Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier: z29t3jDBUStRch+AAjinH5LgWrtYU80886KbqbgzcGw=
Subject key identifier: 25:74:69:B0:BF:1C:DB:06:12:F4:09:CF:DA:2D:CC:F9:65:F2:6B:B9
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer: /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial: 2E7413BE51CCF689D4CBA0441D94B3C545FBD584
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:36:10 +0000
Manifest this update: Mon 11 May 2026 17:31:10 +0000
Manifest next update: Tue 12 May 2026 20:18:10 +0000
Files and hashes: 1: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
2: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: xOqtZnogd68D3g0xdfukbgc2u6D3VmJAtjIIToEqK9U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:74:13:be:51:cc:f6:89:d4:cb:a0:44:1d:94:b3:c5:45:fb:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Validity
Not Before: May 11 17:31:10 2026 GMT
Not After : May 12 20:18:10 2026 GMT
Subject: CN=257469B0BF1CDB0612F409CFDA2DCCF965F26BB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:d3:64:6d:f7:cb:f5:4b:9b:79:a2:6f:b2:
a2:42:ff:c6:2d:d9:4a:f2:89:2c:40:04:31:4b:50:
77:9a:f5:98:9d:16:8e:89:2d:8e:db:89:4a:69:a0:
cd:88:ba:0b:b3:5d:63:7a:5d:d6:4b:c5:59:72:34:
ea:8e:a6:43:33:9c:61:99:81:96:55:cc:c8:04:6b:
54:ce:f2:41:34:42:6c:f8:82:aa:f9:fd:6c:e8:a6:
be:d2:54:72:8d:c5:52:fe:88:50:4b:43:f3:2f:2a:
79:87:71:8e:91:86:f9:73:02:f0:95:e3:f8:73:a4:
3f:db:99:ab:bc:9a:0b:ea:a7:ea:9d:39:09:e4:92:
b5:4f:e4:e9:10:0b:27:5f:0e:36:38:f2:f4:35:1f:
d1:90:8d:5a:e0:1e:f9:11:37:7c:0e:a8:75:a9:d4:
7e:38:53:6b:49:e0:16:bf:d5:ab:dc:a2:45:3f:c1:
f0:93:5b:cb:66:1d:ef:69:d2:79:b7:e9:1e:9d:af:
b9:75:2b:ca:49:8e:ba:b2:ba:5e:98:e6:33:be:97:
60:af:33:73:58:a1:df:46:9e:b2:45:82:e9:29:cc:
39:4a:33:65:e4:28:48:21:06:e8:66:d8:d7:de:ef:
fe:8e:c7:d1:b2:c8:60:9e:1e:77:27:46:02:32:96:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:69:B0:BF:1C:DB:06:12:F4:09:CF:DA:2D:CC:F9:65:F2:6B:B9
X509v3 Authority Key Identifier:
keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:90:a5:d9:73:a2:cc:50:17:84:dd:b0:a5:81:af:22:fa:
67:c3:75:4e:f0:80:a4:ae:55:36:48:13:5f:85:82:32:09:ca:
47:f5:a5:dc:98:eb:b4:a8:d2:4c:9f:6d:9b:d8:8d:c1:89:ea:
63:31:2a:98:80:69:e3:dc:5d:27:ef:92:4e:4a:32:8b:b7:a3:
b1:fe:3c:db:8a:b0:c7:1a:48:84:ff:89:d2:9a:2e:0d:ef:c3:
96:3d:29:c0:05:43:7d:31:66:0d:bd:e5:5f:bb:71:aa:a9:a3:
33:42:b3:38:da:e1:f8:2a:8c:68:08:87:59:61:b6:47:10:09:
6d:10:d8:9d:c4:35:9f:ed:5b:36:93:d3:02:e7:24:cf:45:05:
76:cc:71:5a:c2:0f:b7:1c:7e:47:f4:18:17:21:04:76:dd:d8:
19:80:ee:7f:7f:fc:25:45:f0:12:07:ab:0f:66:9a:f8:e4:25:
6c:d9:ee:4c:ae:55:b9:02:e5:3c:2d:ab:f1:03:57:40:2f:99:
d1:b8:55:e7:7a:4b:6c:fb:f9:0e:79:fe:47:df:2e:cd:6c:3e:
20:a2:21:39:18:4e:a5:9e:da:18:bb:75:46:b9:4a:d6:1d:11:
35:ed:6d:b8:36:87:d5:7a:a4:bc:f4:48:78:47:96:fe:d7:d3:
ef:05:f2:ac
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIULnQTvlHM9onUy6BEHZSzxUX71YQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FEMzYyRjNCRkFGRTVCOTMwNzkxN0UyM0I5M0ZFOEQw
MzkzMDg1QzAeFw0yNjA1MTExNzMxMTBaFw0yNjA1MTIyMDE4MTBaMDMxMTAvBgNV
BAMTKDI1NzQ2OUIwQkYxQ0RCMDYxMkY0MDlDRkRBMkRDQ0Y5NjVGMjZCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQMtNkbffL9UubeaJvsqJC/8Yt
2UryiSxABDFLUHea9ZidFo6JLY7biUppoM2IuguzXWN6XdZLxVlyNOqOpkMznGGZ
gZZVzMgEa1TO8kE0Qmz4gqr5/Wzopr7SVHKNxVL+iFBLQ/MvKnmHcY6RhvlzAvCV
4/hzpD/bmau8mgvqp+qdOQnkkrVP5OkQCydfDjY48vQ1H9GQjVrgHvkRN3wOqHWp
1H44U2tJ4Ba/1avcokU/wfCTW8tmHe9p0nm36R6dr7l1K8pJjrqyul6Y5jO+l2Cv
M3NYod9GnrJFgukpzDlKM2XkKEghBuhm2Nfe7/6Ox9GyyGCeHncnRgIylikBAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUJXRpsL8c2wYS9AnP2i3M+WXya7kwHwYDVR0j
BBgwFoAUytNi87+v5bkweRfiO5P+jQOTCFwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVJDSEUv
MC9DQUQzNjJGM0JGQUZFNUI5MzA3OTE3RTIzQjkzRkU4RDAzOTMwODVDLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0NBRDM2MkYzQkZBRkU1QjkzMDc5MTdFMjNCOTNG
RThEMDM5MzA4NUMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUkNIRS8wL0NBRDM2MkYzQkZBRkU1
QjkzMDc5MTdFMjNCOTNGRThEMDM5MzA4NUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKrJCl2XOizFAX
hN2wpYGvIvpnw3VO8ICkrlU2SBNfhYIyCcpH9aXcmOu0qNJMn22b2I3BiepjMSqY
gGnj3F0n75JOSjKLt6Ox/jzbirDHGkiE/4nSmi4N78OWPSnABUN9MWYNveVfu3Gq
qaMzQrM42uH4KoxoCIdZYbZHEAltENidxDWf7Vs2k9MC5yTPRQV2zHFawg+3HH5H
9BgXIQR23dgZgO5/f/wlRfASB6sPZpr45CVs2e5MrlW5AuU8LavxA1dAL5nRuFXn
ekts+/kOef5H3y7NbD4goiE5GE6lntoYu3VGuUrWHRE17W24NofVeqS89Eh4R5b+
19PvBfKs
-----END CERTIFICATE-----
Generated at Tue May 12 22:47:46 2026 by rpki-client