Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
File: MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft (raw, json)
Hash identifier: 11o1+YCOA5XA0TQBs24+z9fCncgL0qBmOrfa6rpcsLw=
Subject key identifier: 1B:C9:F6:3A:73:30:80:5E:48:E6:F9:07:D0:36:FC:78:07:6C:A0:31
Authority key identifier: 30:7E:1D:EA:08:C5:8B:5F:CE:C8:F5:7C:BB:77:4E:EE:8E:51:5C:99
Certificate issuer: /CN=307E1DEA08C58B5FCEC8F57CBB774EEE8E515C99
Certificate serial: 01AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
Manifest number: 01AB
Signing time: Wed 05 Nov 2025 10:28:27 +0000
Manifest this update: Wed 05 Nov 2025 10:28:27 +0000
Manifest next update: Wed 05 Nov 2025 16:28:27 +0000
Files and hashes: 1: 4sPB_u7fbVKrz8PvJ2ANd5wmvN4.roa (hash: d22YNx89jY5XnBKXsXej+Z6EGmQRxBE0r5TbQJ3GCZc=)
2: MH4d6gjFi1_OyPV8u3dO7o5RXJk.crl (hash: UkrG+SvtN0Kjc2mibja3iws6AOdqBs3/rW+GloA57cE=)
3: Sg5T9EB1MarDInUIhbPko52VS3o.roa (hash: e9ocAxS5rq4dSA0hejCpBmkwVoD5lcM3dG/p61jeJ/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307E1DEA08C58B5FCEC8F57CBB774EEE8E515C99
Validity
Not Before: Nov 5 10:28:27 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1BC9F63A7330805E48E6F907D036FC78076CA031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:8b:9c:dd:35:6e:66:f6:40:24:9e:24:42:
a7:ae:c8:45:0b:e1:02:03:7e:8b:c1:d8:48:d0:a6:
3e:aa:a5:8a:69:53:a4:e7:13:de:7d:82:15:2b:cb:
6d:7e:94:ac:ef:fc:06:55:79:fc:9e:22:72:97:79:
f1:0f:dd:c8:05:fb:23:be:58:12:c8:88:85:3b:c6:
e3:25:50:56:1c:4a:2f:cb:55:9a:25:b7:4b:cd:68:
83:1f:d5:66:20:30:3b:c5:fb:45:01:ad:9a:11:0b:
70:7a:d6:6a:dc:c8:73:f5:14:11:e1:03:62:1c:60:
37:52:d7:4a:e4:e5:ff:c0:a0:40:54:6b:37:60:7f:
ad:25:57:5e:bd:d7:c6:82:1d:7d:7c:f5:62:4c:bf:
6f:78:8e:df:cb:71:f6:68:64:35:32:fc:ae:2f:e7:
96:68:7b:35:bc:10:92:fb:29:ea:eb:f3:88:da:80:
b8:1a:36:64:1c:f8:87:09:ae:f0:0b:e2:2a:6c:e7:
92:59:53:1a:1a:17:c7:d1:11:39:99:87:7a:50:06:
1b:41:dc:fc:c8:fe:5d:43:c1:ad:73:70:bb:b2:c1:
fe:8b:8a:d9:92:aa:5c:41:73:d6:e1:37:82:ed:fc:
54:1e:e4:0a:8b:2e:51:ca:e8:23:7b:fd:52:5f:9b:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:F6:3A:73:30:80:5E:48:E6:F9:07:D0:36:FC:78:07:6C:A0:31
X509v3 Authority Key Identifier:
keyid:30:7E:1D:EA:08:C5:8B:5F:CE:C8:F5:7C:BB:77:4E:EE:8E:51:5C:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MH4d6gjFi1_OyPV8u3dO7o5RXJk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/MH4d6gjFi1_OyPV8u3dO7o5RXJk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:81:25:1d:35:e2:0f:7f:5a:e8:2b:34:c2:25:59:67:ad:22:
18:1e:71:31:ba:0b:0c:dc:f8:5c:c6:11:8f:8b:db:52:69:21:
d6:82:1c:df:dd:60:97:28:ec:58:bf:10:7b:0f:16:af:d3:f6:
6e:2b:de:46:ef:a0:e3:22:07:75:41:c8:47:f4:e5:23:58:d0:
92:f6:2a:c8:5e:73:89:f9:f9:c1:59:d2:2f:81:a0:ec:13:e9:
a8:a9:7c:e6:3a:c1:2f:c7:e5:de:3d:2c:de:4e:74:58:c0:94:
01:ff:22:38:c4:db:f7:b3:bc:7a:c3:ea:09:e7:0e:f5:f7:aa:
26:35:91:82:10:8b:88:5c:bd:6e:7d:77:de:b7:47:6a:ab:6a:
b2:23:8a:15:f6:dd:4d:7f:17:bd:39:62:a5:c1:a0:9a:d9:04:
f8:da:01:08:e8:6d:4d:bc:f4:ec:78:80:7d:15:4c:dc:8d:18:
d9:1e:1f:89:e3:af:d4:08:2e:8c:9f:75:7d:fe:97:6e:9d:1f:
28:d6:9f:f9:cc:1c:dd:7b:41:44:31:5c:9c:d8:31:21:71:d4:
b7:e5:3a:c8:06:88:22:0b:85:fc:34:f3:32:34:11:dc:fd:92:
9d:61:d9:b8:98:5e:4a:98:71:c2:a7:16:c4:55:20:80:3d:cf:
95:ef:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:05:38 2025 by rpki-client