Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
File: KRuvagwXbOCjJCNma854-dkYJMs.mft (raw, json)
Hash identifier: dNCVZNVCqtXunFm9Z6tEtm/SVwzagxE46WcaxlTjCJ8=
Subject key identifier: D7:FA:53:70:0F:DA:DB:08:F4:94:33:EA:80:94:6F:E3:0A:4E:B8:CC
Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Certificate issuer: /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Certificate serial: 0BCA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
Manifest number: 0B98
Signing time: Tue 24 Mar 2026 22:58:59 +0000
Manifest this update: Tue 24 Mar 2026 22:58:59 +0000
Manifest next update: Thu 26 Mar 2026 22:58:59 +0000
Files and hashes: 1: 4sEPrzguqMfQ89J6Yo9HUbj4cwg.roa (hash: LBxsDuJ1vcfyJWgizzhNcRAHcEtAU85Y+oPOPcek5xg=)
2: 5GG28GCrBy4CsvaLOcOMqVg795I.roa (hash: SqvYvw3WvzrqGSHFaQftqFjgiExhKzWwFae1mhYygns=)
3: KRuvagwXbOCjJCNma854-dkYJMs.crl (hash: 10lsiAR4eH5x7FeJcE8fhdJB/fUp+AXJwWv7Qyn3tEY=)
4: Xe8onzJlieCJTQEf75c1_yTcRA8.roa (hash: sdHuMczH+ii09SNSEqwMYxo/wRIK2HL4tUJHIIkvRPg=)
5: _GqmShDcEstZsMAS7oGaX-ISQd4.roa (hash: kaaH/mLD+1k/a2VYdU+lQKttb71WLUG3pbR5Acgoxi4=)
6: hvPJZPfhvaLk2dhuKT3Ec6CNcrE.roa (hash: /DpfO3mj1lJxb8MYwZXSG9Q5Em7SsFT2rOx+enXACWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Validity
Not Before: Mar 24 22:58:59 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D7FA53700FDADB08F49433EA80946FE30A4EB8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:63:b7:7d:ab:61:c5:b5:73:b8:4f:2e:23:
fb:53:bf:f0:8c:d7:93:f2:94:b2:55:e5:c6:21:e4:
7a:ed:4c:33:6e:64:c4:0f:3f:27:67:7e:e8:6f:7a:
e2:3b:5d:3c:e9:a3:d8:bd:fb:b0:03:88:fa:55:e6:
70:99:3a:ee:86:96:8e:19:22:b8:ed:d9:4c:ff:bb:
f3:45:15:5e:ea:f1:67:bf:15:25:78:26:69:78:99:
b2:9d:50:5b:af:93:e5:2d:2f:5d:fb:a5:d2:01:8c:
15:9a:7d:fe:7e:83:71:6f:68:13:24:c0:85:80:0b:
61:94:df:d2:0d:61:d6:34:36:b3:d8:84:11:aa:e4:
54:8b:53:1a:dd:e6:73:55:71:3b:92:76:83:b1:56:
8b:8a:9c:62:d2:83:6e:38:b8:58:f9:92:7b:89:ba:
c9:c4:22:86:fd:32:48:9f:89:92:96:ef:10:80:ce:
89:7e:86:b0:4c:3d:68:8f:28:d4:1a:24:0f:c3:a0:
a2:9f:f6:f5:6b:17:ea:f6:58:48:34:98:3c:f5:41:
4e:7a:09:ed:7f:76:99:90:01:14:17:17:c6:b7:17:
50:2f:aa:c3:0b:8a:5c:a6:50:15:9d:00:9d:ed:08:
f5:1e:bb:bf:fc:33:00:6e:81:d7:e6:17:76:44:6e:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:53:70:0F:DA:DB:08:F4:94:33:EA:80:94:6F:E3:0A:4E:B8:CC
X509v3 Authority Key Identifier:
keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:d9:2b:6f:7c:f2:f7:dd:a8:00:ec:25:06:ee:34:40:ab:
c9:eb:10:0b:30:5d:5d:e4:f5:4f:aa:7d:63:98:8f:65:74:9c:
b8:6b:50:9c:61:98:52:ac:11:19:1d:e5:9e:a3:26:c8:3b:c7:
05:3f:45:23:96:2f:a4:59:f2:9f:f1:53:d4:2a:49:bb:f9:9d:
11:18:0f:56:6a:7f:d7:1a:2f:6f:44:92:04:4d:e6:0f:fd:59:
15:e4:f4:a6:04:65:45:c1:f0:bd:32:93:b7:91:0e:20:8f:f6:
11:5f:4b:34:fd:6d:05:85:a3:c6:1a:c4:69:f6:66:ca:71:0e:
53:aa:2f:f0:8f:f2:f5:b7:fe:86:0f:af:13:41:d9:20:5e:26:
9e:19:24:6d:f1:1b:2d:cb:16:9e:cb:e0:b0:77:c4:cc:a5:a9:
92:11:cb:8d:4e:5a:28:3a:16:f0:a9:9e:69:64:db:09:c7:ea:
5c:25:ce:97:56:ce:34:29:72:0f:d2:78:c5:8a:50:0a:7b:48:
08:f7:8c:49:e2:46:52:0d:bb:ab:e8:be:58:23:2d:64:82:53:
d9:48:57:5e:eb:b1:d4:3b:5e:c6:08:47:61:f3:c0:65:3e:ae:
7b:38:c0:fa:00:df:bb:37:f7:9b:da:2b:5a:fb:e3:5f:ba:41:
1f:5d:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:30 2026 by rpki-client