Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json)
Hash identifier: 8xYor7lMyeQ+Mw5pbuQYuTeWG+G4OpvlaKK5xFqP3rQ=
Subject key identifier: 07:B6:28:8C:56:40:2E:28:49:12:C4:B3:A6:94:2A:51:AF:3A:0B:46
Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8
Certificate issuer: /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8
Certificate serial: 05AEC530A7F5B2034C2F1DB787F7FECCF123CF3A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:15:52 +0000
Manifest this update: Mon 11 May 2026 17:10:52 +0000
Manifest next update: Tue 12 May 2026 18:03:52 +0000
Files and hashes: 1: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=)
2: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: 4CyR2LR2P+0zkYP+9XOVf6kjiSRSMAZzVVRlghTQN5Q=)
3: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ae:c5:30:a7:f5:b2:03:4c:2f:1d:b7:87:f7:fe:cc:f1:23:cf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8
Validity
Not Before: May 11 17:10:52 2026 GMT
Not After : May 12 18:03:52 2026 GMT
Subject: CN=07B6288C56402E284912C4B3A6942A51AF3A0B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:81:40:f1:50:1c:00:72:b0:b6:da:e2:5b:
c8:95:9a:00:0c:64:33:67:3d:fd:a7:fe:6c:4d:e5:
fe:6b:85:71:45:af:3c:cd:b0:5b:90:a0:48:1e:43:
e0:8d:78:5c:e0:08:d4:c4:79:96:03:4e:0f:20:37:
d9:b3:aa:f6:5d:82:11:aa:bb:94:b1:f6:af:5d:71:
6e:0e:fb:89:8a:88:0a:c6:5b:b3:e6:d7:e1:29:50:
36:f4:eb:72:c6:c7:58:56:ff:8d:5b:f9:35:a2:ab:
70:8b:8b:af:14:ed:a1:0b:2e:18:ba:d4:84:82:80:
a1:1b:4e:b5:8f:fb:77:fb:d4:bd:a4:46:46:1a:f7:
59:d7:ab:42:ae:4a:98:3c:8c:7b:be:db:09:7e:bd:
b1:20:44:46:1f:b6:b8:e8:67:6f:d6:23:aa:83:a2:
36:36:0f:67:19:61:0f:82:a2:80:70:f9:e6:93:f0:
e5:9e:5f:d0:43:d9:2e:3d:f8:95:87:ed:60:61:dc:
36:1e:44:08:53:98:90:d9:d1:56:be:a6:7f:7a:3b:
8c:75:a1:2e:c8:c6:97:a7:32:59:17:0a:75:69:7b:
48:b6:13:de:44:c0:69:19:d3:f9:d3:a0:f7:b1:a6:
97:28:65:9b:23:87:41:53:39:f7:db:cc:dd:56:74:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B6:28:8C:56:40:2E:28:49:12:C4:B3:A6:94:2A:51:AF:3A:0B:46
X509v3 Authority Key Identifier:
keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:38:70:87:06:00:ab:ff:dc:14:dc:54:e1:49:97:8f:c5:75:
01:25:db:45:4b:9f:0e:12:8b:52:7f:7d:4f:12:3e:3b:ee:32:
2a:42:51:20:2b:d4:43:8c:03:f2:eb:8c:11:3c:5b:7a:37:71:
31:09:84:de:74:62:3e:e2:1b:fb:1c:b7:df:80:33:73:4c:6d:
2d:1c:55:68:c8:53:2e:8b:56:90:93:f6:6c:20:0e:ec:03:d5:
f9:76:14:15:4c:20:79:02:b5:d8:24:98:86:b0:fd:9f:ef:ad:
95:96:e7:98:c4:3b:6d:a7:67:e3:60:52:9f:46:f8:2d:df:4e:
cc:bd:35:f2:f5:49:c4:58:11:28:aa:11:a7:80:81:60:a6:b0:
51:04:06:24:14:34:f4:40:8c:c1:ee:c3:13:af:2b:5a:b1:3f:
d4:77:02:fe:43:9f:d6:ae:08:ff:3a:fb:cc:c0:1e:a1:b0:a1:
f6:88:54:b3:da:f7:90:f7:40:56:8c:9b:2a:fd:f1:3f:14:d5:
e7:32:18:7c:69:73:9b:54:23:6c:d3:4b:9d:cb:60:bb:3a:0d:
9d:e7:3c:d2:21:ca:ac:d4:05:df:69:2a:bb:fd:9e:11:72:2c:
40:f0:cc:5c:15:5b:c7:71:de:ca:fc:39:82:29:99:ce:f2:3d:
9a:d8:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:34 2026 by rpki-client