Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
File: C4FE0149FC774090A5B6304E8968380A1F1B0426.mft (raw, json)
Hash identifier: 18HJn7945jA2PlCrfIft+exUlNnDsuh10NcvqoLcGLU=
Subject key identifier: 55:97:41:63:DC:BD:5A:5A:B3:00:DD:72:02:05:C6:5B:33:A6:78:2E
Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Certificate serial: 1F055691D3F16C84186C77CD0CC852DAE06DAA23
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:31:18 +0000
Manifest this update: Mon 11 May 2026 17:26:18 +0000
Manifest next update: Tue 12 May 2026 19:03:18 +0000
Files and hashes: 1: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (hash: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ=)
2: C4FE0149FC774090A5B6304E8968380A1F1B0426.crl (hash: XaxWb2YprqWaxZsIvPok7XGrsVQgiDRao/JI/Z42L5o=)
3: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (hash: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:05:56:91:d3:f1:6c:84:18:6c:77:cd:0c:c8:52:da:e0:6d:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426
Validity
Not Before: May 11 17:26:18 2026 GMT
Not After : May 12 19:03:18 2026 GMT
Subject: CN=55974163DCBD5A5AB300DD720205C65B33A6782E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:c0:55:0a:f6:1c:b2:48:ec:f1:e5:e7:f4:
02:de:26:66:23:5a:fe:25:c4:01:14:bd:ad:9f:a1:
41:78:ec:66:24:ce:6d:d9:79:df:f4:dd:16:d5:03:
1d:cc:82:02:78:9d:e9:80:e0:74:a3:02:de:e0:49:
43:dc:33:00:91:ab:bc:3d:6d:c1:15:e8:cc:62:e8:
82:70:6c:cd:12:8e:3a:6e:bf:c1:02:f7:5d:b6:5d:
45:68:0a:05:fd:75:e0:13:0a:aa:82:29:d7:dc:5b:
f9:9a:4a:b7:2e:a9:4c:95:d9:27:76:fa:62:fd:eb:
3b:db:11:f8:b5:8a:91:0c:0a:17:c4:1d:36:39:08:
26:04:32:cc:21:a4:57:a2:b6:8c:da:be:25:a5:34:
f7:13:c3:14:64:cb:c7:c0:a6:17:e9:97:08:35:b1:
20:95:f9:c7:68:85:20:27:64:1f:15:be:67:64:d6:
1a:1c:91:79:f3:4d:96:d1:e2:cd:43:1d:85:93:d2:
45:b9:ec:10:08:69:ab:d3:c0:89:87:bc:14:2c:e4:
2c:ce:d4:89:75:b8:39:0a:aa:c3:9c:95:31:73:2e:
94:bb:29:45:b1:98:3b:3f:00:4e:18:93:9e:ed:ed:
45:55:19:58:82:eb:ff:90:a1:59:8b:c5:a0:ea:42:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:41:63:DC:BD:5A:5A:B3:00:DD:72:02:05:C6:5B:33:A6:78:2E
X509v3 Authority Key Identifier:
keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7c:2b:6c:d7:47:9b:41:5e:30:c4:7e:35:88:14:48:5c:3d:
3c:4a:b4:01:7f:c0:04:26:d5:3a:d3:c8:40:2d:d1:7a:c7:8e:
ec:41:4d:8e:32:3b:20:76:f7:28:96:96:81:e3:de:de:ac:d8:
63:42:1f:3a:8d:c0:9f:f3:30:96:30:40:b9:9d:6b:91:7f:d8:
28:68:c5:b3:dd:ab:25:41:c8:b2:0a:4a:fd:ad:5c:ec:da:27:
fa:5d:fc:52:09:19:96:c0:b5:a7:97:08:10:29:2e:6a:e9:74:
bc:dd:b2:4f:5f:76:5c:4e:27:c0:9b:8a:c6:48:bb:3b:b2:d1:
13:99:f5:14:f6:9b:4e:1a:8a:53:95:a6:00:ee:3f:c6:d6:03:
7c:6d:cb:de:aa:7d:8f:16:59:ba:4e:46:84:54:72:6c:8c:14:
4a:7a:43:88:e9:55:b2:25:33:8f:f1:8e:27:31:f4:0a:79:65:
3b:d3:0b:73:d0:1f:17:4f:83:4d:57:d2:ec:da:ac:1e:ea:f2:
04:cc:a1:a2:62:f0:7f:e8:c3:18:fd:95:c4:90:27:d5:20:a3:
6e:a8:60:2b:41:08:51:03:80:1e:25:a7:a0:c5:1f:53:68:b3:
6c:a9:f0:63:eb:66:99:e5:c0:14:e4:98:fd:1a:ff:77:a8:21:
cb:ac:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:38 2026 by rpki-client