Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier: 4JEJg6Aq5UmsHo2jgz4nKv1ZpZLlI2h5igGRD0/4cJQ=
Subject key identifier: 66:89:04:48:7C:48:9A:F0:6D:09:7B:B9:10:98:9C:13:DB:0E:A4:0F
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial: 6B50ECAA06D7C2A9428C7A0F4E1C7C2A2AB40FDB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:59:03 +0000
Manifest this update: Mon 11 May 2026 17:54:03 +0000
Manifest next update: Tue 12 May 2026 19:34:03 +0000
Files and hashes: 1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: ZJ1CA+mq3KbVBoDJwHZEnOrkMr8jbG4B6IHKWn/5U6Q=)
2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:50:ec:aa:06:d7:c2:a9:42:8c:7a:0f:4e:1c:7c:2a:2a:b4:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Validity
Not Before: May 11 17:54:03 2026 GMT
Not After : May 12 19:34:03 2026 GMT
Subject: CN=668904487C489AF06D097BB910989C13DB0EA40F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:90:4b:8e:b2:60:02:d2:59:18:56:ed:09:
f3:16:7e:95:fc:0c:5b:a6:08:01:e2:aa:f6:fc:8a:
2c:60:f1:a5:f0:6f:bf:ff:43:b0:58:95:57:7a:d4:
11:b4:99:4c:04:57:9b:08:cb:d0:11:16:87:e5:21:
0d:1d:af:4a:e1:ee:d7:96:7d:b9:89:e6:03:3f:77:
c6:f5:a3:27:d0:5d:7e:1e:52:2d:69:12:2c:b0:54:
5e:19:f4:16:0f:32:3e:7f:ca:f0:bf:9a:5d:33:64:
16:33:0b:a6:cd:63:17:4f:6b:ef:30:27:ca:6b:d4:
b1:ab:b3:e2:01:79:e2:62:b2:16:e6:5e:38:a7:40:
94:d5:fc:b2:97:4e:c4:84:fa:4c:d1:42:4b:01:7d:
49:9e:dc:0a:45:35:8c:6a:42:2f:29:3d:86:c3:1b:
46:1d:c3:b5:60:99:31:27:7e:79:e7:3c:e0:0e:d4:
8f:fd:f3:02:41:b3:34:c3:db:c6:ab:ef:49:2f:82:
85:87:df:3f:f3:b6:11:4e:4a:4a:8e:cf:9b:4d:c2:
c9:b7:18:b7:90:84:00:4b:af:42:22:24:6f:f5:0d:
96:a1:ac:a9:7f:b3:d0:7d:17:3f:c4:60:80:c6:05:
5b:89:57:b7:99:7d:31:43:c4:cf:74:11:5c:b7:e1:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:04:48:7C:48:9A:F0:6D:09:7B:B9:10:98:9C:13:DB:0E:A4:0F
X509v3 Authority Key Identifier:
keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2e:45:a3:10:a3:5c:ae:84:46:55:68:33:f4:86:85:5b:53:
95:7b:86:2e:08:20:73:47:69:bf:9d:ec:a9:04:36:8a:06:a6:
83:f8:0c:33:f4:00:be:ec:85:87:b6:db:bb:3b:95:41:3c:ed:
9a:ee:37:2f:73:d9:af:eb:bd:79:42:ba:a6:88:02:1d:d2:5a:
58:50:e3:13:18:dc:da:5e:ca:bb:b2:68:96:31:c3:eb:6f:3b:
ed:9e:e5:88:d6:02:66:2d:f1:59:dd:2b:12:ce:ee:17:84:be:
60:d4:e6:c5:09:5c:4a:c1:c0:39:24:e1:98:bd:e9:49:6c:89:
40:92:b2:da:52:91:ab:a1:fa:64:3f:4b:46:ee:f2:4a:a2:2c:
c1:5f:10:23:f8:66:08:bc:aa:07:a5:31:94:0b:5c:cd:2b:53:
d6:fb:3b:e3:03:95:2e:e4:71:33:ee:56:99:fc:35:4b:13:6d:
cc:ef:a7:4c:4c:ba:13:4d:97:d1:7d:0f:b2:44:c5:90:28:be:
15:5a:0d:a9:40:a0:77:67:b9:ec:a6:7b:78:42:ee:e1:2d:ff:
1a:b9:0a:d6:86:70:48:0c:9e:69:00:b4:c3:9e:03:59:77:d3:
53:9f:38:e2:83:07:bc:f0:e7:48:42:00:06:a0:bf:b6:85:e1:
a7:a8:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:03 2026 by rpki-client