
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft
File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json)
Hash identifier: evZcjJtTs13qE4uoF4B/3jR1DtemDGT90Jp34gyN6UU=
Subject key identifier: 14:0E:0B:DE:1F:A8:C7:05:8C:3C:20:E6:4F:48:C3:BC:40:36:A6:F4
Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD
Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD
Certificate serial: 33E689AE3BB5EE3587E6ACEB170052349CA260CE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:04:14 +0000
Manifest this update: Mon 11 May 2026 16:59:14 +0000
Manifest next update: Tue 12 May 2026 18:39:14 +0000
Files and hashes: 1: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: Uaw3chu3Ur09bagt1jTT2wCbtGU0IpSKBtLZIpZ8LXg=)
2: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=)
3: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=)
4: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e6:89:ae:3b:b5:ee:35:87:e6:ac:eb:17:00:52:34:9c:a2:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD
Validity
Not Before: May 11 16:59:14 2026 GMT
Not After : May 12 18:39:14 2026 GMT
Subject: CN=140E0BDE1FA8C7058C3C20E64F48C3BC4036A6F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:1b:d8:2b:a5:25:53:05:52:cd:4a:08:f5:
08:57:f9:76:db:68:13:67:5e:76:a2:25:8f:14:0c:
89:88:9a:e8:7a:f4:b5:dd:59:c3:04:f6:3d:80:3c:
2a:47:a7:87:41:4e:bb:09:97:52:42:51:81:5d:5b:
be:93:32:1a:fb:e1:46:9f:07:22:11:69:c4:90:b0:
4a:c3:b9:e8:c0:be:8f:fb:71:5f:07:31:b1:d7:c2:
60:5b:72:54:5f:55:b4:e7:0c:f0:4f:b5:fd:97:f0:
d6:fb:f3:cd:a9:9c:d6:ed:a3:ef:77:f8:8d:60:f4:
5b:3c:b9:3b:88:9b:0d:69:b4:04:cc:6e:aa:4d:34:
d6:95:23:aa:de:d8:a3:72:bf:93:5a:98:07:44:58:
0a:7e:f8:46:60:ba:f7:b4:9c:e2:ee:47:44:cd:2b:
80:7c:d4:4f:03:8d:d8:01:44:c0:2a:0c:30:71:a8:
ea:3e:3e:fa:0e:78:a2:0c:96:5c:ad:e1:3f:79:ee:
95:b8:52:f9:82:e6:06:bb:cf:97:cf:d9:06:23:74:
a4:0e:29:a3:fa:71:3f:25:36:27:2e:70:5b:36:51:
b3:66:fd:88:23:f7:29:9a:88:e2:d5:42:a9:1d:b1:
f1:12:8c:5d:d9:b2:bc:2d:ee:51:43:6a:e8:9f:4f:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:0B:DE:1F:A8:C7:05:8C:3C:20:E6:4F:48:C3:BC:40:36:A6:F4
X509v3 Authority Key Identifier:
keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:f4:c8:d4:b4:71:9b:17:0f:53:9b:44:4f:db:e7:80:09:
cb:fd:e4:b5:ae:7d:31:c2:51:a9:02:f3:55:c4:75:10:57:a8:
42:ab:65:28:66:01:74:77:99:d0:a8:29:53:85:6d:80:95:4e:
ec:91:35:85:17:e5:f1:6e:75:94:1b:4e:16:ec:8f:71:85:d2:
80:fa:a4:e2:2e:b8:11:f4:0d:f4:a0:57:4e:d3:1f:40:1a:89:
30:c6:54:f1:09:e2:50:d2:57:ab:24:80:4e:59:5f:00:89:8c:
6b:0f:d1:88:84:2f:4d:61:fb:64:7b:cf:f1:85:dd:a9:ca:0b:
a3:9a:80:d6:0b:bd:81:45:f5:4b:fd:78:99:d0:b7:9c:90:b2:
2a:02:b7:f6:55:1b:f8:98:aa:91:7c:6b:6e:a2:c1:59:81:d7:
2f:57:5f:9d:b4:bb:d9:da:13:87:10:13:bc:bc:47:61:e2:a2:
0c:f6:8d:f4:11:7c:8e:49:69:e3:3d:7e:e6:2a:c7:42:c7:b2:
79:14:75:62:4f:78:14:17:a3:13:e7:6e:cb:82:9b:ba:f0:0e:
4b:24:ff:d6:c4:33:6b:31:7a:c3:47:0d:6e:68:2a:1c:d7:7c:
ca:0c:41:70:da:ac:ff:5d:54:30:3f:81:91:19:10:0f:1d:b0:
eb:b0:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:09 2026 by rpki-client