Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File:                     D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier:          r+ZRWeeWv41qWJejINf5OGLc2JvL8VFqdlvnSD1o7PA=
Subject key identifier:   83:D9:2E:01:90:A7:0E:35:02:6A:A2:E7:99:E2:79:16:A1:4E:78:4F
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       19F1BE01090A86661207A109F4D4B740F88AA12E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:37:58 +0000
Manifest this update:     Mon 11 May 2026 17:32:58 +0000
Manifest next update:     Tue 12 May 2026 20:45:58 +0000
Files and hashes:         1: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: u7QEwWFEoyIM2iXCdihUJtyG/RglDMNSOF7bpAIXLWk=)
                          2: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f1:be:01:09:0a:86:66:12:07:a1:09:f4:d4:b7:40:f8:8a:a1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: May 11 17:32:58 2026 GMT
            Not After : May 12 20:45:58 2026 GMT
        Subject: CN=83D92E0190A70E35026AA2E799E27916A14E784F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:8d:4f:50:66:48:e9:23:83:01:42:35:29:
                    ce:4d:6e:42:1a:99:1e:6c:a3:aa:7a:fc:2d:8c:4f:
                    a6:44:ca:2a:0e:35:35:53:f5:3e:bd:1f:8d:c5:9f:
                    84:69:20:9a:ee:3b:79:43:cd:cb:ac:87:eb:2a:ad:
                    24:04:69:8d:7f:7c:0c:50:af:93:40:58:d3:8c:57:
                    51:89:28:7c:39:ea:37:83:05:e8:66:b3:b3:88:43:
                    5f:f9:a7:50:ca:06:e1:f9:be:6c:27:0b:26:d7:7f:
                    6d:69:7f:78:4c:48:1e:bf:b3:00:7f:a4:b5:a0:4d:
                    4e:e3:b4:fd:1b:d3:45:69:fb:70:af:0e:ec:a3:2c:
                    31:be:53:30:f0:80:9e:73:3c:3d:21:3d:1c:03:74:
                    e1:76:5d:be:da:60:a4:67:a6:86:62:e2:82:28:6a:
                    d0:17:b9:ab:c5:34:42:18:86:95:5e:e1:72:e9:ee:
                    a2:ad:17:0a:ca:e9:d9:37:2c:d6:cd:62:49:03:13:
                    cb:39:74:41:76:51:25:24:f0:14:a4:de:39:44:61:
                    18:cf:24:77:7e:a4:3f:6d:9c:e9:aa:da:3f:13:d1:
                    a9:22:37:31:2f:8f:97:43:22:40:31:61:16:80:25:
                    2d:e5:06:87:b0:7e:42:17:8b:03:cc:56:0e:22:ac:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D9:2E:01:90:A7:0E:35:02:6A:A2:E7:99:E2:79:16:A1:4E:78:4F
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:37:ed:81:e7:cd:e0:08:6f:d9:e2:b0:b9:0b:dc:0d:9c:40:
         42:da:cb:e7:2b:05:4f:b5:90:57:02:30:58:86:d8:d6:a0:6f:
         7c:a8:b8:a2:0f:5b:1b:b0:64:c8:8e:61:89:c0:0d:3d:17:27:
         29:20:df:59:7d:3f:ca:c7:3a:c6:17:23:a5:57:a9:2b:c6:9a:
         23:7d:50:67:bc:55:de:91:bc:e0:4c:bc:c4:ad:d2:79:7d:bc:
         69:2e:fc:14:77:5b:da:3b:bc:af:a2:a3:5e:e2:4d:c7:6d:f9:
         fb:e9:ce:f7:96:69:bd:d5:98:18:97:8c:4e:e1:56:64:40:7a:
         bb:02:22:03:fb:ad:1a:37:54:8d:36:c7:15:e9:b4:fe:b1:c9:
         14:66:3f:3a:7d:36:46:53:e7:25:5e:b1:35:a2:f9:12:11:81:
         ef:84:72:36:e0:d7:54:03:96:04:78:72:2f:4b:16:e3:92:51:
         47:dd:54:17:0d:56:60:b7:52:76:67:8e:2b:e1:e1:60:05:bf:
         28:90:5c:20:61:6e:3e:e4:93:1f:70:7f:11:2c:20:66:da:42:
         fc:a0:0b:4c:81:13:3e:50:d8:e9:a9:eb:6c:bc:15:2d:a3:e6:
         8c:98:33:d9:20:72:56:d0:86:e2:ef:21:31:5c:be:ac:a3:fc:
         a1:e0:16:45
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUGfG+AQkKhmYSB6EJ9NS3QPiKoS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDU4Q0UwQkU1OEUyMTc3OUQ1QUNBMDk2Q0VGQ0VC
Q0VENUQxMjAeFw0yNjA1MTExNzMyNThaFw0yNjA1MTIyMDQ1NThaMDMxMTAvBgNV
BAMTKDgzRDkyRTAxOTBBNzBFMzUwMjZBQTJFNzk5RTI3OTE2QTE0RTc4NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNo1PUGZI6SODAUI1Kc5NbkIa
mR5so6p6/C2MT6ZEyioONTVT9T69H43Fn4RpIJruO3lDzcush+sqrSQEaY1/fAxQ
r5NAWNOMV1GJKHw56jeDBehms7OIQ1/5p1DKBuH5vmwnCybXf21pf3hMSB6/swB/
pLWgTU7jtP0b00Vp+3CvDuyjLDG+UzDwgJ5zPD0hPRwDdOF2Xb7aYKRnpoZi4oIo
atAXuavFNEIYhpVe4XLp7qKtFwrK6dk3LNbNYkkDE8s5dEF2USUk8BSk3jlEYRjP
JHd+pD9tnOmq2j8T0akiNzEvj5dDIkAxYRaAJS3lBoewfkIXiwPMVg4irBzZAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUg9kuAZCnDjUCaqLnmeJ5FqFOeE8wHwYDVR0j
BBgwFoAU0LRYzgvljiF3nVrKCWzvzrztXRIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElBTkdD
QUkvMC9EMEI0NThDRTBCRTU4RTIxNzc5RDVBQ0EwOTZDRUZDRUJDRUQ1RDEyLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwQjQ1OENFMEJFNThFMjE3NzlENUFDQTA5
NkNFRkNFQkNFRDVEMTIuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFOR0NBSS8wL0QwQjQ1OENF
MEJFNThFMjE3NzlENUFDQTA5NkNFRkNFQkNFRDVEMTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwN+2B
583gCG/Z4rC5C9wNnEBC2svnKwVPtZBXAjBYhtjWoG98qLiiD1sbsGTIjmGJwA09
FycpIN9ZfT/KxzrGFyOlV6krxpojfVBnvFXekbzgTLzErdJ5fbxpLvwUd1vaO7yv
oqNe4k3Hbfn76c73lmm91ZgYl4xO4VZkQHq7AiID+60aN1SNNscV6bT+sckUZj86
fTZGU+clXrE1ovkSEYHvhHI24NdUA5YEeHIvSxbjklFH3VQXDVZgt1J2Z44r4eFg
Bb8okFwgYW4+5JMfcH8RLCBm2kL8oAtMgRM+UNjpqetsvBUto+aMmDPZIHJW0Ibi
7yExXL6so/yh4BZF
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:59 2026 by rpki-client