Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
File: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft (raw, json)
Hash identifier: hqrnvgaRTlmLjTao/0rc5B4HG2MCVCv1zhRyLnUfYeo=
Subject key identifier: 2D:1A:4F:CB:E9:87:19:77:82:24:96:2A:69:6C:00:4E:A9:29:C1:70
Authority key identifier: D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Certificate issuer: /CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Certificate serial: 1C856DF332E1F42BBC04A822B401DA47ADE20976
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:17:30 +0000
Manifest this update: Mon 11 May 2026 17:12:30 +0000
Manifest next update: Tue 12 May 2026 18:38:30 +0000
Files and hashes: 1: 3130332e3136322e38342e302f32332d3234203d3e203633383934.roa (hash: 64VWfWpwPEaWvDLB9FclOWVpeag/ViOxY6Yn4Un8azo=)
2: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl (hash: Y0iAe96KFX4pSkN8/eTdDpFB9rE/BdNKABsifQaiu8g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:85:6d:f3:32:e1:f4:2b:bc:04:a8:22:b4:01:da:47:ad:e2:09:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Validity
Not Before: May 11 17:12:30 2026 GMT
Not After : May 12 18:38:30 2026 GMT
Subject: CN=2D1A4FCBE98719778224962A696C004EA929C170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:c9:02:59:32:a7:30:8f:60:72:0f:1b:e6:
27:08:8b:84:34:00:b7:c3:05:d8:0e:dc:8f:cb:3b:
10:a9:f2:2b:1b:4f:5f:7a:46:98:62:5d:87:76:70:
c0:65:1f:b4:b8:22:30:0c:aa:1d:ba:e3:60:a8:96:
1b:3f:3a:de:36:0d:6e:fc:ea:ea:93:8b:f0:23:ae:
57:7e:60:64:30:65:77:d3:4b:91:67:fb:b9:a1:a8:
04:8c:8a:1f:be:04:81:b2:fb:1d:23:9e:4f:3e:9f:
52:b5:5f:90:1b:f9:cd:0f:8d:46:be:68:6c:0c:24:
83:0a:77:f0:90:7e:42:44:48:b0:f2:6d:07:2c:b1:
5f:e5:43:d0:cc:67:0a:ee:2c:98:2d:a6:81:14:ed:
f9:10:29:a1:dc:42:13:86:26:11:35:45:fc:7d:96:
f5:91:11:61:d2:c4:66:c4:c4:ac:4c:e0:0d:82:58:
80:fa:a0:a3:90:88:5a:cf:53:39:0e:b3:b3:99:64:
bf:59:31:72:5c:f5:e1:cb:a1:c5:22:14:69:89:d3:
95:e6:7b:37:ff:f6:4a:78:20:6c:17:86:37:e6:d2:
96:49:c1:7a:ed:8d:aa:8c:3e:bf:85:83:07:46:00:
cb:f0:35:03:f2:96:3b:ec:de:e4:ac:05:84:29:c4:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:4F:CB:E9:87:19:77:82:24:96:2A:69:6C:00:4E:A9:29:C1:70
X509v3 Authority Key Identifier:
keyid:D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f5:0b:ad:1b:a6:65:8f:3a:76:07:6d:53:b3:3e:96:97:25:
ea:7e:92:b1:83:58:d9:ec:57:5d:66:22:a0:2b:cc:41:39:dd:
81:0f:4d:89:64:0e:23:7b:a5:81:e1:c0:d4:d4:2b:06:01:d9:
73:b6:69:52:9d:47:2f:4c:15:98:d2:71:aa:35:2c:37:e4:97:
5c:ab:26:a6:cf:3f:72:d6:b3:26:e1:8d:e7:a3:86:a5:a5:f6:
f1:bf:6e:58:39:05:a0:cc:b5:55:2c:47:9a:0b:50:ea:78:1c:
68:42:ee:37:90:f0:6e:cf:99:44:df:ab:89:3f:fd:7e:7d:4d:
56:df:f7:de:7e:43:60:0c:a4:23:03:2a:15:2e:a8:0c:8c:87:
c6:96:84:4e:e6:c9:c4:2d:65:6c:af:0f:f7:7e:de:2c:6e:42:
26:b6:54:81:a9:77:3d:1d:e1:90:81:d9:9a:87:86:ff:61:38:
ea:e6:35:44:92:3f:f9:c3:78:71:9e:cc:73:f2:18:60:d1:09:
b3:71:fe:23:bf:c4:78:44:2e:3b:21:90:cf:be:e0:ab:b1:5e:
0d:3b:44:17:10:21:3b:37:d5:ff:b8:03:42:39:77:8f:69:c9:
fb:b8:e1:19:11:42:a4:52:79:fc:e9:30:1b:7e:dd:f5:00:c5:
7b:44:68:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:45 2026 by rpki-client