Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
File:                     96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft (raw, json)
Hash identifier:          PChJtqDllODSyoPYEd9l2+RhHuXc5eCGLJ6WKgHu2UQ=
Subject key identifier:   44:0A:33:70:FA:8A:01:47:C9:FC:B4:9A:9F:6A:96:3C:F4:B7:B4:16
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Certificate issuer:       /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial:       1A36312DAA5D7E95AB4F477AA077349C5A9FF9EE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 17:57:11 +0000
Manifest this update:     Mon 11 May 2026 17:52:11 +0000
Manifest next update:     Tue 12 May 2026 21:50:11 +0000
Files and hashes:         1: 3130332e3133302e3234392e302f32342d3234203d3e20393834.roa (hash: Nd+vxwk113iKIVjwRMjJ+fIaoSaKjb89bytlnk2AR6I=)
                          2: 3130332e3133302e3235312e302f32342d3234203d3e20313333393438.roa (hash: GsOYmJWvRu80jQVFqMYosfTSy2X9/h0xqknASB9kz4E=)
                          3: 96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl (hash: EADRZQN4AcAAI/gGqSghGqXeUPWvqVcy6JyD9E8eNd8=)
                          4: 3130332e3133302e3234382e302f32342d3234203d3e20313333393438.roa (hash: fD/ucDIm4GlZar7mmOLi7+OafDyoA/X6tjLQrmsYp4Q=)
                          5: 3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa (hash: t6zLUrqLxN1841JGifIZEELL55tSwuOCwFhWjmskA2M=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:36:31:2d:aa:5d:7e:95:ab:4f:47:7a:a0:77:34:9c:5a:9f:f9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
        Validity
            Not Before: May 11 17:52:11 2026 GMT
            Not After : May 12 21:50:11 2026 GMT
        Subject: CN=440A3370FA8A0147C9FCB49A9F6A963CF4B7B416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:29:41:d0:8e:2f:5a:25:72:92:c7:57:eb:
                    0f:59:92:43:cc:d5:1a:55:85:24:f4:e5:06:09:fd:
                    15:ee:1c:1b:4f:35:10:5c:66:02:14:fc:c6:1f:1b:
                    21:e9:0c:43:28:10:3d:db:b6:e2:d2:42:0c:71:b9:
                    e2:6b:f3:ee:4b:9b:20:a8:93:39:7b:d9:33:ee:08:
                    7c:cb:3a:37:2c:dc:5c:b6:04:19:db:9e:21:0d:05:
                    b1:f9:d0:75:b3:cd:4f:2d:d5:fe:81:06:77:8b:b1:
                    63:66:b3:68:1c:84:e2:34:d8:a4:82:4b:fc:0d:8a:
                    ff:42:7b:c6:fe:73:f0:a6:a9:0d:3a:f8:89:1e:92:
                    23:d1:fc:a7:ef:be:88:db:ea:7b:a4:0c:d0:82:32:
                    a7:c7:ee:40:02:99:12:5d:73:de:10:e2:c9:26:0f:
                    6f:cd:27:88:36:cb:ea:78:fb:dd:d6:2b:96:f4:31:
                    cf:8e:49:b2:eb:00:22:b1:82:dd:99:a2:81:61:89:
                    16:fa:42:bf:67:37:27:d0:f3:eb:7a:b6:6d:ba:8b:
                    39:9a:49:39:71:5a:6d:9d:91:77:b2:79:f3:f6:fa:
                    0f:d8:89:7d:f8:14:24:66:89:4e:ef:44:29:e6:96:
                    05:a0:a5:6d:ee:8e:02:34:ad:a4:8b:1e:e9:22:2a:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0A:33:70:FA:8A:01:47:C9:FC:B4:9A:9F:6A:96:3C:F4:B7:B4:16
            X509v3 Authority Key Identifier:
                keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8f:01:90:3d:25:55:c8:cf:e3:c3:34:d0:49:51:2b:d2:ee:
         69:93:47:6b:b3:42:7b:c1:51:ad:56:c3:6b:16:5d:e9:d0:03:
         cc:92:5f:07:1b:82:00:ed:72:40:78:46:f8:28:f9:7f:e6:8c:
         cc:65:5d:53:22:36:c5:e1:b8:9b:1c:e1:33:64:b5:a5:87:f4:
         f4:52:69:99:f8:d9:9b:8e:4f:fd:34:0e:c8:87:b6:27:f9:c2:
         1c:79:6d:9c:93:56:e8:2c:75:87:67:d6:15:53:19:94:14:86:
         71:1d:e9:4e:01:2a:6c:3e:1c:b7:b6:21:bb:f2:8b:6a:81:87:
         d4:b6:45:a8:14:3c:0d:3d:70:78:d7:c0:d4:e0:c8:ec:aa:db:
         a4:1c:69:76:be:b1:71:29:e2:96:5f:60:b0:55:d6:8a:b9:40:
         73:9c:fe:29:3b:5f:ff:d0:0e:8c:6e:e6:4d:f7:e7:74:ed:ea:
         d3:7e:b7:64:d6:2e:93:1e:69:62:a0:da:75:62:a5:35:3d:3d:
         e3:94:32:cb:17:4a:f1:37:61:31:2e:55:11:af:38:98:b8:02:
         ef:94:47:57:9c:eb:ae:53:43:eb:81:55:c0:d9:70:55:0e:84:
         75:bf:0d:8e:e3:05:97:bd:1a:f7:ef:d0:b0:f6:f1:a8:b2:91:
         c4:8e:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----