Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
File: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft (raw, json)
Hash identifier: yddyBSylsIKcOtyX1Oq7mV80Ey8ppF458SvwQlYtLpU=
Subject key identifier: B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
Authority key identifier: 43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
Certificate issuer: /CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Certificate serial: 0389
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
Manifest number: 0383
Signing time: Sun 19 Oct 2025 15:55:00 +0000
Manifest this update: Sun 19 Oct 2025 15:55:00 +0000
Manifest next update: Tue 21 Oct 2025 15:55:00 +0000
Files and hashes: 1: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl (hash: t5jPDFEWgOvWR01WWQ/5zoDzhjoCgeButyWDKSMp9oQ=)
2: UfKOZ2h5hVDq-J996AWvgJuf74k.roa (hash: ReuDPJcG6dTbXoELLRs6cHJyN6jJYQ3PmHw4NoD0Z9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Validity
Not Before: Oct 19 15:55:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B71DB07054D3D63EB1D73CF6DA82C01F7DFDF137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:98:9c:ce:be:e2:9d:bb:4c:70:4a:fc:73:
3c:29:ba:79:69:9d:91:ad:b3:33:59:41:c7:be:15:
69:bd:87:da:03:8d:27:e5:d9:7c:0a:ce:de:12:f2:
4f:fb:e5:87:85:5c:7d:6f:42:6d:32:e9:ee:c4:3a:
d2:0b:05:ed:91:22:5e:53:ae:16:ba:3d:98:ff:37:
29:c0:c1:40:f8:4e:ad:47:da:34:e2:aa:0b:16:16:
0f:b7:d5:0b:70:2c:44:59:56:fd:55:56:12:bc:aa:
a7:c0:09:2a:c8:9f:ac:f7:4c:be:63:86:b8:ce:3a:
7c:59:ef:40:81:0a:99:1b:a7:e1:a0:98:9a:c7:47:
5b:e2:f6:00:22:8e:f0:5b:54:51:17:5c:78:bc:5b:
f3:d7:1b:ca:34:64:2c:40:2e:c4:01:8a:32:81:05:
e5:f5:b9:84:33:5b:00:57:4e:fb:2d:dd:8a:93:1d:
66:88:ec:75:62:b5:47:f9:ea:1c:b0:2f:91:85:03:
a4:af:f0:b8:7c:1f:b4:3b:b2:d4:e9:1d:36:08:85:
cc:a9:23:39:91:d7:1b:5c:ac:ea:05:0e:cd:00:fc:
6f:80:88:92:f4:55:28:37:fe:dc:f5:e2:36:3c:2e:
bf:68:76:c1:60:34:ef:99:b1:98:82:92:d4:02:e1:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
X509v3 Authority Key Identifier:
keyid:43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:99:02:4d:17:b1:5b:d8:57:4a:69:18:66:42:2a:6e:48:73:
82:d2:52:cf:7e:f1:59:b1:c9:ab:b9:69:9b:a0:1c:5c:90:c6:
ab:22:6a:8b:35:63:79:56:31:5d:6e:e7:38:e3:5a:d7:48:b4:
5b:f7:ef:16:cf:15:6f:ae:37:7e:c4:5a:8c:83:54:36:52:10:
8c:af:7b:68:9e:7c:d1:f6:66:af:8c:4e:de:8e:e5:31:45:dc:
49:d9:f0:0d:a6:9c:4e:ee:7e:dc:65:ce:93:f3:50:c3:20:a1:
27:f2:3c:bf:b5:d4:13:53:25:d9:c6:f1:56:56:5a:0e:59:1d:
a2:f0:d9:b8:bf:0d:e3:7e:67:26:4a:6d:c5:ca:a2:49:10:d5:
81:75:0b:cf:30:38:4b:4c:fe:4a:95:4e:76:b8:96:d0:52:00:
46:50:29:d7:ef:11:b3:6b:1a:3a:bc:99:75:61:2f:7e:c0:36:
18:6f:bd:49:2a:d1:57:64:21:cb:c7:8e:17:4b:0e:c6:99:bd:
60:ae:08:a1:12:32:c9:4e:22:0d:38:33:a1:47:4a:64:44:7f:
81:11:c5:21:b8:62:d5:45:6f:95:8d:ab:bf:5a:4b:34:08:c9:
42:c5:be:81:03:2c:3f:00:86:bd:e4:56:46:62:1a:f0:12:1c:
47:71:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:37 2025 by rpki-client