Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft
File: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json)
Hash identifier: v/qO7Lvbn5PJLNFi9kQ83//0i3PtcjnkW4RMHpaZbOE=
Subject key identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66
Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1
Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1
Certificate serial: 0499
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft
Manifest number: 0496
Signing time: Thu 26 Mar 2026 08:58:38 +0000
Manifest this update: Thu 26 Mar 2026 08:58:38 +0000
Manifest next update: Thu 26 Mar 2026 14:58:38 +0000
Files and hashes: 1: 2bTqYrZys3Fogts7Fv5vjncOvIc.roa (hash: qnYX1Y1VBdTSxMV61i74UZEIUai9LUqwtA41ObRO5LM=)
2: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: TZPdCCQQS37iThdPJ4kL18vFP0Dj9FRI7grhhrMt4Xo=)
3: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1
Validity
Not Before: Mar 26 08:58:38 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a:
99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9:
fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8:
54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5:
d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4:
a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3:
f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03:
3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d:
f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc:
0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e:
51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50:
25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78:
4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85:
b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8:
b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21:
91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2:
bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66
X509v3 Authority Key Identifier:
keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4f:2a:3c:60:d4:72:7e:f9:59:4d:2c:f1:fe:e2:0b:42:03:
b3:b5:8c:b7:35:85:31:1c:0b:7b:aa:c3:81:20:03:c3:35:93:
13:1c:fa:39:3e:61:07:c5:fb:78:7b:6d:81:06:ed:48:e9:56:
f4:2c:9e:7e:8b:00:6e:d7:95:df:65:13:ee:4f:0a:26:7c:85:
b6:ea:53:e6:54:90:90:a5:b6:3b:6c:dd:0b:17:65:ed:4a:66:
31:ac:7c:cc:93:a3:51:a5:98:4e:9f:c6:9e:93:c3:9c:70:62:
a1:db:70:ab:75:2d:a3:71:00:6a:e4:2d:96:53:06:ff:7b:12:
6c:7c:eb:3b:37:06:98:a8:ba:c2:23:8f:5f:0c:49:6b:37:e1:
5a:c1:6d:99:7d:ec:5a:1b:9f:f8:05:f9:db:f8:83:54:14:d0:
80:8e:9e:b5:48:60:72:29:5e:06:fc:3d:f0:1c:ec:8b:1e:a7:
4c:bf:e9:91:5d:cf:fc:87:9f:a7:f1:cb:e7:f9:41:bd:ad:15:
f6:f8:ac:8a:5f:da:c3:9f:1b:c6:3f:3e:cf:94:c3:41:95:e1:
b8:3a:a8:21:fb:f0:b1:91:d7:d2:87:d5:b9:a1:a7:6d:38:38:
18:24:e6:95:f6:22:fc:56:c4:98:21:fe:94:11:58:54:74:d4:
be:1d:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:36:01 2026 by rpki-client