Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
File:                     B5BCB843FC62D50C018D67AAECEC768693B898BB.mft (raw, json)
Hash identifier:          53pbn1YYwsb6aYZbBrfEshZCbwefiGWX8i+XIt4Goxs=
Subject key identifier:   C6:13:F4:12:5A:31:82:8C:57:39:67:CB:25:14:27:6B:4E:AF:62:B9
Authority key identifier: B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB
Certificate issuer:       /CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
Certificate serial:       73F9A6D9F21E54E8D9E8EAD79E350B3994D2DCD1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 17:40:31 +0000
Manifest this update:     Mon 11 May 2026 17:35:31 +0000
Manifest next update:     Tue 12 May 2026 20:39:31 +0000
Files and hashes:         1: 3135372e32302e3133342e302f32332d3234203d3e203332353935.roa (hash: 2miGNbONfgJVnuMX1O6Xis0X2QHCKO3xHvx8nDoW3Q0=)
                          2: B5BCB843FC62D50C018D67AAECEC768693B898BB.crl (hash: 3GWCtbqEyC1lzrt5muzdJWxaZYPDPSmH3wjYaKNqbk8=)
                          3: 3135372e32302e3133352e302f32342d3234203d3e20313431303031.roa (hash: WOYBOovAsDkyK43+ASCyGIyOHFzLI6jt6PTK/EFmDKY=)
                          4: 3135372e32302e3133352e302f32342d3234203d3e20313339333538.roa (hash: NLBte/Xngt5YiZc1cKE0ofpG8JJd20KTmhuGOcBYInE=)
                          5: 3135372e32302e3133342e302f32342d3234203d3e20343030363138.roa (hash: XXKYaMUQ9ja5C/x9TwazrmKnnlLWSfJb+JMU6MAgrIw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f9:a6:d9:f2:1e:54:e8:d9:e8:ea:d7:9e:35:0b:39:94:d2:dc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5BCB843FC62D50C018D67AAECEC768693B898BB
        Validity
            Not Before: May 11 17:35:31 2026 GMT
            Not After : May 12 20:39:31 2026 GMT
        Subject: CN=C613F4125A31828C573967CB2514276B4EAF62B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:25:80:43:0a:10:91:3d:51:5b:e1:7f:dd:
                    8f:28:90:f4:7e:e8:2a:58:d6:dc:a7:e4:d1:f9:e3:
                    10:c6:86:c5:07:f2:89:58:08:77:61:52:08:f8:28:
                    94:13:c1:5b:d1:da:49:5c:36:e5:c9:8e:d5:74:44:
                    f4:72:c4:90:0b:86:9f:e2:b1:46:49:50:6c:2f:d5:
                    f3:2a:97:9a:81:7d:67:31:cf:ed:c6:fd:bd:12:3a:
                    b6:b8:0e:be:61:50:ec:5c:40:88:0a:41:8e:5a:f9:
                    d1:f3:87:a0:67:f1:f2:24:71:b9:2c:be:3e:37:fe:
                    99:bf:5e:2e:34:c8:9c:67:96:de:3e:fb:55:76:57:
                    31:b2:34:c0:5a:3d:8c:36:27:57:b6:76:04:e6:ee:
                    35:43:0a:9d:c9:68:fb:64:b8:b6:e0:b9:3e:21:17:
                    d1:6c:cd:19:01:b9:a1:5b:e5:62:2b:b2:93:b3:19:
                    06:a6:61:41:cb:01:8e:e8:2d:59:d9:b2:79:11:54:
                    c7:0d:ff:94:ac:e2:58:42:ed:6e:2e:d0:92:97:23:
                    06:ac:c8:8a:46:f7:58:6c:3a:9e:7d:54:39:98:0b:
                    f6:9f:b3:90:50:94:90:49:f5:c7:70:23:67:d9:cf:
                    c2:26:47:f3:5c:ca:28:3a:db:21:0e:77:c5:6d:ff:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:F4:12:5A:31:82:8C:57:39:67:CB:25:14:27:6B:4E:AF:62:B9
            X509v3 Authority Key Identifier:
                keyid:B5:BC:B8:43:FC:62:D5:0C:01:8D:67:AA:EC:EC:76:86:93:B8:98:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B5BCB843FC62D50C018D67AAECEC768693B898BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/1/B5BCB843FC62D50C018D67AAECEC768693B898BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:00:00:b0:8b:57:6c:43:61:7b:67:95:c9:66:19:a5:9f:
         84:47:e7:c7:c8:4d:3c:92:ad:1f:a6:12:06:8c:0b:44:59:ab:
         91:2e:21:ca:24:17:e2:64:31:ad:57:53:86:12:50:e0:d4:7b:
         2d:c0:35:21:25:df:24:1d:f7:4d:70:23:f0:66:5d:16:89:8a:
         61:36:83:dd:36:03:9a:ee:6b:00:a8:9f:7c:70:06:e8:59:6f:
         15:5d:d7:9a:0b:a1:dc:f3:d8:40:46:e3:76:21:1a:95:fb:f6:
         2f:14:b3:d4:e8:98:fb:96:59:cf:c5:01:36:04:09:b4:e0:9b:
         8b:7d:3e:54:6a:ab:33:c9:01:22:52:b7:47:a0:a7:1d:bc:d4:
         62:70:18:64:85:1a:0f:9f:ba:b4:56:18:99:8e:60:f3:0c:87:
         8f:3d:5a:86:d1:55:71:90:ad:07:fe:44:01:90:4f:99:e9:dd:
         55:6e:fb:87:df:2b:3a:56:69:b2:b9:5f:b4:0e:35:38:2e:77:
         27:24:52:a7:45:1e:53:40:78:f7:d2:3c:dc:ab:02:ab:15:5a:
         c5:bf:1d:e9:c9:65:75:bf:38:4e:cc:6e:8b:17:eb:5f:d6:0b:
         66:7f:ca:da:dc:24:e2:a3:cc:d5:49:5d:06:1b:95:7e:b8:ee:
         72:1b:75:74
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUc/mm2fIeVOjZ6OrXnjULOZTS3NEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVCQ0I4NDNGQzYyRDUwQzAxOEQ2N0FBRUNFQzc2ODY5
M0I4OThCQjAeFw0yNjA1MTExNzM1MzFaFw0yNjA1MTIyMDM5MzFaMDMxMTAvBgNV
BAMTKEM2MTNGNDEyNUEzMTgyOEM1NzM5NjdDQjI1MTQyNzZCNEVBRjYyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkiWAQwoQkT1RW+F/3Y8okPR+
6CpY1tyn5NH54xDGhsUH8olYCHdhUgj4KJQTwVvR2klcNuXJjtV0RPRyxJALhp/i
sUZJUGwv1fMql5qBfWcxz+3G/b0SOra4Dr5hUOxcQIgKQY5a+dHzh6Bn8fIkcbks
vj43/pm/Xi40yJxnlt4++1V2VzGyNMBaPYw2J1e2dgTm7jVDCp3JaPtkuLbguT4h
F9FszRkBuaFb5WIrspOzGQamYUHLAY7oLVnZsnkRVMcN/5Ss4lhC7W4u0JKXIwas
yIpG91hsOp59VDmYC/afs5BQlJBJ9cdwI2fZz8ImR/Ncyig62yEOd8Vt/0EhAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUxhP0EloxgoxXOWfLJRQna06vYrkwHwYDVR0j
BBgwFoAUtby4Q/xi1QwBjWeq7Ox2hpO4mLswDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTTJOSU0v
MS9CNUJDQjg0M0ZDNjJENTBDMDE4RDY3QUFFQ0VDNzY4NjkzQjg5OEJCLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I1QkNCODQzRkM2MkQ1MEMwMThENjdBQUVDRUM3
Njg2OTNCODk4QkIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NMk5JTS8xL0I1QkNCODQzRkM2MkQ1
MEMwMThENjdBQUVDRUM3Njg2OTNCODk4QkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbpAAAsItXbENh
e2eVyWYZpZ+ER+fHyE08kq0fphIGjAtEWauRLiHKJBfiZDGtV1OGElDg1HstwDUh
Jd8kHfdNcCPwZl0WiYphNoPdNgOa7msAqJ98cAboWW8VXdeaC6Hc89hARuN2IRqV
+/YvFLPU6Jj7llnPxQE2BAm04JuLfT5UaqszyQEiUrdHoKcdvNRicBhkhRoPn7q0
VhiZjmDzDIePPVqG0VVxkK0H/kQBkE+Z6d1VbvuH3ys6VmmyuV+0DjU4LncnJFKn
RR5TQHj30jzcqwKrFVrFvx3pyWV1vzhOzG6LF+tf1gtmf8ra3CTio8zVSV0GG5V+
uO5yG3V0
-----END CERTIFICATE-----