Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.mft
File: PalqMYeFDKwQFQruNLuY3YHdups.mft (raw, json)
Hash identifier: Q9xy1NthRr0Zu9GP8R386ya8oFAX9VyT6V6+0O8UcSQ=
Subject key identifier: 64:81:D0:D7:57:88:DC:AC:68:A8:E9:81:D6:31:90:D2:E2:BE:B0:08
Authority key identifier: 3D:A9:6A:31:87:85:0C:AC:10:15:0A:EE:34:BB:98:DD:81:DD:BA:9B
Certificate issuer: /CN=3DA96A3187850CAC10150AEE34BB98DD81DDBA9B
Certificate serial: 01C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PalqMYeFDKwQFQruNLuY3YHdups.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.mft
Manifest number: 01C6
Signing time: Thu 26 Mar 2026 10:28:43 +0000
Manifest this update: Thu 26 Mar 2026 10:28:43 +0000
Manifest next update: Sat 28 Mar 2026 10:28:43 +0000
Files and hashes: 1: PalqMYeFDKwQFQruNLuY3YHdups.crl (hash: pw07OeJUXzphkDyDuVBva7plw+eOANlUowOmiCaMaYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DA96A3187850CAC10150AEE34BB98DD81DDBA9B
Validity
Not Before: Mar 26 10:28:43 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=6481D0D75788DCAC68A8E981D63190D2E2BEB008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:2d:40:90:4c:94:ce:b5:6b:8b:d4:d4:b1:
40:37:bc:04:5e:9a:2c:fe:30:94:d9:08:3a:94:b1:
7e:70:e5:a0:b3:67:da:ee:a2:f6:b5:30:9d:b1:d0:
92:62:71:79:be:22:b7:eb:a4:d0:0c:f8:d8:73:9b:
57:2b:97:01:c1:de:f1:27:22:d5:79:22:61:87:99:
18:ef:64:7f:02:fe:5d:4c:c5:f6:39:00:03:1c:0d:
14:f4:92:7b:75:b7:9b:5e:5e:da:e8:43:9a:cb:ea:
d0:8c:e9:cb:4b:34:75:8d:fb:32:74:ce:5d:de:6b:
91:39:89:ef:32:6d:03:7b:aa:23:16:a4:ef:f6:08:
9d:a0:cf:c6:73:91:fd:bb:44:52:5c:41:4b:71:56:
fb:7c:ff:56:2b:8e:80:bc:15:f2:8a:cf:a9:36:3f:
ae:2c:dc:e0:d2:ff:89:64:a3:cd:c0:ca:c2:f4:98:
4a:59:37:c7:b1:5a:9f:41:0b:f7:07:09:f3:03:82:
db:70:19:60:29:91:25:33:c7:40:c4:77:7c:b6:41:
42:d7:d0:cf:3b:69:df:01:de:f9:86:da:50:7e:8d:
a5:34:ad:a0:22:7a:43:8e:9c:53:2e:3b:77:30:32:
68:7c:c0:66:05:f1:ce:b7:fd:d8:ea:51:2b:54:ff:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:D0:D7:57:88:DC:AC:68:A8:E9:81:D6:31:90:D2:E2:BE:B0:08
X509v3 Authority Key Identifier:
keyid:3D:A9:6A:31:87:85:0C:AC:10:15:0A:EE:34:BB:98:DD:81:DD:BA:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PalqMYeFDKwQFQruNLuY3YHdups.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b0:f2:a1:ce:17:39:1d:bb:fc:d8:d0:d6:71:12:13:90:12:
87:26:e9:ef:bb:e5:4c:e1:3c:ec:57:c6:7d:ab:d2:ea:b3:9f:
0b:90:b2:bf:5e:76:51:0c:05:29:3b:57:8c:c9:ac:1e:4d:e9:
78:b3:16:9d:88:2f:80:50:eb:5d:0b:58:aa:3d:30:4a:37:18:
54:c3:c0:a8:7b:ae:2c:fa:5d:77:8b:a0:5f:98:d2:9d:22:5d:
8b:23:ef:78:e5:d8:91:8a:11:89:44:49:fe:ac:a2:22:4b:93:
c4:61:e4:2d:5e:f4:14:37:dc:a4:df:0c:a4:f6:b6:bf:cf:b2:
fe:44:2a:56:c9:c2:b9:15:dc:bb:fa:d8:aa:45:4d:03:d6:73:
00:fc:fd:0c:03:98:11:99:8e:37:c6:ac:38:78:1e:fd:6a:57:
6f:3f:6e:1e:87:04:5a:32:20:10:99:d4:8e:83:60:29:44:40:
34:2b:d0:29:55:0b:bc:d6:49:4a:d6:f1:8c:67:ff:07:06:27:
e2:f4:dd:eb:97:20:1d:99:9d:0f:38:de:b5:49:d0:f2:90:b3:
e3:ac:06:d7:96:a9:88:41:dd:a0:39:8f:02:e4:63:ce:db:4e:
c4:bb:70:10:35:4f:f0:17:c3:8a:f4:79:86:8e:4a:e4:2d:4d:
f1:a8:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:32:28 2026 by rpki-client