Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.mft
File: QJHbWm6gO3YPVOCQy5CYc64z9kk.mft (raw, json)
Hash identifier: bW7Y6wPVnhz0zgpvKAOyzdFbZF1TaEBflfsrvaCW9SQ=
Subject key identifier: C9:B1:CA:A0:18:4D:6E:BB:AB:99:1A:9B:73:FB:C8:EC:50:2D:96:C3
Authority key identifier: 40:91:DB:5A:6E:A0:3B:76:0F:54:E0:90:CB:90:98:73:AE:33:F6:49
Certificate issuer: /CN=4091DB5A6EA03B760F54E090CB909873AE33F649
Certificate serial: 0277
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.mft
Manifest number: 026A
Signing time: Fri 17 Apr 2026 10:02:50 +0000
Manifest this update: Fri 17 Apr 2026 10:02:50 +0000
Manifest next update: Fri 17 Apr 2026 16:02:50 +0000
Files and hashes: 1: OpBiAGMXJJLPpkbKa3NTPQrxtck.roa (hash: 3+Al/WdVI+jADmg5jenjAgrnfzevW0OuEYqtVgzxwsw=)
2: QJHbWm6gO3YPVOCQy5CYc64z9kk.crl (hash: Z9BD5KsMDITHArwGmTxZkWfYgZAGajvvoUtP1BJ+wrQ=)
3: UE6Flyq_0iHkA4hnLqY-wxdbjLM.roa (hash: FZoTRblFXgW3hXOPHygPtnsb6UyKSx8ARJbDmM9Nfuo=)
4: bgmLUGmX078BJbN2i8kL5sd1wG8.roa (hash: IedYe0D1QF4tDFpeScJMnC7+Pit9tuZzaAcHIHpHi7k=)
5: c-WVnzSNHRj7O2DokQzSHTXPBMk.roa (hash: qs7gh9apouKxAJyoPJm4VQj0t+nPi6od+GeN+M/Vyus=)
6: tX0IyNh3VPQkQNruOEv-T_kk5Ik.roa (hash: z1PihgNvp5QNWLh8ove0zMMFPi/hwk0/waLqEF0osek=)
7: xEpvWHbEEoYF00Ai_uyyVjLzpxM.roa (hash: ZyrffRfYv/rm9oAx8HJmvCSbrYvNsJH9Rf4u0c7WzxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4091DB5A6EA03B760F54E090CB909873AE33F649
Validity
Not Before: Apr 17 10:02:50 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=C9B1CAA0184D6EBBAB991A9B73FBC8EC502D96C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:d2:cf:e8:a4:8c:fe:6f:5a:f5:a5:b0:87:
c7:93:12:b0:ef:6a:f5:f4:e0:12:90:49:98:e6:5d:
d9:1a:00:9f:fe:bf:a5:2c:55:d3:92:e0:94:99:41:
5f:03:e8:c4:3b:89:bb:d2:68:b9:66:39:4c:c5:5d:
73:02:41:1b:fe:4b:97:9a:b3:88:5e:cc:15:3d:84:
92:b6:7e:dd:5b:2d:9e:e2:c6:a3:79:a9:f6:40:08:
e1:5f:4f:e6:ec:cf:81:4f:53:dc:68:b8:ab:03:d5:
ef:d0:d8:d6:a4:15:48:01:8c:89:83:33:17:56:56:
4a:59:61:76:d6:b3:a7:87:ca:60:b8:f5:16:49:54:
55:85:fe:27:f7:da:7f:a0:d5:c3:36:04:41:53:6e:
11:ab:25:b6:87:0d:c4:5c:49:e1:ba:51:c9:27:58:
64:29:da:72:5b:c5:bf:d6:da:68:8b:36:fc:52:be:
a5:57:9f:ef:33:e9:fe:5b:ba:22:11:52:af:b7:54:
61:3d:5e:a5:3f:30:5e:12:28:a6:23:b0:77:b3:3a:
8b:e9:56:ae:4d:05:84:4f:79:30:e3:7b:f7:a8:46:
c1:ed:87:14:72:31:94:a3:1b:1e:d8:46:7f:fb:f6:
79:00:c5:ba:67:f8:8d:26:85:a3:73:c2:95:54:10:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:CA:A0:18:4D:6E:BB:AB:99:1A:9B:73:FB:C8:EC:50:2D:96:C3
X509v3 Authority Key Identifier:
keyid:40:91:DB:5A:6E:A0:3B:76:0F:54:E0:90:CB:90:98:73:AE:33:F6:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d4:d4:1d:fd:2a:b3:9a:d8:d9:de:33:a5:8b:6f:c1:a9:cb:
90:0f:d9:36:d2:4d:be:7f:6e:6b:b5:cf:30:a8:54:85:73:1a:
09:e3:17:18:05:11:bf:f2:15:0f:12:87:5b:94:7f:44:c8:53:
82:56:b0:4c:50:1c:e9:51:ad:53:e8:96:d1:b0:0a:dd:32:e7:
71:2f:82:7b:ef:92:e9:47:8a:ea:73:7a:d2:32:b6:70:49:4f:
00:37:7e:bf:ae:07:4c:ab:7e:69:42:6c:c5:3c:a0:37:ed:53:
20:48:9a:05:a6:31:5a:14:3b:f8:a6:d8:9f:f8:0a:f3:59:e7:
58:50:87:c3:d9:93:b9:b0:c3:24:8b:75:f7:c8:54:da:8f:89:
70:2b:9e:27:cf:22:cd:51:30:ef:b8:7b:33:f6:e7:66:75:bd:
7c:e8:98:00:f6:19:b4:7d:26:a1:3f:2e:c0:6f:65:4b:5b:1c:
66:04:7b:aa:3c:6b:bb:87:ff:4b:0b:90:e9:2a:04:14:45:64:
72:20:a7:06:05:18:05:3f:9c:47:3b:0f:14:05:d8:52:7a:17:
86:0f:aa:59:2f:00:96:4a:48:63:b8:73:b0:db:b6:97:b1:e3:
e3:80:dc:29:26:07:71:91:b0:d5:38:4e:42:c1:fe:d9:2a:df:
f0:c1:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:14:29 2026 by rpki-client