Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
File: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft (raw, json)
Hash identifier: sRwOTqjMUi1FC8+yVclkJBnACAEqUofDbsotTTOrsVo=
Subject key identifier: A0:0F:5E:30:03:2B:68:4B:BB:A8:79:54:1B:F3:C1:2C:0B:57:3E:2F
Authority key identifier: 3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
Certificate issuer: /CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Certificate serial: 2A063ED733A567FC429D6FEACC71D90371EE1CAD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:37:41 +0000
Manifest this update: Mon 11 May 2026 17:32:41 +0000
Manifest next update: Tue 12 May 2026 19:25:41 +0000
Files and hashes: 1: 323430303a363365303a3a2f33322d3438203d3e2037343833.roa (hash: rHuxaTKbxFOG3QVLxlmDpVGC4VQ2hgu+8e9CRQbtD+o=)
2: 3130332e3138332e3139382e302f32332d3234203d3e2037343833.roa (hash: QxmoSLkHm5UR5jJGq6GVgmM8tmoMrY7IxvQLIUDlgG8=)
3: 3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl (hash: 53I4a/y1Q8D5kMndpgOvcPB/l0zgGn9Jk5w5pYnxtuM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:06:3e:d7:33:a5:67:fc:42:9d:6f:ea:cc:71:d9:03:71:ee:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737
Validity
Not Before: May 11 17:32:41 2026 GMT
Not After : May 12 19:25:41 2026 GMT
Subject: CN=A00F5E30032B684BBBA879541BF3C12C0B573E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:c9:38:8c:9f:d4:9d:f3:2d:0b:8c:65:f8:
3a:64:af:7a:b7:c4:c5:6e:3e:a3:dc:df:8a:04:b2:
53:80:86:ac:80:0d:71:49:57:ae:bc:52:9f:47:45:
ca:10:0a:f3:63:93:de:1e:62:1f:59:70:08:d6:dc:
b1:48:66:2b:9e:6e:08:58:8d:c9:bf:fb:c1:ae:46:
cc:bb:c6:b2:42:6e:1f:6b:5f:75:f4:f5:6d:b1:4b:
cd:36:d7:ae:36:f7:e9:09:e5:c2:0d:5e:bd:a0:ef:
af:80:b5:36:34:e5:cf:b7:a7:98:f8:06:05:c9:3c:
2f:5d:2d:6d:cf:a5:98:ac:ed:15:90:79:1a:67:1e:
eb:ff:4d:f8:57:ac:84:4a:88:94:ef:e7:c3:dd:0c:
09:76:c3:62:0a:0a:9a:bf:70:40:14:ca:2d:07:93:
7f:cd:c2:84:40:22:d9:48:46:d6:00:10:fe:ed:2d:
63:4c:fe:ee:70:dc:7c:04:bb:aa:04:7d:bb:78:72:
27:7a:66:d4:34:c0:c5:1c:b2:a0:1a:01:b4:62:6f:
9a:1a:8e:45:7a:1f:34:c2:05:b3:a8:f1:21:b7:43:
2a:b9:7e:e3:14:39:ed:b4:d0:8a:5f:b7:0f:9c:9b:
b5:97:de:70:4e:75:aa:e1:9b:f5:6b:ae:b3:e9:90:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0F:5E:30:03:2B:68:4B:BB:A8:79:54:1B:F3:C1:2C:0B:57:3E:2F
X509v3 Authority Key Identifier:
keyid:3F:3E:6E:8D:F4:F4:6D:DF:E0:48:F7:1C:5A:EC:86:16:FD:D7:D7:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYVC/0/3F3E6E8DF4F46DDFE048F71C5AEC8616FDD7D737.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8c:20:a3:13:2e:8a:af:c2:4c:2b:1d:3c:b9:71:f0:dc:6b:
2c:7a:98:af:c9:52:e9:a2:31:dd:27:82:d8:cd:2b:03:cc:45:
6a:2c:7b:fd:8e:16:92:cf:b1:69:71:ce:55:c9:8a:58:db:6f:
08:da:20:38:57:aa:3b:ac:ec:fa:73:c0:75:20:d0:0c:20:bc:
b6:2a:ea:4c:35:57:02:73:65:b6:d4:d9:ba:d1:f5:82:ad:32:
7d:a8:23:62:9b:51:cb:fb:74:6b:4f:13:ce:e2:b4:e9:fa:e2:
e8:07:47:8c:e5:20:a5:2a:78:ca:62:8b:12:ce:d8:be:06:01:
7e:1a:4e:0b:cb:39:be:3f:70:54:2b:92:56:58:1a:2e:b8:b8:
76:76:36:1b:ec:89:ed:16:2f:35:1a:db:a8:cb:19:69:69:23:
f1:b7:f6:9a:5f:01:e2:14:d8:13:11:03:88:67:68:3e:13:3b:
59:5a:88:6e:6f:1e:d3:47:ff:04:03:4c:25:5b:58:b3:6b:a0:
1e:ca:67:70:8e:9d:be:a8:37:ca:12:46:d2:40:ad:46:d2:fd:
1a:32:aa:38:6a:20:42:cf:94:12:83:59:79:80:de:ce:fc:59:
78:07:b8:3d:9a:b7:99:23:5b:c5:49:cf:0a:8c:7b:12:ad:d9:
08:3d:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:22 2026 by rpki-client