Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
File:                     0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft (raw, json)
Hash identifier:          94LjF3WJFCJ4003sMLGJW2/C9OdT3GqnK909A/lniFk=
Subject key identifier:   DC:F2:50:AF:04:18:BD:9E:FD:5A:00:C1:D0:45:46:AA:0E:96:52:4F
Authority key identifier: D3:01:19:B7:89:46:80:B0:FC:2D:51:17:D2:EA:6A:28:D8:50:4A:E4
Certificate issuer:       /CN=D30119B7894680B0FC2D5117D2EA6A28D8504AE4
Certificate serial:       0188
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0wEZt4lGgLD8LVEX0upqKNhQSuQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
Manifest number:          0187
Signing time:             Mon 02 Mar 2026 08:23:09 +0000
Manifest this update:     Mon 02 Mar 2026 08:23:09 +0000
Manifest next update:     Mon 02 Mar 2026 14:23:09 +0000
Files and hashes:         1: 0wEZt4lGgLD8LVEX0upqKNhQSuQ.crl (hash: nWGM1yUUDJYWZQAqrhb7B51+nrZQfLYe3LGC9A8dVkg=)
                          2: wq6CIvN4zBDWbvTYnf0OvUiA0kg.roa (hash: s3mpbH1G8yO+/Jpc+tdsmC7gSLTmW8cfE63djEeFMWM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30119B7894680B0FC2D5117D2EA6A28D8504AE4
        Validity
            Not Before: Mar  2 08:23:09 2026 GMT
            Not After : Dec  4 15:30:18 2026 GMT
        Subject: CN=DCF250AF0418BD9EFD5A00C1D04546AA0E96524F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:31:7f:48:a3:ca:00:a8:a7:cd:c3:9c:12:
                    9a:bb:f1:f4:3e:97:44:77:51:d7:6b:c6:6e:d4:f2:
                    49:15:a0:cc:5d:26:2e:cd:21:96:a9:97:47:9b:41:
                    30:29:2b:f0:5d:22:d4:78:e7:04:0b:85:20:08:a5:
                    fc:90:0d:e3:76:71:29:fc:df:6e:91:a0:29:70:d3:
                    b5:85:33:19:8f:89:81:ed:b1:04:6d:0b:95:56:77:
                    95:f7:cb:29:84:51:47:ad:fb:16:ce:e9:cb:01:83:
                    18:b7:9b:77:93:d1:21:7c:9a:41:ab:05:f0:e5:18:
                    58:ef:4b:05:a4:33:be:69:ff:f5:80:6d:a9:5a:28:
                    1d:2a:2c:f7:52:54:d3:b9:89:12:8f:27:4e:c3:f6:
                    6f:bf:ab:3f:d8:39:3c:a7:e3:ea:62:64:05:37:12:
                    08:84:01:74:f6:c6:a4:e6:fb:6d:23:74:41:32:a2:
                    01:85:37:7c:e0:71:8b:bf:96:ac:98:fa:9a:8c:63:
                    f0:35:c4:bf:f5:a1:1d:18:0d:c8:3c:34:5e:be:f2:
                    26:96:c6:bf:77:35:5b:5a:dd:81:79:48:17:dc:26:
                    e8:ba:a1:ed:1e:01:8a:3a:17:df:0d:e7:5e:59:10:
                    22:68:d5:23:6e:de:c3:96:61:87:be:72:fc:e2:18:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:50:AF:04:18:BD:9E:FD:5A:00:C1:D0:45:46:AA:0E:96:52:4F
            X509v3 Authority Key Identifier:
                keyid:D3:01:19:B7:89:46:80:B0:FC:2D:51:17:D2:EA:6A:28:D8:50:4A:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0wEZt4lGgLD8LVEX0upqKNhQSuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:1c:13:04:6d:6f:a2:c5:ea:ca:20:ae:c2:52:ad:09:47:
         30:b1:fb:36:cb:87:b3:9a:83:e3:b1:de:49:83:7b:55:95:81:
         d7:53:b6:2a:9c:a4:3a:5e:be:76:0c:2f:ad:6a:62:33:04:50:
         a2:60:1a:00:03:f7:08:3e:af:46:18:8e:d8:dc:f8:ab:45:95:
         97:d1:11:0d:ce:b3:39:55:f2:9a:ed:bf:7f:6b:13:0d:75:91:
         a1:8d:bc:b7:c2:6e:c5:d5:7e:fc:84:dc:39:71:c1:08:cd:b7:
         bf:7e:e2:36:7f:d2:a8:ff:f6:1e:d1:f5:79:7d:29:fd:2a:77:
         86:a6:22:a1:95:eb:d9:46:74:11:6a:2e:8d:e9:a2:ee:a7:32:
         64:19:da:41:46:8d:0e:b6:32:48:a8:21:d8:93:41:de:54:92:
         d2:61:54:b1:8d:03:0b:42:85:f7:28:a5:ca:bf:51:f4:4c:4e:
         33:a8:9a:70:5a:11:2b:80:34:11:94:9f:7a:7a:20:96:7f:91:
         73:62:41:96:fe:11:8f:d4:f3:7b:e6:83:cc:94:7d:52:6f:17:
         90:70:09:ec:98:30:19:5e:dd:4d:f7:1b:e3:94:00:a9:89:85:
         02:85:cb:f5:7a:62:b7:65:3b:c3:a6:40:46:17:b4:6f:e6:7b:
         fd:ad:d3:13
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDMw
MTE5Qjc4OTQ2ODBCMEZDMkQ1MTE3RDJFQTZBMjhEODUwNEFFNDAeFw0yNjAzMDIw
ODIzMDlaFw0yNjEyMDQxNTMwMThaMDMxMTAvBgNVBAMTKERDRjI1MEFGMDQxOEJE
OUVGRDVBMDBDMUQwNDU0NkFBMEU5NjUyNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMVDF/SKPKAKinzcOcEpq78fQ+l0R3Uddrxm7U8kkVoMxdJi7N
IZapl0ebQTApK/BdItR45wQLhSAIpfyQDeN2cSn8326RoClw07WFMxmPiYHtsQRt
C5VWd5X3yymEUUet+xbO6csBgxi3m3eT0SF8mkGrBfDlGFjvSwWkM75p//WAbala
KB0qLPdSVNO5iRKPJ07D9m+/qz/YOTyn4+piZAU3EgiEAXT2xqTm+20jdEEyogGF
N3zgcYu/lqyY+pqMY/A1xL/1oR0YDcg8NF6+8iaWxr93NVta3YF5SBfcJui6oe0e
AYo6F98N515ZECJo1SNu3sOWYYe+cvziGHLjAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQU3PJQrwQYvZ79WgDB0EVGqg6WUk8wHwYDVR0jBBgwFoAU0wEZt4lGgLD8LVEX
0upqKNhQSuQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSENDR19I
Q0VCLzB3RVp0NGxHZ0xEOExWRVgwdXBxS05oUVN1US5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMHdFWnQ0bEdnTEQ4TFZFWDB1cHFLTmhRU3VRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSENDR19IQ0VCLzB3RVp0NGxHZ0xE
OExWRVgwdXBxS05oUVN1US5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAr/hwTBG1vosXqyiCuwlKtCUcwsfs2y4ezmoPjsd5Jg3tVlYHXU7YqnKQ6
Xr52DC+tamIzBFCiYBoAA/cIPq9GGI7Y3PirRZWX0RENzrM5VfKa7b9/axMNdZGh
jby3wm7F1X78hNw5ccEIzbe/fuI2f9Ko//Ye0fV5fSn9KneGpiKhlevZRnQRai6N
6aLupzJkGdpBRo0OtjJIqCHYk0HeVJLSYVSxjQMLQoX3KKXKv1H0TE4zqJpwWhEr
gDQRlJ96eiCWf5FzYkGW/hGP1PN75oPMlH1SbxeQcAnsmDAZXt1N9xvjlACpiYUC
hcv1emK3ZTvDpkBGF7Rv5nv9rdMT
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:23 2026 by rpki-client