjAzMjQy
MjU5NDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCQTM5NzJDQ0YyQUMx
OTdFNTg2QzBBRDhCNzQwREMzNkM3OUIxQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqHHAV6EcLXM+QjN/NaSBSTPCUIbqvDMh9s5tDP6m6Huq8U+9y
wE/8u7maY3lS+6eA6MFFxp8rQ4SgxSDkWsIf4i8Gz9LWFgUmr+bWdq97hJjpbbaE
km4Lsfcqq5RC4PPBKKR9zsX485+2Hnjwf5vyHU4jsCILz5C140+r6R6bw9oTzjsg
wlac10gx8hzzlW5jCb5pkvoHyl3FcnImcrX59UusQLFaU8N7voxezfuBmqo/896Y
LT53j9kgZxMxH0etoYcRpzSMcrEDKJu4fUso7Qw36Op1u1YZ2Ll2cDnMETXeEz3B
NltbXn+PfrlOt6SqpSUWcGWyQPoBRPD4fJ0nAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU66OXLM8qwZflhsCti3QNw2x5sbMwHwYDVR0jBBgwFoAURkDZiOyBRrpDBZYB
ISLRoc/Bw2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVS
L1JrRFppT3lCUnJwREJaWUJJU0xSb2NfQncycy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvUmtEWmlPeUJScnBEQlpZQklTTFJvY19CdzJzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVSL1JrRFppT3lCUnJwREJaWUJJ
U0xSb2NfQncycy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU
nNP4nwxlk7vF47cZbupTJNMLwyA+CWYBitJJScsmsDLvi1Zjzz24/epCisAtzEnO
LHDBL/LRXVzgDjLtbXW5b5TQh64Zx2ssa/WcU+HcdtJLuIgL6Y5qkdsL9wTaLK/W
OJK0pY8HWtNCcRlWZCWFmgZpmxN1KfL0kNaXMGb0lsJr7vkAgrszh02oj5T1MyOf
PkfO4Cbp8aBI37bLnWxR0gmbrS5+XP44gO5GQPa7W26mdTc95VBDQ7ynUJ5CbQOm
kqbafAPmdjWt4/BV5D06ncLOE0HTjRfWMoeZex2ypmlBg4shLEmpXZa2NPVXNp+V
Nklcz4ZcY52A8u7ihDaP
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:06:44 2026 by rpki-client