Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json)
Hash identifier: zmD5XubMb5WoClPzojweDrnpizTZrv7dNxTrn+GjnPM=
Subject key identifier: A0:56:8B:F4:60:E0:4A:91:3F:B1:34:5A:45:DF:9F:FA:EE:27:6C:BD
Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54
Certificate serial: 0ECC74900CAC48392A96A4D644ED0C023A6253EE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:01:21 +0000
Manifest this update: Mon 11 May 2026 16:56:21 +0000
Manifest next update: Tue 12 May 2026 20:19:21 +0000
Files and hashes: 1: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=)
2: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=)
3: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: ZoJdRRtUol4GHhoA9psbqWd0x0l/rgWULMfGYVN6YMQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:cc:74:90:0c:ac:48:39:2a:96:a4:d6:44:ed:0c:02:3a:62:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54
Validity
Not Before: May 11 16:56:21 2026 GMT
Not After : May 12 20:19:21 2026 GMT
Subject: CN=A0568BF460E04A913FB1345A45DF9FFAEE276CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:82:41:f8:11:36:f4:b0:12:ba:b0:60:aa:
6d:8d:b2:d6:29:bd:f8:0a:6e:31:29:38:07:ae:8d:
9e:e6:8d:d8:58:aa:e1:c8:f8:7e:c3:d2:fa:c8:84:
75:1e:0f:c8:a1:7f:8e:b6:81:0e:29:f9:9c:8b:ae:
f2:cf:a1:88:0e:05:35:01:67:d9:c1:bb:82:b0:28:
d0:cb:50:81:e4:e4:79:39:82:35:d5:11:d6:73:9c:
ae:51:82:25:ee:54:f0:ea:54:75:86:7d:94:94:c3:
4d:5c:b3:0b:be:8d:39:40:ad:27:e0:b7:5a:cf:37:
12:00:19:0c:0e:6e:2f:79:61:9e:ee:0e:0a:78:a7:
e8:7b:54:91:7a:a1:19:15:a2:4c:ee:93:10:07:54:
f4:70:ec:ad:6e:c4:bf:25:5e:a8:ee:16:dc:94:d8:
1b:2b:f3:b0:ae:eb:3f:57:c4:0b:25:f5:ca:d6:c0:
03:a3:8e:5c:d7:0a:f8:03:30:b0:04:33:5d:bc:e0:
18:23:e4:05:ca:a5:9c:25:24:57:e4:03:3c:14:55:
46:34:71:f2:52:31:f0:cb:4c:ce:c6:d5:f4:a7:8d:
9f:57:80:13:5d:27:88:08:85:7c:f5:89:da:73:0b:
3a:90:4e:36:b8:31:e1:ed:83:91:54:ee:6c:bc:55:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:8B:F4:60:E0:4A:91:3F:B1:34:5A:45:DF:9F:FA:EE:27:6C:BD
X509v3 Authority Key Identifier:
keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a6:be:9b:47:e9:e2:d2:12:57:6d:8d:5b:17:94:40:ba:03:
1f:35:e7:16:48:44:ec:1c:e0:29:c5:4a:a0:a5:08:72:86:60:
56:fb:72:97:32:97:e0:b6:8d:fa:74:ea:7b:fb:dc:57:47:ea:
db:67:16:9c:a3:17:97:0b:c3:e5:20:db:af:b5:2f:27:5c:82:
e8:f8:37:3c:7d:fe:5c:42:7d:b9:db:e8:9a:67:6d:04:00:92:
fb:81:dc:95:87:ee:8f:67:e3:51:19:11:7c:80:66:ca:df:35:
2b:b6:0c:9e:bf:a2:92:42:7a:28:1b:fd:ed:fd:13:5f:8f:92:
ea:48:40:0f:a1:7d:1a:83:cd:94:69:fc:71:9a:f3:bf:ad:01:
05:dd:d2:4b:a7:e5:a7:d9:7b:66:98:67:75:1e:98:13:b3:4b:
5b:96:79:f5:be:83:43:9c:e4:d3:af:b1:f9:cb:6b:e6:74:90:
89:05:7c:8c:56:5c:5c:6a:cb:7f:b6:73:07:de:a2:be:bc:c6:
a3:65:4e:ea:4b:7a:50:d6:77:87:66:0d:93:04:0c:eb:76:7e:
39:80:80:18:24:3c:63:3d:a3:b7:02:df:5b:bf:81:4d:54:a5:
3e:61:7c:7a:80:f0:9d:2d:80:54:9c:4c:78:9a:35:b9:f2:f7:
9b:9b:24:45
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUDsx0kAysSDkqlqTWRO0MAjpiU+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy
MjlDNUE1NDAeFw0yNjA1MTExNjU2MjFaFw0yNjA1MTIyMDE5MjFaMDMxMTAvBgNV
BAMTKEEwNTY4QkY0NjBFMDRBOTEzRkIxMzQ1QTQ1REY5RkZBRUUyNzZDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhIJB+BE29LASurBgqm2NstYp
vfgKbjEpOAeujZ7mjdhYquHI+H7D0vrIhHUeD8ihf462gQ4p+ZyLrvLPoYgOBTUB
Z9nBu4KwKNDLUIHk5Hk5gjXVEdZznK5RgiXuVPDqVHWGfZSUw01cswu+jTlArSfg
t1rPNxIAGQwObi95YZ7uDgp4p+h7VJF6oRkVokzukxAHVPRw7K1uxL8lXqjuFtyU
2Bsr87Cu6z9XxAsl9crWwAOjjlzXCvgDMLAEM1284Bgj5AXKpZwlJFfkAzwUVUY0
cfJSMfDLTM7G1fSnjZ9XgBNdJ4gIhXz1idpzCzqQTja4MeHtg5FU7my8VW8ZAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUoFaL9GDgSpE/sTRaRd+f+u4nbL0wHwYDVR0j
BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv
QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2
RjIyOUM1QTU0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvQUFFRDM1NDhCNjQ3QzlCOTU4
MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACumvptH6eLSEldtjVsX
lEC6Ax815xZIROwc4CnFSqClCHKGYFb7cpcyl+C2jfp06nv73FdH6ttnFpyjF5cL
w+Ug26+1Lydcguj4Nzx9/lxCfbnb6JpnbQQAkvuB3JWH7o9n41EZEXyAZsrfNSu2
DJ6/opJCeigb/e39E1+PkupIQA+hfRqDzZRp/HGa87+tAQXd0kun5afZe2aYZ3Ue
mBOzS1uWefW+g0Oc5NOvsfnLa+Z0kIkFfIxWXFxqy3+2cwfeor68xqNlTupLelDW
d4dmDZMEDOt2fjmAgBgkPGM9o7cC31u/gU1UpT5hfHqA8J0tgFScTHiaNbny95ub
JEU=
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:29 2026 by rpki-client