Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
File: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft (raw, json)
Hash identifier: DMUSR0YKZGAk+c4CyRlZ4wu+SbWx+GDagwqaOLOg5Zo=
Subject key identifier: F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD
Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Certificate serial: 02CE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
Manifest number: 02B9
Signing time: Sat 18 Apr 2026 00:32:52 +0000
Manifest this update: Sat 18 Apr 2026 00:32:52 +0000
Manifest next update: Mon 20 Apr 2026 00:32:52 +0000
Files and hashes: 1: 0IPQOd93kD2kNOW5B2eNgJYsD54.roa (hash: KLYZPgwyxXuSMmommOv0Du/CrtAQFimGoYtBuKC+acY=)
2: V2-e3j-C2M3f-IPF48ND24nzbIA.roa (hash: hFVoewVj78NZRFxiWLt4Uyz69EdAufx67waMMJXCdog=)
3: aVgvYuH5mqDNAknvRRG8QJRB_fo.roa (hash: HZBCn7rlmkjdYKYwq31T1rqQc9gvODFhzjrSpTbz+tA=)
4: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl (hash: 1krbzv+jtRbZGKWmHcn5wLDi1TMzykSps/Tqg39sx3c=)
5: uu5G7HGxzW5ia56tt4mJl8N--5g.roa (hash: PsvjgyT4iOLRHHYzlHQE2uNnieAJwEovjNKBvdJpGu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Validity
Not Before: Apr 18 00:32:52 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F391F465C8CB2177FC08739816F643F8C728A5BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:98:d2:0c:b8:66:38:9d:f1:d0:d9:06:52:
f1:32:4e:de:a5:0d:6c:90:58:85:27:b4:e4:69:d4:
94:2b:67:9d:7f:ad:a5:0e:b1:5a:f3:47:be:71:5c:
17:34:92:50:e4:9a:d6:10:6e:d4:47:87:03:ff:75:
ff:d9:1b:ac:2d:3c:b3:bc:44:f4:1c:75:f0:ee:39:
f3:5b:39:2b:6d:78:06:1b:dd:ec:34:58:df:4e:f9:
1d:03:e0:e1:3d:e7:7d:e2:c2:63:aa:c4:dc:17:75:
dc:d4:8a:37:36:d1:4e:31:af:3d:d2:0d:bf:8f:3c:
4c:4f:81:5e:c1:6f:6b:3a:77:99:28:0d:f2:ec:61:
24:8b:e6:54:42:c0:e3:6e:4e:73:03:ff:24:98:31:
27:27:aa:13:d7:ae:4a:2e:2d:e6:32:01:0b:81:24:
54:eb:c4:7f:cd:49:ae:b4:e5:d7:89:87:17:1e:ba:
a0:9c:07:51:6f:8e:44:c0:df:1d:72:fd:d4:1c:8f:
13:6f:61:3b:77:a4:bc:2c:e3:e6:bc:05:80:08:18:
49:dc:5c:9c:24:46:b7:90:31:b7:ee:45:2b:7c:59:
b1:b5:16:b7:12:21:14:5b:18:90:89:57:5e:44:43:
7a:c7:7f:c1:80:d3:05:88:1e:26:1f:6e:db:74:76:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD
X509v3 Authority Key Identifier:
keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:98:bd:ea:7f:90:0d:74:e6:a5:39:33:80:e1:5e:b7:1e:
d2:2c:0f:d2:e8:db:59:d7:b5:f4:b0:dd:de:09:27:0c:10:03:
b4:3a:83:c7:17:e2:f2:df:57:a3:8b:47:12:52:d6:d9:00:92:
50:c0:d3:fd:8e:27:0b:8f:38:ae:65:d5:94:20:2f:56:59:41:
7a:35:dc:d2:9d:c3:cb:53:67:9f:9f:14:21:da:b4:9d:12:c2:
35:a1:b1:87:27:db:ae:e2:50:af:a9:a0:9e:13:a7:c5:44:54:
55:de:40:eb:49:6c:2a:ff:ee:09:5a:2f:9c:7f:fd:45:21:5e:
97:48:2c:1c:8d:db:c0:e2:6b:cc:64:87:1d:ba:ed:19:1a:ce:
11:b2:c5:70:8f:c9:f6:87:48:d6:a5:4b:5b:1f:44:27:a2:73:
08:32:3c:bf:ba:59:d5:3f:b8:35:96:60:b2:73:86:46:58:ca:
af:1c:91:61:63:4c:d5:fb:02:52:be:21:8c:42:1d:15:6f:b3:
43:d2:f3:24:ad:77:77:c5:ea:a2:8b:d2:dd:0e:57:39:d4:05:
cb:09:a4:76:9d:60:ce:1e:bf:77:55:f9:3c:b9:d1:cf:7f:79:
20:9a:6d:81:6d:f2:f9:43:0b:f9:c8:b9:6f:1e:89:09:44:3a:
6d:65:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:40 2026 by rpki-client