Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft
File: u4ipF4WngsjqPN3tPnwfCdp59kc.mft (raw, json)
Hash identifier: GguquImMjps2NsM1Bg6ngUkEMc6BHZhobR/P2U5tpKQ=
Subject key identifier: 66:39:51:B8:A9:B0:B9:1E:5B:9A:16:A6:74:2C:65:00:14:86:AF:9A
Authority key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47
Certificate issuer: /CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647
Certificate serial: 01D4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft
Manifest number: 01C8
Signing time: Wed 15 Apr 2026 20:33:17 +0000
Manifest this update: Wed 15 Apr 2026 20:33:17 +0000
Manifest next update: Fri 17 Apr 2026 20:33:17 +0000
Files and hashes: 1: 52ut3In-YXQQoi-JtjiMWQ9hecA.roa (hash: yv/NORMRzHfHSbjTau202LX+6lWyLCcYpGSKn+HJTdU=)
2: LruPk8SFILGVDu8P988mDNMEoIQ.roa (hash: 84u4i8yBhiyTXI67FVMuZjP9O04VH8/EbdX0D4IhFHE=)
3: PQZ7xOezw9es6nQ420QMNGKpX4U.roa (hash: IyvsccRxuBqwNgfap88+e5yNbcD7cwI91LBDMhkh4W8=)
4: RYtRIf1OZ7FcjP6VpPnivzCCEP8.roa (hash: cbguKFdRhBeC+D0bEE6mLFOWdGTq+VmGn/2jIhlRjQU=)
5: u4ipF4WngsjqPN3tPnwfCdp59kc.crl (hash: mB+8H1Qigjbxfclo+rB0YvkXPvI1ErkTDpWtJa4gHNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647
Validity
Not Before: Apr 15 20:33:17 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=663951B8A9B0B91E5B9A16A6742C65001486AF9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:bb:13:b7:a6:a6:d3:af:4a:2f:ba:a8:f7:
f3:0e:2f:f2:6f:53:d2:ba:a6:de:4d:ce:97:d5:40:
a9:93:30:0b:1d:05:2d:3c:6e:4f:9a:44:d3:7c:21:
f1:1e:a7:20:1a:2b:19:6e:72:42:35:77:03:6e:79:
ca:32:d5:22:33:4b:3e:d6:87:c8:4e:3d:3d:a2:3a:
b0:46:8e:87:5f:49:03:72:0f:51:48:80:8a:60:33:
55:96:43:01:1a:de:bd:f8:52:90:7f:87:17:d2:bd:
83:12:f9:b5:eb:3d:36:85:30:40:90:df:f5:f7:a8:
50:cb:16:17:bd:47:01:1e:97:20:36:7d:ef:79:07:
d1:4d:63:d4:d3:dc:81:ac:cf:b7:99:dd:c7:5c:f0:
09:1b:8d:cb:62:ca:16:93:a4:58:8c:75:92:b5:1a:
7f:cc:0b:cf:60:df:cc:b5:ee:da:7e:96:3f:1f:83:
40:2a:9f:b8:85:0c:19:da:01:07:97:3e:ad:78:14:
e2:93:e3:3a:9b:81:84:39:b1:5d:4b:00:69:a5:fb:
9e:ee:50:48:4c:3e:f5:f8:77:62:29:b0:bf:4c:ab:
04:f0:3e:b0:60:8f:d8:9e:a3:e3:54:2b:1a:fc:4a:
02:7b:8b:ff:ec:77:aa:0f:2e:4a:3c:c4:b7:2c:29:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:51:B8:A9:B0:B9:1E:5B:9A:16:A6:74:2C:65:00:14:86:AF:9A
X509v3 Authority Key Identifier:
keyid:BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9e:3b:82:f0:ac:06:07:cb:6b:cf:52:8b:6a:66:36:d2:3f:
d5:fc:a2:c6:e3:1e:8c:11:49:1b:31:04:63:e5:3d:8a:1f:29:
83:7c:74:b9:15:b0:33:e2:15:ea:6a:ff:90:0b:dd:a8:fc:e4:
52:9e:cc:2b:97:34:ff:a2:26:6c:9b:cb:b9:40:df:a9:cd:f8:
01:a2:84:ac:5e:42:f7:02:59:99:97:53:85:06:29:7b:4d:13:
3e:fc:4b:53:32:b9:5a:6d:10:51:71:6f:90:7a:eb:ee:ce:1d:
ce:b5:6d:a4:84:1a:ad:be:ce:8a:b5:c9:28:d9:3c:9e:12:87:
db:57:8a:00:6c:4f:49:d0:cf:ae:ce:21:bd:ef:d5:69:b4:7a:
01:73:b6:f6:74:c3:d2:b6:72:ea:54:df:68:3f:23:e6:0b:81:
55:26:ca:02:65:61:ec:e6:a2:50:3b:68:46:29:56:0c:33:fc:
4b:e5:71:ba:3b:f3:5e:90:93:71:29:2a:a7:ee:6c:da:22:58:
09:d3:f3:4f:d5:c9:44:4e:16:87:f5:41:34:36:fb:3d:23:75:
e2:ff:69:dc:a6:ea:e8:d3:0d:f4:74:e9:07:6f:d7:b7:d2:eb:
8c:0c:56:72:ad:1b:f0:f3:dc:93:6a:0c:f2:df:c1:f6:84:99:
16:e6:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:53 2026 by rpki-client