Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
File: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft (raw, json)
Hash identifier: YbeOlRSwrxyAkrwsVWVammxITPUkJ3VJFZ2N2A+jN3A=
Subject key identifier: 33:69:9A:79:E8:B0:E6:D8:9D:C9:A5:0B:14:E1:3B:21:4B:A7:67:78
Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7
Certificate issuer: /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7
Certificate serial: 651C8B78769923B6EA007FD6B29F66C9468EBB9F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:57:34 +0000
Manifest this update: Mon 11 May 2026 17:52:34 +0000
Manifest next update: Tue 12 May 2026 20:26:34 +0000
Files and hashes: 1: 3136302e3139312e342e302f32332d3234203d3e20313334383233.roa (hash: MvSn3+N3E0x49y2zyFZseXhPFbhPYX7FDxa/hvK0XxA=)
2: EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl (hash: 23oj62rTvADpe1uGAgLcPLj2GZcMV1crwwaozcYJijs=)
3: 3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (hash: WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=)
4: 3136302e3139312e342e302f32332d3234203d3e203338303432.roa (hash: uC4SAyffO7EbE3rGS0jHS6n7C39qBWkfFa7uUUduW8s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1c:8b:78:76:99:23:b6:ea:00:7f:d6:b2:9f:66:c9:46:8e:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7
Validity
Not Before: May 11 17:52:34 2026 GMT
Not After : May 12 20:26:34 2026 GMT
Subject: CN=33699A79E8B0E6D89DC9A50B14E13B214BA76778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:54:72:73:bf:9f:7c:48:c7:1a:8f:6a:7d:
70:51:ee:d2:83:2b:cc:87:42:fd:c7:fc:1f:0f:5a:
ff:f9:05:01:74:ba:31:ac:36:3d:03:e9:4d:99:57:
c1:53:76:aa:b9:73:a2:91:b2:93:cc:ec:40:50:cc:
25:73:e9:8a:0a:a2:c4:9a:b5:e7:f0:97:02:b5:29:
d8:c5:22:5d:bb:c7:c7:02:d0:c8:a4:09:ad:45:52:
82:03:e8:6d:dc:71:32:72:21:1d:6c:4c:a9:fa:26:
06:63:5f:e3:95:14:31:10:db:fb:d3:10:b2:13:79:
24:21:8e:fb:aa:85:04:56:cb:3c:2d:ac:42:47:04:
d3:f2:a2:84:1c:24:9c:76:b2:fd:4c:c4:9f:97:f0:
1e:e9:ec:c5:59:95:5d:49:06:8b:b3:93:75:ce:3a:
92:b8:4b:85:63:73:b5:44:17:d1:95:71:d8:f1:b5:
d8:0a:d9:e2:77:3d:bb:f1:0d:bb:d4:77:12:ba:21:
4d:a9:ee:1a:b4:e2:72:b7:a0:b5:1a:e3:65:42:2b:
39:d7:d1:86:20:6b:f9:a0:4e:eb:55:dd:4d:3a:21:
0f:26:85:81:f9:85:6b:c7:93:61:c5:5f:32:76:d1:
49:fc:b5:02:6b:04:14:f1:17:89:c2:3d:55:13:b6:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:69:9A:79:E8:B0:E6:D8:9D:C9:A5:0B:14:E1:3B:21:4B:A7:67:78
X509v3 Authority Key Identifier:
keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b7:93:b3:c7:2a:25:b3:ef:da:d9:3f:36:85:f0:68:c0:8d:
d5:3c:57:46:e9:8f:2e:35:00:9d:23:d3:49:42:3d:a1:64:5b:
00:e4:9a:30:a2:bf:af:31:89:d9:84:64:ea:4a:e2:1f:11:6e:
7e:a1:7b:35:30:5a:46:b6:c4:da:55:7a:d8:c5:40:60:f6:c2:
d0:ea:54:5a:b2:fc:e3:90:1e:c7:20:d3:a8:5c:af:86:01:b8:
c4:bb:95:fa:0e:f2:ef:74:64:ea:6f:c8:98:28:bc:9f:94:7f:
03:df:c9:02:b3:d7:b7:c7:b9:29:93:ca:e2:12:a4:0b:42:fe:
ce:35:34:95:0e:ed:f3:3d:c9:e9:6d:a4:6a:13:86:44:ff:5f:
2c:71:fc:44:c9:68:bc:fd:8e:8f:13:7f:95:73:7b:41:bb:11:
c3:30:64:b9:03:a9:a5:80:6b:11:fe:01:79:ff:81:43:37:fb:
2b:4a:43:59:62:b4:d4:b4:2e:64:40:0d:2e:e5:ed:b3:a2:3f:
5f:59:16:bd:75:33:fb:15:b1:52:0a:3d:2e:86:90:01:bf:60:
56:0a:e4:3e:db:6e:3c:bb:cb:df:8f:df:f8:75:94:5f:28:60:
28:16:14:e8:de:fe:fd:49:55:d8:8b:9e:6d:99:fd:b5:e7:f1:
a8:3f:76:40
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUZRyLeHaZI7bqAH/Wsp9myUaOu58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYxRDEwNDg0RUZBNzlBQkMwMThGQTBFRkE3RjNCMEMx
NkVFNDNBNzAeFw0yNjA1MTExNzUyMzRaFw0yNjA1MTIyMDI2MzRaMDMxMTAvBgNV
BAMTKDMzNjk5QTc5RThCMEU2RDg5REM5QTUwQjE0RTEzQjIxNEJBNzY3NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpm1Ryc7+ffEjHGo9qfXBR7tKD
K8yHQv3H/B8PWv/5BQF0ujGsNj0D6U2ZV8FTdqq5c6KRspPM7EBQzCVz6YoKosSa
tefwlwK1KdjFIl27x8cC0MikCa1FUoID6G3ccTJyIR1sTKn6JgZjX+OVFDEQ2/vT
ELITeSQhjvuqhQRWyzwtrEJHBNPyooQcJJx2sv1MxJ+X8B7p7MVZlV1JBouzk3XO
OpK4S4Vjc7VEF9GVcdjxtdgK2eJ3PbvxDbvUdxK6IU2p7hq04nK3oLUa42VCKznX
0YYga/mgTutV3U06IQ8mhYH5hWvHk2HFXzJ20Un8tQJrBBTxF4nCPVUTtrbXAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUM2maeeiw5tidyaULFOE7IUunZ3gwHwYDVR0j
BBgwFoAU7x0QSE76eavAGPoO+n87DBbuQ6cwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1ZS0wv
MC9FRjFEMTA0ODRFRkE3OUFCQzAxOEZBMEVGQTdGM0IwQzE2RUU0M0E3LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0VGMUQxMDQ4NEVGQTc5QUJDMDE4RkEwRUZBN0Yz
QjBDMTZFRTQzQTcuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTVlLTC8wL0VGMUQxMDQ4NEVGQTc5
QUJDMDE4RkEwRUZBN0YzQjBDMTZFRTQzQTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArt5Ozxyols+/a
2T82hfBowI3VPFdG6Y8uNQCdI9NJQj2hZFsA5Jowor+vMYnZhGTqSuIfEW5+oXs1
MFpGtsTaVXrYxUBg9sLQ6lRasvzjkB7HINOoXK+GAbjEu5X6DvLvdGTqb8iYKLyf
lH8D38kCs9e3x7kpk8riEqQLQv7ONTSVDu3zPcnpbaRqE4ZE/18scfxEyWi8/Y6P
E3+Vc3tBuxHDMGS5A6mlgGsR/gF5/4FDN/srSkNZYrTUtC5kQA0u5e2zoj9fWRa9
dTP7FbFSCj0uhpABv2BWCuQ+2248u8vfj9/4dZRfKGAoFhTo3v79SVXYi55tmf21
5/GoP3ZA
-----END CERTIFICATE-----
Generated at Tue May 12 22:13:38 2026 by rpki-client