Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
File: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft (raw, json)
Hash identifier: O/3yNitKRSC/EUd0oV8HTWlf2vuyV2NMNQ48Du+j5pw=
Subject key identifier: 45:88:7A:F8:07:51:01:5A:B5:45:AA:F5:B4:45:07:EA:44:63:D2:93
Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Certificate serial: 6677EDBB45B141556D615FD62B72D5250CA8CC90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
Manifest number: 05
Signing time: Mon 11 May 2026 17:56:37 +0000
Manifest this update: Mon 11 May 2026 17:51:37 +0000
Manifest next update: Tue 12 May 2026 21:45:37 +0000
Files and hashes: 1: E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl (hash: jBUTHy22F+OgBXc+WHdD626bnBPAEbRjXbL2MyaVLzQ=)
2: 3231312e37362e3139302e302f32332d3234203d3e20313331363636.roa (hash: dIKzwOV/Rg8kX37DO7rzZtMhciZlDJrIMJrJMoEYC/o=)
3: 323430353a363434303a3a2f33322d3332203d3e20313331363636.roa (hash: QB2gyR5XQYs4MfGBjgJf/jtuHKKTmEl5qfrVI5ynL/A=)
4: 3230322e3132332e3132342e302f32332d3234203d3e20313331363636.roa (hash: G254ASDsdEOL8B4Bo3zdknO7xdbQNcKopBri7j6oisI=)
5: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (hash: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:77:ed:bb:45:b1:41:55:6d:61:5f:d6:2b:72:d5:25:0c:a8:cc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44
Validity
Not Before: May 11 17:51:37 2026 GMT
Not After : May 12 21:45:37 2026 GMT
Subject: CN=45887AF80751015AB545AAF5B44507EA4463D293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:31:06:c7:21:79:9a:8a:97:76:d7:3a:7f:
28:8e:51:bf:54:01:13:5d:b4:6d:81:e0:0a:f7:f1:
a8:dc:1a:aa:d4:7a:ad:fd:36:23:ac:80:1d:fd:ba:
e7:51:f5:d3:91:48:8d:bf:6b:5b:2f:55:80:aa:06:
ab:ed:5d:dc:24:1b:2e:d6:0d:2c:43:a4:a4:a3:54:
1e:77:56:c5:b5:5e:f7:e0:e9:34:c8:bb:4e:24:30:
09:4f:d0:94:d8:6b:69:4c:31:95:96:af:30:4d:b7:
72:bb:72:3a:74:80:f7:e0:06:16:14:bd:43:ab:1b:
00:fc:46:f7:57:b6:d9:51:04:ab:77:32:4d:5b:52:
67:c5:60:7c:1e:17:41:db:0f:c4:cb:53:28:b3:5a:
86:46:69:5d:30:6e:dc:19:5b:07:67:d2:4c:1f:4d:
ef:a9:0c:4f:c3:38:60:7c:a3:b4:80:b5:1d:b8:96:
e0:1c:61:0f:88:c5:4d:36:97:1e:fb:05:17:06:b0:
d6:10:dc:c5:88:9c:9d:57:fa:0f:09:b6:b2:09:05:
03:16:3a:ce:c7:8f:46:73:cf:73:bf:6f:3c:1f:a5:
74:e6:8f:56:2d:40:44:55:32:67:a1:94:f7:67:db:
2b:7b:9b:ec:3b:d4:5f:fe:27:06:63:9c:09:65:66:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:7A:F8:07:51:01:5A:B5:45:AA:F5:B4:45:07:EA:44:63:D2:93
X509v3 Authority Key Identifier:
keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:bf:4c:9a:20:58:cb:a4:61:2d:40:23:39:34:6e:f4:aa:
ae:79:64:43:c4:ee:a9:b4:25:de:da:56:94:94:bb:5f:7c:39:
08:27:4f:de:38:50:87:f5:a6:70:f9:35:c8:f7:c6:40:e2:60:
0c:e0:aa:65:26:99:d3:42:23:7d:8e:64:7b:b8:49:5c:78:4a:
49:ff:ab:09:dd:09:f1:7e:ca:be:dc:f8:9b:36:37:49:2c:77:
12:66:83:c7:65:b3:72:40:cf:e5:fe:cb:cf:f3:ca:60:ba:97:
75:cc:d1:d8:a0:0b:9d:00:fb:d1:ea:0d:b8:48:39:a9:19:d3:
d4:38:dc:4a:13:4c:bf:62:35:4a:65:58:56:12:0e:68:d5:91:
24:2b:19:2d:40:d3:ba:76:76:86:08:b4:2f:ac:03:a7:ed:ca:
b8:f2:a9:af:71:75:38:78:6b:80:bd:bd:88:c0:22:89:9b:9e:
28:c7:b6:3a:9d:ba:af:c2:f3:19:34:4c:4e:ab:06:c8:49:b4:
c8:f2:5e:64:8c:06:8f:09:3d:df:1b:dc:c1:7d:bc:c3:25:a3:
e5:36:0b:97:fd:fc:93:4a:91:e9:95:85:bb:75:fb:d7:f7:f1:
1c:46:e5:67:ea:97:9f:3f:3d:d2:59:b2:56:90:5d:33:aa:ae:
09:a3:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:17 2026 by rpki-client