Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
File: iWrQtRYJef6sUMY4TL_BYtQD540.mft (raw, json)
Hash identifier: JyUYrSpIu/fdfsbl0P7G2ZNTWj00LzPso8NpJdrKBLY=
Subject key identifier: 4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
Authority key identifier: 89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
Certificate issuer: /CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Certificate serial: 0E18
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
Manifest number: 0DF7
Signing time: Tue 24 Mar 2026 22:59:21 +0000
Manifest this update: Tue 24 Mar 2026 22:59:21 +0000
Manifest next update: Thu 26 Mar 2026 22:59:21 +0000
Files and hashes: 1: SGLF6BdYcKQblGX3rLa2mwtdpMw.roa (hash: UmN+XS99A9NwcsXV4t/Ywa+ehJf/2L7mPjGeFjYvg4g=)
2: _xvEwnLVdHp7MhGQ4Zdx7lKyeqc.roa (hash: pSErrwEjV+xssAeSKBwXCchpjAvKMwLdIR+XEDTY/24=)
3: iWrQtRYJef6sUMY4TL_BYtQD540.crl (hash: MuK5/t/o0hmkPDyR2tITBaW7uRQ3L14xDArYlWGOSVw=)
4: pVJcaYZpvAK5nxu3T7dlKhDzgLo.roa (hash: mlcRhjsVGOM9KvSd6dMa/LWhL7xNmsFW5DbNF4fHfvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3608 (0xe18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896AD0B5160979FEAC50C6384CBFC162D403E78D
Validity
Not Before: Mar 24 22:59:21 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=4EFEC9884FCADF72FA01ABA023732C6D88E481D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:14:a0:ba:97:b0:ab:dd:56:8d:78:b2:e8:
24:0e:c7:87:2d:cf:c6:23:89:a5:e1:87:44:1a:eb:
6b:94:fa:e7:b5:0f:58:aa:69:de:d2:1a:fc:03:68:
8b:8d:51:59:83:54:ce:d0:d8:63:c3:58:69:3f:85:
bc:0b:b6:fe:84:54:28:77:61:c1:4c:aa:b6:b3:11:
83:5b:7f:ae:ac:60:65:cf:aa:40:b2:d9:1b:5c:95:
8d:59:77:b0:53:56:9a:a5:6e:a8:0e:18:e1:c9:21:
d9:da:1b:6a:3c:7b:d4:bf:06:7e:9a:ce:da:d8:d7:
33:a3:10:fa:f1:ff:8c:b3:3b:da:4c:50:34:b0:e4:
2a:a8:41:44:20:41:c3:0d:0d:92:95:56:97:f6:c8:
99:34:91:3d:d7:ed:46:04:1d:bd:7f:3e:c4:8f:69:
ae:9f:61:30:95:63:99:02:8c:a8:be:3e:e3:72:82:
8d:f7:8c:d0:0a:9e:dd:2e:b4:de:c1:58:95:98:af:
71:0d:8f:20:05:68:1a:16:ad:82:c9:7f:e0:2e:ec:
14:ef:04:f4:b6:26:00:44:cb:1e:e8:bb:7a:40:f5:
71:1c:f5:79:5c:23:9c:34:6b:28:e3:0c:5f:a4:d9:
70:5a:fe:7b:7f:7f:bd:7c:d2:88:c0:e5:48:f8:94:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:C9:88:4F:CA:DF:72:FA:01:AB:A0:23:73:2C:6D:88:E4:81:D5
X509v3 Authority Key Identifier:
keyid:89:6A:D0:B5:16:09:79:FE:AC:50:C6:38:4C:BF:C1:62:D4:03:E7:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iWrQtRYJef6sUMY4TL_BYtQD540.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINALIFE/iWrQtRYJef6sUMY4TL_BYtQD540.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:8e:db:36:62:cc:7d:5c:f7:e0:8e:c3:fd:af:a5:bb:5c:39:
32:71:d5:41:ce:84:ce:ab:f1:e2:1a:b2:aa:35:49:0f:70:04:
3e:49:cf:b2:69:87:2f:87:8f:cc:3d:93:c4:6c:05:75:cc:37:
c9:f0:d8:d2:9c:c3:e6:38:51:f7:92:bc:23:b8:a6:29:83:99:
96:af:cd:a3:67:2d:78:a3:fb:8b:67:0e:02:fb:54:6d:bb:80:
a4:a8:d8:6b:6f:ae:5f:a6:2e:1f:65:e4:a3:f9:d5:65:59:b2:
d4:57:3b:2b:fc:b1:25:09:34:31:a7:21:de:e9:3d:58:f0:5f:
e8:d4:fe:e9:11:b2:8d:0f:93:60:0a:27:80:cf:ac:17:9e:af:
67:d6:cf:7e:c5:1c:b1:8e:0d:5c:2a:db:f3:1c:9e:4d:d7:88:
28:c3:54:a1:11:a4:eb:6e:3e:2f:48:47:f8:e9:9c:3a:76:ab:
09:8f:b0:a1:e3:78:92:26:77:47:4e:81:d0:76:46:1d:7b:99:
78:65:3c:fa:23:25:4f:9c:7f:28:02:00:a3:e7:f9:f6:96:35:
52:12:37:39:35:b6:8c:71:94:da:77:52:68:7e:f4:ae:76:5d:
55:23:98:61:f2:02:23:bf:47:90:69:5b:b7:98:d5:88:b8:b8:
8a:9f:84:80
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk2
QUQwQjUxNjA5NzlGRUFDNTBDNjM4NENCRkMxNjJENDAzRTc4RDAeFw0yNjAzMjQy
MjU5MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRFRkVDOTg4NEZDQURG
NzJGQTAxQUJBMDIzNzMyQzZEODhFNDgxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBSRSgupewq91WjXiy6CQOx4ctz8YjiaXhh0Qa62uU+ue1D1iq
ad7SGvwDaIuNUVmDVM7Q2GPDWGk/hbwLtv6EVCh3YcFMqrazEYNbf66sYGXPqkCy
2RtclY1Zd7BTVpqlbqgOGOHJIdnaG2o8e9S/Bn6aztrY1zOjEPrx/4yzO9pMUDSw
5CqoQUQgQcMNDZKVVpf2yJk0kT3X7UYEHb1/PsSPaa6fYTCVY5kCjKi+PuNygo33
jNAKnt0utN7BWJWYr3ENjyAFaBoWrYLJf+Au7BTvBPS2JgBEyx7ou3pA9XEc9Xlc
I5w0ayjjDF+k2XBa/nt/f7180ojA5Uj4lGfFAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUTv7JiE/K33L6AaugI3MsbYjkgdUwHwYDVR0jBBgwFoAUiWrQtRYJef6sUMY4
TL/BYtQD540wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFM
SUZFL2lXclF0UllKZWY2c1VNWTRUTF9CWXRRRDU0MC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvaVdyUXRSWUplZjZzVU1ZNFRMX0JZdFFENTQwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFMSUZFL2lXclF0UllKZWY2
c1VNWTRUTF9CWXRRRDU0MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAojts2Ysx9XPfgjsP9r6W7XDkycdVBzoTOq/HiGrKqNUkPcAQ+Sc+yaYcv
h4/MPZPEbAV1zDfJ8NjSnMPmOFH3krwjuKYpg5mWr82jZy14o/uLZw4C+1Rtu4Ck
qNhrb65fpi4fZeSj+dVlWbLUVzsr/LElCTQxpyHe6T1Y8F/o1P7pEbKND5NgCieA
z6wXnq9n1s9+xRyxjg1cKtvzHJ5N14gow1ShEaTrbj4vSEf46Zw6dqsJj7Ch43iS
JndHToHQdkYde5l4ZTz6IyVPnH8oAgCj5/n2ljVSEjc5NbaMcZTad1JofvSudl1V
I5hh8gIjv0eQaVu3mNWIuLiKn4SA
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:43 2026 by rpki-client