
Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
File: _HUspZ646u8j0iXcZ6oIUgHx95w.mft (raw, json)
Hash identifier: gQNMjGBMGOU9ZbZ1+7iUM+r5g0azCbhBic1mtVIWKR4=
Subject key identifier: DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial: 0219
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
Manifest number: 01F2
Signing time: Thu 26 Mar 2026 15:58:05 +0000
Manifest this update: Thu 26 Mar 2026 15:58:05 +0000
Manifest next update: Thu 26 Mar 2026 21:58:05 +0000
Files and hashes: 1: 3PbsONAF8Oxd3AhCARaD-i-6Z_s.roa (hash: iZUQwaC0nT3Sb0rk+mOFsjWPIihT2yT1106ISBL95As=)
2: 5PX3XPInRwLdrxjNJFjpDmV_YWE.roa (hash: oZRkpZSmBjyDmZ2aKyrQVa9J3wZO7SNOQisdVK+47NQ=)
3: 5R7-cVCAF-siafJrsFpLMo5QwAI.roa (hash: TNahB6rZrA74mKx05W5b/7mY0h3f5HFKLhMN37gRl+Q=)
4: FI_l4-13QP9OGl6Mb5mklqo6scA.roa (hash: 6XXI7Jhd9lXAImf1MeS6P7d+O2EVvcvFLkcH2BaNDoU=)
5: KIITV7eWhVy2oyjflPz5VX2jgW4.roa (hash: lWCYvPowyiiCW0rJqficFkjP3myn6ivGv6yghD3b/2M=)
6: Q1DqTbMpiir5UFRuTi2BE-qhMfg.roa (hash: 4HAZnLXTMzSOAfi5Mx9kchZON+HKCUChxcmYzfMF+NU=)
7: QRnbkM5AcAl5FgR7GO9y9QtvHIc.roa (hash: RrTZzOTPCCr5VdsUJACfpPtRGltHjXfTFa3k7aCF36U=)
8: QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa (hash: sLB/lAuXpVWxEYttjxjEfkV/SwqGJLAlO66H053YWyQ=)
9: _HUspZ646u8j0iXcZ6oIUgHx95w.crl (hash: 8M0xadWGPHw2GUME2TgIwnXQKoN8+ATikl8myuQm7zg=)
10: tpH271p44tFxIoooS8Y6JbCVsC4.roa (hash: Z0Kbx5ZrwKvQdCFKt2vuEDClyylwA8Wh7Aymeh8HVtk=)
11: wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (hash: 36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Validity
Not Before: Mar 26 15:58:05 2026 GMT
Not After : Dec 30 15:30:20 2026 GMT
Subject: CN=DEFF8141E2DE64B1118927328C2D59C66278E59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:4e:5c:da:be:9e:de:b7:29:af:72:f2:25:
5d:77:d2:2d:f8:c9:e6:cb:72:b1:9b:a4:cd:57:f6:
36:0f:be:04:d2:08:d2:3b:b2:40:d9:05:22:dc:e6:
ab:90:56:72:d2:20:d6:b0:cf:3c:33:9f:34:e7:d9:
fd:56:0e:28:f3:4a:e2:5e:13:23:56:26:80:01:ce:
e5:1a:04:81:b4:72:54:19:1f:cb:0d:c1:2d:40:a9:
68:21:e0:89:87:35:3e:d3:ac:06:dd:58:3e:46:96:
a6:fd:60:eb:26:b8:fa:d6:64:74:bb:cc:de:ed:a1:
5d:28:d6:1d:26:ac:65:65:66:2b:8d:42:7a:85:a0:
f7:cf:13:d8:12:d5:cd:88:f2:ba:0f:40:52:24:ef:
23:eb:93:bc:40:a0:74:2c:ff:26:16:d9:52:ea:e2:
0d:de:e7:e8:ca:4c:08:80:c3:60:5a:26:13:0f:9a:
7f:cc:ce:42:81:55:a3:d0:52:b3:fe:a9:65:43:8d:
e3:0f:5b:d9:8f:7e:1e:a0:24:93:4e:b2:74:c6:3a:
44:e4:91:6a:49:a2:df:12:5c:16:19:0a:8b:a1:52:
15:ea:d3:80:87:8a:52:fe:7e:ba:af:44:4b:8f:a7:
17:97:d9:e4:1c:90:20:b3:32:c9:ca:0e:6d:f7:5f:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
X509v3 Authority Key Identifier:
keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:e4:b3:c7:27:b5:b8:1d:e7:4c:c0:82:a4:5c:b3:6b:fe:c6:
b4:7a:e6:a3:c9:5d:7d:03:2c:82:da:65:67:c3:18:7f:47:c6:
87:4f:69:1b:c6:21:18:da:20:4f:72:78:e0:87:d1:d6:66:9b:
9d:31:f8:98:38:92:65:2e:82:ab:25:c4:21:de:1d:d3:de:35:
10:1b:1e:b8:61:a0:34:50:9c:e9:59:88:e9:8f:3e:26:fa:e0:
6a:9c:69:77:9e:b8:7e:dd:cb:f2:57:39:d6:d0:40:9b:da:d2:
bc:37:59:88:90:01:3c:bc:3a:2a:fa:c6:b7:d7:02:3d:ef:77:
8c:b9:87:c9:6e:6e:14:8c:39:59:b8:90:1d:3e:d7:41:50:b3:
02:bd:13:cc:a0:df:88:aa:0d:70:c1:f2:de:2f:95:31:69:41:
0e:b4:ed:52:97:89:99:3b:91:49:6e:b6:ff:e3:d3:86:fb:7f:
40:e5:5c:29:81:b2:4c:9d:a1:f6:b7:d8:65:f0:bd:8a:cc:79:
e0:f4:6d:1e:38:21:f9:4f:13:65:0f:28:d0:a1:15:2b:9d:d8:
21:c4:71:50:79:3b:26:47:14:1a:93:cc:a2:48:f4:7d:89:3d:
17:03:2a:07:b4:9a:cb:a2:5e:63:86:c8:74:c2:d6:b3:04:73:
7d:12:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:01:05 2026 by rpki-client