Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
File: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft (raw, json)
Hash identifier: 0+2dG7vDAZ9HKC/Dn5M3Dg8bHh6nthM+1wRfUbxcAiQ=
Subject key identifier: 20:51:40:EB:8B:6E:36:2C:07:C4:ED:91:5B:7A:6F:04:B2:11:5E:2A
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial: 5CE55FFE245EBBF0E2C90F3EA910CA7F5E7158C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:15:25 +0000
Manifest this update: Mon 11 May 2026 17:10:25 +0000
Manifest next update: Tue 12 May 2026 18:01:25 +0000
Files and hashes: 1: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (hash: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=)
2: D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl (hash: FiV/bTT/0Wu5+AFmhtczTztLJ2auP8sN9g4ttTetauA=)
3: 3130332e3132362e38382e302f32322d3234203d3e203138303436.roa (hash: WYxsc8T18C1jcbx9ZCaeGlpS/rFD1h17zovXNmt5VJk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e5:5f:fe:24:5e:bb:f0:e2:c9:0f:3e:a9:10:ca:7f:5e:71:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Validity
Not Before: May 11 17:10:25 2026 GMT
Not After : May 12 18:01:25 2026 GMT
Subject: CN=205140EB8B6E362C07C4ED915B7A6F04B2115E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:bb:58:ed:8d:ee:68:4f:c6:a0:3a:3e:ed:
1e:4a:91:6a:5f:e2:19:87:2e:cd:d3:7a:5d:d6:37:
0a:35:02:82:06:ce:4d:9f:38:d5:33:74:0d:88:90:
31:f5:e9:c2:cc:64:6b:95:0b:f4:74:7f:fd:aa:3a:
85:f6:c9:90:4c:5c:56:ec:46:ae:77:49:49:0b:48:
48:2f:fa:02:95:40:ed:2d:c0:66:20:0b:12:a6:98:
7e:c2:00:cc:bd:a8:1c:87:af:34:3d:02:bc:cc:8f:
70:f4:05:b1:cb:f9:91:b3:d6:2b:7e:41:da:07:f2:
58:61:a1:8d:de:fe:7b:56:91:94:24:3a:20:d6:5d:
b6:73:b5:21:70:d8:ee:1e:a0:85:37:d6:75:7c:a3:
70:c6:5a:55:c5:6d:c6:29:c4:e5:1e:3f:ca:63:08:
81:9d:8e:e8:a5:ae:53:ef:63:e0:94:82:de:8a:49:
70:ab:d4:17:2f:1d:17:3d:32:3b:d0:63:b0:53:ce:
3e:16:0d:99:d0:af:f3:5a:d0:68:6e:39:e0:29:e1:
01:87:c0:de:db:55:25:e5:21:b6:7a:9f:20:43:63:
07:9f:e8:8f:8d:65:54:a5:0e:41:dc:b7:2a:b6:ce:
d0:41:19:8a:93:9f:55:8d:ac:6f:19:e6:ab:e3:20:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:51:40:EB:8B:6E:36:2C:07:C4:ED:91:5B:7A:6F:04:B2:11:5E:2A
X509v3 Authority Key Identifier:
keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:be:44:ae:00:1b:58:2d:f4:d6:a2:82:d7:97:e1:26:01:35:
fa:1c:43:f2:ca:54:41:fb:15:7e:82:69:08:89:f9:38:07:f4:
ca:4b:9e:df:1d:8d:05:dd:93:b0:6b:43:9a:0b:08:2a:43:fb:
55:a2:4a:6a:88:6b:82:8c:58:94:a5:1d:e7:a5:4d:ae:dc:df:
b4:58:a3:c8:08:2a:fc:e1:4e:a0:58:6f:9b:57:c9:47:1b:43:
d4:54:0d:fd:da:11:0a:f7:90:48:46:65:bb:1d:ec:45:6b:ed:
2e:26:b1:4a:de:07:ec:f7:f9:6b:e3:8d:10:d5:1c:f8:eb:fe:
38:3d:be:a1:93:64:a2:dc:ba:19:a0:ee:19:4d:a2:79:92:10:
e6:6d:c2:5b:5a:86:86:48:02:66:44:2b:b8:fa:b2:37:ba:47:
b7:b4:c4:43:ee:09:06:27:c5:ba:09:7d:84:cb:03:b6:ba:dc:
22:eb:44:0b:d5:79:c7:7c:4e:b3:50:69:53:70:28:31:4e:46:
32:c1:4d:f5:b0:21:68:e6:9c:b8:63:85:3d:e5:89:6a:28:fd:
ac:6e:19:00:91:aa:af:fd:52:59:f0:97:bd:12:3d:59:7d:e9:
fa:ed:28:6a:cd:08:18:86:27:ba:d5:c6:96:cc:6a:59:a2:79:
62:ba:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:02 2026 by rpki-client