Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft
File:                     6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json)
Hash identifier:          N5HFjUDjTl1ES6/pOWi/zAhTsXj1nbJGLPMdXWWd7Uk=
Subject key identifier:   FE:80:B9:3F:DD:30:C6:5E:26:80:DC:20:A4:52:1B:43:EC:3B:C6:92
Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68
Certificate issuer:       /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268
Certificate serial:       BB3D12F58E8CACF4C9CA6DAD76E6F4DA85750B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft
Manifest number:          03
Signing time:             Mon 11 May 2026 17:58:34 +0000
Manifest this update:     Mon 11 May 2026 17:53:34 +0000
Manifest next update:     Tue 12 May 2026 18:43:34 +0000
Files and hashes:         1: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=)
                          2: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: i1JDJWvp9ubRB+xl4Z+sHdyPm2tZyc2mkh14pgrk2xs=)
                          3: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bb:3d:12:f5:8e:8c:ac:f4:c9:ca:6d:ad:76:e6:f4:da:85:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268
        Validity
            Not Before: May 11 17:53:34 2026 GMT
            Not After : May 12 18:43:34 2026 GMT
        Subject: CN=FE80B93FDD30C65E2680DC20A4521B43EC3BC692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:f8:da:8f:53:f8:11:73:53:51:d4:b1:26:
                    f6:3b:54:9e:8c:bb:32:6b:b5:65:b4:8d:a8:28:a0:
                    b3:71:97:c7:31:a5:a5:fb:04:5b:05:cd:7e:97:98:
                    a9:55:8a:f6:d5:d9:6b:fa:40:50:b5:09:a3:29:50:
                    a5:52:ab:a2:c5:70:a9:b9:fd:64:17:bf:f0:ca:90:
                    0c:55:a0:e0:07:98:de:1c:03:dd:18:e9:26:5d:48:
                    24:92:52:9d:dd:2c:15:ba:0e:9d:be:39:77:8f:76:
                    33:31:aa:e6:65:cb:56:22:40:fc:da:6c:08:fd:84:
                    be:85:50:ae:e6:2e:a8:a0:cf:23:ab:a3:5c:f8:90:
                    eb:92:ea:24:dc:fb:39:7c:33:3b:82:de:0d:68:f5:
                    0c:63:91:2b:14:71:4f:16:f0:59:60:11:d5:c3:0d:
                    5a:33:05:15:54:44:34:3b:a7:b6:56:02:f5:71:58:
                    31:70:2d:7e:3e:da:e9:86:73:c0:6c:cb:89:d3:8c:
                    10:fe:97:76:ec:f4:25:4a:9c:98:b5:d4:00:71:ce:
                    d2:78:09:91:64:07:d6:8f:ad:85:a3:58:eb:2b:30:
                    48:4d:7d:34:6e:91:d9:e0:65:0b:af:69:18:45:d9:
                    79:1f:d0:56:e5:c9:ef:de:e3:94:d7:3c:cb:63:03:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:80:B9:3F:DD:30:C6:5E:26:80:DC:20:A4:52:1B:43:EC:3B:C6:92
            X509v3 Authority Key Identifier:
                keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:42:60:c0:e4:b3:07:46:7c:83:28:37:80:1b:07:28:ec:
         9a:78:c0:9f:61:d2:ab:96:e2:4a:8b:32:ec:8e:49:83:52:a1:
         43:f9:ff:1c:78:b9:47:19:c3:64:9a:68:e8:ee:0a:d3:09:e4:
         ad:e4:9e:5a:ba:87:b8:8b:90:89:36:3c:aa:f7:66:cb:0f:e9:
         de:dc:a6:0e:6e:a9:33:19:6c:e2:64:43:3b:30:4e:ec:1d:27:
         8a:40:2a:b8:b1:08:ab:db:ae:05:a7:de:b6:21:c7:df:12:e3:
         a5:81:19:bf:bd:5b:2b:73:ea:fe:42:ab:d9:8b:cc:1b:b7:a6:
         62:ab:d3:c6:93:b1:81:23:9b:a8:58:a6:83:43:d2:92:c1:2b:
         84:ac:b6:97:29:a3:37:f7:5b:11:c4:f2:8b:fa:f0:95:99:f9:
         ef:b6:ba:96:22:be:96:35:31:02:2e:0c:48:23:ef:d6:0f:7c:
         4a:57:c9:dc:71:20:50:a6:26:3b:1c:05:65:20:61:26:0b:90:
         e4:97:9d:85:0a:2e:7f:b3:8e:59:1c:ee:6c:80:13:67:0a:ae:
         f7:a2:dd:08:26:c5:ab:c2:b8:56:95:bc:f5:c8:36:93:5e:8f:
         cc:b8:8e:49:33:44:d2:1c:b2:be:a1:d6:0f:aa:5d:a7:8f:2b:
         bc:d0:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:28 2026 by rpki-client