Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
File: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft (raw, json)
Hash identifier: V+IRL5Ii78iBouKim6MUP4Jf9RfphS3BwtNOOO/63K8=
Subject key identifier: B3:92:00:E4:DA:9C:F2:F3:7F:9D:0A:8F:AA:84:14:3E:D7:E8:71:F0
Authority key identifier: 0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
Certificate issuer: /CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Certificate serial: 1B99C86AFD4686FDAFB9F43D718882EE1300F97C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:39:30 +0000
Manifest this update: Mon 11 May 2026 17:34:30 +0000
Manifest next update: Tue 12 May 2026 19:16:30 +0000
Files and hashes: 1: 0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl (hash: ecH/9a1kNa/+XnIdJ4UtkxleyYNGOk1yFgPLGPwOxg8=)
2: 3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa (hash: zTyEt/E/NAPbMASFWkS4yWV2xmBH0gl0BW2wGqKTvmQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:99:c8:6a:fd:46:86:fd:af:b9:f4:3d:71:88:82:ee:13:00:f9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B
Validity
Not Before: May 11 17:34:30 2026 GMT
Not After : May 12 19:16:30 2026 GMT
Subject: CN=B39200E4DA9CF2F37F9D0A8FAA84143ED7E871F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:71:61:49:78:9c:f1:7c:53:19:4c:94:08:
51:45:f7:53:f5:a2:2b:01:da:64:2c:60:8c:f5:cc:
a8:d3:71:74:88:bf:a4:3d:65:2c:d6:6d:00:7f:fc:
7d:27:59:7e:e8:ef:03:9f:b8:63:a5:f7:e1:a4:5b:
54:e2:1f:92:36:50:83:a3:77:d0:0a:4d:19:d4:a5:
7c:78:e9:11:83:a3:2d:33:f2:1e:90:96:a5:7e:66:
63:20:d0:50:16:8c:6e:c0:97:45:38:87:de:24:c2:
02:5c:ea:3d:a4:59:c9:3a:7c:96:f9:cb:1c:3b:d4:
72:c4:7d:02:ff:22:3b:04:e8:56:4e:13:03:d1:3e:
58:81:46:5c:d0:f3:51:1f:f3:aa:48:d5:65:ae:1a:
11:7d:fe:db:b6:a4:4f:cd:0e:3d:34:84:71:14:95:
7d:c0:c4:f0:e8:97:de:1d:7b:a9:7b:cc:57:67:fc:
f3:11:fa:bf:0d:16:b0:82:d3:2a:34:3a:f5:4c:16:
fe:a6:fe:77:48:83:87:d2:ff:11:ce:67:6a:03:b9:
34:3e:a1:78:ce:08:d0:6d:e4:9b:09:59:9f:a1:6f:
4b:c0:fc:51:b2:8e:b0:31:da:97:a6:30:a5:d1:b0:
17:20:03:4d:6b:a0:ce:ce:17:59:7a:0f:74:7a:0b:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:00:E4:DA:9C:F2:F3:7F:9D:0A:8F:AA:84:14:3E:D7:E8:71:F0
X509v3 Authority Key Identifier:
keyid:0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a5:f6:81:39:01:34:9c:7d:81:c6:be:ce:be:88:1a:fc:9d:
39:2b:9b:1a:12:94:84:4b:e8:b1:3c:dd:b0:a2:9c:a4:29:9c:
e1:13:36:5f:f8:39:c5:67:31:4d:e1:4d:c7:e6:ff:78:3c:32:
81:db:a3:8b:28:1a:f1:f3:a6:9e:06:e5:c4:5a:cc:9f:66:8f:
8e:84:a5:ec:44:c0:ad:de:62:42:af:67:f5:93:44:f1:d4:09:
a4:9a:21:2a:1c:2a:3f:61:41:be:1f:7a:2f:5a:db:7e:2e:37:
c4:bf:d5:ed:dc:38:79:cd:93:05:ab:a0:75:33:b8:09:3a:0a:
18:b5:40:3a:be:c7:29:b2:eb:53:1c:32:b4:97:02:7a:e2:68:
61:70:79:f7:44:fc:2e:23:5b:77:fe:18:7c:08:87:23:c3:7b:
07:2c:07:84:92:57:fd:fa:be:44:7c:f4:4b:d7:2e:ff:ed:a3:
aa:22:a6:ba:b8:4d:8d:0d:fe:f3:c9:4a:0d:33:fd:4b:06:5f:
fe:4a:6b:b9:34:89:12:e1:4e:a1:8d:f2:64:37:de:c7:f0:5a:
a5:cd:37:03:10:6a:54:3b:7c:a1:1f:a8:e8:51:b0:dd:de:3d:
a6:7a:a4:98:87:27:0b:4e:f6:b7:01:26:dd:f9:a6:4b:bd:95:
42:97:7a:a5
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUG5nIav1Ghv2vufQ9cYiC7hMA+XwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5QTJC
OTBCNUIxQjAeFw0yNjA1MTExNzM0MzBaFw0yNjA1MTIxOTE2MzBaMDMxMTAvBgNV
BAMTKEIzOTIwMEU0REE5Q0YyRjM3RjlEMEE4RkFBODQxNDNFRDdFODcxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysnFhSXic8XxTGUyUCFFF91P1
oisB2mQsYIz1zKjTcXSIv6Q9ZSzWbQB//H0nWX7o7wOfuGOl9+GkW1TiH5I2UIOj
d9AKTRnUpXx46RGDoy0z8h6QlqV+ZmMg0FAWjG7Al0U4h94kwgJc6j2kWck6fJb5
yxw71HLEfQL/IjsE6FZOEwPRPliBRlzQ81Ef86pI1WWuGhF9/tu2pE/NDj00hHEU
lX3AxPDol94de6l7zFdn/PMR+r8NFrCC0yo0OvVMFv6m/ndIg4fS/xHOZ2oDuTQ+
oXjOCNBt5JsJWZ+hb0vA/FGyjrAx2pemMKXRsBcgA01roM7OF1l6D3R6C4FhAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUs5IA5Nqc8vN/nQqPqoQUPtfocfAwHwYDVR0j
BBgwFoAUDckG6sivoW9UyPnvnsy5orkLWxswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tJUy8x
LzBEQzkwNkVBQzhBRkExNkY1NEM4RjlFRjlFQ0NCOUEyQjkwQjVCMUIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5
QTJCOTBCNUIxQi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLSVMvMS8wREM5MDZFQUM4QUZBMTZG
NTRDOEY5RUY5RUNDQjlBMkI5MEI1QjFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKX2gTkBNJx9gca+
zr6IGvydOSubGhKUhEvosTzdsKKcpCmc4RM2X/g5xWcxTeFNx+b/eDwygdujiyga
8fOmngblxFrMn2aPjoSl7ETArd5iQq9n9ZNE8dQJpJohKhwqP2FBvh96L1rbfi43
xL/V7dw4ec2TBaugdTO4CToKGLVAOr7HKbLrUxwytJcCeuJoYXB590T8LiNbd/4Y
fAiHI8N7BywHhJJX/fq+RHz0S9cu/+2jqiKmurhNjQ3+88lKDTP9SwZf/kpruTSJ
EuFOoY3yZDfex/Bapc03AxBqVDt8oR+o6FGw3d49pnqkmIcnC072twEm3fmmS72V
Qpd6pQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:22 2026 by rpki-client