Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
File: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft (raw, json)
Hash identifier: 7QvofbeBXYjAiMIkVgr/phl1tOPXhCKU+joUQybqQS4=
Subject key identifier: 71:88:C4:4C:CF:A1:F6:4C:0F:9E:C8:EA:BB:3A:05:BC:58:C8:29:C5
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Certificate issuer: /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial: 43DF6AD6413499A2BBC4BDD7DC21E7F7015C4293
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
Manifest number: 05
Signing time: Mon 11 May 2026 17:39:51 +0000
Manifest this update: Mon 11 May 2026 17:34:51 +0000
Manifest next update: Tue 12 May 2026 19:57:51 +0000
Files and hashes: 1: 3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (hash: NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=)
2: 3138302e39342e33302e302f32332d3234203d3e2039323939.roa (hash: wXHXnquzJPMvt2eL/0ADugpfutlaQZTySmvZfMnVTRQ=)
3: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl (hash: nxnCAcO/QrH5JXlkwCsw6up0qaroquFPiFewIAM//YA=)
4: 3138302e39342e33302e302f32332d3234203d3e203633393237.roa (hash: pjcbMKqxFhdZKYgKADpdkIDPG/goMICc5D5clKBpXPM=)
5: 3138302e39342e33302e302f32332d3233203d3e203139353531.roa (hash: 1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:df:6a:d6:41:34:99:a2:bb:c4:bd:d7:dc:21:e7:f7:01:5c:42:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Validity
Not Before: May 11 17:34:51 2026 GMT
Not After : May 12 19:57:51 2026 GMT
Subject: CN=7188C44CCFA1F64C0F9EC8EABB3A05BC58C829C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:24:c4:6e:96:52:b0:35:26:00:96:c0:75:
00:22:8d:da:ce:0b:24:20:70:b8:c7:af:c3:56:8f:
0a:8d:d6:8a:14:6e:41:f1:d5:93:ac:5d:e8:e5:ab:
57:95:55:5f:fb:46:6a:c7:8f:8c:82:95:46:e6:4c:
f4:d5:e6:62:42:80:fe:7c:24:16:13:25:29:6f:cd:
e7:5d:2f:75:29:19:b9:f4:24:72:25:09:af:20:cb:
9d:96:eb:59:0d:a2:70:8d:77:80:83:e0:25:93:1d:
1a:42:48:01:31:d3:81:eb:56:a1:81:24:b3:f6:30:
2d:5f:31:85:0b:ec:4c:84:e8:5c:2c:3e:13:a8:74:
fa:8a:fa:53:86:55:40:03:ea:05:29:8c:3b:56:a4:
a7:b0:a5:84:30:29:3f:2c:c1:e2:51:86:5b:d6:8d:
49:88:3d:7a:d6:fa:64:dd:e3:b0:c6:aa:4e:5c:3c:
91:86:33:ac:26:b2:16:e5:09:08:da:ec:e1:35:4d:
8c:b9:7d:11:7a:71:20:4a:37:15:fb:a8:cf:14:7d:
b7:30:2a:77:db:c3:bc:fb:2f:0e:05:6d:19:46:66:
f6:f8:20:ba:a2:33:4b:12:61:da:76:c9:5c:f4:7d:
67:9d:2d:86:30:4e:11:8c:35:b4:62:de:33:a5:3f:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:88:C4:4C:CF:A1:F6:4C:0F:9E:C8:EA:BB:3A:05:BC:58:C8:29:C5
X509v3 Authority Key Identifier:
keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:63:bf:97:83:e9:87:92:fe:d1:70:70:a9:42:3b:5e:a4:68:
a8:e4:ce:43:35:83:28:2a:e3:7c:57:b1:b8:b6:79:48:27:8c:
de:a1:ce:eb:ac:1e:c0:ee:a9:2e:91:e0:38:f7:87:29:a4:da:
c7:54:32:4e:d1:1c:5e:fa:29:1b:04:ff:51:74:76:1f:3a:1b:
e3:83:49:f0:dc:18:4e:52:41:85:89:24:15:55:f9:e6:65:be:
92:fb:85:a6:15:ca:60:70:bf:48:f2:59:a0:c3:f8:3a:d5:8b:
b9:3a:e5:3a:a8:37:f5:7f:30:80:81:71:3c:f2:87:b8:9d:45:
52:6c:ae:0e:14:d2:f1:cb:92:0c:a6:f7:cf:66:14:de:36:f4:
2b:72:60:0c:34:ba:56:e8:8b:36:96:ef:90:fd:2a:9e:5c:99:
bf:5e:69:2c:95:76:50:a4:97:ae:44:3d:b2:14:c0:6a:68:97:
ca:ae:f3:27:49:8b:f0:25:2a:09:fa:b4:53:87:03:4c:75:d1:
ac:69:8a:77:18:5a:7d:cc:34:e5:6e:75:cb:9b:c8:03:5e:19:
1c:8d:b1:d0:a8:bd:7c:63:38:1e:b1:34:cc:e6:84:ab:6f:7d:
3d:a1:30:c1:36:50:aa:bb:2a:d3:28:eb:08:29:4e:95:d5:00:
9f:99:93:a0
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUQ99q1kE0maK7xL3X3CHn9wFcQpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5ODYwMkMwRkZGREJDRDE2ODkzODBCMDVBQzRDRDY5
NEZBRjgzOTAeFw0yNjA1MTExNzM0NTFaFw0yNjA1MTIxOTU3NTFaMDMxMTAvBgNV
BAMTKDcxODhDNDRDQ0ZBMUY2NEMwRjlFQzhFQUJCM0EwNUJDNThDODI5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdSTEbpZSsDUmAJbAdQAijdrO
CyQgcLjHr8NWjwqN1ooUbkHx1ZOsXejlq1eVVV/7RmrHj4yClUbmTPTV5mJCgP58
JBYTJSlvzeddL3UpGbn0JHIlCa8gy52W61kNonCNd4CD4CWTHRpCSAEx04HrVqGB
JLP2MC1fMYUL7EyE6FwsPhOodPqK+lOGVUAD6gUpjDtWpKewpYQwKT8sweJRhlvW
jUmIPXrW+mTd47DGqk5cPJGGM6wmshblCQja7OE1TYy5fRF6cSBKNxX7qM8Ufbcw
Knfbw7z7Lw4FbRlGZvb4ILqiM0sSYdp2yVz0fWedLYYwThGMNbRi3jOlP2v9AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUcYjETM+h9kwPnsjquzoFvFjIKcUwHwYDVR0j
BBgwFoAUcZhgLA//280WiTgLBaxM1pT6+DkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkdaLzAv
NzE5ODYwMkMwRkZGREJDRDE2ODkzODBCMDVBQzRDRDY5NEZBRjgzOS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS83MTk4NjAyQzBGRkZEQkNEMTY4OTM4MEIwNUFDNENE
Njk0RkFGODM5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkdaLzAvNzE5ODYwMkMwRkZGREJDRDE2
ODkzODBCMDVBQzRDRDY5NEZBRjgzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHFjv5eD6YeS/tFwcKlC
O16kaKjkzkM1gygq43xXsbi2eUgnjN6hzuusHsDuqS6R4Dj3hymk2sdUMk7RHF76
KRsE/1F0dh86G+ODSfDcGE5SQYWJJBVV+eZlvpL7haYVymBwv0jyWaDD+DrVi7k6
5TqoN/V/MICBcTzyh7idRVJsrg4U0vHLkgym989mFN429CtyYAw0ulboizaW75D9
Kp5cmb9eaSyVdlCkl65EPbIUwGpol8qu8ydJi/AlKgn6tFOHA0x10axpincYWn3M
NOVudcubyANeGRyNsdCovXxjOB6xNMzmhKtvfT2hMME2UKq7KtMo6wgpTpXVAJ+Z
k6A=
-----END CERTIFICATE-----
Generated at Tue May 12 22:46:52 2026 by rpki-client