Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
File:                     2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json)
Hash identifier:          MNQsauNGVVhTqv26yvlqg1yGThHDVinGlCLVJl4xf84=
Subject key identifier:   9A:4E:B7:50:01:01:63:F5:60:3C:D9:A5:94:CD:B4:97:54:8A:AB:09
Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53
Certificate issuer:       /CN=2D63D0213010A74651A161277EB9CBDC9CF65853
Certificate serial:       2C83E35EED973EC0C8162770E679D2E6C1290145
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
Manifest number:          04
Signing time:             Mon 11 May 2026 17:37:19 +0000
Manifest this update:     Mon 11 May 2026 17:32:19 +0000
Manifest next update:     Tue 12 May 2026 20:29:19 +0000
Files and hashes:         1: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: JJJgjaZI0ONur8zxZf8Pk5EuI8KbnkyhjBmPYCdBMu8=)
                          2: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:e3:5e:ed:97:3e:c0:c8:16:27:70:e6:79:d2:e6:c1:29:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853
        Validity
            Not Before: May 11 17:32:19 2026 GMT
            Not After : May 12 20:29:19 2026 GMT
        Subject: CN=9A4EB750010163F5603CD9A594CDB497548AAB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:b8:c3:58:19:03:d3:c2:84:90:01:57:b8:
                    f0:26:28:e7:ef:04:96:b4:94:bc:4a:ed:63:05:83:
                    74:20:89:0d:c8:14:a4:c0:31:16:16:84:47:68:f5:
                    de:31:4f:4c:cc:d4:87:8d:89:d7:71:3e:6c:64:e1:
                    bb:6b:c5:d4:17:dc:5b:7c:64:a5:61:22:53:85:c2:
                    3c:b0:c0:c1:f7:ba:9c:5b:cd:ed:8e:da:2c:fa:8f:
                    ca:c4:53:df:67:8f:06:0d:da:d7:d4:e1:16:6b:87:
                    17:08:c5:6c:a3:85:c2:aa:28:51:4b:96:f9:95:a5:
                    9a:2b:c7:31:87:b2:0c:16:5f:47:f4:20:bd:e9:ac:
                    21:a8:bc:a4:85:fc:15:63:b2:18:96:2a:96:88:d8:
                    98:4f:ad:f6:3e:8f:0c:09:c7:74:72:6d:4c:b2:ae:
                    64:59:e4:92:a6:88:f0:c0:51:39:82:e0:a0:7c:58:
                    16:18:a9:74:09:22:70:ae:3f:81:5c:39:40:cc:75:
                    b7:22:82:54:e1:fb:b8:21:2f:9d:f9:a0:3f:76:b4:
                    9e:d1:4b:84:e6:12:bb:1f:07:8d:9a:e9:4a:fa:fb:
                    d3:95:fa:5f:31:ec:6e:a5:30:f7:8b:69:2d:27:eb:
                    49:f7:61:c1:28:9e:c8:5d:2d:97:03:a5:d8:83:b6:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:B7:50:01:01:63:F5:60:3C:D9:A5:94:CD:B4:97:54:8A:AB:09
            X509v3 Authority Key Identifier:
                keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:98:c3:e4:ab:ab:fd:3e:d9:90:cb:1a:fe:bf:2c:c9:ed:
         e6:91:5c:74:e6:0a:45:04:f5:34:14:cf:eb:8d:5e:2e:10:83:
         80:e4:12:15:c8:b9:d6:52:04:17:5c:75:58:d9:97:cc:56:7b:
         29:62:25:7e:a4:a7:61:dc:d6:68:62:68:8e:66:66:1a:89:58:
         53:3e:a9:bf:19:f0:9a:50:95:bf:3a:31:13:f1:71:2d:2e:1e:
         d7:3b:12:79:84:f4:3a:33:03:e4:94:ce:7e:88:63:9d:12:fc:
         73:f5:ee:60:2e:56:d3:fc:d4:ca:f5:5c:d1:25:0f:10:cc:dc:
         26:54:84:e4:24:fa:a8:2f:d6:1b:9c:15:a3:a0:8e:87:6a:d5:
         b9:75:89:92:cb:d5:79:b9:29:47:64:1e:8e:a0:2b:0c:4e:dc:
         31:34:94:5d:c8:8f:3c:4e:45:6d:35:a0:e4:c6:1c:5d:89:2f:
         90:0c:24:cf:a1:83:55:43:a6:3b:70:d3:e0:6a:de:7f:c7:9d:
         d2:4c:21:e5:03:75:e8:7b:bc:8b:84:25:ad:06:f2:ed:87:93:
         d7:4a:ed:70:4a:c2:c9:82:67:c3:55:3c:18:dc:39:2c:7a:37:
         2e:be:ef:55:1b:1b:fa:66:26:81:ad:3e:f1:89:fd:ee:3c:bc:
         27:3c:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----