Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
File: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft (raw, json)
Hash identifier: pVaAoWoGpyPYVoNtlAaaEzYSzOimp6lqN4T0jgUK3G4=
Subject key identifier: C8:69:96:E6:51:32:B5:12:92:A8:47:94:89:FE:7B:2A:25:27:58:67
Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
Certificate issuer: /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Certificate serial: 1547887A8D889E4B2B8AE93C2FBCA802459E6D30
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:06:08 +0000
Manifest this update: Mon 11 May 2026 17:01:08 +0000
Manifest next update: Tue 12 May 2026 17:40:08 +0000
Files and hashes: 1: 3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (hash: 0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=)
2: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl (hash: r1GSnpXoYY9l8xEzGomur/TYTYcFJ4hdmcyqlGBrvWM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:47:88:7a:8d:88:9e:4b:2b:8a:e9:3c:2f:bc:a8:02:45:9e:6d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Validity
Not Before: May 11 17:01:08 2026 GMT
Not After : May 12 17:40:08 2026 GMT
Subject: CN=C86996E65132B51292A8479489FE7B2A25275867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:6b:db:40:7a:9d:56:09:56:00:c7:df:e9:
fd:2e:02:c1:ea:5c:60:88:9a:18:70:9e:78:ef:0b:
f8:7c:d2:b5:07:fc:1f:a5:84:c0:43:95:f3:55:a0:
20:0a:c8:fb:a1:4b:20:c4:0c:c4:43:95:89:9d:4b:
74:32:25:07:3c:b7:89:fd:f5:f3:18:83:33:f5:8a:
ff:ac:59:09:d4:62:cc:be:c1:42:27:4b:74:06:48:
d1:c8:6a:1f:f6:69:b8:e4:2a:56:9f:10:3b:2a:da:
09:5f:25:a1:0c:97:a4:32:47:e6:42:97:09:86:dd:
a8:f0:f2:22:60:41:2b:6a:df:bd:09:42:d7:38:34:
7d:40:2f:5f:2e:8b:92:91:cc:bb:85:d6:cf:2a:be:
66:5d:25:0a:78:db:11:23:20:74:d4:9b:cf:a2:72:
ef:55:41:c3:5f:90:be:ff:55:81:78:a6:ca:dd:4c:
fd:c7:42:9a:cf:df:fa:c6:88:b8:c4:1f:cd:5b:17:
c9:bc:2b:ce:7e:5d:8b:3a:52:82:aa:3a:eb:90:de:
b8:f7:41:88:e4:a2:86:48:f2:e0:20:29:dc:3f:8d:
0a:14:2b:4d:5b:42:28:a2:82:5d:bc:bc:b7:e8:70:
1d:b1:a5:42:b9:50:4f:7f:0c:64:85:8a:46:51:b3:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:96:E6:51:32:B5:12:92:A8:47:94:89:FE:7B:2A:25:27:58:67
X509v3 Authority Key Identifier:
keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:13:34:84:ff:e1:bd:f2:2f:ab:6d:00:3f:3c:d6:9d:68:d1:
02:a1:7d:ec:b7:93:e0:22:50:c7:93:d5:71:d9:52:f5:69:aa:
c0:46:5e:0d:71:82:be:1d:06:48:2c:bc:d8:66:ff:93:e6:d4:
f1:d1:55:95:7e:8b:47:55:f8:ff:af:dd:bb:56:5a:c4:f3:fd:
b9:34:24:e2:9d:64:ee:42:24:96:ca:b8:4f:af:5e:46:78:3c:
60:94:af:56:0c:36:7b:f3:3a:7f:25:6f:0f:38:9c:87:ec:9f:
03:9d:ca:1b:1d:57:f2:78:8b:44:43:9b:f2:1b:a2:93:08:bd:
93:28:95:41:1b:3e:41:b2:dd:81:4e:02:7b:04:3d:65:ad:04:
61:b5:4c:b2:88:e8:86:38:3a:63:05:14:be:7a:05:87:45:3e:
36:cf:fd:de:7f:ad:f9:56:e3:0c:23:34:1e:39:76:04:8a:11:
43:db:f2:34:e5:dd:9b:77:ee:39:12:a7:16:87:db:cd:74:32:
e9:df:2e:9a:2d:b3:57:10:5f:6f:5c:86:2a:dc:a4:18:6b:04:
db:1a:bd:c8:06:ed:a0:09:20:4a:4d:78:56:ce:6d:01:f5:1f:
3c:39:03:cc:64:25:8f:ed:e3:f0:54:05:5a:c4:6a:cb:eb:b2:
86:65:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:35 2026 by rpki-client