Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
File:                     101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft (raw, json)
Hash identifier:          8wjc0MT0BxkhAUlvyIvXJsuVpWr4EeTwtunpKhSTDNI=
Subject key identifier:   19:58:BA:62:6E:5B:C9:D2:FE:B2:53:EE:AC:30:42:A4:F0:F9:EA:A7
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Certificate issuer:       /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial:       3AFC961CC62656B86896FBB5595804BC0DBB065A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:40:35 +0000
Manifest this update:     Mon 11 May 2026 17:35:35 +0000
Manifest next update:     Tue 12 May 2026 21:31:35 +0000
Files and hashes:         1: 3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa (hash: oaNsp11upkBZ+JGYlmo3nCJ8dB+RQUZt5gJM6iJrwHk=)
                          2: 3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa (hash: 7MNXU7sfreKdDoH2cxg35XbGCH5NeuOsP993lyzfqsc=)
                          3: 101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl (hash: Rs9CC+8YEh8pze4ABMTYnL8ir2AhDuA3unNkjnJJxtU=)
                          4: 323430333a623963303a3a2f33322d3438203d3e20313331363336.roa (hash: E288eui5EN66onNVEK7Y344pLWOHjEel/MAK2S1bEhQ=)
                          5: 3130332e3133302e3132362e302f32342d3234203d3e20313331363336.roa (hash: TLjcZQcFu7MKcP1kT7lAPY8o3wjcQeXfdOkLoUquYVA=)
                          6: 3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa (hash: FraePq7gvqKVgRVRs1hOCUPexz3gSr4BPRhnGrHTV3o=)
                          7: 3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa (hash: VXtVToak1u7PW+U+n97OPXO4Dchb6DLpI7qRdjvNc0Q=)
                          8: 3130332e3133302e3132372e302f32342d3234203d3e20313331363336.roa (hash: FnT/XgOP5REsMrJKvplqM9/TZ2tdCkQ9b4citLvn+6U=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:96:1c:c6:26:56:b8:68:96:fb:b5:59:58:04:bc:0d:bb:06:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
        Validity
            Not Before: May 11 17:35:35 2026 GMT
            Not After : May 12 21:31:35 2026 GMT
        Subject: CN=1958BA626E5BC9D2FEB253EEAC3042A4F0F9EAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:26:e6:b7:77:b6:5d:a9:d3:06:bd:b8:c2:
                    be:17:f2:a3:d1:e7:2b:91:66:2e:fb:e4:fc:cb:fc:
                    37:c7:9e:1c:6e:16:9f:15:0f:37:3f:5d:97:bc:e1:
                    92:b7:8b:7a:74:d4:b4:42:11:36:ea:c1:2d:fe:08:
                    c0:3d:e5:e3:55:d4:bc:91:25:5c:3e:51:d7:e6:21:
                    3a:dd:29:2a:d2:90:0d:fa:52:81:2c:d9:40:b6:00:
                    28:e1:0d:df:ba:86:c3:8f:3b:12:16:a2:67:bf:e2:
                    84:cf:72:76:a4:5f:bd:d6:89:34:4f:73:4f:94:31:
                    0b:b7:18:ce:b5:00:fd:42:47:ed:ec:f7:e9:28:d8:
                    ba:4f:f5:ad:f1:0a:21:30:26:03:d0:d3:6e:a1:41:
                    a2:66:4a:63:11:bb:05:a5:9c:f3:dd:6d:2f:1e:ef:
                    a0:18:46:d6:60:b1:d8:c5:83:ea:2d:ca:92:6f:a4:
                    bd:3f:1b:48:75:5f:9e:5b:d1:c7:18:e4:2e:1d:b2:
                    94:7c:03:4e:a2:be:fa:52:29:a0:75:73:89:ce:52:
                    cf:6c:34:23:bd:9f:84:84:e8:88:74:39:df:04:2e:
                    6e:d7:1a:3e:80:2f:21:37:58:89:bf:f8:3b:fd:4c:
                    ae:55:7c:ea:06:80:70:03:96:f5:b3:90:f3:f5:24:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:BA:62:6E:5B:C9:D2:FE:B2:53:EE:AC:30:42:A4:F0:F9:EA:A7
            X509v3 Authority Key Identifier:
                keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:92:f3:a5:3f:55:6d:c6:4d:dd:35:75:f6:48:32:8f:e4:7d:
         2b:c0:7e:bd:fe:15:9e:b7:3c:53:95:2a:36:24:5b:d0:ff:31:
         c9:02:c4:24:21:1b:07:c9:39:59:96:4e:bf:69:de:44:a9:3b:
         05:e9:2e:c2:b9:d1:02:25:54:70:e1:56:a4:64:d3:a9:5b:21:
         1a:14:e1:10:c8:26:b7:fe:d0:98:2c:6a:d6:cb:15:22:fa:c2:
         23:9c:37:c3:78:0e:ba:c3:04:a8:95:7a:11:ba:27:8e:b1:15:
         2d:c6:7f:40:a7:1a:7a:29:b6:27:60:c4:71:b6:d7:34:3a:62:
         75:45:0a:36:0a:81:c9:68:12:1b:a2:b6:79:5c:c5:19:d0:72:
         9b:d8:c1:6b:77:32:17:12:7d:bf:77:15:6b:b7:8e:3c:c5:77:
         c9:79:7b:3b:72:ee:da:13:32:d0:0f:f0:9e:e4:99:e6:59:24:
         16:ce:29:2a:6b:82:73:ba:75:98:b5:91:f3:bb:29:2a:54:94:
         6c:af:f1:fc:64:77:78:10:08:e2:8b:f5:2f:b4:56:d9:de:1b:
         5d:3b:ea:90:e8:01:f1:de:88:8b:c9:51:53:78:2d:6d:cc:63:
         00:55:6d:85:64:55:59:79:f3:0e:37:f3:c8:c5:78:11:db:32:
         64:a3:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----