The ability to recover a message from a signature (which ISO-9796 allows but does not require) is not supported.

The exponent of the RSA public key must be odd.

Although ISO-9796 does not require the input hash to be an integral number of bytes in length, this service requires you to specify the hash_length in bytes.