Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
File:                     _37NtiAv_Cw033vNcaHAiIU4L7c.mft (raw, json)
Hash identifier:          0lJkw1wb/uqXJU9BWNHGJkUr1QmlVTSlxnPrM5XlAaM=
Subject key identifier:   67:7B:AD:17:1A:92:B8:41:8B:D6:B2:B5:9D:65:52:18:F2:CF:1E:7D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0FB9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
Manifest number:          0E8A
Signing time:             Wed 25 Mar 2026 19:28:54 +0000
Manifest this update:     Wed 25 Mar 2026 19:28:54 +0000
Manifest next update:     Fri 27 Mar 2026 19:28:54 +0000
Files and hashes:         1: 1LLBf9UAW-NlNuAEhBmjRs3Vgxk.roa (hash: jHD0vaF14PEf0kAoMdyzx7WSL90IBsEpdg+ccVo4aBk=)
                          2: 6OWJnABE00S9qIxm_0mEJ6qbNBU.roa (hash: +ce7CYqEG+Qem+ebinWtu/gr3VpefUFnlc9MWl6wu+0=)
                          3: 6UaYHajm2eAW9X5KkbOx2wvytIM.roa (hash: NMDfyBjzoeTnEzZJS9Qgo6qLZ5V25RXlEKaRlBs1ZNY=)
                          4: 7tDyTKQzID_POMPcnv3B3T2rHXk.roa (hash: vAnFjFDixiDXK/dyqI5Pljug9ameF3wzyJR6K7ircy8=)
                          5: 9HplhWs0n6dH_VwegtQPjUY3Q6Q.roa (hash: WLlCN6MzlqkuJo1ki0ZkGurUOlOJuydjQmdfqRBljgU=)
                          6: D0xA6yCsXXzaihmmkQlIgazjXwk.roa (hash: H0DX00ekTCqHkDAURnEUo0rFe0XR1CJKunBr4cQ758Q=)
                          7: DSTpg8ThFETxIpiKF0jYMK_b_aA.roa (hash: hubiYgWYZYsMuBDuEakl7Rn0DIRfJQlVZXRwhOM12DM=)
                          8: FddKopKYXp0qbXAQSVnFgcwDpyo.roa (hash: 9GoZUt8N/hhu9bTIeTcZGb3vpH4suyHVc5Hfx7xq8ag=)
                          9: FefmRoHkKthk2qOP0uUlxK8_Uz4.roa (hash: fU3YLrGySQGsZ2C7RIluXw9ru5NZLPq5/juCOKRUJZQ=)
                          10: HXab_ggj57Ex6laoQ2wbUJWjCV4.roa (hash: Vja//UXJLYWy5eF1waASQfp8PV605VP/1Kvq+/T4QF4=)
                          11: IozvRIQ0oUAy94VE2WDzOmuHdXA.roa (hash: AcdViFLt37+Br7/76uafXKUe9wPLsdm3Un0KfdPZSwo=)
                          12: K40AYh1-KwXazcpnlrUntKPYyk8.roa (hash: DiJWfSmmLhxjlz3ql+W4QPKNtIJVfL0096JW0O5R0tU=)
                          13: KkfML82h5AZgduT1VQ5B2YQoeHw.roa (hash: 6tHkn4sOdYS+Yom1gRcYfH/JffOgB7bV/jNvZD6H2/s=)
                          14: LIOMuFObqBAiDTiKmqOvZPbfPv0.roa (hash: 0XKqL+F8cqxKR6nXwZ8b/UbwlLbkEGtk2yWfYOOHs3g=)
                          15: Tt8zEWuIV-BLb1GbCwHagmDN02A.roa (hash: hT3DRfwBH1L9h/OyILog8vFHwirc1zm+F9AoRbVkQs0=)
                          16: TwqhJOz8b9Jys_xpgkvKsCzWoaw.roa (hash: QkJtMJ1lVdbMepCCrHNNJaFSECd74o2vyk6sBvQIj0c=)
                          17: UHzYqZKBRzpsqMleLfGZOkFxJ_I.roa (hash: HMdYVV9L6og7jgi69c5wzw+a0iFb5VEYk5INR6VFQA8=)
                          18: X3HNfKzSMnHzrMlZzSxNw5i3Wx0.roa (hash: Zlx/dMqQvfHPqN4LG5ukZTObxfPt9FJV4MPGyU+fvYM=)
                          19: XHr65MDL8v3DfZuOM2F2-23qRz0.roa (hash: FGc66pcx8u20vrZGKkPvCCoCAmsjilm1+u0h4jv8+cw=)
                          20: XbOpkcBytiCZnFSLWZqB2s3o4sk.roa (hash: hEV+d5zs1xMP8DfW8aUe0oc5dB1NS0jaCuFt7Vu1ny0=)
                          21: YpBQPg6plgShIfJVmHnuAfoMoi4.roa (hash: wT9EOZafFijABTaC9N0Wnu9pNHYq0ToiJzUFI1dF3YY=)
                          22: ZNeFLIL6Afty6s-h6ZG39YLffUA.roa (hash: NAk8pdnxMu06ofGrHQakY74zjy1sg5IYHMBGTEnkc5E=)
                          23: _37NtiAv_Cw033vNcaHAiIU4L7c.crl (hash: +s2q1Qw5LFyz9hc6XjjhNJenMRsFhUXcQyWRMXMPgRE=)
                          24: a40U36dZNEVZ7HIwaG9dDbyQQWI.roa (hash: pUXlZwm63RbXq8IvtNOJOlpO0zfB/CBhBX2LGayX904=)
                          25: bAmYwe2msmK6nOtv7WCffYRbUFQ.roa (hash: aykCET6YnH3cV3S/Lbf3Mma2nbyFDdD788Lyo8j18N0=)
                          26: elio-VjWaXel_aNIYu_SVIpPrzQ.roa (hash: 8D0RaZ/4k/IZB971YtiFKIGA1M4Fr9BnrD7uFw7Z/PM=)
                          27: hALSr4qVlwBbIRJxDtLiSO3F_IU.roa (hash: /AW3UuQ08OCECBfBNvEvF8Z+pY+ByR4Eie0D5kfoUM8=)
                          28: n_WIvS5h6VBmWCq164HwVHueP24.roa (hash: wk+OHeo0xjusUGjJD8S6AU7YM2boAyL/ec1rmj4YCLw=)
                          29: q2sIbhYUMgmfQs69b-LWfTbGg7s.roa (hash: 3N27XI/JQhAQmWac8O+mde16jugx9YS/OC77kymIUGg=)
                          30: qzfC8xXw13QoZvAeirHoMoMjF_w.roa (hash: +hd+V4pZkluuElVHK+JxYxJyAfdrWEVCrNirnInG1o8=)
                          31: uWwCVMAobLD8sfFZ8f2tC_Sxu5k.roa (hash: t1tQCBaRlIyohvjX9egKGWwEEYRaenkEn6rtw3mVDAg=)
                          32: ztPLZIy7k1eLUdEyEoBbEVzs1VM.roa (hash: FtYpk5mBnS4qtNsgvnblra1NXLvwaOCkNRVm0qvpyh0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 08:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4025 (0xfb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 25 19:28:54 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=677BAD171A92B8418BD6B2B59D655218F2CF1E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:b8:dc:49:0b:5f:84:f2:9a:40:13:8f:d2:
                    17:28:03:3b:17:ac:d3:51:8f:29:78:59:39:33:cf:
                    7d:a4:73:74:68:7d:99:bf:cd:fa:6d:62:7f:03:cb:
                    70:f6:18:01:a8:b3:d2:78:a8:e3:59:78:b2:c3:bb:
                    7e:3a:df:5c:7a:24:1a:3f:ac:a8:ce:40:14:7d:2e:
                    d2:2d:9c:f1:ae:05:05:84:e3:a1:c5:94:ec:94:e2:
                    6e:6f:69:6c:0b:c0:54:b4:f7:66:97:63:f0:a3:b4:
                    77:a1:b8:10:b0:5e:5d:4e:3b:15:66:05:06:c5:64:
                    a4:ae:4b:b9:ea:81:5c:f0:03:22:9f:be:20:92:62:
                    19:e7:48:26:66:8c:9b:04:41:03:fb:cd:cb:11:e9:
                    5e:fa:c1:15:d3:3d:b4:2b:aa:da:f0:97:03:dc:ab:
                    41:3d:ed:e4:75:f5:d5:a6:6a:08:46:02:6e:f6:16:
                    06:06:47:a5:fc:5c:8c:a5:df:f6:2f:04:82:f4:cd:
                    42:8d:a9:8a:87:23:e6:49:f0:1b:81:9e:bf:36:3d:
                    e8:a7:24:db:1a:3a:c0:bc:7d:8c:45:75:48:a0:74:
                    b1:88:7f:28:1e:8f:c4:10:4e:76:86:03:b9:b6:d2:
                    ed:ca:e6:97:82:7a:e0:d0:05:7e:5d:d3:f5:25:14:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:AD:17:1A:92:B8:41:8B:D6:B2:B5:9D:65:52:18:F2:CF:1E:7D
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ee:9d:85:ed:f5:73:9b:95:af:be:37:2e:14:95:a9:24:4c:
         45:93:8c:a9:2e:f9:4b:43:03:30:a4:18:e5:e0:ce:39:04:3f:
         8b:ba:ee:ec:79:c0:5a:e9:ef:0f:e8:6c:c7:c6:a7:1f:c9:53:
         d0:79:35:f6:9b:40:ef:77:65:46:99:93:5f:3a:37:8c:a5:01:
         e2:99:e4:e0:fa:1c:c2:45:a1:17:30:7a:10:fa:a1:20:94:5d:
         5b:72:a0:1e:db:c4:f8:b2:31:28:c7:c7:6c:c2:79:26:4a:ec:
         5e:44:8a:25:e5:ec:73:f6:06:0a:f0:0b:1f:66:7b:f5:59:3a:
         50:85:e8:88:f3:15:ba:f9:28:39:70:2a:02:8b:4a:6c:cf:6b:
         89:4f:89:b4:eb:55:2a:34:f6:27:ba:12:3e:47:c9:5c:87:33:
         bb:9f:46:7d:d4:cc:05:1f:0c:8d:3b:1c:bb:60:0c:3f:7b:3e:
         86:06:cb:17:d1:c2:ae:13:4d:87:79:a1:8a:e5:32:eb:b6:d0:
         3b:fd:2b:8d:0b:13:37:9b:67:41:32:ff:90:3d:41:f7:a7:43:
         ae:f1:ae:e0:93:cd:c6:ed:23:e9:37:39:b3:67:29:d6:fc:0a:
         9b:2d:d9:5a:e2:ed:9a:ad:3b:f7:43:d0:93:5f:be:bf:7e:d4:
         7d:69:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:19:58 2026 by rpki-client