Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
File:                     130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft (raw, json)
Hash identifier:          V4wZsPU2BPJ72xfPs15nHPMCnRID3CZMWTV8j9bhXqw=
Subject key identifier:   2C:E8:73:F0:7D:34:4E:9B:F5:90:4B:3E:BC:5B:12:5B:16:5F:E1:AE
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       476460CC6C4B0D3D9FD08AD640FBE2553113A646
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
Manifest number:          0F
Signing time:             Mon 11 May 2026 17:31:58 +0000
Manifest this update:     Mon 11 May 2026 17:26:58 +0000
Manifest next update:     Tue 12 May 2026 19:33:58 +0000
Files and hashes:         1: 3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (hash: YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=)
                          2: 3231302e36332e3130332e302f32342d3234203d3e2034373831.roa (hash: 5LuanoUO4a6xeqWaLxN/SZeaOAGLuEEwfSAJPqh7eLs=)
                          3: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (hash: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ=)
                          4: 3231302e36332e39362e302f32342d3234203d3e2034373831.roa (hash: r+gVK2VfItvXfc9D/hoEHWAKfJ3x7gerduTgXg2N2hk=)
                          5: 3231312e37332e3139322e302f31392d3234203d3e203137343230.roa (hash: Ng7pjPxIKkFqYQdz2HZ68PejD4I0wBx9Difg1QRxlvg=)
                          6: 130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl (hash: SZsMBD3OuqIUpskDuWMxakrEMak+4Giu9z3la8aJ4sA=)
                          7: 3231302e36372e36342e302f31392d3234203d3e203137343230.roa (hash: XPhUbdwzkXKd7wyZA9mIWolSBc8w6j6pnxuPa4iOEgM=)
                          8: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (hash: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0=)
                          9: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (hash: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=)
                          10: 3231302e36332e39392e302f32342d3234203d3e2034373831.roa (hash: T9nAzYG428WNrvrKTVaRKbbeakEvkID730VDFwUgjT8=)
                          11: 3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (hash: GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=)
                          12: 3231312e37332e3232342e302f31392d3234203d3e203137343230.roa (hash: Mz9dS+q6MYbQtEVWX6Nls31KboSIBf4MyRv3x177YkY=)
                          13: 3231302e36332e3130312e302f32342d3234203d3e2034373831.roa (hash: rav3k+J92cWvzcc/ldmfewXrmmg5PcEqAibF1/Kptew=)
                          14: 3231302e36332e39372e302f32342d3234203d3e2034373831.roa (hash: pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=)
                          15: 3231302e3234312e3132382e302f31392d3234203d3e203137343230.roa (hash: Gn/fHHBtwdv7hHePUEwx/lr5HmaDD6xMFsK7vYN8rnI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:64:60:cc:6c:4b:0d:3d:9f:d0:8a:d6:40:fb:e2:55:31:13:a6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: May 11 17:26:58 2026 GMT
            Not After : May 12 19:33:58 2026 GMT
        Subject: CN=2CE873F07D344E9BF5904B3EBC5B125B165FE1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:16:00:07:62:0f:35:a0:ed:d5:65:b9:70:
                    4b:c9:9c:6c:2d:10:7d:d0:88:61:79:b0:71:c3:98:
                    a1:2b:0c:43:54:d0:57:77:7c:d2:c4:29:d9:db:7d:
                    25:c3:48:6a:d5:ec:08:0e:d2:24:db:32:c9:31:5f:
                    61:b6:a0:94:38:a7:48:23:0c:60:b8:5f:01:a0:0b:
                    7f:75:c4:76:0c:28:5d:dd:b2:d7:d1:bc:23:aa:5b:
                    ce:4b:ed:31:cc:7d:82:b4:ef:f1:f5:c0:ef:12:3c:
                    9c:29:32:40:43:2f:5b:e6:c7:ab:68:cc:56:34:7e:
                    82:52:7e:be:1d:47:af:cc:c4:63:d3:ae:63:00:cf:
                    ce:26:c0:86:6b:0f:59:5c:4d:72:32:dd:4a:39:0b:
                    7e:a9:55:6d:a4:54:a5:60:ce:b0:62:1c:ea:11:fb:
                    7c:f2:67:f5:6f:85:13:c5:31:0f:ed:90:bc:21:32:
                    be:c3:06:37:84:b5:8d:44:6b:95:4c:e7:5e:fe:0e:
                    f6:52:78:f0:d4:47:b5:ef:f3:32:a6:ca:84:1f:b7:
                    56:59:28:fe:74:54:78:4c:35:5f:ec:46:52:b9:64:
                    73:b3:b3:44:41:34:9a:f4:c0:73:c0:35:b3:9c:39:
                    57:8a:28:1e:03:8e:3c:35:34:10:0b:d8:1b:49:07:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E8:73:F0:7D:34:4E:9B:F5:90:4B:3E:BC:5B:12:5B:16:5F:E1:AE
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:ed:0d:3a:bf:64:ec:c8:d2:c3:bf:4d:f2:35:3e:ee:2e:
         c9:35:b0:36:cd:83:4b:92:10:d7:70:bd:83:e2:df:b2:a6:bc:
         82:5e:06:98:b2:39:b7:09:0f:47:65:27:e5:70:d3:6a:6a:8b:
         05:13:f9:60:50:c2:49:4c:25:d0:70:1d:92:ba:ba:63:1c:2e:
         c2:35:66:ca:fb:45:1f:84:34:98:73:07:1e:50:69:bc:12:27:
         a9:52:b7:e5:55:00:fa:f2:e3:d1:0d:d4:0b:eb:6a:a6:eb:a2:
         d0:70:cc:c9:75:fb:f7:6b:ec:ad:25:ab:e0:ce:76:d3:e2:3e:
         54:a9:89:16:17:ee:dd:f6:b9:46:ac:f5:3d:11:73:36:65:86:
         c8:cd:6f:68:76:12:66:d2:4d:e3:10:4a:28:2c:1e:63:71:fc:
         44:a1:9b:b5:84:5c:d8:af:c5:4f:4a:72:45:1f:10:a7:3e:74:
         6e:ac:94:3f:a7:e8:fa:f4:bf:0c:41:55:08:8b:32:56:48:b4:
         14:6b:58:3b:0d:4b:ca:d0:28:ef:98:1d:80:c9:0a:94:44:64:
         5a:f7:8c:0b:42:3d:ff:13:f6:6b:8b:af:ca:e5:0f:11:ed:4b:
         d1:b5:84:4f:0a:44:94:3a:46:e2:73:2e:f4:3b:ce:68:b2:d8:
         00:62:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:37 2026 by rpki-client