Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
File:                     2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json)
Hash identifier:          DhUBcRs+BDu/AtIPPjEA8zuji5LiogrCgKwQtsmYN9s=
Subject key identifier:   46:2F:65:CB:B6:03:4B:05:38:ED:1C:7B:BA:66:28:9A:CD:91:7A:E6
Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43
Certificate issuer:       /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
Certificate serial:       3669DBCA08ADCDA307F29B109646ED367FA406DD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:37:24 +0000
Manifest this update:     Mon 11 May 2026 17:32:24 +0000
Manifest next update:     Tue 12 May 2026 19:48:24 +0000
Files and hashes:         1: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: RvMr57LxXn3ZCNv+z3V7LD2k/5+8E/yd9LGs952rAVY=)
                          2: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:69:db:ca:08:ad:cd:a3:07:f2:9b:10:96:46:ed:36:7f:a4:06:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243
        Validity
            Not Before: May 11 17:32:24 2026 GMT
            Not After : May 12 19:48:24 2026 GMT
        Subject: CN=462F65CBB6034B0538ED1C7BBA66289ACD917AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:54:e2:f4:d4:53:b9:be:46:a7:ad:3c:e0:
                    e4:b1:1f:62:66:1e:e4:be:73:c7:28:dc:54:ef:0c:
                    26:29:c0:d9:cb:61:89:e7:89:e0:4f:91:32:f8:76:
                    39:19:3d:a7:09:57:43:15:da:39:ce:81:c0:52:91:
                    4a:a1:7f:d4:55:bf:a9:11:db:04:00:89:68:8f:a6:
                    cf:a7:9f:a0:09:75:99:5c:63:b7:25:43:30:c0:bd:
                    7c:f5:e0:f3:ba:3f:9c:2a:08:cb:3a:cc:31:1e:ae:
                    20:ad:cb:6b:66:a7:d6:78:dd:5b:3e:d8:ea:61:4b:
                    c5:bc:ea:0e:26:dc:6e:7c:2b:ec:31:db:0c:78:c7:
                    27:c2:47:72:f3:d8:1c:3a:9f:95:ec:fb:92:49:b9:
                    9a:c2:12:74:b8:89:fa:64:df:df:f7:b1:9e:c2:cf:
                    b9:73:8a:30:c7:e8:62:b4:66:bd:5a:e2:a7:1f:89:
                    9b:01:d9:1f:d8:ce:93:8e:2c:80:a1:f0:b8:a4:2c:
                    fb:f3:ce:db:98:02:d5:02:23:2e:f7:e2:36:04:0b:
                    b4:16:00:4f:7f:4e:10:6a:4d:80:7a:84:9c:6a:94:
                    cd:1c:58:ba:b6:3c:65:9f:57:22:6b:42:05:c8:ce:
                    af:c3:16:ee:7f:18:2f:90:1e:64:c7:2b:09:c0:c2:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2F:65:CB:B6:03:4B:05:38:ED:1C:7B:BA:66:28:9A:CD:91:7A:E6
            X509v3 Authority Key Identifier:
                keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:83:87:15:bb:f2:78:0c:6d:f8:74:e1:15:c7:ac:a5:e7:
         20:1d:97:75:36:f3:78:f3:34:d6:9d:3a:20:ec:0c:33:16:05:
         b9:20:92:82:87:c3:a5:72:e9:8a:32:c0:c0:1f:34:46:16:86:
         9f:8a:c5:02:d2:a4:6c:21:d1:77:ad:70:d4:71:c0:36:70:ba:
         ea:b6:cb:bf:95:72:85:36:d1:cd:63:c8:db:ea:dd:20:eb:08:
         7a:60:e6:90:e7:b1:ec:d4:3d:a1:91:09:ff:c2:e4:f6:14:f8:
         eb:27:df:7e:1a:47:c2:9d:3c:4a:11:c2:76:e3:de:3d:ec:3d:
         86:35:19:0d:3e:54:95:57:51:d1:21:40:fc:f7:68:88:01:f5:
         c1:2b:53:16:f0:a6:00:0e:8b:f2:6a:d9:31:47:f8:b5:e5:be:
         da:d5:34:b1:94:66:ab:da:75:b8:91:01:7d:b4:e9:23:d3:0f:
         6b:a9:73:d6:f9:54:c1:7e:52:ef:cc:db:79:6b:23:82:a6:90:
         47:c3:ee:43:07:ba:f7:3a:0e:47:27:53:8b:38:8a:75:b4:6d:
         3e:da:0b:e6:f6:96:8d:f0:76:cb:0d:bb:13:7c:17:70:3a:3e:
         06:e8:47:41:30:17:15:a1:50:05:5d:01:65:2f:5f:e1:7f:0c:
         f5:3a:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:54 2026 by rpki-client