Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
File: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft (raw, json)
Hash identifier: MN/CpoZu9HUFYMn6rUodbl1HNEaRTMpVy4o2aZcf/dg=
Subject key identifier: 21:62:84:E4:E8:88:AF:14:BF:D1:84:07:96:CE:33:CD:B2:A8:AE:83
Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
Certificate issuer: /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Certificate serial: 09D89B3AB803442A27CB2062C3EB5562488D5EF4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:15:49 +0000
Manifest this update: Mon 11 May 2026 17:10:49 +0000
Manifest next update: Tue 12 May 2026 20:01:49 +0000
Files and hashes: 1: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl (hash: ITwQAnJ0a3zxrPmkOE2IVO4NDv+ThHIPeFTJeAmL178=)
2: 3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (hash: 5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=)
3: 323430303a353061303a3a2f33322d3634203d3e203633383933.roa (hash: TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d8:9b:3a:b8:03:44:2a:27:cb:20:62:c3:eb:55:62:48:8d:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Validity
Not Before: May 11 17:10:49 2026 GMT
Not After : May 12 20:01:49 2026 GMT
Subject: CN=216284E4E888AF14BFD1840796CE33CDB2A8AE83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:73:a7:0e:2c:25:47:09:44:bc:63:55:fa:
a5:93:5d:08:d8:4a:f6:1c:9a:7c:ef:ed:fa:46:cc:
54:de:d3:72:bb:c8:35:2c:71:0f:da:7d:85:e2:c8:
5d:1d:58:8a:48:23:93:08:08:89:2c:0f:d9:db:a0:
22:d7:63:97:8c:c2:96:f4:43:59:2e:88:30:57:10:
87:6d:25:6e:6b:95:7b:ef:8b:72:9d:a9:cc:82:50:
09:5a:8e:e3:43:4f:8d:43:4f:92:1a:61:06:52:1f:
12:cb:4b:77:86:48:a5:f5:96:fa:cc:b6:ed:36:ad:
87:6a:aa:69:2b:c8:67:6c:f2:38:e6:09:79:04:34:
ba:c8:4a:c1:1d:07:87:a2:f3:d4:bd:bf:64:7a:73:
a3:47:04:33:50:2d:3b:42:e8:d6:d9:64:ac:50:0a:
88:3d:91:fa:a3:bc:4d:a0:69:f4:ee:b2:3d:8a:85:
ec:d4:ac:53:fe:75:96:c8:6d:48:29:3e:e6:29:96:
22:39:26:15:5d:cc:c4:85:6f:65:c1:77:0d:44:5e:
8e:7c:5a:3f:9a:1b:2f:49:56:b0:7b:0e:8f:2f:93:
ac:a5:44:21:fa:60:f8:a0:10:d1:7a:48:6f:94:60:
df:25:b5:b1:68:39:28:e5:e5:c1:f1:9a:0a:4c:77:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:62:84:E4:E8:88:AF:14:BF:D1:84:07:96:CE:33:CD:B2:A8:AE:83
X509v3 Authority Key Identifier:
keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2f:b9:4d:fe:69:06:1f:5c:05:fd:d7:7a:58:7e:5c:fd:0f:
d2:e1:f7:4c:e1:08:c6:e6:0d:66:27:6d:16:49:da:05:9a:71:
b8:da:d1:85:d0:9d:71:c9:04:47:67:bc:05:60:4a:1f:6b:dc:
06:1f:5b:e5:6b:91:5f:1a:73:ce:1c:34:26:ae:61:fd:43:5e:
0b:d7:10:d0:43:b3:a5:f6:0a:d9:cc:e2:1c:41:d9:0a:eb:64:
89:cf:0e:04:1d:5a:74:11:af:1f:19:2e:d3:fb:bf:70:1b:bb:
06:95:5c:d4:a8:7a:35:80:e8:16:81:e2:c3:06:81:92:e4:3d:
83:6d:a1:bd:af:44:82:cd:b4:3b:30:b2:9f:15:9f:98:8f:8f:
47:de:4b:d1:f6:a9:ce:fd:d2:39:8e:61:6a:da:83:9b:f3:d7:
ba:82:29:8e:da:d9:7a:6e:06:fd:06:33:d4:b3:d7:4c:f5:69:
1f:bc:82:83:3b:7b:06:94:56:b2:17:99:51:a5:90:a5:19:e3:
dd:fa:b5:3e:0e:e0:27:6e:b2:44:17:3d:f5:14:fc:5f:16:61:
59:4b:d8:18:e6:5f:17:37:4e:b9:54:dc:67:d3:c3:aa:1a:8c:
ca:91:b5:00:fc:26:b3:44:c3:81:cf:22:f5:25:d8:47:0c:ed:
eb:4e:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:31 2026 by rpki-client