Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
File: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft (raw, json)
Hash identifier: RjdLPqZU+qWnzwdDcv59/R3ugeKqvL/WLErPdCpUCA4=
Subject key identifier: 7F:BB:E6:DB:42:B8:63:66:C9:EC:AA:3A:52:62:AB:BD:6C:FB:1C:34
Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
Certificate issuer: /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Certificate serial: 2BAFD3C3DA672F49113216F422504971CF38B10C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:38:58 +0000
Manifest this update: Mon 11 May 2026 17:33:58 +0000
Manifest next update: Tue 12 May 2026 18:56:58 +0000
Files and hashes: 1: 3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (hash: 2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=)
2: 6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl (hash: jwATNjWXSmMubs7gLcESlEsxD37Wyqkvqrxuc432twI=)
3: 3136302e3138372e3130302e302f32332d3234203d3e20313532363138.roa (hash: ReCvGN0RaLIF0GT345qHVTZeOV9Xxm1dcLiUZvQe6oQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:af:d3:c3:da:67:2f:49:11:32:16:f4:22:50:49:71:cf:38:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Validity
Not Before: May 11 17:33:58 2026 GMT
Not After : May 12 18:56:58 2026 GMT
Subject: CN=7FBBE6DB42B86366C9ECAA3A5262ABBD6CFB1C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:5a:24:b7:66:cb:e4:b4:27:8d:f8:21:47:
1a:e5:06:d5:cc:72:49:40:32:dd:33:a2:7d:59:dd:
10:e7:a1:13:af:86:39:b0:ab:31:37:07:cf:7b:16:
42:1e:d9:a2:20:6d:2f:a8:79:d9:12:48:96:ef:9d:
a4:37:13:2b:29:9a:f7:19:33:ef:00:70:3b:37:fb:
68:da:61:f2:1c:2b:6b:c1:99:b8:74:62:87:94:a5:
68:9b:b9:57:ed:7f:1c:cf:59:71:21:1e:e4:84:d9:
7a:09:dd:6a:df:10:ca:bd:f7:89:e2:38:fa:f5:ba:
f8:db:00:aa:7c:af:73:73:82:5f:2d:80:40:53:a3:
69:77:57:eb:9c:8c:1a:9c:ae:9b:c9:37:5d:7c:76:
f3:6b:22:4d:c6:56:c0:12:c5:c9:2d:e4:a8:65:5e:
af:2a:e5:f3:e9:3e:05:53:64:32:0f:cd:40:9c:54:
c1:a5:ff:1b:e7:74:cf:5b:51:d8:b6:c9:7d:52:92:
eb:90:e9:9d:a2:8d:77:ac:12:e0:97:16:1f:de:d6:
b3:ad:27:85:7e:19:b4:6f:71:06:76:61:db:4e:ac:
56:30:fc:20:91:6d:07:0c:3b:2c:78:99:44:24:b2:
cb:22:7c:ca:a5:bb:16:ca:1b:65:27:c5:b8:dc:f7:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:E6:DB:42:B8:63:66:C9:EC:AA:3A:52:62:AB:BD:6C:FB:1C:34
X509v3 Authority Key Identifier:
keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:a1:04:80:2d:c3:0d:76:e8:d6:b3:55:d2:64:61:4a:21:
b6:bf:e2:00:73:79:d6:62:bc:4a:01:6c:37:97:b5:74:c2:fc:
6b:a8:12:0e:ec:4a:e0:19:7f:89:44:f4:72:81:23:e7:d3:26:
55:9b:72:f1:cf:83:91:b3:e1:54:ec:33:60:2d:67:62:35:cc:
ef:bf:cc:7b:9a:b4:20:b3:bf:cd:e5:c4:40:fe:5f:54:f8:95:
08:5f:e6:06:5d:b7:3b:bf:d7:ac:ec:1a:ce:a0:57:11:24:65:
73:16:f1:a7:05:b4:f9:7a:d0:bd:4e:7d:31:76:0b:7f:4c:45:
5f:ed:36:ef:b5:a3:73:5a:05:0a:12:84:20:0a:8d:4b:f4:33:
81:7a:c0:04:89:de:7a:20:16:3c:03:06:b5:07:ec:cc:75:c1:
9d:51:a2:75:45:2e:cd:4a:00:e1:99:b8:27:f6:80:8c:b2:0a:
18:03:05:bf:98:d8:cd:a7:73:34:b6:a4:44:2f:33:60:b0:e3:
6c:00:ec:16:60:08:e2:69:e6:82:79:ad:f8:0e:38:6c:82:9c:
f7:89:20:1a:64:90:00:9b:d9:d4:12:6c:67:87:8e:79:3d:b1:
d7:93:56:89:57:d3:c8:84:f6:c8:83:cf:56:35:15:41:3c:0e:
46:d0:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:16 2026 by rpki-client