Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
File: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft (raw, json)
Hash identifier: RekfrKxc31iZPOQ1qosaYgy4TqbkW8p/Rssk0rsCm3w=
Subject key identifier: AE:41:7B:6F:13:79:0F:7C:B6:5E:41:DD:41:C4:25:78:BF:DD:A0:34
Authority key identifier: B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB
Certificate issuer: /CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
Certificate serial: 0CA4C639FCC1E72DDD519EEB95D1DC380BB964A0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:20:16 +0000
Manifest this update: Mon 11 May 2026 17:15:16 +0000
Manifest next update: Tue 12 May 2026 17:28:16 +0000
Files and hashes: 1: 3130332e3139312e32322e302f32332d3234203d3e203633383939.roa (hash: 27hTm/nhNb00WioUC9L5MAuYLPzBS9aBOsaC8RsQYps=)
2: B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl (hash: D5qL8mVDmDWVKE+Nm35m/0M87dONUzmb489LXaXmYA8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a4:c6:39:fc:c1:e7:2d:dd:51:9e:eb:95:d1:dc:38:0b:b9:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB
Validity
Not Before: May 11 17:15:16 2026 GMT
Not After : May 12 17:28:16 2026 GMT
Subject: CN=AE417B6F13790F7CB65E41DD41C42578BFDDA034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:55:f0:bb:69:23:48:2b:92:b5:23:0d:c1:
61:ff:b1:f0:c9:89:d8:1f:7b:b6:69:a7:fd:0b:75:
09:a4:04:bc:2a:c9:2d:71:20:75:d3:02:87:5b:d8:
ea:bd:bd:60:9c:60:16:4e:b4:6f:fc:8b:e9:6b:70:
a2:7c:91:02:e5:3e:ef:9a:a2:32:8b:e4:5b:53:33:
a1:5d:7b:e1:5c:17:84:29:8f:9c:8a:a8:8c:fc:8b:
9a:97:d8:4e:d7:2a:a9:10:89:ee:e7:c6:3c:4a:b9:
77:47:72:1e:2b:de:50:56:cd:47:f0:ed:89:97:e2:
7e:64:f4:f8:db:1f:60:b3:e0:85:e9:7f:02:6f:c8:
05:49:7d:fa:03:81:d7:4f:89:41:b7:95:21:d6:63:
f0:ff:0f:20:29:45:e1:0b:49:be:2a:fd:6e:f1:8c:
25:e0:86:78:ae:47:aa:f2:b5:96:c2:e4:8a:a1:d8:
48:30:d3:c1:63:eb:a4:6e:65:da:48:2e:3c:a2:b4:
13:11:2c:9d:3c:a0:c6:3d:1e:cd:36:f4:54:90:db:
58:ef:37:86:ab:86:ff:ce:9e:da:fa:20:af:d8:57:
fd:e5:e2:25:b3:e3:ac:58:3d:d3:91:8e:74:81:9a:
91:0c:a9:ed:94:f3:ca:eb:d0:72:54:1b:4c:22:c8:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:7B:6F:13:79:0F:7C:B6:5E:41:DD:41:C4:25:78:BF:DD:A0:34
X509v3 Authority Key Identifier:
keyid:B4:69:C8:AF:88:F1:41:7D:F3:E5:5E:0B:C5:EE:CA:DA:92:50:E5:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTUSTCCADM/0/B469C8AF88F1417DF3E55E0BC5EECADA9250E5CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:72:8e:fb:ac:8c:07:9f:88:58:29:ad:69:be:f6:c5:54:ed:
02:c9:a5:2c:db:13:e8:62:bf:05:be:51:f8:72:f8:cf:3a:b0:
c9:02:9e:b9:1c:ed:41:30:bc:77:df:ad:aa:2d:93:05:ed:d2:
92:fa:f9:1d:a8:9d:57:18:db:14:0c:6e:66:f6:21:fa:2d:a2:
97:f2:8b:3f:52:62:f1:8f:01:28:0b:f3:f5:49:1d:81:91:75:
98:ca:69:ae:e4:aa:89:42:fa:85:54:2b:36:fb:01:d6:1b:fd:
55:fb:2e:11:47:34:46:46:8c:74:14:93:7c:c3:ba:2c:bf:62:
a1:53:cd:d2:63:33:de:5d:e1:8c:92:12:8c:38:79:70:d8:e4:
0c:ff:e1:ac:f7:77:7f:ec:14:2d:2c:6b:5d:36:18:a3:a4:f3:
55:3f:b1:7a:27:05:de:5f:a8:92:0c:c4:69:d6:66:cb:71:62:
91:5e:9b:db:80:da:5c:6b:75:8a:38:c8:0d:8b:17:60:2d:f5:
0a:bc:10:ec:89:49:f5:68:fb:5c:65:ae:d6:90:bd:0d:f9:84:
fd:c9:fe:91:d1:3b:a2:06:d3:17:4f:0e:f3:c9:7f:e6:2c:3c:
11:78:17:f3:d9:f0:d2:76:6e:68:a4:57:90:61:f7:0d:57:a1:
7f:40:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:36 2026 by rpki-client