Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
File:                     E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft (raw, json)
Hash identifier:          irM1ewl1ENqZXNl/uwfvlmlegT5awIr3G4qyMe4rgyI=
Subject key identifier:   30:53:FD:CE:F9:57:78:09:3C:D0:ED:2E:12:EF:D5:58:20:12:DA:CA
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       05DF56D385191D750991835482F95FBF146C9793
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:56:12 +0000
Manifest this update:     Mon 11 May 2026 17:51:12 +0000
Manifest next update:     Tue 12 May 2026 21:39:12 +0000
Files and hashes:         1: 323430303a633961303a3a2f33322d3438203d3e20313334383233.roa (hash: roZf74LZTjPC37WNB8hAfHKXR+n61h+kMwdr2WeTD/c=)
                          2: 3130332e3139362e3137322e302f32332d3332203d3e20313331363537.roa (hash: NpkKgZKgQzFsbjfJX1vZdhNyqUb+xH2r7dgMGqJtZg8=)
                          3: 3130332e35312e38382e302f32332d3332203d3e20313334383233.roa (hash: 3MhCCA9x4cSH+VWvwThmSDFRAUojv21Q6ESF/FUc02s=)
                          4: E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl (hash: zNEx865mslsCR6GALBPj8yaetBNrZHGk9PxiWgZAPG4=)
                          5: 3130332e35312e38392e302f32342d3332203d3e20333936393832.roa (hash: 7NHk4ptta4FPEJ/NYsRwLzG7cQkZ9gd7Kxadg42nT8M=)
                          6: 3130332e35312e38382e302f32342d3332203d3e20333936393832.roa (hash: c66ljepWyfaVVSJPo172SyefLPJobqLPYK+Xd4H6D0k=)
                          7: 3130332e35312e38382e302f32332d3332203d3e20313331363537.roa (hash: vAjwRathCa+mLRNCd0gEZIFCoZ7Q7I8qAI8wyykUzQo=)
                          8: 323430303a633961303a3a2f33322d3438203d3e20313331363537.roa (hash: duqlFQARu8jUfndJSdntYMhiK6YR6wczF3YaKirO3Fc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:df:56:d3:85:19:1d:75:09:91:83:54:82:f9:5f:bf:14:6c:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: May 11 17:51:12 2026 GMT
            Not After : May 12 21:39:12 2026 GMT
        Subject: CN=3053FDCEF95778093CD0ED2E12EFD5582012DACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:31:d1:35:34:fc:58:d3:31:8b:4c:b2:52:
                    01:0d:a9:ac:ba:3f:42:23:b8:f3:0b:1c:c2:da:4e:
                    24:b1:dd:40:1f:61:df:15:ea:c0:cb:30:50:38:d3:
                    e7:5e:9d:08:ff:b6:b1:e1:a3:d5:07:56:35:0c:b1:
                    e7:6f:46:12:3f:df:3b:4c:b7:e3:ae:2e:d1:8a:95:
                    c3:ae:56:e6:02:f6:b4:5b:ad:8b:54:e0:b0:ca:25:
                    1e:1f:06:c3:13:ec:8e:8a:62:79:22:25:65:a1:85:
                    0d:fb:16:60:48:25:ca:c2:cc:55:a0:4f:dd:28:06:
                    09:cd:0a:a2:05:05:74:5e:1d:67:d3:c6:fa:5a:42:
                    24:54:47:6d:22:aa:da:25:32:9d:d0:0b:20:3c:ab:
                    ab:d6:40:75:dd:cd:10:c7:22:e1:b6:a3:95:df:57:
                    18:8d:2c:8f:d6:02:92:75:46:c4:e6:ac:7b:23:3f:
                    5b:ce:80:37:64:60:9f:e8:52:0c:fe:72:dd:b1:22:
                    1f:94:a6:c0:0e:4d:d6:df:e5:a4:65:08:c6:67:c5:
                    e4:ad:8e:67:ad:18:7e:12:6c:b2:a1:9f:20:e2:f5:
                    ab:14:c2:ce:cc:64:66:d4:38:95:3a:57:df:e6:3d:
                    92:20:60:59:24:90:80:10:e0:81:9f:19:d1:04:93:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:FD:CE:F9:57:78:09:3C:D0:ED:2E:12:EF:D5:58:20:12:DA:CA
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:4a:c8:a7:78:71:ed:23:33:d9:c3:12:1d:59:77:b3:f2:
         d3:29:40:53:7f:ff:83:f1:1d:a3:f6:ba:d3:1d:35:d2:03:83:
         9a:41:bf:b8:8e:6d:ba:19:46:89:1f:7a:3a:5a:fa:0c:8f:e7:
         25:c7:5c:34:4a:ef:ab:a3:c3:10:4b:0f:71:b5:64:6c:9f:6d:
         de:f5:5b:4e:31:9e:7b:0c:90:ad:1a:c1:fe:78:aa:87:62:59:
         4a:a6:20:94:81:72:94:c1:60:f2:0e:fc:ef:9c:74:19:f5:a6:
         46:c5:6c:0c:1d:8f:7a:3a:7a:6b:72:95:24:40:51:24:d2:36:
         78:81:0d:72:a1:7d:fe:8a:5f:48:f7:f9:7a:fd:c5:de:b1:6e:
         05:8f:ce:56:27:60:fd:8b:46:43:65:2e:7c:ef:65:5e:5f:84:
         29:22:d4:c5:ac:85:91:c0:ea:cc:f1:36:68:27:40:05:71:b4:
         f7:34:49:dd:5d:c4:0c:2a:4a:23:88:31:7a:d2:81:dc:ec:66:
         c5:97:f3:3e:1f:8c:48:b8:c6:66:23:3f:5a:f4:fa:fe:d6:1d:
         02:4b:2c:44:a2:d8:e7:eb:db:2e:c6:97:bc:7d:79:7f:c0:66:
         33:69:be:24:9a:84:52:23:a0:88:9f:c4:04:0a:6f:86:ee:12:
         a6:8c:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----