Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
File: gFHy7O_CQumvnx5FSk-3llkbjas.mft (raw, json)
Hash identifier: F/ROtCuSM5EcJMyyzwRdiQf6iKSvEKVv2rkOMeIrFbk=
Subject key identifier: B3:F4:1E:4B:D4:12:F0:37:18:44:B2:30:AC:07:B4:A4:B3:4E:4E:0F
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 14E0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
Manifest number: 14B6
Signing time: Mon 02 Mar 2026 10:24:36 +0000
Manifest this update: Mon 02 Mar 2026 10:24:36 +0000
Manifest next update: Wed 04 Mar 2026 10:24:36 +0000
Files and hashes: 1: 31m7dx_bn0Ro8ePcnB2TYVLaCKo.roa (hash: q27K7syNnI6b+P8BSh5Is6tYNQbmHPJyp56ERdT/Jm8=)
2: C-2l4-5lLtB18jchVLlfhpvA0Ac.roa (hash: aQDdazI7yAsxvVxYbta5QXOcf4rSIc2slfFRuknYIt8=)
3: ZaEYdQEYlwV-99ewE3_Pl_5c-KM.roa (hash: 6c2SxvONR/8qBuF3lZJ54LOGkZExJj3WEROWJnwl/q0=)
4: gFHy7O_CQumvnx5FSk-3llkbjas.crl (hash: UULzW2PXtf5NyVgTRS23xFPBxMsmk3dsDfIeHG8iNIU=)
5: tD6C8fAbkv4Tw-j0az_FdowFa6g.roa (hash: E1/GW3SC5d67/+/8Koshd/Wi/2b0bOuMZ4db7+CIyzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5344 (0x14e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Mar 2 10:24:36 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B3F41E4BD412F0371844B230AC07B4A4B34E4E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:c8:a4:92:b6:18:8b:21:23:0d:eb:65:b6:
c0:c0:b2:90:1b:32:af:50:df:84:ca:45:a1:f7:48:
3d:96:c1:e1:de:d5:74:1b:67:9b:23:75:d1:bc:f0:
e2:bb:aa:14:7e:15:63:3c:af:29:d2:2b:76:82:cf:
8c:a5:56:b6:29:d1:b9:68:30:68:90:d6:d3:70:f1:
c7:9c:48:b5:37:e0:e4:2a:97:63:be:22:97:d7:47:
19:69:af:ee:c0:8b:75:ad:c6:db:68:7d:5f:e2:7e:
25:c6:bc:81:a5:29:9b:09:f0:94:d5:64:a8:9d:a9:
82:68:20:84:69:5b:56:c2:9b:dc:92:4e:b6:6e:50:
06:be:7c:10:4b:a1:05:9e:34:f7:40:86:e6:5c:d9:
49:a8:df:d8:39:3d:92:2b:0b:75:3f:b6:9c:1e:8a:
96:79:24:3c:d5:3c:2f:1c:0c:2d:c3:9e:dd:fe:c6:
79:27:f0:5f:7d:19:39:26:90:63:67:6b:92:c7:a7:
2c:dd:0a:c6:8c:f4:4b:11:0c:43:28:f3:91:b7:e2:
f5:7e:f6:35:20:01:8c:78:67:a5:f5:ee:56:af:63:
0c:9b:69:c1:b5:a9:a1:f3:10:5d:e1:ab:58:33:31:
e4:55:38:bb:d5:cc:95:6f:ec:62:e2:ef:d5:15:07:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:1E:4B:D4:12:F0:37:18:44:B2:30:AC:07:B4:A4:B3:4E:4E:0F
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bd:19:67:66:f8:40:61:39:85:bb:3a:f1:f0:9a:13:38:21:
38:f5:fe:3d:bc:00:67:ac:2e:b3:aa:2b:7c:c3:69:7f:5f:92:
b0:35:28:1f:7a:ed:d2:08:e8:f8:b8:19:28:7a:3c:3d:eb:fa:
d7:59:47:fc:42:ac:65:85:72:d0:8e:02:ba:5e:82:8a:2f:b6:
e1:e7:c9:bc:65:b6:16:14:bd:2c:07:1f:1e:15:eb:a6:10:0b:
b1:7b:4d:80:80:c6:7c:79:b0:25:6d:5d:eb:7a:03:1f:a8:70:
37:a7:13:0a:71:3f:86:69:1c:47:4e:b1:3e:fc:cd:b7:d9:7e:
50:3d:c3:ee:0c:66:43:fb:3d:f8:04:e1:72:fd:3f:d4:ba:01:
eb:a8:60:97:8a:d2:8c:bd:b8:dc:d7:f2:1e:c2:ae:8d:90:ea:
ed:ee:79:9a:9d:e9:ca:12:75:ee:91:51:cc:ac:c5:6c:6e:1e:
65:db:d8:02:a6:3b:24:ed:51:5c:6c:f8:8a:51:8b:38:8d:36:
f3:2c:3a:e8:27:86:6e:e3:75:03:87:8e:51:79:74:87:23:b3:
6a:b3:ae:c8:a7:99:31:2e:23:ff:3f:1c:34:f0:13:9a:48:63:
50:0d:44:ef:1a:2d:b7:ce:df:2f:64:71:72:5a:3f:7b:37:65:
c8:24:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:33:20 2026 by rpki-client