Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
File: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft (raw, json)
Hash identifier: gYhBkdWlpdBB1LqAKq0DZikXlo40OWuxZ0K7EoKoQvM=
Subject key identifier: 50:73:92:43:7A:86:C7:D5:8A:87:00:C8:18:D6:8D:F4:E6:ED:3C:68
Authority key identifier: 8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
Certificate issuer: /CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Certificate serial: 0DD8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
Manifest number: 0DCA
Signing time: Tue 24 Mar 2026 20:28:35 +0000
Manifest this update: Tue 24 Mar 2026 20:28:35 +0000
Manifest next update: Thu 26 Mar 2026 20:28:35 +0000
Files and hashes: 1: 6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa (hash: 2X8j4tdHGu8yZowcoPwww7IklQabTy1cLRjctghTwv8=)
2: V2fVwgLecyKu7SMicrJV4I0B42k.roa (hash: UyFSVPkkfoqOuEbmNVhceP+dKKpgZM5IQ7bPaFwveVg=)
3: hhdkJLO7067VsUs97A0bf5U8JQc.roa (hash: vlO1zpnezKgnyNMX42nXqsn9ph8GR+mcssr1Tn1eBOc=)
4: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl (hash: U6RKMUJKf6KDF5Iwhb4ZaXlDEAQ7msm/Aj5StHwagcc=)
5: iOQRTOW94B-UFGZIs_PrZtuNmZ8.roa (hash: 8yE0wvs5bk5aETxomeYl31mO0eVT4gtLV1kMu1NkYic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3544 (0xdd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C
Validity
Not Before: Mar 24 20:28:35 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=507392437A86C7D58A8700C818D68DF4E6ED3C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:d3:cc:71:5e:c5:26:f0:47:6c:e5:79:5a:
fc:77:4a:ed:b9:cf:38:d0:c4:38:bc:cd:ec:e9:8b:
c8:ef:40:8b:af:79:22:90:30:c8:b1:04:91:69:c1:
e0:39:4b:54:2c:82:07:f5:ef:84:89:26:ff:f4:17:
b7:34:a3:f2:a7:2f:57:4d:23:99:89:c3:5f:5c:f4:
a0:ed:20:3e:04:9c:1c:d3:79:7b:7b:1e:88:ff:13:
92:d7:46:85:bc:b6:3c:f0:82:39:28:42:e3:ce:d2:
41:8c:54:5e:b9:45:af:af:ff:c5:49:6a:d6:0d:95:
0a:b6:ed:bc:2c:97:1f:cc:99:0c:7b:6b:b2:53:03:
97:b7:5c:c0:94:27:b6:d3:0a:ff:f4:76:b1:77:b1:
84:62:b2:c5:51:9f:91:0d:3a:24:ac:a4:60:d6:c7:
7f:ab:72:89:95:bc:df:b7:5d:01:2e:2d:2f:83:a5:
da:67:e0:22:d6:a8:66:36:d8:86:d7:db:16:a0:09:
b9:f6:f1:b8:1e:dc:2b:e2:90:bf:20:b7:df:b1:74:
67:e3:a1:1b:18:b2:5e:23:de:83:c1:99:2a:c5:1b:
66:c9:59:5e:7d:32:14:dc:c9:79:0a:bc:51:9a:b2:
03:f7:0e:13:69:e5:3d:4f:27:0d:ae:28:be:99:fd:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:73:92:43:7A:86:C7:D5:8A:87:00:C8:18:D6:8D:F4:E6:ED:3C:68
X509v3 Authority Key Identifier:
keyid:8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:41:57:40:b7:de:c0:df:6f:d4:0d:db:eb:02:fe:16:68:ba:
f1:cb:9f:e5:54:81:b2:99:83:4f:33:10:4d:bc:5b:eb:6d:52:
7a:05:45:45:de:12:b8:bb:52:05:bc:01:31:d2:54:a5:2e:3d:
95:22:27:be:0b:20:4c:2d:8b:36:bf:03:56:5e:15:76:a6:b7:
87:24:0f:c8:82:fb:a5:61:be:8b:01:79:77:5b:e4:69:f6:d7:
b4:00:3e:a1:21:cc:dc:2b:d3:be:8d:18:d3:4c:7e:0e:d3:ae:
bb:17:f7:8a:b6:d9:e1:0a:09:92:22:78:55:1c:b3:15:da:cb:
83:be:b9:27:93:5f:4d:bb:8d:fc:92:06:46:35:1a:67:e5:ec:
70:66:5d:f2:57:48:55:2c:76:50:6a:fa:3d:c7:d5:2f:56:11:
34:51:10:91:9e:66:e8:ea:f5:b4:b2:7e:78:b9:72:7c:7d:e2:
72:41:f0:48:4a:68:38:68:34:a5:9a:e5:cb:70:ad:09:a3:00:
ce:39:c0:9c:36:32:60:47:a0:8d:fd:53:fc:fe:77:c8:fe:91:
a4:12:6b:4b:ce:de:2c:51:94:92:6f:14:9d:56:eb:fa:3e:93:
9f:e6:64:c6:1c:1a:09:f8:fa:9e:a5:4b:ef:17:8c:1f:8a:78:
9c:db:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:46 2026 by rpki-client