Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier: al5ZgaMY1yg39p00x3J6G0sZEHTppHuY9pn+Dps4Gzg=
Subject key identifier: 0A:D2:48:B6:EA:9D:11:C0:80:35:18:32:8C:DA:C1:CA:3D:51:2F:E0
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial: 0B079A0843DE40FD93D6A1A4D86CBB51E21A5201
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:59:05 +0000
Manifest this update: Mon 11 May 2026 17:54:05 +0000
Manifest next update: Tue 12 May 2026 20:51:05 +0000
Files and hashes: 1: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
2: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: +Ff/gPqbLw6B+T/0+OWWMSEGmCntGsUsP0Owz40B6Sw=)
3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:07:9a:08:43:de:40:fd:93:d6:a1:a4:d8:6c:bb:51:e2:1a:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Validity
Not Before: May 11 17:54:05 2026 GMT
Not After : May 12 20:51:05 2026 GMT
Subject: CN=0AD248B6EA9D11C0803518328CDAC1CA3D512FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:6d:e7:59:54:2e:09:d4:96:f6:95:c6:35:
95:9c:34:4d:dc:a3:2a:b9:40:71:f9:fe:88:07:62:
15:8a:44:6b:da:76:61:2a:a6:a6:cf:ae:bd:a0:b4:
0c:57:ee:65:17:be:42:71:a9:d1:fe:9b:c9:5c:24:
ea:90:0b:0d:db:3d:57:c5:67:03:13:84:fa:58:c0:
59:7c:f9:1e:10:b6:16:b5:74:bc:48:e5:b3:42:18:
bd:8e:b7:c3:da:e6:f7:ed:20:cf:94:64:29:ad:30:
34:d8:3e:ec:5e:22:38:f5:49:af:b1:0c:4c:78:96:
77:eb:52:61:4b:7d:b5:a8:61:16:27:a3:b1:a0:fc:
3a:e2:bb:3e:b7:ff:9d:1d:f9:61:f4:14:50:eb:1e:
d0:f4:71:55:8c:1a:fa:89:c9:02:98:f3:2f:8c:34:
4f:e3:d8:5d:0c:71:c4:3f:6d:9d:d4:3b:97:41:f5:
88:fa:96:68:81:2a:21:1a:f7:5e:7e:96:0f:38:62:
66:c4:ce:66:32:45:bf:6a:db:56:36:a4:83:86:6e:
fd:ee:5e:13:7d:4a:ae:1b:57:43:b6:4e:be:31:7c:
ff:0c:f4:e3:e5:a9:87:1c:f2:2b:e5:00:a4:02:91:
a5:e0:ab:af:d8:e8:93:07:ce:cc:aa:d7:96:46:f9:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D2:48:B6:EA:9D:11:C0:80:35:18:32:8C:DA:C1:CA:3D:51:2F:E0
X509v3 Authority Key Identifier:
keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1f:b0:ef:e6:bd:d2:d7:ad:90:b1:b9:47:70:ad:06:86:96:
78:19:26:33:3b:fa:02:38:c2:d9:26:fd:29:61:7d:51:9d:ee:
85:bf:9f:7a:27:f2:1d:37:4c:f7:9a:da:2a:de:c9:a1:3b:14:
46:f8:ed:5a:c7:58:82:74:b7:bf:e8:48:17:45:ed:5b:72:35:
53:5d:70:fd:7d:e9:d0:94:52:c5:31:44:b7:77:b2:4d:02:12:
44:18:63:b3:8b:e1:87:a6:c7:47:d6:85:8c:63:20:8f:02:03:
c8:a5:8e:a6:29:0b:2b:f4:4a:38:11:c3:d3:90:da:df:43:b0:
34:fc:e4:52:79:52:11:5a:79:81:1e:20:c3:af:f5:20:f8:03:
6c:73:8f:8e:2f:3f:c9:27:5d:7a:fe:04:0e:4d:53:6b:9a:5f:
83:38:45:01:cd:a7:80:19:29:52:0c:ca:ef:95:4c:aa:a7:18:
d4:d8:ac:b1:37:ed:e6:39:86:9b:44:f1:fa:1e:a4:b8:98:43:
d7:4b:23:fe:e4:e7:8b:9e:53:fb:e8:3f:0e:d9:75:7a:20:5f:
68:a8:c7:0c:8a:ee:e4:a7:a0:5a:ee:25:f8:07:0d:0d:50:b9:
c9:08:69:fd:be:51:d6:6b:f0:65:cd:d6:b5:9b:d1:82:58:d0:
9b:c0:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:38 2026 by rpki-client