$ rpki-client -vvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft File: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json) Hash identifier: vSeAqOhRVKvbe/gJY8m+uUYpjnkUnat6BAAJhv+irho= Subject key identifier: AB:FE:F2:71:05:5E:D8:D9:CB:E0:1C:72:89:45:90:48:24:B9:C7:24 Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11 Certificate issuer: /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911 Certificate serial: 0532DEAA712516BD0F08F996D65A8B2BF0F1E0F8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 06:09:14 +0000 Manifest this update: Sat 13 Jun 2026 06:04:14 +0000 Manifest next update: Sun 14 Jun 2026 08:08:14 +0000 Files and hashes: 1: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=) 2: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: aEzYXMs4kF7qMBFFLTlc7Aj9yX2FPi+XBOY3LUtfILA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 08:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:32:de:aa:71:25:16:bd:0f:08:f9:96:d6:5a:8b:2b:f0:f1:e0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911 Validity Not Before: Jun 13 06:04:14 2026 GMT Not After : Jun 14 08:08:14 2026 GMT Subject: CN=ABFEF271055ED8D9CBE01C728945904824B9C724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:70:f9:e0:28:3a:f4:78:29:02:a8:5f:42: 60:4b:d3:f9:a2:40:27:96:54:fa:7c:ab:54:d1:0b: 2e:c8:b1:89:f3:10:2f:af:9d:15:89:bd:b1:c9:4f: c2:7d:a6:20:83:73:b8:60:43:0b:e6:68:64:af:fa: 4b:ad:c2:91:9e:8d:d5:b2:9c:a8:f8:3a:00:eb:5c: 8c:10:b7:36:c9:38:8b:5a:ae:39:4a:dd:ff:2c:8e: 6b:28:83:96:f9:7f:47:a1:62:01:4c:d8:58:fc:ee: 13:53:ff:5e:c5:1f:dd:76:04:16:71:18:9a:6b:4a: 49:dc:53:21:75:dd:b0:66:6e:a2:98:81:60:c3:37: ef:3a:08:02:0e:55:bc:f9:68:7e:51:cb:22:c1:b2: 60:4e:f9:f6:8f:8e:02:2a:94:f5:96:3c:44:02:ed: 3b:cb:1a:84:b1:e4:47:eb:0d:eb:f0:ff:2b:7d:c9: 08:05:ca:e1:36:eb:be:09:44:a0:1e:35:18:88:10: 24:d5:fd:95:13:27:63:dd:58:a2:48:ec:d1:3f:fe: 88:19:c3:05:43:29:20:bd:e3:ff:93:40:bb:05:a8: cb:3a:98:ee:b1:e8:7b:09:04:ff:e2:07:55:96:05: be:f0:8e:8d:9b:24:66:86:04:d8:7a:34:b2:81:80: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FE:F2:71:05:5E:D8:D9:CB:E0:1C:72:89:45:90:48:24:B9:C7:24 X509v3 Authority Key Identifier: keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:32:36:aa:9d:9c:7b:3c:c5:db:d2:91:dd:92:6e:10:f6: 11:c1:dd:24:9b:bc:09:7b:29:ae:49:b9:f7:44:2a:0b:d7:ee: 5d:b0:28:d8:78:d9:6b:6c:78:89:47:89:e4:7a:6b:9f:74:83: d6:4a:53:7c:9a:55:9c:a6:be:12:f2:b9:9e:49:8a:6a:b1:3a: ce:80:89:d9:fb:ca:78:ff:85:cd:c4:d9:78:38:0b:78:06:79: 01:6c:6c:ec:71:a4:4e:f4:2e:71:0d:af:8f:77:ff:5b:5c:9d: 39:3a:5b:1c:af:b2:ad:e9:98:5a:2c:3d:e9:25:cc:92:93:4d: f3:64:ef:65:73:38:e2:84:c9:80:4f:b7:d5:86:97:30:e4:9b: e1:a6:ac:27:c6:19:45:2c:bc:d8:3d:10:5d:02:3b:0e:97:e0: 56:9e:fd:de:bb:fb:2d:ed:e0:00:05:6b:a9:07:54:8c:2a:a3: 81:36:f5:ce:6c:86:80:50:61:5c:9b:de:ef:fe:f0:1f:bb:f7: 33:06:a9:e5:00:66:47:82:ac:66:cd:05:59:5a:fc:ec:ce:94: 21:61:10:cc:de:c9:be:61:1b:c8:aa:0e:df:3c:87:32:50:55: 27:61:f3:f2:a6:2e:83:a4:c1:db:dd:4d:04:b9:81:62:c0:ae: b2:83:e2:37 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUBTLeqnElFr0PCPmW1lqLK/Dx4PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDRERGNjIzQUJDRTM5RjQxRkI2QUFDMTlGODFFOTFG OUFENjkxMTAeFw0yNjA2MTMwNjA0MTRaFw0yNjA2MTQwODA4MTRaMDMxMTAvBgNV BAMTKEFCRkVGMjcxMDU1RUQ4RDlDQkUwMUM3Mjg5NDU5MDQ4MjRCOUM3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YXD54Cg69HgpAqhfQmBL0/mi QCeWVPp8q1TRCy7IsYnzEC+vnRWJvbHJT8J9piCDc7hgQwvmaGSv+kutwpGejdWy nKj4OgDrXIwQtzbJOItarjlK3f8sjmsog5b5f0ehYgFM2Fj87hNT/17FH912BBZx GJprSkncUyF13bBmbqKYgWDDN+86CAIOVbz5aH5RyyLBsmBO+faPjgIqlPWWPEQC 7TvLGoSx5EfrDevw/yt9yQgFyuE2674JRKAeNRiIECTV/ZUTJ2PdWKJI7NE//ogZ wwVDKSC94/+TQLsFqMs6mO6x6HsJBP/iB1WWBb7wjo2bJGaGBNh6NLKBgCC9AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUq/7ycQVe2NnL4BxyiUWQSCS5xyQwHwYDVR0j BBgwFoAUcc3fYjq8459B+2qsGfgekfmtaREwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQldJWi8w LzcxQ0RERjYyM0FCQ0UzOUY0MUZCNkFBQzE5RjgxRTkxRjlBRDY5MTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNzFDRERGNjIzQUJDRTM5RjQxRkI2QUFDMTlGODFF OTFGOUFENjkxMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JXSVovMC83MUNEREY2MjNBQkNFMzlG NDFGQjZBQUMxOUY4MUU5MUY5QUQ2OTExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIsyNqqdnHs8xdvS kd2SbhD2EcHdJJu8CXsprkm590QqC9fuXbAo2HjZa2x4iUeJ5Hprn3SD1kpTfJpV nKa+EvK5nkmKarE6zoCJ2fvKeP+FzcTZeDgLeAZ5AWxs7HGkTvQucQ2vj3f/W1yd OTpbHK+yremYWiw96SXMkpNN82TvZXM44oTJgE+31YaXMOSb4aasJ8YZRSy82D0Q XQI7DpfgVp793rv7Le3gAAVrqQdUjCqjgTb1zmyGgFBhXJve7/7wH7v3Mwap5QBm R4KsZs0FWVr87M6UIWEQzN7JvmEbyKoO3zyHMlBVJ2Hz8qYug6TB291NBLmBYsCu soPiNw== -----END CERTIFICATE-----Generated at Sat Jun 13 18:27:42 2026 by rpki-client