Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier: P8+WAqhoLnMdjOESt65E2W7+HfVeqOD/oZL6m2lgozM=
Subject key identifier: B4:0A:E0:1B:0E:47:C6:F1:3A:1E:3F:20:3E:DE:05:8E:52:3D:2D:09
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer: /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial: 20A1E4F83C45D9F8986992D2AF33BFCC8778544C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:58:50 +0000
Manifest this update: Mon 11 May 2026 17:53:50 +0000
Manifest next update: Tue 12 May 2026 19:03:50 +0000
Files and hashes: 1: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: ekkS/5fY4YkLBo9WJWhXnTqMwqjt4u1ZFqcxzE4t5L4=)
2: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
3: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a1:e4:f8:3c:45:d9:f8:98:69:92:d2:af:33:bf:cc:87:78:54:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Validity
Not Before: May 11 17:53:50 2026 GMT
Not After : May 12 19:03:50 2026 GMT
Subject: CN=B40AE01B0E47C6F13A1E3F203EDE058E523D2D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:f6:31:b3:eb:4e:b3:42:a7:ca:8f:eb:0c:
bd:14:00:8b:c0:df:9b:53:06:80:8d:fd:35:17:88:
ba:87:31:e9:d5:7c:fa:bf:ec:1c:d9:94:0d:c8:ae:
89:77:a7:33:06:53:5a:bc:c5:47:72:ff:1e:bb:ed:
2a:7a:35:a2:c6:11:0f:81:b7:35:13:47:da:64:fe:
80:8a:c2:6b:d5:c1:9d:40:f7:65:03:b8:97:d6:04:
18:3f:b0:1f:fc:94:97:d5:51:fd:67:10:c4:47:47:
09:42:70:c2:58:3f:8a:dc:9f:fb:97:82:c1:3c:9d:
8b:8d:1f:34:3e:0a:2b:31:68:a9:b2:51:58:c3:b4:
c7:26:4c:20:03:d9:9a:9a:ca:8c:b0:52:a8:43:71:
87:45:79:ae:cb:3f:2e:5d:02:07:52:aa:24:5d:b9:
c3:28:00:e4:71:ec:fb:70:f3:ed:2e:5d:71:f9:9a:
b4:4a:67:99:3b:43:28:d6:67:9d:88:aa:e3:c0:94:
cf:ef:9b:d6:27:7a:15:57:5c:90:66:87:34:98:de:
8b:d2:64:37:be:54:86:33:44:b8:fb:d9:5d:63:a3:
4e:12:73:24:2c:d0:db:ba:1e:49:29:64:15:9f:7b:
2c:5f:32:13:70:80:e4:48:dc:49:91:d6:ba:a4:d7:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:E0:1B:0E:47:C6:F1:3A:1E:3F:20:3E:DE:05:8E:52:3D:2D:09
X509v3 Authority Key Identifier:
keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b7:ec:cd:4d:fb:18:97:b2:20:28:51:d6:02:9b:f7:82:50:
aa:c5:f1:ff:17:82:1e:19:3e:fa:4e:61:5e:bb:03:fd:7a:b9:
4b:cd:92:46:22:6a:7c:9c:e4:64:99:f1:8e:c5:70:eb:00:72:
67:c5:a1:eb:16:44:12:f7:b3:7f:0c:f0:a8:dd:b8:9f:67:9f:
62:52:86:1b:40:91:64:da:aa:64:94:f4:f3:e7:22:3a:66:65:
c6:86:cb:a8:3b:bb:b8:ed:7d:51:e8:14:79:a1:7e:42:c8:41:
89:5f:95:31:6b:44:0b:da:13:7e:b4:b3:b6:11:b7:a3:99:8c:
b0:71:dc:94:84:d8:f6:ee:b0:18:0d:dc:fe:80:ea:0f:a4:5b:
c4:e2:49:bc:43:dd:70:f0:68:04:20:2c:5f:78:f5:2f:fa:c3:
d0:d8:ff:76:0a:65:2e:a9:50:02:c5:ba:57:07:4a:85:d9:67:
93:29:39:9e:8a:92:48:96:ef:f8:eb:6d:66:1f:98:69:5c:f7:
30:65:39:24:78:58:f2:1d:17:3c:42:38:50:dc:85:7b:d2:6c:
fa:f2:85:02:d4:b1:30:1c:91:ed:79:37:0c:27:a4:c4:fa:3a:
74:95:8e:29:0b:e1:25:ca:86:3a:c7:d3:03:e0:a0:58:4e:33:
1d:c9:dc:68
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUIKHk+DxF2fiYaZLSrzO/zId4VEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA5NDAwRUFBNTBBN0VCM0JBQzc4RUVEMkI5OENENDBC
ODA5RkU5RTAeFw0yNjA1MTExNzUzNTBaFw0yNjA1MTIxOTAzNTBaMDMxMTAvBgNV
BAMTKEI0MEFFMDFCMEU0N0M2RjEzQTFFM0YyMDNFREUwNThFNTIzRDJEMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnW/Yxs+tOs0Knyo/rDL0UAIvA
35tTBoCN/TUXiLqHMenVfPq/7BzZlA3Irol3pzMGU1q8xUdy/x677Sp6NaLGEQ+B
tzUTR9pk/oCKwmvVwZ1A92UDuJfWBBg/sB/8lJfVUf1nEMRHRwlCcMJYP4rcn/uX
gsE8nYuNHzQ+CisxaKmyUVjDtMcmTCAD2ZqayoywUqhDcYdFea7LPy5dAgdSqiRd
ucMoAORx7Ptw8+0uXXH5mrRKZ5k7QyjWZ52IquPAlM/vm9YnehVXXJBmhzSY3ovS
ZDe+VIYzRLj72V1jo04ScyQs0Nu6HkkpZBWfeyxfMhNwgORI3EmR1rqk1/pTAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUtArgGw5HxvE6Hj8gPt4FjlI9LQkwHwYDVR0j
BBgwFoAUgJQA6qUKfrO6x47tK5jNQLgJ/p4wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0pNRS8x
LzgwOTQwMEVBQTUwQTdFQjNCQUM3OEVFRDJCOThDRDQwQjgwOUZFOUUuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvODA5NDAwRUFBNTBBN0VCM0JBQzc4RUVEMkI5OENE
NDBCODA5RkU5RS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NKTUUvMS84MDk0MDBFQUE1MEE3RUIz
QkFDNzhFRUQyQjk4Q0Q0MEI4MDlGRTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrfszU37GJeyIChR
1gKb94JQqsXx/xeCHhk++k5hXrsD/Xq5S82SRiJqfJzkZJnxjsVw6wByZ8Wh6xZE
EvezfwzwqN24n2efYlKGG0CRZNqqZJT08+ciOmZlxobLqDu7uO19UegUeaF+QshB
iV+VMWtEC9oTfrSzthG3o5mMsHHclITY9u6wGA3c/oDqD6RbxOJJvEPdcPBoBCAs
X3j1L/rD0Nj/dgplLqlQAsW6VwdKhdlnkyk5noqSSJbv+OttZh+YaVz3MGU5JHhY
8h0XPEI4UNyFe9Js+vKFAtSxMByR7Xk3DCekxPo6dJWOKQvhJcqGOsfTA+CgWE4z
HcncaA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:07:24 2026 by rpki-client