Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
File: 0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft (raw, json)
Hash identifier: 0ZSX5UEfDymIGXKOBIm2YJCx6ucTkLYj9gePmnEG/00=
Subject key identifier: DC:F2:50:AF:04:18:BD:9E:FD:5A:00:C1:D0:45:46:AA:0E:96:52:4F
Authority key identifier: D3:01:19:B7:89:46:80:B0:FC:2D:51:17:D2:EA:6A:28:D8:50:4A:E4
Certificate issuer: /CN=D30119B7894680B0FC2D5117D2EA6A28D8504AE4
Certificate serial: 020A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0wEZt4lGgLD8LVEX0upqKNhQSuQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
Manifest number: 0209
Signing time: Thu 26 Mar 2026 18:58:02 +0000
Manifest this update: Thu 26 Mar 2026 18:58:02 +0000
Manifest next update: Fri 27 Mar 2026 00:58:02 +0000
Files and hashes: 1: 0wEZt4lGgLD8LVEX0upqKNhQSuQ.crl (hash: 5jG8eTkfFVE9Wg9UJ5/1yD/T7kG6kX4NK2aXHvp1ayM=)
2: wq6CIvN4zBDWbvTYnf0OvUiA0kg.roa (hash: s3mpbH1G8yO+/Jpc+tdsmC7gSLTmW8cfE63djEeFMWM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D30119B7894680B0FC2D5117D2EA6A28D8504AE4
Validity
Not Before: Mar 26 18:58:02 2026 GMT
Not After : Dec 4 15:30:18 2026 GMT
Subject: CN=DCF250AF0418BD9EFD5A00C1D04546AA0E96524F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:31:7f:48:a3:ca:00:a8:a7:cd:c3:9c:12:
9a:bb:f1:f4:3e:97:44:77:51:d7:6b:c6:6e:d4:f2:
49:15:a0:cc:5d:26:2e:cd:21:96:a9:97:47:9b:41:
30:29:2b:f0:5d:22:d4:78:e7:04:0b:85:20:08:a5:
fc:90:0d:e3:76:71:29:fc:df:6e:91:a0:29:70:d3:
b5:85:33:19:8f:89:81:ed:b1:04:6d:0b:95:56:77:
95:f7:cb:29:84:51:47:ad:fb:16:ce:e9:cb:01:83:
18:b7:9b:77:93:d1:21:7c:9a:41:ab:05:f0:e5:18:
58:ef:4b:05:a4:33:be:69:ff:f5:80:6d:a9:5a:28:
1d:2a:2c:f7:52:54:d3:b9:89:12:8f:27:4e:c3:f6:
6f:bf:ab:3f:d8:39:3c:a7:e3:ea:62:64:05:37:12:
08:84:01:74:f6:c6:a4:e6:fb:6d:23:74:41:32:a2:
01:85:37:7c:e0:71:8b:bf:96:ac:98:fa:9a:8c:63:
f0:35:c4:bf:f5:a1:1d:18:0d:c8:3c:34:5e:be:f2:
26:96:c6:bf:77:35:5b:5a:dd:81:79:48:17:dc:26:
e8:ba:a1:ed:1e:01:8a:3a:17:df:0d:e7:5e:59:10:
22:68:d5:23:6e:de:c3:96:61:87:be:72:fc:e2:18:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:50:AF:04:18:BD:9E:FD:5A:00:C1:D0:45:46:AA:0E:96:52:4F
X509v3 Authority Key Identifier:
keyid:D3:01:19:B7:89:46:80:B0:FC:2D:51:17:D2:EA:6A:28:D8:50:4A:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0wEZt4lGgLD8LVEX0upqKNhQSuQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b6:0d:1e:bc:71:76:7d:c1:9e:91:f2:17:29:16:ec:63:83:
3b:34:5f:4b:0b:b9:e0:fb:82:33:de:eb:a3:c1:c7:88:0a:f5:
e6:ea:7c:a3:86:7b:09:1a:86:20:8f:74:c8:d9:54:ad:da:9c:
b6:65:65:37:d9:a4:8d:73:eb:05:5e:a2:2a:bf:62:cf:02:ff:
b6:c1:fa:8d:92:10:c7:72:a8:ac:11:1c:6c:43:af:ec:7e:7d:
b7:b9:cb:1b:36:c0:54:a5:58:fd:24:e8:5f:a6:ae:57:8b:34:
ff:c3:97:9a:40:90:9a:cc:bf:1e:b7:88:6a:e3:c9:4e:13:6a:
ea:05:ab:53:55:bc:bd:b3:82:8e:46:1a:e0:b1:b7:d4:f4:48:
de:59:ce:3f:f1:9c:63:ed:54:83:49:cc:5d:d6:fe:00:75:ae:
aa:e9:37:54:1e:d8:30:cd:16:47:07:67:a5:af:71:43:1b:f8:
c6:75:b6:8d:0e:cb:f8:54:ef:8e:e5:7c:4c:fd:51:08:a7:22:
f8:62:14:73:48:17:ae:7f:92:41:f8:fd:7b:fc:d7:8f:3b:1b:
7a:0e:01:fe:c7:c0:34:ec:36:39:0e:54:07:7e:bb:e8:c4:ca:
b4:73:09:a5:09:11:67:af:a0:52:6f:0f:3b:3d:89:6a:e2:9a:
9b:13:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:02:12 2026 by rpki-client