Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
File: Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft (raw, json)
Hash identifier: l54+iB4YYN96gsjnNMPNUYMyjK16BRHl20A7j+ibByw=
Subject key identifier: 16:A0:2E:28:BF:4A:40:F0:FF:09:F6:A3:73:6B:7C:CB:0D:98:A0:53
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial: 0A27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
Manifest number: 0A04
Signing time: Thu 26 Mar 2026 11:28:41 +0000
Manifest this update: Thu 26 Mar 2026 11:28:41 +0000
Manifest next update: Sat 28 Mar 2026 11:28:41 +0000
Files and hashes: 1: CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa (hash: WcHBhdw1aDCQHZvC1UpSrLR7f7Vmp/ID9Izo49GB2Iw=)
2: Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl (hash: fvMT4wkGwWDr/e3MJPJARSTpNtFIqlHCjtY3bY8A8uE=)
3: VpWpZ3-90SJSDTBHGaCtNhfGcyU.roa (hash: AAP7YYbWtvheXfp1/imtwvmEkzGGM22+c5goFq55I6k=)
4: Z7O67lsGx3aARIFY9eOxvhRCwak.roa (hash: Hs949LOGE5pbIo9H2UFLzIVQo4zVj2WEGxy/5hBDHjA=)
5: gXhzYd6AcN0SBoeS3fYi7wRa6wA.roa (hash: 0qFzULhUi8BdMnWn+w7z2ay/URGQ6gl3EpRtNkDMwSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Validity
Not Before: Mar 26 11:28:41 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=16A02E28BF4A40F0FF09F6A3736B7CCB0D98A053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:39:97:85:9a:72:94:15:94:82:93:fb:e3:
8d:b1:87:83:b1:5c:39:90:19:88:f6:64:7d:f9:ba:
f8:e7:f6:05:54:95:74:3e:9a:00:9d:ed:e2:ad:c8:
64:50:75:da:71:61:b7:9d:c6:9d:13:f8:29:56:a3:
02:f9:d6:e4:09:c5:5e:92:29:0a:c4:8d:5f:8d:e0:
b2:d8:44:55:8e:86:63:d1:b9:04:2a:1a:f0:56:7a:
4d:d8:85:c9:c3:b2:43:2b:3d:82:03:9a:c4:d6:c4:
38:90:04:a9:ea:d7:0b:b0:a5:1d:1c:c5:83:e5:ce:
6b:29:d7:29:3d:9a:e0:c3:2f:b7:2f:01:a5:a2:b3:
a2:eb:ea:ea:a2:2b:75:f4:76:f1:1b:60:ff:07:70:
1b:48:01:80:93:28:41:41:22:b5:81:46:11:2a:0a:
2f:7e:25:a3:4f:a0:2e:71:48:71:91:eb:bc:a2:eb:
4d:9d:45:6e:49:a7:45:48:b2:80:50:60:9e:4c:5f:
8f:32:f2:d3:10:6d:bb:3e:42:19:f0:49:a9:54:b8:
0c:14:97:b7:96:93:83:fa:f9:a9:4f:16:9f:c3:ba:
a5:fd:4c:ea:ad:24:ed:e1:f7:3b:74:9c:4d:2b:74:
4b:f9:c6:66:8d:5f:d5:6a:dd:a1:7e:2c:17:65:8c:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:2E:28:BF:4A:40:F0:FF:09:F6:A3:73:6B:7C:CB:0D:98:A0:53
X509v3 Authority Key Identifier:
keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:38:95:e7:dc:6f:5a:ae:ed:90:d5:eb:13:e5:e5:b8:c3:69:
49:40:b1:d9:cc:e6:4b:3b:1f:d7:51:7e:65:0b:45:e1:c6:c6:
77:92:1a:a9:68:23:2b:40:a6:6f:f3:21:85:a7:92:fe:6b:6f:
03:69:dd:0e:bd:f3:5f:f0:7e:f2:5f:6b:99:ab:65:4c:1d:c4:
8e:3f:6e:f5:31:b8:c8:b6:a8:57:b9:10:3e:58:8d:41:ba:4e:
10:0c:72:30:b0:90:b6:b6:b2:e2:3a:c6:f4:7c:ba:7f:2f:98:
36:85:4c:de:82:32:6e:37:84:ff:61:ad:d1:03:a3:3f:00:64:
d6:77:28:a6:03:1f:0b:f4:ac:74:b0:7f:86:ef:09:9e:5b:64:
20:2b:33:35:9a:bb:33:cf:be:83:03:83:49:bc:0e:fd:23:b1:
72:2a:5c:39:23:36:18:3c:33:a4:ce:5e:83:57:4f:95:e1:4b:
a8:13:76:5f:a8:aa:de:29:60:23:58:16:23:51:c7:18:2c:16:
9c:94:83:cf:f3:c2:12:b0:ea:a1:28:48:6c:f3:39:43:de:a5:
81:26:2c:19:84:cb:b8:ea:9b:35:43:e2:a0:24:02:65:70:93:
bf:4f:fd:5d:02:17:b1:a7:d7:51:26:40:a7:b4:d4:6c:94:0d:
16:50:c9:a6
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICCicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yNjAzMjYx
MTI4NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE2QTAyRTI4QkY0QTQw
RjBGRjA5RjZBMzczNkI3Q0NCMEQ5OEEwNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSbTmXhZpylBWUgpP7442xh4OxXDmQGYj2ZH35uvjn9gVUlXQ+
mgCd7eKtyGRQddpxYbedxp0T+ClWowL51uQJxV6SKQrEjV+N4LLYRFWOhmPRuQQq
GvBWek3YhcnDskMrPYIDmsTWxDiQBKnq1wuwpR0cxYPlzmsp1yk9muDDL7cvAaWi
s6Lr6uqiK3X0dvEbYP8HcBtIAYCTKEFBIrWBRhEqCi9+JaNPoC5xSHGR67yi602d
RW5Jp0VIsoBQYJ5MX48y8tMQbbs+QhnwSalUuAwUl7eWk4P6+alPFp/DuqX9TOqt
JO3h9zt0nE0rdEv5xmaNX9Vq3aF+LBdljHKRAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUFqAuKL9KQPD/Cfajc2t8yw2YoFMwHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw
5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP
Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvTGU4clBEcWFHMVBCYkJ4
dzVWRWExWkF5aFBzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AAQ4lefcb1qu7ZDV6xPl5bjDaUlAsdnM5ks7H9dRfmULReHGxneSGqloIytApm/z
IYWnkv5rbwNp3Q6981/wfvJfa5mrZUwdxI4/bvUxuMi2qFe5ED5YjUG6ThAMcjCw
kLa2suI6xvR8un8vmDaFTN6CMm43hP9hrdEDoz8AZNZ3KKYDHwv0rHSwf4bvCZ5b
ZCArMzWauzPPvoMDg0m8Dv0jsXIqXDkjNhg8M6TOXoNXT5XhS6gTdl+oqt4pYCNY
FiNRxxgsFpyUg8/zwhKw6qEoSGzzOUPepYEmLBmEy7jqmzVD4qAkAmVwk79P/V0C
F7Gn11EmQKe01GyUDRZQyaY=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:30:04 2026 by rpki-client