Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
File: 385249635956536ABAE4461A37AC4824F9DC8FD6.mft (raw, json)
Hash identifier: iQ5kxqHBRyxGodWKv6wypMZHj6Nzc4GEs/eta+V9S7k=
Subject key identifier: B0:F4:15:BD:9A:DA:C0:BC:26:13:1E:42:08:49:42:E9:80:64:2A:6B
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial: 73FDB4EB19DCB31C240856772D9979BB822AC412
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
Manifest number: 08
Signing time: Mon 11 May 2026 17:58:13 +0000
Manifest this update: Mon 11 May 2026 17:53:13 +0000
Manifest next update: Tue 12 May 2026 19:21:13 +0000
Files and hashes: 1: 3136352e3130312e32382e302f32332d3234203d3e20313532363236.roa (hash: btNO8YG7Xa0kAdLaiC/xjh2pArbM9BSYgMB1cmgXBcM=)
2: 3136352e3130312e32382e302f32332d3234203d3e20313331363533.roa (hash: f8Wm++qXpNxVHGZKo201vAM9Z2Uy7/WdNvruK2l9Afw=)
3: 385249635956536ABAE4461A37AC4824F9DC8FD6.crl (hash: C9QBR7qdHG5URt3hy4JELtObYHnFGwnWyHsvgw0CH2o=)
4: 3136352e3130312e32382e302f32332d3234203d3e20323133343330.roa (hash: 35okLdMHqqFwUJOW9E0osinYU4tPIsxaiWo2zlSSj84=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fd:b4:eb:19:dc:b3:1c:24:08:56:77:2d:99:79:bb:82:2a:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Validity
Not Before: May 11 17:53:13 2026 GMT
Not After : May 12 19:21:13 2026 GMT
Subject: CN=B0F415BD9ADAC0BC26131E42084942E980642A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:b1:1f:b9:52:55:a0:5c:8d:6a:1b:09:50:
35:6d:80:5f:56:1e:39:07:d0:69:4b:cd:b2:ae:7a:
26:4d:6a:a9:16:df:af:f6:8f:f7:44:19:5e:c2:30:
8d:5f:0a:1d:a9:30:0f:e0:8d:b1:d4:27:26:e3:98:
ba:fa:b4:ad:91:61:47:44:8e:3f:30:0a:cc:5d:ff:
36:20:ff:82:6a:43:38:39:6c:5e:c3:9c:00:83:3a:
7d:2a:de:c6:34:b4:b8:3b:66:a7:b3:0a:c2:4c:79:
b1:8b:b2:b4:e3:79:73:94:09:18:57:d5:ef:70:b1:
43:93:7a:61:6f:f2:9c:58:ec:91:1b:e3:ea:89:51:
e3:65:44:92:76:9f:f2:b6:f9:8d:c0:b9:24:b7:fc:
d3:dd:29:b0:07:24:77:fc:9e:e3:3f:52:d4:21:3d:
02:19:c1:2d:a7:4f:66:70:57:9a:7b:25:47:67:38:
61:1d:ea:4b:5f:a5:4e:5c:d2:44:f6:43:31:3f:6f:
f0:17:ac:e2:e2:e4:18:40:f3:aa:3f:bd:34:3c:91:
61:a9:eb:c8:92:38:4d:9e:b9:88:89:b5:27:bf:7d:
0a:5e:ef:3a:bb:ab:9d:99:28:9e:1a:f6:3b:b5:5c:
4f:64:a8:eb:ab:91:5f:3e:09:d3:bf:dd:47:18:cc:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F4:15:BD:9A:DA:C0:BC:26:13:1E:42:08:49:42:E9:80:64:2A:6B
X509v3 Authority Key Identifier:
keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ce:b3:ee:a8:f0:f2:68:dc:62:7f:6a:5d:8a:b7:b0:d8:23:
27:a3:80:e4:9f:ac:28:33:82:e9:c1:1a:c1:36:08:89:d2:1f:
12:f0:9b:66:76:7f:45:89:18:b7:9f:76:07:69:88:ad:a6:19:
38:88:f0:c7:51:1a:4a:90:63:cf:5b:49:c7:67:00:74:65:19:
e2:b3:24:6a:1d:f1:58:a9:5d:4e:a3:29:9f:f1:db:3a:6b:19:
d5:6c:5d:38:5a:5c:7c:a4:ae:49:26:42:2f:d0:c9:74:42:d8:
83:76:8c:84:c8:00:a9:a1:91:9d:78:8b:5d:aa:aa:5c:56:ec:
75:d6:db:d8:e2:58:a4:e4:e1:af:85:4f:ea:08:35:07:62:ff:
76:58:a4:df:c2:ef:0e:b5:49:27:9b:6d:95:15:f6:1d:79:39:
ee:e6:c3:d8:6f:60:0e:6d:a2:75:ff:9e:9f:fa:f3:10:f4:33:
12:b6:92:95:5c:23:45:85:53:de:be:c9:6b:a4:72:fb:df:44:
77:c1:b5:f9:c4:12:1d:e4:f4:41:58:18:62:6b:34:d0:ee:c4:
a9:cf:d9:39:d8:97:fb:b8:d2:ba:6f:25:fb:5c:6b:65:a5:c4:
7f:73:89:f7:be:f2:ac:cb:89:74:8f:94:fd:b3:b8:6a:d3:18:
aa:e2:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:24:57 2026 by rpki-client