Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft
File: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft (raw, json)
Hash identifier: lwvkod2K1mnHFJohRBOrZnV+ztJ7m8m5VABZLiDnaRQ=
Subject key identifier: 7C:2F:50:C9:DE:45:70:9E:73:83:D4:A6:F6:D6:0E:97:84:F7:FB:EE
Authority key identifier: BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA
Certificate issuer: /CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA
Certificate serial: 0A92A1CE8F804980831711DA139428CF52C02E15
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft
Manifest number: 08
Signing time: Mon 11 May 2026 17:58:13 +0000
Manifest this update: Mon 11 May 2026 17:53:13 +0000
Manifest next update: Tue 12 May 2026 19:48:13 +0000
Files and hashes: 1: BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl (hash: z26sCDOtvhPF2YL7D4MH4zzu8aIMedvX8eFhN0df0R8=)
2: 323430323a346432303a313a3a2f34382d3438203d3e20313331363533.roa (hash: X9wIzhuw1c0lYPQ7mtcEb2gQt9tzHi6f24KHdsIqRUI=)
3: 323430323a346432303a3a2f33322d3332203d3e20313331363533.roa (hash: jLINZ0KQO6feKxwIuilqEIA94aHhGEJnk9VJLWCDTOs=)
4: 323430323a346432303a3a2f34382d3438203d3e20313532363236.roa (hash: gWGrH7k/E1wfVhOhIGsZWVZwwwOvXG8dp1buitprMVE=)
5: 323430323a346432303a3a2f34382d3438203d3e20323133343330.roa (hash: yXLG5aJYFzJQAOcQmz7saI6BueUDkIVJ2tp9ey7Y/oo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:92:a1:ce:8f:80:49:80:83:17:11:da:13:94:28:cf:52:c0:2e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BED725C413C7A436F5A200F207F3CB3A7A9E05DA
Validity
Not Before: May 11 17:53:13 2026 GMT
Not After : May 12 19:48:13 2026 GMT
Subject: CN=7C2F50C9DE45709E7383D4A6F6D60E9784F7FBEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:87:96:11:06:e6:1e:5d:cf:ff:3c:d7:34:
75:c0:70:a8:61:27:6b:55:18:95:a7:5f:f1:c7:ab:
05:6a:2a:9b:a7:51:8f:a6:66:de:29:f1:bb:07:40:
50:d4:e0:76:a0:70:6a:da:d0:37:fb:d6:8a:c4:b1:
cd:19:c9:2c:2d:66:80:fa:4e:cb:fd:d0:9b:bd:a2:
90:5c:5d:d9:40:37:bd:c2:50:e8:86:0e:49:70:1f:
6b:a6:dd:49:5f:f4:f0:e4:a1:71:68:16:30:27:ff:
9a:11:c1:79:4b:49:9f:f9:38:8b:89:1d:d4:48:91:
ca:81:ec:21:c3:64:fc:a3:62:94:3c:75:15:c3:57:
55:d5:43:89:bd:ee:d8:f6:88:71:6f:44:c4:31:57:
5b:ed:f4:0a:96:66:fb:cd:09:bc:04:ab:8d:cf:b2:
7b:97:20:4d:fa:b9:9d:09:89:d8:79:43:46:36:7e:
60:8e:d4:f3:6e:5a:61:b5:7e:49:e9:8a:1b:33:5f:
d9:20:6e:b8:28:22:36:2b:24:d3:13:62:99:93:22:
e4:fd:b9:e9:f5:01:6c:80:0f:97:bb:a6:ba:dd:97:
9f:bb:e8:35:67:82:7c:80:b4:6a:6a:df:c7:a7:4c:
c3:1c:38:ed:f9:8b:b6:b3:8a:b4:d7:3e:43:2c:c6:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:50:C9:DE:45:70:9E:73:83:D4:A6:F6:D6:0E:97:84:F7:FB:EE
X509v3 Authority Key Identifier:
keyid:BE:D7:25:C4:13:C7:A4:36:F5:A2:00:F2:07:F3:CB:3A:7A:9E:05:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/0/BED725C413C7A436F5A200F207F3CB3A7A9E05DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2f:f9:c6:10:cb:34:00:b4:bc:a6:c9:1b:28:c8:78:33:57:
92:44:b2:33:18:16:d3:0e:2e:e8:fd:8d:48:cd:de:eb:24:89:
d6:24:2c:67:d1:86:15:ca:4b:3a:aa:1d:d7:4b:99:83:9b:93:
d8:96:17:00:a5:f5:77:a6:be:a2:f8:79:e8:31:61:31:71:1c:
2e:e8:6e:44:e4:1e:5f:fe:8d:23:10:09:4b:cb:2f:d3:4c:ff:
4a:48:83:4d:3a:bb:03:6a:43:9a:f2:52:ed:10:e8:4a:79:3c:
f6:86:02:7c:d3:77:95:bd:dd:16:9a:ef:37:69:89:e8:c6:11:
c5:aa:b6:46:41:e0:2c:b7:58:d9:05:00:be:13:fb:36:22:0b:
d6:94:d5:47:6b:b7:8a:13:ef:49:62:b8:fb:77:00:9a:51:0d:
14:a4:be:69:e0:51:37:99:8f:4d:ec:32:36:d4:cc:51:e4:2e:
ed:9b:47:f8:29:b9:03:28:f0:86:16:3d:a4:85:f5:cf:3f:2e:
4f:9f:03:6b:24:ad:78:fb:6f:2f:ae:24:b1:d5:7c:48:23:e8:
50:9b:e3:de:4d:00:98:66:eb:6e:da:d9:13:b7:9c:9c:26:c2:
b8:e3:04:97:aa:41:74:69:96:a8:41:5c:ba:f8:59:bb:36:29:
b5:d1:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:53 2026 by rpki-client