Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
File:                     E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft (raw, json)
Hash identifier:          suE/F2skvkl/h0ZHKkJ6UWrqLnmvsOjSny1RhaJleaQ=
Subject key identifier:   6D:9F:CE:8C:A5:63:60:D1:D9:17:E4:A0:9C:60:3B:83:79:F9:B9:84
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Certificate issuer:       /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial:       3E43B23B1CFAA64F9D06785FCADB7F115654CD19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 17:37:46 +0000
Manifest this update:     Mon 11 May 2026 17:32:46 +0000
Manifest next update:     Tue 12 May 2026 20:56:46 +0000
Files and hashes:         1: 3130332e3232392e3130302e302f32332d3233203d3e203338383531.roa (hash: LLKqTVeKrjc2C1jKfd0XhQ5DwV55DZrdbsX87bNg7Bg=)
                          2: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl (hash: Zf0TKMrc095SmcHowNCeka7o/slgVL4RdUy4as0ddf0=)
                          3: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (hash: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=)
                          4: 34332e3235302e34342e302f32332d3233203d3e203338383531.roa (hash: MJw5fyYTrafx81rPsZJsc1XaHBGLvizET5hyMMB4EiM=)
                          5: 34332e3235302e34342e302f32322d3232203d3e203338383531.roa (hash: Wow23AEcmPQDHAfbsYDrdq/Ze5tAj8uj4WfgyeReqLU=)
                          6: 34332e3235302e34362e302f32332d3233203d3e203338383531.roa (hash: zDLGCzxdPFG/4CsCmQW1j4D7LK25mUZpat6DEbpgaZY=)
                          7: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (hash: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:b2:3b:1c:fa:a6:4f:9d:06:78:5f:ca:db:7f:11:56:54:cd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
        Validity
            Not Before: May 11 17:32:46 2026 GMT
            Not After : May 12 20:56:46 2026 GMT
        Subject: CN=6D9FCE8CA56360D1D917E4A09C603B8379F9B984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:81:28:af:47:49:87:fd:eb:ba:75:ca:60:
                    f0:3a:f6:cb:ec:67:b5:d0:7b:2d:54:e2:80:1a:e4:
                    8b:2e:ed:fa:07:20:cf:db:93:14:fb:c1:9c:41:d7:
                    cd:9a:8b:dd:5c:06:fd:e2:3f:7e:98:ed:6f:c7:f5:
                    8e:47:0e:6b:9c:c0:e6:24:32:90:84:72:01:38:32:
                    0f:5a:35:22:ae:94:af:ec:c8:fb:7e:d8:29:12:96:
                    bb:86:cc:23:eb:2d:47:16:43:de:62:72:2f:c6:15:
                    f3:a7:5c:3e:25:c8:af:86:47:84:3c:10:b8:01:63:
                    14:d7:87:70:73:ad:b7:25:89:37:a9:fb:04:99:a8:
                    a2:e0:30:42:c7:f2:37:ca:54:17:a6:a8:de:b5:53:
                    5c:77:35:c3:d7:61:17:71:4d:37:18:31:6d:96:98:
                    65:19:cc:6e:e9:d9:b4:58:65:6d:64:2d:67:39:65:
                    a7:d2:17:bf:a1:3b:fd:46:b0:a4:3d:f4:e1:73:26:
                    de:cd:19:b6:d1:16:77:cd:be:3a:41:b6:fa:14:64:
                    e1:7a:06:57:f7:28:63:c3:ee:cf:13:e3:4f:99:bc:
                    5e:9b:6e:88:6a:9a:ed:ef:03:8b:58:f9:fb:4b:d4:
                    4c:62:43:9e:c3:ca:e7:53:36:17:1c:33:50:cb:15:
                    65:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9F:CE:8C:A5:63:60:D1:D9:17:E4:A0:9C:60:3B:83:79:F9:B9:84
            X509v3 Authority Key Identifier:
                keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:d1:bb:ed:33:82:d7:e3:7c:c4:c2:6e:b4:ac:f4:b6:5c:
         5a:0b:33:72:9e:a4:55:16:00:40:a8:7d:88:de:01:2c:f9:58:
         cd:af:35:57:59:08:a3:c0:db:86:47:c5:b2:8d:10:80:9c:73:
         1e:e6:fe:85:17:d5:f9:8c:cc:f1:23:ef:ce:77:89:7d:f0:f6:
         c2:82:bf:2d:71:78:1a:a7:23:4e:9a:82:2b:67:11:0e:96:55:
         57:bf:68:0e:55:8d:45:75:f2:fb:65:bd:03:5c:e5:b4:fc:a7:
         4c:46:30:ef:53:8b:73:ba:fb:a3:98:cc:c3:2a:f8:c7:21:23:
         8a:73:a9:33:95:9c:ac:49:ee:58:e1:73:ad:cf:42:ef:69:08:
         95:05:87:f6:90:f7:77:a2:cd:e2:c6:86:05:15:77:4a:00:a6:
         db:af:6e:4a:ee:35:04:5a:13:c7:45:47:67:82:4a:f0:c0:05:
         55:e3:5d:ec:88:68:1b:41:24:98:11:78:d2:a0:bc:4d:32:f8:
         8c:b0:e8:57:31:97:a2:7d:e5:b6:3d:57:0c:e7:10:38:72:44:
         25:e2:9e:5e:3d:33:3f:a4:d6:cf:c9:29:8b:08:53:47:38:78:
         38:ff:ae:7f:88:2b:06:7a:48:72:ba:7f:98:b5:6e:73:a7:98:
         eb:8e:76:83
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUPkOyOxz6pk+dBnhfytt/EVZUzRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThCMzhGQUQxQkM5RDdFNDI2NjAzRjZDMjA0NTY2QzRB
RjMwOTM4RjAeFw0yNjA1MTExNzMyNDZaFw0yNjA1MTIyMDU2NDZaMDMxMTAvBgNV
BAMTKDZEOUZDRThDQTU2MzYwRDFEOTE3RTRBMDlDNjAzQjgzNzlGOUI5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh4Eor0dJh/3runXKYPA69svs
Z7XQey1U4oAa5Isu7foHIM/bkxT7wZxB182ai91cBv3iP36Y7W/H9Y5HDmucwOYk
MpCEcgE4Mg9aNSKulK/syPt+2CkSlruGzCPrLUcWQ95ici/GFfOnXD4lyK+GR4Q8
ELgBYxTXh3BzrbcliTep+wSZqKLgMELH8jfKVBemqN61U1x3NcPXYRdxTTcYMW2W
mGUZzG7p2bRYZW1kLWc5ZafSF7+hO/1GsKQ99OFzJt7NGbbRFnfNvjpBtvoUZOF6
Blf3KGPD7s8T40+ZvF6bbohqmu3vA4tY+ftL1ExiQ57DyudTNhccM1DLFWVjAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUbZ/OjKVjYNHZF+SgnGA7g3n5uYQwHwYDVR0j
BBgwFoAU6LOPrRvJ1+QmYD9sIEVmxK8wk48wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdULzAv
RThCMzhGQUQxQkM5RDdFNDI2NjAzRjZDMjA0NTY2QzRBRjMwOTM4Ri5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9FOEIzOEZBRDFCQzlEN0U0MjY2MDNGNkMyMDQ1NjZD
NEFGMzA5MzhGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdULzAvRThCMzhGQUQxQkM5RDdFNDI2
NjAzRjZDMjA0NTY2QzRBRjMwOTM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABuL0bvtM4LX43zEwm60
rPS2XFoLM3KepFUWAECofYjeASz5WM2vNVdZCKPA24ZHxbKNEICccx7m/oUX1fmM
zPEj7853iX3w9sKCvy1xeBqnI06agitnEQ6WVVe/aA5VjUV18vtlvQNc5bT8p0xG
MO9Ti3O6+6OYzMMq+MchI4pzqTOVnKxJ7ljhc63PQu9pCJUFh/aQ93eizeLGhgUV
d0oAptuvbkruNQRaE8dFR2eCSvDABVXjXeyIaBtBJJgReNKgvE0y+Iyw6Fcxl6J9
5bY9VwznEDhyRCXinl49Mz+k1s/JKYsIU0c4eDj/rn+IKwZ6SHK6f5i1bnOnmOuO
doM=
-----END CERTIFICATE-----
Generated at Tue May 12 22:13:39 2026 by rpki-client