Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
File: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft (raw, json)
Hash identifier: FtNxuYBry6TuunYPdHFAacBZ5DCN/gUcbHE1pF6L8L4=
Subject key identifier: 93:4D:A4:F7:CF:B0:F3:42:3D:8C:E3:78:3E:E0:98:9F:FB:23:2C:BC
Authority key identifier: 21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF
Certificate issuer: /CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF
Certificate serial: 31D6B41C1E3724680038F91B4EC0D43651AE46C2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
Manifest number: 07
Signing time: Mon 11 May 2026 17:58:28 +0000
Manifest this update: Mon 11 May 2026 17:53:28 +0000
Manifest next update: Tue 12 May 2026 18:54:28 +0000
Files and hashes: 1: 323430313a636436303a3a2f34302d3430203d3e20323134303330.roa (hash: 780V3DLt+Fe7Fs8V4ULwUWJozzo56xPXySO9+JGJ2W8=)
2: 21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl (hash: mAN4g+lqyH21shUYDlsOD5DlbP3ftVyeh0FDKeaDV+4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d6:b4:1c:1e:37:24:68:00:38:f9:1b:4e:c0:d4:36:51:ae:46:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DBFD1921121F730C614C0DE6212CD6949CD5AF
Validity
Not Before: May 11 17:53:28 2026 GMT
Not After : May 12 18:54:28 2026 GMT
Subject: CN=934DA4F7CFB0F3423D8CE3783EE0989FFB232CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:79:87:42:24:1e:50:aa:22:5c:89:56:3b:
b6:60:4e:2e:0b:10:6f:fd:a8:ce:ef:f8:58:a5:00:
5b:53:48:d9:53:43:d3:2b:ea:ff:c7:c4:5c:a7:34:
7b:b5:47:5f:90:93:19:4a:14:a5:d9:00:87:7a:05:
31:7d:08:05:9b:a2:0b:ab:48:d7:d7:7d:db:ed:e4:
ec:8d:17:f0:10:a2:f6:16:b0:3d:92:db:80:a4:2c:
13:ba:bc:9e:f5:f4:59:d3:e3:71:31:82:2b:5a:24:
3d:19:19:e8:af:70:4b:60:c2:02:81:3e:ff:88:93:
bf:f3:d2:70:fe:10:f0:96:1e:ba:96:f4:a6:73:2b:
6c:06:ae:eb:1a:b6:a2:3c:83:07:ef:4b:f0:85:3b:
d4:0b:11:50:1a:42:d7:f9:5b:d9:0d:f6:eb:05:98:
2f:ee:e1:c6:dc:eb:fe:75:f4:c2:59:13:97:d6:8f:
a0:0b:66:6f:82:0d:f5:28:35:3d:6a:e6:b9:c7:15:
ff:fc:bd:a3:12:37:b4:18:c0:68:70:23:84:c5:a7:
9a:4b:1f:9b:05:2d:a0:ca:31:1c:e0:fc:19:b3:74:
90:e2:85:63:da:cd:af:36:aa:ef:55:cd:05:cf:07:
95:b4:57:20:e5:15:32:3d:14:34:fc:7c:b6:b4:e7:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:A4:F7:CF:B0:F3:42:3D:8C:E3:78:3E:E0:98:9F:FB:23:2C:BC
X509v3 Authority Key Identifier:
keyid:21:DB:FD:19:21:12:1F:73:0C:61:4C:0D:E6:21:2C:D6:94:9C:D5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21DBFD1921121F730C614C0DE6212CD6949CD5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/0/21DBFD1921121F730C614C0DE6212CD6949CD5AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a9:3f:1a:3e:72:f4:a2:c0:98:ec:b4:73:13:59:6a:7f:a8:
a8:fa:7a:50:3f:9d:89:af:20:da:fd:c3:52:7c:22:6c:d7:47:
9b:5f:ac:fd:73:6b:85:13:68:90:0b:d2:09:da:2f:01:d9:5a:
5b:11:72:8b:d7:ca:ba:7f:b5:8e:8e:fc:46:42:51:61:e3:98:
18:ff:40:7c:b8:3b:13:78:49:d2:cc:ab:ca:74:c6:ab:d7:c1:
ee:1d:dd:ed:b3:4b:db:90:a1:63:06:c1:d0:e7:07:80:1b:67:
42:80:d9:a8:61:3d:4f:e1:26:4f:53:85:37:3b:3b:65:93:6b:
84:df:61:ec:2e:c2:ae:5b:30:f2:62:ea:3f:cb:22:76:03:7a:
11:bb:b0:ca:16:f0:3b:0e:c2:fe:97:df:ee:c8:f4:0d:5a:75:
5a:14:3c:e6:ac:26:d9:9f:ff:a1:7b:84:6b:6f:02:c5:8a:ce:
d9:65:95:9f:f6:48:a7:28:15:9b:c0:f9:1e:ad:74:24:68:d4:
cb:9e:7f:6e:f2:3e:5f:56:65:27:07:b3:19:c7:2d:f3:2b:ab:
93:bd:ca:dc:7f:8c:56:1d:c7:28:11:8b:dc:ab:bc:b4:89:31:
fe:ae:3a:04:83:91:45:a3:77:b3:99:87:61:83:92:52:95:72:
88:f8:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:59:52 2026 by rpki-client