$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft File: 61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft (raw, json) Hash identifier: yEszTS7nYHCSHRM9nQdANcvTfsExrZNxitcpIoiImDA= Subject key identifier: 46:28:49:A7:F7:81:C3:F0:89:51:FE:A0:5A:20:28:4E:29:85:F8:21 Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D Certificate serial: 3798D4486FC806D29A7936EEEA852E3C3B43C62C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft Manifest number: 17 Signing time: Mon 11 May 2026 17:40:41 +0000 Manifest this update: Mon 11 May 2026 17:35:41 +0000 Manifest next update: Tue 12 May 2026 20:16:41 +0000 Files and hashes: 1: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: cEL/qqW8AxdpUhIJjikrpkqLptxf7B6Y/UVTTWxH9Rw=) 2: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: cJ7LmREZcb6Ep6Jhc8MIaqAGRf9pUcb++2qjhfLRxH0=) 3: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: 3vg2ywFZjW79UyDByYfdvjw6Q/gKX9Y0d3v3lvpiGgc=) 4: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: d1vsa1c1wUHN2kobtSuZpoFZEGMMOlyZCMpR+rNrPfU=) 5: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: 4rG1vufxJJr/kLKrZndPrrQbssSBxQwE477UIyEAPzc=) 6: 61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl (hash: 5ErTQH6OTRbvJlg7CIcmjDdEWZ5GoScFD16e+za4Aaw=) 7: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: Hjj9ZYwdtLiJXABY0e1iJff7SFPXMoErgmjX5YkzSAY=) 8: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: 1kBvYL+a/jmHfnypB5Ww163N3nf1rnMp/4w09uNm9ug=) 9: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: 0+BupcQQD+Xxb8XJV0M0KoMIOqsDkx/bNG7XLCZp0VU=) 10: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: AjesNqW5LDu3OPOc+j2VBFnEq+C/Ay72aP18G/C8UQM=) 11: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: V+IjLMmELjjEqH5Hw3PPk+1Z4RngY1ss3HBPFD2O7o8=) 12: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: /PhuLY8p6Oua1l5KCqX4bFRZnrNWV8wcQU7vnFRJkIQ=) 13: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: nB/Brsxd0R7L3KqjLCRPCuHECfUs52jl65u7GiPE2W8=) 14: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: OJfzq9xzXFeeGe3hV2OwHtliT9zqhY9QAfOGAjZRqfE=) 15: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: Oi0azm+y0rM/Zx6aqBPzMajG9sgpCgCOE+eqm8q0G44=) 16: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: tuheNvJMz4zwayXYGvRDblOovwy+NWjn4+g3KFs3iEE=) 17: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: imjrLzaJFOfn1srDmxzShIcHEMU5JmZyB2RXALJZsrY=) 18: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: PfxF5cMJKNbz/D/bYb5FrcVb4ZRer2FUle8aX6+VeOY=) 19: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: MWmMZfwqwEXxTROh2uNgyA0DNK+lujeXQ+XGM5lpOe4=) 20: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: j1m+zZLdqs9LgjkwFEX0LcK9wAoj6PXxasGI/0pp6Z4=) 21: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: HXS3g6IHy5fvIPx/Cj+Gv9JuCHOIZLjL4G976fgKtE0=) 22: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: KGzLVmB4Fvln2YqfxJlrZfmIb+9cZD+9u4mTcaZTbNs=) 23: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: eU7OpfWhT5+1neZH4PL9z1KFvOlEcS3lxri+EEYud58=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 37:98:d4:48:6f:c8:06:d2:9a:79:36:ee:ea:85:2e:3c:3b:43:c6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D Validity Not Before: May 11 17:35:41 2026 GMT Not After : May 12 20:16:41 2026 GMT Subject: CN=462849A7F781C3F08951FEA05A20284E2985F821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:d1:93:fa:df:f7:fb:69:7e:55:d0:0f:b8: 59:7b:75:cd:53:31:37:7b:a5:cd:34:0f:dc:fe:2b: 2a:41:8a:d1:19:5b:a6:fb:f9:e6:ea:f9:9f:fb:2e: e1:e3:d5:91:0f:b7:61:83:c9:1e:c6:3d:58:d9:b1: 29:d3:2f:bf:cc:95:1b:f2:d0:b7:cd:5b:5f:f6:c0: bd:b3:2d:cf:98:01:f2:74:ad:83:16:85:75:db:50: e2:45:91:77:6b:06:82:c6:d5:80:0a:af:79:8d:a4: 6b:42:aa:b5:93:67:74:8c:81:d8:37:d3:6d:32:cf: 98:f7:46:8c:b9:fa:09:97:6e:65:ed:b1:cf:d8:34: 7d:66:b6:3e:0b:bc:07:0b:c7:90:e8:d6:ed:f2:a3: 6a:df:60:a3:10:86:f9:81:b6:f8:db:96:25:8b:d7: 56:40:53:63:11:95:90:7e:f7:dd:35:14:d4:33:46: 3c:5a:81:b2:3f:a0:b6:b2:71:10:e8:86:45:4d:0d: e5:cf:58:84:e1:83:36:01:9b:72:bd:78:96:8f:42: 9f:41:e1:01:29:08:c3:e8:b7:a5:7b:bb:b7:02:81: f5:f3:98:1d:22:55:46:4c:d4:45:55:b2:e6:c7:ca: b0:90:0c:c3:85:3b:8a:77:f4:f9:27:90:98:f3:a4: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:28:49:A7:F7:81:C3:F0:89:51:FE:A0:5A:20:28:4E:29:85:F8:21 X509v3 Authority Key Identifier: keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4f:8f:a3:ba:e0:ee:92:12:b6:ca:33:a0:a7:c5:0e:73:89: 03:ff:1f:fb:92:20:82:76:1a:2a:f3:88:73:d4:e6:1b:a3:59: a0:52:f0:fe:ef:1d:c2:8c:3d:64:9c:80:17:eb:7a:1e:69:36: 12:a4:05:f8:95:50:04:0f:68:45:90:86:6b:bc:82:8a:4e:7f: d0:e7:30:f0:03:61:4c:0d:5a:4f:1e:a5:25:cf:0c:ed:99:d9: c7:d2:3c:af:b1:bc:de:6c:a2:a5:d2:8f:03:91:1c:65:f6:84: ea:98:70:19:82:c0:fc:16:d7:98:4a:bf:21:37:dc:72:d7:31: cd:84:17:06:7b:36:6a:6c:0f:47:dd:5b:7d:32:b9:de:a4:81: 66:7d:f9:be:e4:07:b8:0f:cf:ae:b9:10:57:d5:56:ad:0b:5b: d3:3e:67:8f:2c:d5:a3:c5:55:65:81:78:4e:d0:37:e5:53:ed: f7:8e:38:f1:a7:dd:a8:bd:93:fe:3a:a5:4b:a9:b4:d8:32:26: 0b:a9:21:6d:42:9e:87:a0:fc:59:dd:26:d5:07:80:eb:67:4b: d5:ef:46:f5:e6:56:d9:41:8d:f9:9e:a2:d2:da:4b:e7:21:dd: c8:25:38:96:ad:53:c6:94:3e:6a:a7:e5:4c:95:b9:d3:0d:99: 99:09:0b:92 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUN5jUSG/IBtKaeTbu6oUuPDtDxiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFCOTBGREVDQzFERUE3Mzc1MjI2OEY5QTZEN0Y5RDlG OEY4NzkzRDAeFw0yNjA1MTExNzM1NDFaFw0yNjA1MTIyMDE2NDFaMDMxMTAvBgNV BAMTKDQ2Mjg0OUE3Rjc4MUMzRjA4OTUxRkVBMDVBMjAyODRFMjk4NUY4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei9GT+t/3+2l+VdAPuFl7dc1T MTd7pc00D9z+KypBitEZW6b7+ebq+Z/7LuHj1ZEPt2GDyR7GPVjZsSnTL7/MlRvy 0LfNW1/2wL2zLc+YAfJ0rYMWhXXbUOJFkXdrBoLG1YAKr3mNpGtCqrWTZ3SMgdg3 020yz5j3Roy5+gmXbmXtsc/YNH1mtj4LvAcLx5Do1u3yo2rfYKMQhvmBtvjbliWL 11ZAU2MRlZB+9901FNQzRjxagbI/oLaycRDohkVNDeXPWIThgzYBm3K9eJaPQp9B 4QEpCMPot6V7u7cCgfXzmB0iVUZM1EVVsubHyrCQDMOFO4p39PknkJjzpDaFAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQURihJp/eBw/CJUf6gWiAoTimF+CEwHwYDVR0j BBgwFoAUYbkP3swd6nN1Imj5ptf52fj4eT0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC82MUI5MEZERUNDMURFQTczNzUyMjY4RjlBNkQ3RjlEOUY4Rjg3OTNELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzYxQjkwRkRFQ0MxREVBNzM3NTIyNjhGOUE2RDdG OUQ5RjhGODc5M0QuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzYxQjkwRkRFQ0MxREVB NzM3NTIyNjhGOUE2RDdGOUQ5RjhGODc5M0QubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcT4+juuDukhK2 yjOgp8UOc4kD/x/7kiCCdhoq84hz1OYbo1mgUvD+7x3CjD1knIAX63oeaTYSpAX4 lVAED2hFkIZrvIKKTn/Q5zDwA2FMDVpPHqUlzwztmdnH0jyvsbzebKKl0o8DkRxl 9oTqmHAZgsD8FteYSr8hN9xy1zHNhBcGezZqbA9H3Vt9MrnepIFmffm+5Ae4D8+u uRBX1VatC1vTPmePLNWjxVVlgXhO0DflU+33jjjxp92ovZP+OqVLqbTYMiYLqSFt Qp6HoPxZ3SbVB4DrZ0vV70b15lbZQY35nqLS2kvnId3IJTiWrVPGlD5qp+VMlbnT DZmZCQuS -----END CERTIFICATE-----Generated at Tue May 12 22:46:50 2026 by rpki-client