Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
File: 0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft (raw, json)
Hash identifier: jOV0ExSTV6elA1kmlf4YEWd+3QJwebfOBLQHUk3V1dM=
Subject key identifier: DC:F2:50:AF:04:18:BD:9E:FD:5A:00:C1:D0:45:46:AA:0E:96:52:4F
Authority key identifier: D3:01:19:B7:89:46:80:B0:FC:2D:51:17:D2:EA:6A:28:D8:50:4A:E4
Certificate issuer: /CN=D30119B7894680B0FC2D5117D2EA6A28D8504AE4
Certificate serial: 027B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0wEZt4lGgLD8LVEX0upqKNhQSuQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
Manifest number: 027A
Signing time: Fri 17 Apr 2026 02:02:41 +0000
Manifest this update: Fri 17 Apr 2026 02:02:41 +0000
Manifest next update: Fri 17 Apr 2026 08:02:41 +0000
Files and hashes: 1: 0wEZt4lGgLD8LVEX0upqKNhQSuQ.crl (hash: Dv2PZtCr9drovRx0HVqOrHoUdbPVuHD6LR2lC+X7aRo=)
2: wq6CIvN4zBDWbvTYnf0OvUiA0kg.roa (hash: s3mpbH1G8yO+/Jpc+tdsmC7gSLTmW8cfE63djEeFMWM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D30119B7894680B0FC2D5117D2EA6A28D8504AE4
Validity
Not Before: Apr 17 02:02:41 2026 GMT
Not After : Dec 4 15:30:18 2026 GMT
Subject: CN=DCF250AF0418BD9EFD5A00C1D04546AA0E96524F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:31:7f:48:a3:ca:00:a8:a7:cd:c3:9c:12:
9a:bb:f1:f4:3e:97:44:77:51:d7:6b:c6:6e:d4:f2:
49:15:a0:cc:5d:26:2e:cd:21:96:a9:97:47:9b:41:
30:29:2b:f0:5d:22:d4:78:e7:04:0b:85:20:08:a5:
fc:90:0d:e3:76:71:29:fc:df:6e:91:a0:29:70:d3:
b5:85:33:19:8f:89:81:ed:b1:04:6d:0b:95:56:77:
95:f7:cb:29:84:51:47:ad:fb:16:ce:e9:cb:01:83:
18:b7:9b:77:93:d1:21:7c:9a:41:ab:05:f0:e5:18:
58:ef:4b:05:a4:33:be:69:ff:f5:80:6d:a9:5a:28:
1d:2a:2c:f7:52:54:d3:b9:89:12:8f:27:4e:c3:f6:
6f:bf:ab:3f:d8:39:3c:a7:e3:ea:62:64:05:37:12:
08:84:01:74:f6:c6:a4:e6:fb:6d:23:74:41:32:a2:
01:85:37:7c:e0:71:8b:bf:96:ac:98:fa:9a:8c:63:
f0:35:c4:bf:f5:a1:1d:18:0d:c8:3c:34:5e:be:f2:
26:96:c6:bf:77:35:5b:5a:dd:81:79:48:17:dc:26:
e8:ba:a1:ed:1e:01:8a:3a:17:df:0d:e7:5e:59:10:
22:68:d5:23:6e:de:c3:96:61:87:be:72:fc:e2:18:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F2:50:AF:04:18:BD:9E:FD:5A:00:C1:D0:45:46:AA:0E:96:52:4F
X509v3 Authority Key Identifier:
keyid:D3:01:19:B7:89:46:80:B0:FC:2D:51:17:D2:EA:6A:28:D8:50:4A:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0wEZt4lGgLD8LVEX0upqKNhQSuQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/0wEZt4lGgLD8LVEX0upqKNhQSuQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:d0:ae:b3:88:c0:9e:41:58:cd:66:f0:10:f0:80:fb:a1:
ee:d5:43:6a:89:a6:7d:cd:99:51:84:22:c9:18:15:0c:ba:0f:
98:8e:d8:57:1d:8e:f0:ce:fe:a0:d8:80:59:bc:ea:9d:79:4c:
a8:7d:e6:32:ad:9a:39:0c:1d:41:8d:0c:a2:32:02:1a:8f:91:
dc:db:91:e8:52:4a:dd:1c:66:5e:a2:a0:67:ca:d1:04:85:37:
89:77:65:0f:64:f8:ee:67:0b:3a:91:31:c4:03:4c:17:23:31:
36:33:b2:22:a1:0e:1b:7e:68:12:79:a4:c4:90:cb:0c:47:ba:
2d:57:ee:1d:ee:b5:b5:44:a0:79:3a:ce:19:ee:04:ce:05:ca:
18:fc:49:bf:37:33:47:22:0d:8d:65:70:b2:7f:ef:78:4b:e0:
23:63:96:1b:59:4a:42:f4:6d:8b:3d:0a:84:0f:92:03:40:94:
7a:44:32:16:05:07:7a:0b:18:83:00:fc:2c:d6:e2:11:23:73:
66:61:48:0c:ab:18:76:1f:8e:33:0d:12:6e:8a:7f:85:a7:ee:
35:51:3a:d0:77:2d:ee:72:66:31:d6:7e:4a:b7:c6:cc:1f:b5:
5d:cd:49:82:2d:13:20:81:84:7c:08:18:d0:a9:c0:5c:00:b6:
dd:2b:0d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:21 2026 by rpki-client