Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
File:                     7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft (raw, json)
Hash identifier:          QqRf1aNxSh1Is726h0uWbJzCEgJYlDTE+Rmp0hqHZt0=
Subject key identifier:   D7:A7:9D:ED:11:CE:08:98:71:92:9D:A5:33:19:16:2E:B6:CE:29:FD
Authority key identifier: 7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C
Certificate issuer:       /CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
Certificate serial:       36006656CCC5C5CE6B2A43CC8597ADD3E9269525
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft
Manifest number:          02
Signing time:             Mon 11 May 2026 17:36:16 +0000
Manifest this update:     Mon 11 May 2026 17:31:16 +0000
Manifest next update:     Tue 12 May 2026 18:22:16 +0000
Files and hashes:         1: 3135372e32302e3130382e302f32332d3234203d3e2039393137.roa (hash: ckB7c4m0dSGjfbDc1BMRa8lcfk7IIMuWAbfJoeOYzj8=)
                          2: 7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl (hash: jIacq/wEww8y0rnNGI+HeiSwU2U4mAk1YWCyI/Aw8qw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:00:66:56:cc:c5:c5:ce:6b:2a:43:cc:85:97:ad:d3:e9:26:95:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D73093CA12D6CDAD00E53223480A6F2B7FDB78C
        Validity
            Not Before: May 11 17:31:16 2026 GMT
            Not After : May 12 18:22:16 2026 GMT
        Subject: CN=D7A79DED11CE089871929DA53319162EB6CE29FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:38:a0:11:64:2f:6d:cc:f3:f5:c1:22:0c:
                    81:a9:0f:55:29:60:dd:81:8e:9c:46:35:d2:0b:9e:
                    b2:d3:1e:b2:2a:5f:56:04:9a:d1:64:d5:c5:7b:a6:
                    89:4b:57:88:e2:6b:22:e0:2f:ae:4a:44:92:b4:80:
                    e9:66:75:21:fb:61:29:0c:46:6e:2f:af:6e:6d:d6:
                    0c:d8:fb:9c:53:16:23:8f:94:5d:ff:5d:34:0a:3d:
                    b7:76:87:1c:e5:ec:bd:0c:a9:6c:89:dd:29:1d:46:
                    de:08:2f:41:93:3c:d3:0b:59:f8:01:3c:df:cc:a1:
                    5c:c2:03:4a:5a:f5:1a:27:8e:ff:bc:00:98:61:8b:
                    22:32:81:d0:d2:1c:ed:ca:a2:e3:64:3e:7a:43:a8:
                    9e:e8:dc:ca:3f:03:bb:d1:ed:9c:ad:20:88:80:ec:
                    86:4a:78:36:1a:c7:6f:79:9a:0c:a3:0e:af:5c:62:
                    4d:21:73:46:3d:b5:37:b5:15:30:f3:f5:bf:1f:58:
                    19:1d:97:98:7f:01:d1:73:fe:59:ff:5f:be:ee:66:
                    b4:ca:b4:03:71:f2:9d:ba:05:73:8b:56:45:c7:ab:
                    43:8c:9e:8b:6b:b9:fe:7c:93:61:22:e6:cd:40:01:
                    2b:87:48:6e:fb:33:2e:5b:89:bb:36:f3:b5:77:7e:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:9D:ED:11:CE:08:98:71:92:9D:A5:33:19:16:2E:B6:CE:29:FD
            X509v3 Authority Key Identifier:
                keyid:7D:73:09:3C:A1:2D:6C:DA:D0:0E:53:22:34:80:A6:F2:B7:FD:B7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLECLOU/1/7D73093CA12D6CDAD00E53223480A6F2B7FDB78C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:87:2f:28:72:b2:41:eb:bd:ba:a6:6b:1d:a8:1a:3a:f1:9d:
         c0:1b:40:6f:4f:d4:b6:57:6a:b3:43:88:a8:3e:46:08:37:64:
         6c:86:7c:1a:b6:ec:ae:6f:e1:c3:c5:26:c3:03:2b:74:46:08:
         e7:e2:b0:99:bf:19:08:b2:d0:2d:bf:cd:1a:7f:7f:57:8d:0a:
         fd:83:ba:ac:5b:a3:c6:29:e5:b5:2d:8c:c0:6f:76:ad:f2:bc:
         4f:18:13:14:cc:b4:20:c9:d1:3a:5c:ae:45:ea:8e:86:30:97:
         75:ef:b5:38:ad:a5:f0:ef:44:33:4d:df:05:27:45:36:eb:f2:
         1d:bc:3d:3a:0c:da:30:b8:02:bf:fc:54:20:8e:0b:b8:bc:64:
         bc:30:8c:ea:d1:fa:83:98:0c:e5:23:ea:da:11:ea:4b:51:cc:
         7a:aa:92:da:ee:4f:9d:a5:4c:4e:29:42:23:c9:22:6d:ff:61:
         df:14:7a:d2:ea:53:d2:c3:cb:6d:46:00:04:3b:47:59:1f:bc:
         c4:b6:a4:e1:57:f0:9c:9a:a0:fa:f1:f5:35:b3:87:51:a5:ee:
         80:5b:ef:17:55:7d:46:f0:59:41:ef:18:dc:c5:44:bf:2f:0a:
         52:5a:4a:f5:4e:3b:a4:ef:8b:eb:73:e2:25:23:4b:af:49:fb:
         bc:70:14:b4
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUNgBmVszFxc5rKkPMhZet0+kmlSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q3MzA5M0NBMTJENkNEQUQwMEU1MzIyMzQ4MEE2RjJC
N0ZEQjc4QzAeFw0yNjA1MTExNzMxMTZaFw0yNjA1MTIxODIyMTZaMDMxMTAvBgNV
BAMTKEQ3QTc5REVEMTFDRTA4OTg3MTkyOURBNTMzMTkxNjJFQjZDRTI5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuzigEWQvbczz9cEiDIGpD1Up
YN2BjpxGNdILnrLTHrIqX1YEmtFk1cV7polLV4jiayLgL65KRJK0gOlmdSH7YSkM
Rm4vr25t1gzY+5xTFiOPlF3/XTQKPbd2hxzl7L0MqWyJ3SkdRt4IL0GTPNMLWfgB
PN/MoVzCA0pa9Ronjv+8AJhhiyIygdDSHO3KouNkPnpDqJ7o3Mo/A7vR7ZytIIiA
7IZKeDYax295mgyjDq9cYk0hc0Y9tTe1FTDz9b8fWBkdl5h/AdFz/ln/X77uZrTK
tANx8p26BXOLVkXHq0OMnotruf58k2Ei5s1AASuHSG77My5bibs287V3fiMZAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQU16ed7RHOCJhxkp2lMxkWLrbOKf0wHwYDVR0j
BBgwFoAUfXMJPKEtbNrQDlMiNICm8rf9t4wwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lNUExF
Q0xPVS8xLzdENzMwOTNDQTEyRDZDREFEMDBFNTMyMjM0ODBBNkYyQjdGREI3OEMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzAvN0Q3MzA5M0NBMTJENkNEQUQwMEU1MzIy
MzQ4MEE2RjJCN0ZEQjc4Qy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NJTVBMRUNMT1UvMS83RDcz
MDkzQ0ExMkQ2Q0RBRDAwRTUzMjIzNDgwQTZGMkI3RkRCNzhDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ZIcvKHKyQeu9uqZrHagaOvGdwBtAb0/Utldqs0OIqD5GCDdkbIZ8Grbsrm/hw8Um
wwMrdEYI5+Kwmb8ZCLLQLb/NGn9/V40K/YO6rFujxinltS2MwG92rfK8TxgTFMy0
IMnROlyuReqOhjCXde+1OK2l8O9EM03fBSdFNuvyHbw9OgzaMLgCv/xUII4LuLxk
vDCM6tH6g5gM5SPq2hHqS1HMeqqS2u5PnaVMTilCI8kibf9h3xR60upT0sPLbUYA
BDtHWR+8xLak4VfwnJqg+vH1NbOHUaXugFvvF1V9RvBZQe8Y3MVEvy8KUlpK9U47
pO+L63PiJSNLr0n7vHAUtA==
-----END CERTIFICATE-----
Generated at Tue May 12 23:24:59 2026 by rpki-client