Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
File:                     F4194E27E15A4F76E006403795143D4EFDCF022E.mft (raw, json)
Hash identifier:          KZZ+7MVWcFRPi0k5GQAw7JIHFR87axrfKXJ97p11ueU=
Subject key identifier:   CE:0F:7B:E5:72:F6:5C:42:A3:73:95:C2:4D:E8:02:89:E5:3B:D3:32
Authority key identifier: F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E
Certificate issuer:       /CN=F4194E27E15A4F76E006403795143D4EFDCF022E
Certificate serial:       053B18937977A825503AFCEE301E03BA588935B5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:39:39 +0000
Manifest this update:     Mon 11 May 2026 17:34:39 +0000
Manifest next update:     Tue 12 May 2026 21:19:39 +0000
Files and hashes:         1: 3135372e32302e3130362e302f32342d3234203d3e20313530373732.roa (hash: OmqcGxA2rNXj2dFvkkVaw1M6A48OHsdG1EyNXCLdbEU=)
                          2: 3135372e32302e3130362e302f32332d3234203d3e20313530373732.roa (hash: f9osk8atvNFbwzlzm+0pX0JbzGg2b5M3dZ9aT1SRM7Y=)
                          3: 3135372e32302e3130362e302f32332d3233203d3e2033343632.roa (hash: U1maVebHqNxJOM61IipjwHfKGQHfW803fIcL92PP6U4=)
                          4: 3135372e32302e3130362e302f32332d3234203d3e20313938393439.roa (hash: NsVC+kyCCo5iuf92xRmrMNAeZWnd0GFdv+b5P5erIsw=)
                          5: 3135372e32302e3130362e302f32342d3234203d3e203139353531.roa (hash: tj30Mw6SegUb4xqIoH5nsbPbEgFt7VbOqElQZObdRdk=)
                          6: 3135372e32302e3130372e302f32342d3234203d3e20313530373732.roa (hash: nTtkDIS/9RWSvXhNtKm7NzCRLQuNi0ZYeYDRWbSZUkY=)
                          7: F4194E27E15A4F76E006403795143D4EFDCF022E.crl (hash: qc0DZVEOsBdVZ3ne0bSX2H5CDxwd2m1GCX7GUA/uZIQ=)
                          8: 3135372e32302e3130372e302f32342d3234203d3e203139353531.roa (hash: h885eOx61p3k8wuxUDF9SUB/ZPMTr8/gQVLItFXI4rM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3b:18:93:79:77:a8:25:50:3a:fc:ee:30:1e:03:ba:58:89:35:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4194E27E15A4F76E006403795143D4EFDCF022E
        Validity
            Not Before: May 11 17:34:39 2026 GMT
            Not After : May 12 21:19:39 2026 GMT
        Subject: CN=CE0F7BE572F65C42A37395C24DE80289E53BD332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:68:31:ad:8e:bd:7f:bb:06:24:cb:da:db:
                    40:71:4a:37:8f:09:15:32:9c:c9:c6:94:07:1f:09:
                    e7:90:1a:41:20:3e:09:bb:da:c2:bd:cc:c2:be:1e:
                    32:ce:09:dd:53:06:3e:e9:52:17:7f:28:f2:0a:26:
                    22:46:f4:22:ab:48:d7:4d:b3:b1:66:83:e5:3c:f2:
                    52:a5:98:b3:46:e7:b2:a1:a4:19:3f:12:3a:f6:a1:
                    1f:33:6d:0e:df:bb:a6:f8:d5:59:a3:31:63:a6:a3:
                    3f:fc:90:41:02:7a:eb:21:38:30:51:00:3b:87:22:
                    df:c2:64:54:bc:56:9b:99:6e:d8:ed:7d:c0:fe:91:
                    f8:3c:96:18:40:49:47:5f:aa:a2:bf:cb:3f:ae:d8:
                    e7:5b:9c:ae:b8:dd:0b:60:c0:48:3e:b1:26:92:81:
                    23:d0:91:26:7f:3c:e9:1b:5f:35:7d:0b:5c:4d:c6:
                    0c:a5:01:95:af:4f:3f:46:08:d0:5f:ed:64:08:1c:
                    cc:56:ee:00:60:a2:c1:99:94:37:e4:a9:4b:f2:b6:
                    d7:b7:d0:46:4e:17:c1:5a:0e:8f:dd:c6:1b:f1:48:
                    17:75:e8:bc:68:ca:ee:e8:82:3c:dd:1a:00:ae:b9:
                    d0:87:d8:82:68:89:51:e1:0a:4f:b0:24:19:fb:c2:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0F:7B:E5:72:F6:5C:42:A3:73:95:C2:4D:E8:02:89:E5:3B:D3:32
            X509v3 Authority Key Identifier:
                keyid:F4:19:4E:27:E1:5A:4F:76:E0:06:40:37:95:14:3D:4E:FD:CF:02:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/F4194E27E15A4F76E006403795143D4EFDCF022E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/1/F4194E27E15A4F76E006403795143D4EFDCF022E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:37:03:6c:bd:6c:1c:8c:04:58:2b:5e:f6:df:5d:7b:2c:
         5c:d0:ee:8b:1f:3e:eb:fe:59:43:2e:f8:31:79:5b:15:18:b9:
         74:54:bc:c2:6a:f8:22:71:b8:3b:ae:dd:63:1c:96:bb:6e:97:
         40:9c:d2:56:24:a3:df:5b:41:45:9c:7e:70:5e:b2:55:61:df:
         9a:57:0b:0d:5b:1f:7e:93:b4:ae:24:5c:56:38:b8:b1:70:1c:
         38:a2:52:b3:f8:f7:cb:4e:01:7a:31:69:59:32:fd:30:61:b1:
         1d:b4:dc:91:96:cb:7a:e6:71:6c:d1:a4:99:d9:e6:12:97:90:
         d5:d3:0a:d0:7b:11:58:f9:e5:d1:8f:d4:0a:3c:54:26:e9:08:
         17:d9:8a:c0:88:c6:d3:09:9d:51:a6:d6:10:91:e0:ef:d2:02:
         79:41:1a:3c:2f:22:e6:2b:4c:19:04:ef:41:7f:c3:38:b2:fc:
         9a:ad:ef:9c:4f:94:38:1c:49:f5:9d:63:b9:a9:59:4b:3a:a4:
         2a:00:40:4c:de:19:45:40:d5:df:87:20:3e:86:f4:e7:6a:3b:
         9f:a4:e9:b5:49:a6:aa:1b:81:3e:19:83:53:83:b0:2c:fb:03:
         04:db:f9:6d:cd:98:9f:2a:3c:1c:b7:b1:b0:6e:91:93:7e:de:
         0d:d3:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----