Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
File: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json)
Hash identifier: 2zGQOLTZeu6I0xHsBNkejNCwol+lXCoOpzQu3HR+0YY=
Subject key identifier: D8:7B:14:DE:70:30:7E:FD:0C:9C:0D:F9:2B:D2:B8:69:A1:9E:0B:20
Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
Certificate issuer: /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Certificate serial: 49AC399B55ABA3E0985F75C55AA72E3EDFE0B170
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
Manifest number: 05
Signing time: Mon 11 May 2026 17:58:30 +0000
Manifest this update: Mon 11 May 2026 17:53:30 +0000
Manifest next update: Tue 12 May 2026 17:58:30 +0000
Files and hashes: 1: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: 0mUYJwADMDjbbHzM4oiiCGvBsovPl7Az2BXEZhZAxQk=)
2: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ac:39:9b:55:ab:a3:e0:98:5f:75:c5:5a:a7:2e:3e:df:e0:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Validity
Not Before: May 11 17:53:30 2026 GMT
Not After : May 12 17:58:30 2026 GMT
Subject: CN=D87B14DE70307EFD0C9C0DF92BD2B869A19E0B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:62:a2:ed:9c:a1:63:0b:96:89:cb:dc:4f:
ea:4c:98:79:24:75:f7:67:82:3c:c0:1a:ee:f7:fe:
ff:c2:24:f5:16:37:b4:e1:73:52:b1:8c:6e:c8:fe:
4a:7f:2d:4a:88:c3:2b:6a:97:21:af:4a:bd:bb:f8:
47:22:97:46:47:67:96:84:ac:d9:ab:40:04:70:27:
41:76:e0:a8:86:b6:88:b4:54:e8:11:e1:73:1c:3b:
74:62:a4:0a:f7:04:54:62:1d:d1:14:c2:22:61:df:
3c:0c:d7:0f:30:4d:81:97:65:89:60:7e:16:66:26:
46:b8:11:25:b1:a9:a6:43:5f:27:c6:b3:59:8a:99:
4a:75:fa:65:f3:04:d7:d4:a1:59:c6:80:05:e8:88:
c0:26:e3:f3:5c:76:df:5d:4b:e6:b2:ea:a3:40:ce:
7b:3d:fd:7a:fa:0a:ff:d7:13:7f:22:53:38:e8:2c:
9e:87:25:ce:56:17:dc:81:d6:77:ea:eb:87:65:5f:
7e:f3:a7:53:37:67:1d:ac:6e:f3:e9:d6:f9:e8:69:
c9:c4:57:75:aa:96:3c:4b:30:9c:23:a3:50:22:57:
4c:bc:d8:18:c7:30:b1:bc:0a:ab:f5:c4:15:a3:e9:
f7:79:8d:47:af:e8:06:26:fc:dc:35:18:cf:4b:44:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:14:DE:70:30:7E:FD:0C:9C:0D:F9:2B:D2:B8:69:A1:9E:0B:20
X509v3 Authority Key Identifier:
keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f8:a1:8a:f7:30:26:f6:ef:8a:a2:a1:a7:e7:e4:07:21:8d:
7c:32:7b:b0:1a:18:70:7b:ff:4a:45:fb:ab:81:51:7e:03:68:
f6:32:c7:e9:27:91:f6:ee:95:26:94:27:d5:bb:be:a0:cf:37:
ca:27:ab:4c:69:20:af:5b:70:4c:be:cb:d9:aa:33:67:c2:35:
40:6f:83:8b:72:0f:67:d4:a1:65:30:2a:89:b7:24:58:e6:ff:
0f:24:e2:3d:03:70:93:8a:a9:b3:19:b3:36:d3:e0:d9:3b:48:
2e:d7:43:a3:5f:a5:01:9f:87:c6:43:f3:84:c8:10:82:98:94:
14:0a:95:eb:5c:35:9d:d7:c2:a2:bb:53:4e:ac:8c:0a:89:e7:
0d:b6:fb:d5:ff:65:20:90:0a:62:a2:02:6e:9a:ca:5d:5d:35:
ff:eb:d2:96:cc:ea:8f:a8:46:7c:8f:68:c0:5b:ec:92:1d:29:
31:14:54:c5:83:eb:f4:79:ac:ab:c4:d4:3d:0e:a3:85:14:79:
24:c3:3d:d5:b8:94:19:6d:49:70:0a:31:be:63:4c:d7:31:d1:
b2:d4:9c:b8:d9:be:52:5d:d1:de:33:07:0b:d3:0c:59:c1:d0:
dd:1b:da:77:ca:09:52:cd:43:0c:7a:d8:cb:b0:43:1e:a4:97:
f5:d2:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:59 2026 by rpki-client