Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json)
Hash identifier: UGLe8jBpmfuUyATKEVdTZqherDc1l3vqU4RgjLbmz7I=
Subject key identifier: B2:B4:B0:EE:90:C2:20:5A:C0:DC:9C:FF:28:A7:76:F0:7C:DF:62:FF
Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Certificate serial: 1D241B8AD0940D145B40CC5154A4C4F677A244C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:56:41 +0000
Manifest this update: Mon 11 May 2026 17:51:41 +0000
Manifest next update: Tue 12 May 2026 21:05:41 +0000
Files and hashes: 1: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=)
2: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=)
3: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: Lv863GbIKPVw/4DXNSM/K5qFkovYKM4H/cCV+0WFgQ8=)
4: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:24:1b:8a:d0:94:0d:14:5b:40:cc:51:54:a4:c4:f6:77:a2:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Validity
Not Before: May 11 17:51:41 2026 GMT
Not After : May 12 21:05:41 2026 GMT
Subject: CN=B2B4B0EE90C2205AC0DC9CFF28A776F07CDF62FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:8d:f0:4b:20:65:6e:a7:5d:75:7e:a6:b4:
02:e6:5c:10:4c:a0:eb:a5:c2:a5:fd:ac:78:8a:77:
02:a9:37:53:a2:a8:d9:df:c3:25:a4:6b:ed:29:9f:
0c:09:56:e6:57:39:46:49:5f:80:c0:0e:75:ee:e4:
b1:cb:45:10:d3:98:e8:db:60:21:76:9e:0e:58:7a:
f6:64:56:57:66:a3:e1:65:e7:05:1c:eb:34:67:6b:
b4:0c:b1:de:ca:2c:d0:0f:90:01:ee:20:5e:cd:19:
c2:93:74:10:60:ec:e4:59:0b:b2:68:5a:93:35:67:
b9:c2:a9:3b:45:07:18:68:08:75:2d:ac:c0:e9:4f:
82:03:7e:c7:51:d0:dc:8e:09:ac:69:4e:8d:9c:7e:
21:84:86:83:f9:35:4a:32:78:99:ed:8a:77:be:b1:
25:07:c5:b5:3d:11:b3:27:b4:54:97:8f:9b:c5:d8:
c9:f9:b5:9f:01:de:80:e0:d8:52:5b:79:ad:43:b7:
71:79:3c:a4:eb:31:d1:8d:28:5c:c9:e0:d1:cf:bf:
c2:2b:8b:29:a6:ff:ea:54:18:0f:21:4f:7e:69:38:
be:96:84:7a:b8:75:ab:78:01:6d:72:3d:84:42:d3:
11:1c:1a:36:a5:0f:ba:cc:a4:c8:8f:d9:4e:5c:ee:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:B0:EE:90:C2:20:5A:C0:DC:9C:FF:28:A7:76:F0:7C:DF:62:FF
X509v3 Authority Key Identifier:
keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:25:44:b5:b5:0f:8a:42:16:ed:e2:3e:19:90:15:45:14:
6a:03:e6:44:5a:d9:55:93:01:cd:cf:43:51:b6:24:18:20:4f:
cb:88:f2:c9:d4:61:1b:8f:24:5f:9a:fe:eb:72:6b:0c:48:85:
62:f3:9d:80:46:84:c4:1a:8b:be:2a:89:62:6c:59:55:11:20:
0c:87:01:46:2a:c2:a3:8e:75:b5:1f:19:46:70:81:a6:03:f1:
94:d0:22:98:af:55:44:67:21:e1:bf:e2:2d:0c:aa:93:66:8f:
c0:37:36:56:a0:6c:44:2a:ec:d1:ad:bb:0e:13:d8:f4:9c:c4:
d6:7b:3a:01:af:b1:3f:1a:c6:be:31:37:23:88:0c:20:b4:ed:
ef:50:2b:5a:26:28:10:09:fa:89:62:09:f9:cd:d5:2e:04:db:
bb:22:97:cb:36:f7:c5:2d:66:91:26:57:48:e9:63:c7:6b:40:
9e:66:4b:7c:11:2d:1d:52:42:ef:88:29:ce:ed:fa:28:7a:b7:
e6:39:74:be:22:ef:99:95:da:d9:10:65:e5:f8:85:8d:a8:38:
d5:e0:cc:e3:11:0b:e9:b1:3a:37:e2:85:8d:a1:3c:42:c4:a6:
d9:f8:c1:bc:47:fb:28:30:37:a0:57:2e:01:bd:cf:cf:41:60:
fe:d3:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:00:23 2026 by rpki-client