Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft
File: P04GOIatNR_4IoBa-NVplEuN5Rc.mft (raw, json)
Hash identifier: jToPsUuq36Tq7Aw3mWZPATWssgejKpTbE7fnmEbvHOI=
Subject key identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3
Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17
Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517
Certificate serial: 0331
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft
Manifest number: 0326
Signing time: Sun 19 Apr 2026 06:04:13 +0000
Manifest this update: Sun 19 Apr 2026 06:04:13 +0000
Manifest next update: Tue 21 Apr 2026 06:04:13 +0000
Files and hashes: 1: 6TmHMcAxp9-NDGrC8fYhJU0GZy8.roa (hash: PDU6ESSJG0GRFGDSMDmMEyt2+d8vufxFBv5pOBDsHa8=)
2: 7GK80XOyaI6ZZ6Gx8J2mpgUlIew.roa (hash: LiH4AmuXgxqphNLRHW25tXH8VQ+KiIAFd6QEKzGfsV4=)
3: JsAYgxSc8wz45s57f1ODWua2gcM.roa (hash: tRVPlTbZrwBang2sPRfphixHfY6mm7uudt97WhfWs7M=)
4: P04GOIatNR_4IoBa-NVplEuN5Rc.crl (hash: WENrMgXfVSZ7YsMbOKdGXmx49J98byUCSVqOpfnuuSU=)
5: pzJy9coSmEodcw0_CUtKiYpWAAY.roa (hash: gAT9Tx4aDFmLf9e3m2nL9sLbGWrhkJhczZyYdsaEHeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517
Validity
Not Before: Apr 19 06:04:13 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=DDE10A410D30FDFE36576E1F8CA356BD6923E1F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:93:d0:10:8a:73:44:e5:2d:d9:04:d8:ee:
f5:2c:b7:28:7d:1a:3b:13:d4:11:6c:d0:32:40:48:
c7:14:56:f8:4e:c6:27:9c:6f:70:33:1c:52:69:df:
65:b6:7c:f8:9c:22:c4:ca:56:16:d5:c3:76:89:ec:
b7:04:39:0e:93:44:51:00:b9:8b:81:bf:be:6d:2b:
81:03:dc:99:35:99:85:c7:62:06:01:d2:3f:81:76:
0c:c3:fb:f0:c2:9f:f6:a2:0d:13:b3:a6:d9:8a:56:
cb:45:6e:c1:8f:95:64:1d:ac:bb:be:dd:55:40:04:
95:7d:74:b3:76:cc:73:18:dc:06:e7:8e:dd:f1:bc:
25:fc:eb:73:85:bf:0b:80:7a:49:24:d3:a1:d8:37:
ad:56:77:d0:bf:5f:1c:cb:f1:3b:b9:36:31:b6:d5:
b8:0e:c1:79:ac:4b:49:53:5f:76:33:65:33:e1:9c:
f5:89:0d:76:2b:24:f4:72:15:93:3c:6b:f5:56:2c:
34:05:93:d5:d4:e8:bc:57:b6:51:fe:3a:02:87:c0:
07:7b:ce:9b:17:36:30:46:57:95:22:13:ff:90:2b:
75:1e:f1:d9:3c:60:4c:f2:12:00:34:71:5e:17:cd:
a6:e9:74:6f:85:84:c1:6d:35:2e:05:73:de:82:2e:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3
X509v3 Authority Key Identifier:
keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:dc:93:82:f0:10:3b:b5:e7:90:82:61:0c:dc:c8:75:0e:
0e:0b:38:a0:ab:4f:e2:44:78:96:e6:cf:18:99:a5:d4:ff:54:
08:cd:5f:94:99:55:21:57:25:27:dc:40:3d:b6:64:ae:09:6a:
d3:f1:81:38:e5:7a:2c:4c:a2:dd:0c:08:39:ef:9a:f8:9e:af:
a9:39:f7:f7:56:53:77:8d:40:7d:49:97:2a:9c:aa:2f:6d:9d:
aa:f7:95:6a:5d:6d:49:4f:ae:f1:17:fa:87:88:9b:5e:93:fc:
69:5d:aa:56:01:f5:ac:e7:49:40:48:d3:a6:87:ad:18:2f:62:
f8:17:69:35:b1:c2:da:c1:2d:28:ef:ab:e4:57:ff:b4:3b:b6:
b6:ab:62:21:04:29:fa:77:b5:9f:79:31:cb:d9:40:e4:19:1a:
3d:f8:75:6c:e2:b1:5f:11:28:0c:30:dd:a7:03:97:88:80:ff:
c7:46:0b:ba:83:78:9f:46:83:5b:f2:8f:50:a2:c1:35:ad:da:
9a:ba:11:f3:f6:27:22:14:26:f0:fd:08:dc:98:ef:93:58:65:
bd:51:73:af:15:b3:23:a4:a8:34:a9:06:fe:1f:88:15:0b:88:
1c:f5:3d:47:a1:07:a3:00:bd:62:5e:17:a6:76:1f:bb:95:3a:
a8:ca:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:20 2026 by rpki-client