$ rpki-client -vvvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft File: 0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json) Hash identifier: H/eEbubH1UABWvWW6UHIzKQHZV9evI2/CDxYWniCPX4= Subject key identifier: 9E:2A:F3:44:D8:7F:AB:ED:44:E8:50:A6:24:4D:83:A5:00:20:8A:12 Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 Certificate issuer: /CN=0CA9C32F7806470F750EC53431D4F322F0851573 Certificate serial: 143F279F3CFE39C32060B4980ABBA6035975AF0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 15:47:33 +0000 Manifest this update: Mon 21 Sep 2026 15:42:33 +0000 Manifest next update: Tue 22 Sep 2026 17:42:33 +0000 Files and hashes: 1: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: mO3jhyO8uq1HmajErtYUj1XhfOJLGAYHedsPtP5+h8Q=) 2: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3f:27:9f:3c:fe:39:c3:20:60:b4:98:0a:bb:a6:03:59:75:af:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573 Validity Not Before: Sep 21 15:42:33 2026 GMT Not After : Sep 22 17:42:33 2026 GMT Subject: CN=9E2AF344D87FABED44E850A6244D83A500208A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:55:5e:58:69:18:4b:bc:b5:c5:64:26:9b: 76:47:50:33:5b:94:99:ff:59:29:a8:a4:7c:93:df: 48:25:d7:46:b4:c7:7f:9c:b8:c2:7c:4d:b0:9c:9a: 0f:ea:e3:9b:b8:7e:db:34:c0:4a:30:6c:68:34:20: ee:21:8c:d1:f7:c6:3f:59:9c:38:60:23:d0:ee:7b: 3c:c7:32:a3:3d:81:03:f9:68:74:4e:1e:77:75:25: 9f:06:c6:fb:4f:32:0c:76:31:29:63:37:ed:3d:f9: 08:42:61:b6:73:a3:91:35:79:e5:b6:ec:34:e6:63: 4b:78:8b:fd:8a:52:02:34:cc:7c:ac:f8:5e:f2:f8: 45:89:aa:8a:f4:2a:36:eb:dc:f0:24:d0:b9:0c:18: d1:90:50:0f:06:63:94:10:85:ae:75:2b:e0:a4:72: 13:e3:42:19:67:c3:70:eb:de:62:85:81:10:09:99: b1:46:74:ed:d7:87:ab:ff:51:0b:61:17:7a:c4:6f: f5:59:a5:ae:36:4c:b1:82:7d:de:2b:67:a3:22:7d: b6:13:18:ff:91:5b:10:4b:f1:50:5c:f8:a8:0f:6b: 56:18:80:cb:67:0f:f6:d2:bc:7c:26:28:47:20:8c: 1a:03:57:dd:4a:37:eb:6a:cd:87:16:1d:36:e8:8f: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2A:F3:44:D8:7F:AB:ED:44:E8:50:A6:24:4D:83:A5:00:20:8A:12 X509v3 Authority Key Identifier: keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ee:18:a9:6f:55:2e:74:3b:95:bd:c3:3e:79:17:05:92:8d: ae:fc:4c:1f:bd:9e:f8:12:88:4f:b3:19:c4:3e:17:32:de:e7: 76:c6:a7:9c:96:be:14:08:92:46:f8:77:be:be:16:fd:0c:82: 10:e9:a1:9e:41:2e:ee:e2:e0:fb:23:57:36:a9:17:6a:44:b6: 73:54:4a:35:07:c6:7f:be:b6:26:31:7e:9e:8a:ee:49:ea:41: b0:26:68:9c:32:c5:01:9f:91:4d:3a:e0:42:7b:45:fc:0c:1f: c2:ac:c6:73:3f:00:4e:1f:17:fe:e2:a6:b3:9e:3b:10:4d:a2: e1:66:2a:ad:66:b7:19:f8:48:7d:8c:4f:71:9b:7d:48:c3:62: 1e:09:6b:c2:63:8d:57:a5:fd:cd:fe:85:c7:5e:ce:5b:5f:5b: 74:b3:45:82:28:74:5d:af:62:2a:a3:7b:f3:77:9f:ad:d8:0a: ca:29:72:30:7e:df:99:33:ef:6d:ca:63:7b:3a:9d:67:d9:b7: 98:d9:22:2a:94:66:6b:40:a7:0e:05:5a:e9:6a:47:14:c3:ad: ff:f4:08:6f:f0:f4:c1:6b:13:a9:5d:ec:e2:32:ca:43:9c:6e: 6c:bb:eb:56:3e:c6:71:ac:92:78:25:3f:ff:01:e9:d0:e4:20: e9:c1:bb:36 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUFD8nnzz+OcMgYLSYCrumA1l1rw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBOUMzMkY3ODA2NDcwRjc1MEVDNTM0MzFENEYzMjJG MDg1MTU3MzAeFw0yNjA5MjExNTQyMzNaFw0yNjA5MjIxNzQyMzNaMDMxMTAvBgNV BAMTKDlFMkFGMzQ0RDg3RkFCRUQ0NEU4NTBBNjI0NEQ4M0E1MDAyMDhBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJFVeWGkYS7y1xWQmm3ZHUDNb lJn/WSmopHyT30gl10a0x3+cuMJ8TbCcmg/q45u4fts0wEowbGg0IO4hjNH3xj9Z nDhgI9DuezzHMqM9gQP5aHROHnd1JZ8GxvtPMgx2MSljN+09+QhCYbZzo5E1eeW2 7DTmY0t4i/2KUgI0zHys+F7y+EWJqor0Kjbr3PAk0LkMGNGQUA8GY5QQha51K+Ck chPjQhlnw3Dr3mKFgRAJmbFGdO3Xh6v/UQthF3rEb/VZpa42TLGCfd4rZ6MifbYT GP+RWxBL8VBc+KgPa1YYgMtnD/bSvHwmKEcgjBoDV91KN+tqzYcWHTboj2UFAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUnirzRNh/q+1E6FCmJE2DpQAgihIwHwYDVR0j BBgwFoAUDKnDL3gGRw91DsU0MdTzIvCFFXMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQk9PS1Mv MC8wQ0E5QzMyRjc4MDY0NzBGNzUwRUM1MzQzMUQ0RjMyMkYwODUxNTczLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzBDQTlDMzJGNzgwNjQ3MEY3NTBFQzUzNDMxRDRG MzIyRjA4NTE1NzMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CT09LUy8wLzBDQTlDMzJGNzgwNjQ3 MEY3NTBFQzUzNDMxRDRGMzIyRjA4NTE1NzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK7hipb1UudDuV vcM+eRcFko2u/EwfvZ74EohPsxnEPhcy3ud2xqeclr4UCJJG+He+vhb9DIIQ6aGe QS7u4uD7I1c2qRdqRLZzVEo1B8Z/vrYmMX6eiu5J6kGwJmicMsUBn5FNOuBCe0X8 DB/CrMZzPwBOHxf+4qaznjsQTaLhZiqtZrcZ+Eh9jE9xm31Iw2IeCWvCY41Xpf3N /oXHXs5bX1t0s0WCKHRdr2Iqo3vzd5+t2ArKKXIwft+ZM+9tymN7Op1n2beY2SIq lGZrQKcOBVrpakcUw63/9Ahv8PTBaxOpXeziMspDnG5su+tWPsZxrJJ4JT//AenQ 5CDpwbs2 -----END CERTIFICATE-----Generated at Tue Sep 22 06:50:33 2026 by rpki-client