Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
File: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json)
Hash identifier: W4H2PhXA95vGNQxrA6aVV+WXzPkEVP7sG3G+5Ues+k4=
Subject key identifier: 0F:7D:F0:E0:E8:9A:9E:86:A4:5F:C1:83:DA:D3:61:4C:AF:2B:CB:6E
Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11
Certificate issuer: /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
Certificate serial: 3D25B431F38012969825A66BFEAAC507CAED30C4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:44:58 +0000
Manifest this update: Mon 11 May 2026 17:39:58 +0000
Manifest next update: Tue 12 May 2026 19:59:58 +0000
Files and hashes: 1: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: DvQdl9eSYX4tgrdXi/dYCS4wfSc/mfJU4tqafq8+cgM=)
2: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:25:b4:31:f3:80:12:96:98:25:a6:6b:fe:aa:c5:07:ca:ed:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911
Validity
Not Before: May 11 17:39:58 2026 GMT
Not After : May 12 19:59:58 2026 GMT
Subject: CN=0F7DF0E0E89A9E86A45FC183DAD3614CAF2BCB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:c3:50:7a:7c:30:9e:87:a1:22:86:7f:28:
61:d1:4a:ba:c3:66:88:7f:0c:8d:d1:6b:c2:61:aa:
79:b2:62:b1:f9:a4:8a:34:7e:54:0f:46:70:07:c0:
0c:8a:a6:fa:30:e8:c0:ef:25:32:f6:a9:17:30:0f:
36:b6:4a:71:b6:72:3f:74:cd:a7:49:e8:ba:9d:a4:
dd:d2:34:c0:4d:1e:86:87:3c:fa:9b:dc:d3:74:cc:
48:55:56:24:23:8c:c1:2c:81:30:65:35:4e:e8:7b:
82:cf:45:ee:af:02:93:7e:25:aa:c9:39:03:5c:ed:
02:ef:f0:a7:ee:8b:6d:f1:00:48:e4:59:ba:fe:16:
6d:6c:5c:e8:69:2a:1f:b8:96:da:b9:24:04:99:d3:
b4:08:81:91:2e:4d:9d:85:40:2a:0f:5c:72:73:cd:
6d:fe:54:43:7a:8a:86:a5:cb:f5:92:66:e3:3d:9d:
36:f3:74:9e:c9:63:55:37:be:72:32:4a:26:1b:45:
ad:5a:95:c7:b9:99:cc:cf:08:95:84:ff:ab:11:5f:
bd:e4:33:80:ce:6c:76:37:5f:30:b9:f7:48:75:0b:
18:4f:d0:0b:93:7c:be:4f:c3:bf:9a:a9:88:e4:40:
7c:9f:5a:d9:ac:52:89:c3:55:e3:20:f8:e0:6c:82:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:F0:E0:E8:9A:9E:86:A4:5F:C1:83:DA:D3:61:4C:AF:2B:CB:6E
X509v3 Authority Key Identifier:
keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0c:d7:1d:ca:a2:46:22:5d:86:f5:2f:54:41:7b:a0:db:56:
0a:bc:cb:f4:d4:38:c6:13:46:1f:dd:88:b7:6a:6d:9d:db:1a:
de:f6:80:b7:5a:fc:c9:5f:85:3e:5e:30:6c:65:ab:8c:dd:ef:
39:07:98:fe:3a:2c:a1:ef:2e:4a:dc:b2:e5:b7:8e:f8:22:57:
ec:92:a3:53:51:cc:73:92:08:33:d9:5c:5a:a8:44:f9:16:1e:
8b:34:a8:50:2a:6a:f1:25:c7:9b:e8:57:f0:0f:b2:10:bc:41:
5a:7e:3f:a2:aa:3d:1c:62:fe:ff:ee:b0:09:c8:a6:2f:56:3f:
67:77:38:a8:a5:bb:eb:d5:db:f0:ad:d9:b0:71:3b:40:b2:7e:
93:c3:82:f3:6b:78:6d:e4:85:e5:fb:a7:9a:0a:bb:c4:25:f1:
30:41:12:b9:9b:83:47:f9:e4:b4:cf:f1:16:8b:a3:35:11:9e:
f9:2e:45:68:c1:f5:4a:7a:bc:12:77:91:13:69:e7:fd:a8:64:
ed:46:b0:46:52:c4:37:98:46:9a:88:57:c7:22:c1:d9:8f:13:
c9:38:05:8e:af:8e:b4:59:f6:af:a3:00:55:1e:2f:26:c7:12:
36:d2:fc:11:7b:cf:a5:0d:b3:15:89:e7:1a:3c:50:48:5a:2d:
b1:c8:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:33 2026 by rpki-client