Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
File: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft (raw, json)
Hash identifier: RZ/D5kjJE6dwgpGz4I3NlncXu8+p1WCpGvmeuNEEI0g=
Subject key identifier: 65:6E:52:4C:49:13:06:91:1F:45:4E:5C:D9:FB:0D:66:99:54:D8:C8
Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
Certificate issuer: /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Certificate serial: 743E5C4AC4CA7C24D296C7C3FDDB2E4C0193AE0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:32:12 +0000
Manifest this update: Mon 11 May 2026 17:27:12 +0000
Manifest next update: Tue 12 May 2026 19:36:12 +0000
Files and hashes: 1: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (hash: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo=)
2: 19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl (hash: bqn/6TCZWTYgDND7orif2s376uQ4ZGsI04cyhFqyGww=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3e:5c:4a:c4:ca:7c:24:d2:96:c7:c3:fd:db:2e:4c:01:93:ae:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3
Validity
Not Before: May 11 17:27:12 2026 GMT
Not After : May 12 19:36:12 2026 GMT
Subject: CN=656E524C491306911F454E5CD9FB0D669954D8C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:bb:1f:21:ab:60:9f:dd:49:c2:aa:b0:f9:
00:1e:d8:de:cf:c3:45:f0:0f:f1:44:c3:ea:b9:c5:
b5:2f:74:a9:24:a7:74:25:1c:9b:b6:54:48:47:b8:
6e:e9:ba:61:ff:3e:67:6f:0e:b0:3b:5c:e8:94:6c:
00:ca:1b:98:fd:7f:1c:33:ee:44:4e:a8:03:81:10:
cd:c0:66:2b:95:0c:44:8a:05:5a:44:72:f6:38:98:
41:30:a7:91:c1:be:24:46:be:3d:f4:97:7e:4d:ed:
6c:cb:b5:a1:b7:4d:b9:ae:66:5e:eb:f5:c5:5f:5b:
40:2f:b4:51:1a:ed:a8:ea:3d:c1:cb:c2:bb:74:c6:
ae:d6:2d:fa:4c:7f:7c:9e:d9:a4:98:d6:d2:13:1c:
a0:5e:cc:1f:49:ee:32:7b:e3:6c:8d:a0:96:bb:9c:
06:67:cb:9c:fb:a5:e3:05:05:2e:b0:c5:83:5d:ed:
41:59:07:fe:1d:fc:31:f7:f0:f6:a0:2c:53:d8:70:
b3:5f:ba:d2:e6:f1:cb:fa:2a:6f:5a:e3:7c:dd:6e:
dd:45:87:5f:4a:09:6e:c6:a5:b8:ae:c5:8a:6a:80:
b0:e0:fb:a3:29:d3:c0:b9:27:29:a9:a2:f0:51:e7:
4a:3e:a5:c1:3c:5b:0d:0e:66:bf:05:4a:79:02:4c:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6E:52:4C:49:13:06:91:1F:45:4E:5C:D9:FB:0D:66:99:54:D8:C8
X509v3 Authority Key Identifier:
keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4e:ab:ab:c8:98:97:fb:7f:72:7a:15:7a:bd:83:05:01:33:
25:b8:7b:7c:ba:26:2c:dd:e9:ef:56:c7:4e:ac:dc:dc:ff:65:
cd:bb:4b:48:18:d0:bc:e2:fe:67:a8:6c:55:94:aa:16:b5:68:
e0:13:36:33:f5:f1:5b:79:1e:c5:bb:79:ca:f3:d1:ec:28:e1:
4e:1b:95:60:c8:52:89:6d:4d:29:2e:6c:c8:91:0f:aa:e7:47:
d5:04:b4:cd:93:1d:6e:b2:d8:3c:67:59:ef:12:89:fe:8a:5d:
0f:56:5c:e8:b7:07:2f:88:1a:60:95:94:96:38:b8:1b:0d:a7:
d0:9f:24:4d:9a:85:d1:c1:9a:be:63:0c:1c:f8:25:f5:e7:ef:
8e:3e:6d:4a:c8:63:f1:3c:d1:61:bd:5f:18:f9:bf:41:c1:3f:
8f:8b:c6:52:49:42:e4:14:4b:36:f0:71:19:ab:3c:f9:a2:a2:
88:ce:b7:fb:07:4c:35:9f:29:e6:dd:6b:75:4c:be:04:34:db:
03:8f:d7:b8:c3:be:a8:33:3d:2b:74:e3:9d:73:34:34:48:95:
ea:23:09:07:02:b9:31:3c:e1:e3:66:2a:30:ae:dc:03:6c:33:
75:d3:d1:64:bd:f8:9e:19:17:ff:ff:80:f6:d7:ae:40:f4:88:
41:ef:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:08 2026 by rpki-client