$ rpki-client -vvvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: fWe2B2V88WcJf89oatjoJITyB91eCJphjYKThbBE2l4= Subject key identifier: 3C:AD:D6:09:37:2C:1E:64:53:8E:FD:B6:69:4B:DB:91:58:D5:4B:08 Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 1C3D7AABD58CAFBF0C91EC5AF3A58A033AE990FC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: B3 Signing time: Sun 20 Sep 2026 23:24:38 +0000 Manifest this update: Sun 20 Sep 2026 23:19:38 +0000 Manifest next update: Tue 22 Sep 2026 03:06:38 +0000 Files and hashes: 1: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: KSmA08MFNaEmu8TqXFvH4s9nPf3doscz3CMQxJzYAXY=) 2: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) 3: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3d:7a:ab:d5:8c:af:bf:0c:91:ec:5a:f3:a5:8a:03:3a:e9:90:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Sep 20 23:19:38 2026 GMT Not After : Sep 22 03:06:38 2026 GMT Subject: CN=3CADD609372C1E64538EFDB6694BDB9158D54B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:a7:b6:47:39:13:45:e9:70:14:15:b1:88: a9:eb:28:53:be:00:0b:67:a9:ce:44:bc:fd:f5:8b: 95:18:47:7c:79:7e:9e:16:a6:d6:e5:d2:96:da:e9: d9:5d:88:a3:a9:de:96:74:ae:4f:f5:cb:66:b7:f5: db:f2:b7:95:13:fa:3c:8d:78:c1:10:fc:7f:d1:3e: 19:6b:44:ea:3b:4c:59:e2:62:98:72:aa:3f:5a:b9: 7c:32:10:9e:9c:11:33:8e:0b:39:66:66:a3:a6:ba: 43:8f:fd:c9:66:f7:db:f7:1c:61:b2:47:48:34:81: 8b:35:51:68:30:39:30:38:cc:db:a1:48:a0:c1:cf: 50:70:2b:75:1d:38:23:7c:21:b5:0e:83:dc:27:3a: cd:d6:d4:7e:e2:97:5b:f5:d8:a5:da:fe:f3:ab:c9: db:88:2a:1c:59:72:a4:98:ff:54:01:fb:61:3f:c8: 92:ca:9a:72:ed:e0:7d:72:c8:bc:e0:dd:97:87:78: 5d:89:a8:4c:aa:7e:7d:17:dd:8c:08:97:a4:ae:09: eb:3f:3d:46:8c:d3:94:0a:08:6c:8c:3e:ba:c5:d3: 26:e7:4e:f3:ca:4e:de:10:77:1d:bc:93:75:6e:6f: ef:d1:b7:fe:69:fb:d4:e9:b9:22:6a:f2:09:2c:32: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:D6:09:37:2C:1E:64:53:8E:FD:B6:69:4B:DB:91:58:D5:4B:08 X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b3:2e:ad:29:7f:b6:8f:95:29:28:a5:3b:92:16:f3:31:e6: 60:09:99:0b:98:d1:54:b8:43:ee:82:ac:65:1a:0e:8a:e3:ac: 3b:a5:d6:95:1f:93:8d:5d:f3:8a:2e:c5:61:8f:7a:8a:a7:a1: 44:6f:95:d9:92:91:cd:a1:ae:61:e9:d4:c1:99:f9:f6:5f:f3: 46:2f:23:4e:32:5f:5c:22:52:dd:f9:a9:14:61:a1:a4:74:37: 87:0a:b9:fa:a2:6e:36:34:1e:b0:f8:8a:c5:51:47:c1:53:78: 47:9b:63:a6:01:0f:98:a1:c7:82:6f:ad:82:c8:bf:5d:49:58: ea:33:0c:6c:aa:2d:5d:fe:43:d0:8f:4b:f5:b6:0a:62:12:44: df:e8:8a:91:45:a7:44:b8:3c:ef:44:d6:80:53:60:cb:dc:9d: d3:0c:e1:54:f4:36:ff:2d:5b:f6:3a:7e:02:e9:3d:18:56:13: 54:35:15:c3:15:eb:89:1a:6d:e3:38:03:92:08:7a:1e:3c:8a: e7:e7:fe:82:ce:f0:ab:a2:ca:c3:14:1e:9b:a9:5f:78:dd:aa: d0:75:eb:aa:a7:6a:b9:d1:ec:9c:cb:25:a2:cb:4a:7c:f2:0d: bf:49:8f:2f:f9:14:0d:71:7b:c4:42:d7:90:10:3e:e6:54:f8: 03:20:a7:5d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHD16q9WMr78Mkexa86WKAzrpkPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjA5MjAyMzE5MzhaFw0yNjA5MjIwMzA2MzhaMDMxMTAvBgNV BAMTKDNDQURENjA5MzcyQzFFNjQ1MzhFRkRCNjY5NEJEQjkxNThENTRCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4Ke2RzkTRelwFBWxiKnrKFO+ AAtnqc5EvP31i5UYR3x5fp4Wptbl0pba6dldiKOp3pZ0rk/1y2a39dvyt5UT+jyN eMEQ/H/RPhlrROo7TFniYphyqj9auXwyEJ6cETOOCzlmZqOmukOP/clm99v3HGGy R0g0gYs1UWgwOTA4zNuhSKDBz1BwK3UdOCN8IbUOg9wnOs3W1H7il1v12KXa/vOr yduIKhxZcqSY/1QB+2E/yJLKmnLt4H1yyLzg3ZeHeF2JqEyqfn0X3YwIl6SuCes/ PUaM05QKCGyMPrrF0ybnTvPKTt4Qdx28k3Vub+/Rt/5p+9TpuSJq8gksMhP3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUPK3WCTcsHmRTjv22aUvbkVjVSwgwHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAuz Lq0pf7aPlSkopTuSFvMx5mAJmQuY0VS4Q+6CrGUaDorjrDul1pUfk41d84ouxWGP eoqnoURvldmSkc2hrmHp1MGZ+fZf80YvI04yX1wiUt35qRRhoaR0N4cKufqibjY0 HrD4isVRR8FTeEebY6YBD5ihx4JvrYLIv11JWOozDGyqLV3+Q9CPS/W2CmISRN/o ipFFp0S4PO9E1oBTYMvcndMM4VT0Nv8tW/Y6fgLpPRhWE1Q1FcMV64kabeM4A5II eh48iufn/oLO8KuiysMUHpupX3jdqtB166qnarnR7JzLJaLLSnzyDb9Jjy/5FA1x e8RC15AQPuZU+AMgp10= -----END CERTIFICATE-----Generated at Mon Sep 21 18:25:52 2026 by rpki-client