
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json)
Hash identifier: cUXoBhUwlOALs+2avsYMw29J5IcX4ppuHdNkhcDel1w=
Subject key identifier: CF:98:BA:EE:E7:82:A0:A7:B8:65:CF:95:6F:82:EA:CD:5C:61:94:6F
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial: 39A51727B43D38F5B3F58BD18FB2A65D2C8E6E2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:57:14 +0000
Manifest this update: Mon 11 May 2026 17:52:14 +0000
Manifest next update: Tue 12 May 2026 21:39:14 +0000
Files and hashes: 1: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: qpVund2V+sDMNtpZ17UygYNwILXx9lf0YXgGUQDpE/Q=)
2: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=)
3: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a5:17:27:b4:3d:38:f5:b3:f5:8b:d1:8f:b2:a6:5d:2c:8e:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
Validity
Not Before: May 11 17:52:14 2026 GMT
Not After : May 12 21:39:14 2026 GMT
Subject: CN=CF98BAEEE782A0A7B865CF956F82EACD5C61946F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:bb:6f:79:0f:fa:42:e4:18:43:57:29:ac:
ed:c5:9a:ef:11:6e:2d:e8:cb:be:e4:27:f3:d7:43:
30:bd:ce:bd:5f:76:c2:5f:8c:6a:95:36:76:36:e0:
a6:c1:f7:b4:fd:af:75:9a:9b:79:24:85:f0:d2:e5:
b3:7c:3c:65:52:33:35:de:4e:9c:fa:e6:83:ca:0b:
b0:50:1f:0a:5e:c0:aa:98:f6:22:0d:3a:1f:4c:9d:
4d:85:33:86:e9:99:80:f1:e6:ad:71:da:4a:45:20:
32:0a:70:df:36:d3:f7:6d:0d:28:74:05:37:ca:0b:
b5:fb:01:7d:a0:5e:5f:45:7a:57:5f:67:53:46:ef:
62:11:a2:d1:de:07:18:f3:98:e7:bc:75:a5:e8:3b:
d6:4f:0a:bf:11:41:b8:77:53:24:93:88:da:0c:3c:
c1:a9:6f:b7:c1:d0:0f:45:65:0a:82:da:c1:d4:a6:
00:ae:d8:10:87:9c:29:0c:52:9b:35:21:3c:05:c6:
32:b4:9e:3a:23:c1:29:08:e6:34:0f:f5:93:01:a6:
a4:d2:34:d6:e6:0d:af:60:42:8f:4f:2e:a9:3a:ae:
4b:16:ed:86:24:4e:c2:07:91:b0:0d:26:11:c8:1c:
8d:7f:14:57:fa:51:58:73:81:18:0c:d5:bd:66:d6:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:98:BA:EE:E7:82:A0:A7:B8:65:CF:95:6F:82:EA:CD:5C:61:94:6F
X509v3 Authority Key Identifier:
keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8a:1b:d9:16:06:8e:42:a8:5a:dc:48:8d:83:6b:b5:da:ca:
60:0f:07:76:7b:48:c1:bb:5f:09:51:62:61:de:0e:aa:be:f1:
36:fa:f4:ea:48:64:1f:22:0e:2e:50:46:d4:2e:4e:ca:f0:fa:
b9:74:ad:06:17:25:4e:3d:12:08:f1:ff:4c:9b:eb:c4:9b:d1:
6f:89:81:f1:11:21:c9:03:be:cf:a5:f1:ca:29:67:70:b7:e9:
a6:21:21:48:1f:f3:05:08:96:6e:7c:97:79:10:36:56:59:9a:
29:38:7a:08:59:c2:04:a3:29:e4:de:9a:98:53:ad:ae:bf:30:
2d:10:4a:02:10:04:74:87:b4:2d:fd:6b:9d:bf:f1:b4:36:5a:
b3:ea:0a:c0:f5:98:93:3a:50:bb:7e:20:13:3f:2e:55:b6:74:
3f:9c:9d:13:55:fb:c5:3d:c8:9a:b0:7c:82:ae:12:55:d0:68:
e7:f5:2a:e8:c5:64:c0:a7:28:db:05:1f:7f:01:16:bf:22:4a:
a6:bc:03:09:6f:b8:d1:25:ef:f2:da:b2:d7:c2:a8:6a:8b:e9:
94:bd:f5:10:1c:2c:90:1d:85:ff:3d:4e:da:fd:ac:38:b2:db:
98:66:36:2e:60:8a:79:7b:29:af:ac:ec:a0:d7:1c:d5:8b:ac:
b4:3c:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:44 2026 by rpki-client