Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
File: 9B5DA40B0F23621450755917A456431F689EB049.mft (raw, json)
Hash identifier: l6H5Fis+Pu385Sh/1pUU3utVR/5NYZ8lq0mIWtcIZcg=
Subject key identifier: C3:DE:0F:8C:AD:F8:D9:4D:5A:D4:AD:77:5D:FF:61:81:6B:DD:51:6C
Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
Certificate issuer: /CN=9B5DA40B0F23621450755917A456431F689EB049
Certificate serial: 5D21327A1425F1AE9E25B9ACEADA4F15B8E9BCDC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:57:29 +0000
Manifest this update: Mon 11 May 2026 17:52:29 +0000
Manifest next update: Tue 12 May 2026 21:42:29 +0000
Files and hashes: 1: 3130332e3133302e3233362e302f32332d3234203d3e203633393130.roa (hash: 8S5OsugAwixeQ8Ag9hxeeLoX3QQmkvW+iKjWp7BvVWA=)
2: 323430303a663432303a3a2f33322d3634203d3e203633393130.roa (hash: nHJZCc2ObG/YAr0XIyCnCXOkUDdTdP47YAnSTHpOSa4=)
3: 9B5DA40B0F23621450755917A456431F689EB049.crl (hash: /r6v6j4r6pwdWjaeOAYEBZgTcXhBvAPUZKSafrBrois=)
4: 3130332e3133302e3233362e302f32332d3234203d3e20323132383935.roa (hash: Iq8yw7WaTvNSaJInsrOVapzUOfDs0bBjNshzbffc+00=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:21:32:7a:14:25:f1:ae:9e:25:b9:ac:ea:da:4f:15:b8:e9:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049
Validity
Not Before: May 11 17:52:29 2026 GMT
Not After : May 12 21:42:29 2026 GMT
Subject: CN=C3DE0F8CADF8D94D5AD4AD775DFF61816BDD516C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:12:99:83:53:15:c8:69:9b:e1:0f:08:19:
9a:16:91:06:c1:2c:5a:58:75:2d:39:50:71:af:c2:
3e:94:bb:76:e5:9c:8f:eb:e6:04:34:0c:2f:a8:90:
02:cc:66:93:80:c8:45:fa:d6:7e:ee:e4:6f:26:44:
19:fb:9f:dc:b2:70:ce:dc:56:84:42:2d:38:35:f6:
03:82:e5:c6:e3:25:23:fa:04:8c:bf:ec:88:3d:c1:
48:b5:a0:21:45:43:a4:2c:36:e0:8d:5e:e7:7d:8d:
6c:cc:14:0b:83:5f:38:a1:c5:c2:34:fd:4b:55:0a:
9f:eb:30:28:46:d5:c2:41:0b:b6:9d:84:47:2f:fa:
b2:ab:9a:48:59:15:eb:b9:88:03:a8:66:7b:dd:78:
b4:58:76:28:62:ee:8e:d2:a0:c1:b4:0b:ec:9f:bc:
24:ac:39:07:5e:85:96:79:d2:44:0c:a3:e4:22:1c:
84:a8:9e:69:ea:d4:a4:ac:5a:fd:ef:8d:f3:36:fd:
50:7c:37:ee:6e:10:5e:de:d6:83:ce:0e:a9:fd:79:
55:58:68:cf:fe:4f:5d:78:64:27:d4:2d:4c:75:1f:
b9:39:28:82:8a:18:c4:08:ba:1a:81:4f:a5:28:89:
ed:51:56:79:5e:9b:b3:68:71:b3:44:b3:63:f9:1b:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:0F:8C:AD:F8:D9:4D:5A:D4:AD:77:5D:FF:61:81:6B:DD:51:6C
X509v3 Authority Key Identifier:
keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:97:20:a9:2e:46:91:86:55:89:ad:0c:f2:59:d3:af:42:b1:
9f:55:50:24:2e:a2:71:7e:a9:bc:c1:e4:85:66:92:53:f3:65:
12:be:81:86:9b:5a:34:23:c8:78:eb:ae:ce:5f:03:1f:e1:51:
9a:38:75:6f:32:74:97:92:89:a2:43:f5:f0:cd:45:e1:04:9d:
58:eb:43:d7:14:15:f7:54:5b:5d:ab:08:69:0d:5d:7e:c5:ff:
41:cf:f5:20:95:7b:3c:51:ee:8a:ef:67:97:00:5c:dd:20:6c:
57:45:f6:ea:7a:d0:7d:78:02:97:22:00:ed:d7:3d:ef:df:34:
2a:dc:92:46:2d:af:04:64:25:fe:1e:54:cf:e7:8f:ea:89:9a:
20:dd:fe:d4:56:1c:d4:4c:b5:f4:86:0e:94:9a:0f:39:a1:49:
28:16:c8:75:b1:71:b1:c7:73:ce:70:f9:83:f9:14:b7:08:36:
4c:79:2b:9c:f9:ec:5e:70:c9:ee:7c:c5:57:e8:6e:93:f1:88:
7b:20:3d:bc:05:5e:4c:71:7f:02:46:a0:74:c3:a3:0c:7d:c2:
45:93:d7:26:5a:94:86:32:10:c9:06:d0:1a:9c:bb:ec:97:3d:
8e:f0:76:60:b5:c6:37:43:b2:4a:42:0b:6c:3d:05:15:6f:dc:
3f:23:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:25 2026 by rpki-client