Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File:                     FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier:          zUNwxsPEqqe/mUzOVn5+oHbWQbx6DtB7IZnJBKPsaxE=
Subject key identifier:   26:13:FC:BE:1D:97:C5:F4:88:07:97:99:48:60:BE:8C:75:74:33:03
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer:       /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial:       6B4D91561988A51AB1611E6AEF47C81030BA0B31
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number:          03
Signing time:             Mon 11 May 2026 17:39:32 +0000
Manifest this update:     Mon 11 May 2026 17:34:32 +0000
Manifest next update:     Tue 12 May 2026 18:20:32 +0000
Files and hashes:         1: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: M0es4eImbmw7fI+XNwbrI0R4/w5we9egO1xZKupRTBo=)
                          2: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4d:91:56:19:88:a5:1a:b1:61:1e:6a:ef:47:c8:10:30:ba:0b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
        Validity
            Not Before: May 11 17:34:32 2026 GMT
            Not After : May 12 18:20:32 2026 GMT
        Subject: CN=2613FCBE1D97C5F4880797994860BE8C75743303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:ee:f0:9c:7f:86:f0:da:3e:bd:60:96:7f:
                    7d:ec:31:ae:85:c8:8c:5b:1d:42:77:8d:ef:1a:e0:
                    00:a2:50:d3:05:e5:eb:6e:5b:99:ae:e7:28:bd:e5:
                    4d:1f:3b:5c:65:d6:33:e5:ac:77:28:9c:53:f6:8c:
                    2b:2e:fe:76:c5:a1:15:d5:79:0d:c3:40:08:51:20:
                    5e:19:47:ee:ca:f4:b7:70:fd:68:9f:15:7d:d5:79:
                    e5:4a:06:de:de:e0:5e:ef:a7:c0:8b:e7:96:14:1a:
                    0c:6d:2f:f5:c5:c3:8e:3d:36:8a:ec:04:90:1a:03:
                    67:da:7e:5e:04:39:d6:bf:7f:0c:3e:10:b5:78:de:
                    d4:04:96:92:f6:2c:34:29:06:60:61:b6:68:c0:1f:
                    f9:a6:29:34:34:7f:4b:30:6a:a7:58:bf:f3:ff:36:
                    92:48:24:f9:a4:46:50:51:45:86:bf:f7:8b:04:2e:
                    f7:b5:cc:71:2c:0b:60:3e:d4:93:01:87:fc:af:1d:
                    1f:18:a4:a8:fc:3d:24:c5:46:e6:d4:ef:17:16:6a:
                    b0:f0:c7:4f:11:6e:e4:65:7e:b8:f9:fa:b8:00:a2:
                    13:48:d5:58:b0:3c:e6:43:47:a2:03:40:86:c0:2b:
                    15:4a:f5:e5:bb:96:e2:8e:ff:44:db:cd:e8:c7:c5:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:FC:BE:1D:97:C5:F4:88:07:97:99:48:60:BE:8C:75:74:33:03
            X509v3 Authority Key Identifier:
                keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:d1:52:4c:7d:35:78:b1:3c:68:dd:f7:5e:08:46:9c:db:
         56:a8:0c:f3:cb:32:3a:2e:bc:ab:21:6a:a2:81:b5:3b:ee:21:
         df:58:97:43:88:60:32:90:37:a9:c2:54:ed:6a:61:b3:b4:56:
         e4:c4:11:e4:32:90:f0:a1:2d:c8:a0:60:fb:d7:25:35:8e:16:
         2e:1a:8d:15:39:ce:f9:ec:74:9c:01:06:52:e7:18:81:2a:95:
         d1:a8:87:4a:e0:50:21:fe:30:a5:35:66:e5:15:71:4b:12:9f:
         24:68:02:ed:22:6b:13:5d:46:91:17:0b:bd:ea:95:dd:86:56:
         3c:4d:aa:9b:2d:d8:dc:52:08:a9:ae:f6:8b:b0:64:fa:6f:11:
         a2:db:ad:f9:b3:22:e0:29:5a:0e:a4:59:38:8a:94:fc:4a:ac:
         87:c7:ce:bb:85:3b:a5:79:22:26:fc:8f:4b:c3:be:87:93:fb:
         9f:18:63:d3:cf:50:69:2e:2c:6b:67:4a:22:49:76:32:a2:27:
         01:99:42:6e:69:0a:43:a8:c8:fb:a4:c9:be:31:f3:2d:3b:d4:
         0f:2f:8e:c7:51:15:8a:39:b7:50:96:a1:53:7d:93:83:a1:38:
         48:57:85:fd:da:3f:c4:eb:51:08:c4:4c:86:63:5e:3c:ed:e0:
         0a:e0:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:43 2026 by rpki-client