$ rpki-client -vvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: YVhGOkMOW/kpUwBKqxHIsRIcoYZx087KYjRS7twnJ7g= Subject key identifier: 60:A7:A4:E3:26:8B:71:C3:9C:0A:EB:7D:4D:DF:DD:34:8A:47:97:DC Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 4571038A7ABC0DEB7A10A8D150D21C8C3904A7A7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 21:19:53 +0000 Manifest this update: Tue 28 Jul 2026 21:14:53 +0000 Manifest next update: Wed 29 Jul 2026 23:38:53 +0000 Files and hashes: 1: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) 2: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: UHN1GZfVkzLul8ALuwRHCy9MI+g7pJcwjRrAlaUVSCg=) 3: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:71:03:8a:7a:bc:0d:eb:7a:10:a8:d1:50:d2:1c:8c:39:04:a7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Jul 28 21:14:53 2026 GMT Not After : Jul 29 23:38:53 2026 GMT Subject: CN=60A7A4E3268B71C39C0AEB7D4DDFDD348A4797DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:11:17:2e:a8:fe:15:58:d2:19:f2:74:29: 5c:f0:54:44:1c:d0:31:29:9b:78:c7:70:4b:25:d6: 43:78:93:03:58:17:f2:70:66:dd:19:65:3b:d8:a1: 11:b8:b8:48:98:09:c8:f0:49:aa:af:67:7d:04:8a: 28:61:5a:1f:2c:54:c2:ef:48:b5:ae:81:d0:d1:b9: 06:e5:c2:b6:e9:75:12:61:ef:06:d4:10:dd:32:20: 75:cd:b3:af:86:b5:f4:f0:22:55:ff:48:8d:4c:9b: 8a:43:59:e7:09:34:b2:a2:87:2b:34:6f:68:8b:9c: 6c:40:7c:53:6d:2b:35:76:33:31:fb:eb:84:36:ed: 9f:49:93:47:26:e7:77:d2:19:da:0b:04:6e:75:2d: e3:01:3f:80:ca:5b:21:21:34:15:2e:c9:4e:42:74: c6:a4:f0:fb:de:61:4d:e8:36:72:04:c7:fb:7c:5c: ca:7c:51:2a:ab:d8:b8:66:ba:e3:02:41:c5:85:74: 13:4d:df:f7:ca:79:21:a4:e0:cd:fd:6b:2f:48:9f: 68:40:97:90:45:30:b7:b4:67:6d:93:d8:ec:b1:39: 07:15:9b:22:a3:2e:f8:0f:6e:36:d7:8e:2b:a0:74: 17:39:09:3c:28:4c:79:70:2d:35:01:34:a1:2f:11: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:A4:E3:26:8B:71:C3:9C:0A:EB:7D:4D:DF:DD:34:8A:47:97:DC X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b4:e9:57:a0:4c:95:b8:9e:6a:23:56:cf:a1:fc:e3:6c:d1: 23:20:db:04:53:9e:f2:76:a6:ed:92:7c:f3:ad:99:c3:9e:d8: 7e:7e:41:79:d6:d1:74:69:f1:1f:d3:b9:6b:8a:34:e9:e0:38: cd:b3:03:4b:59:08:7b:3e:79:07:78:2f:75:cf:94:06:e7:ad: 68:c0:fc:cc:ba:e8:54:10:29:76:6f:2c:e4:a6:49:d5:d2:fc: 18:37:e2:4a:b6:23:fa:c8:c0:a5:3c:c0:21:bb:4c:52:2a:77: 93:22:7f:55:3d:82:8d:c3:99:ca:b7:68:96:06:c9:70:09:a1: 00:2b:aa:f6:36:2e:f1:e1:de:04:4b:28:6d:d5:97:6c:1a:23: 9a:97:8b:68:cb:9c:81:af:92:4f:08:9f:bb:c7:6c:08:55:d6: 0e:74:27:c4:83:fe:fc:ca:af:20:63:17:54:69:bc:3f:68:2b: a0:a4:15:4e:16:7e:54:e7:9b:34:c6:6d:b3:14:23:fb:e7:a5: 66:bf:ab:4c:84:0f:28:81:92:9e:0c:3d:18:59:2e:2f:d5:de: 82:86:14:77:46:1c:f9:e0:3c:32:94:3c:e3:3b:d2:ac:e8:96: 90:3b:0e:18:41:f4:ef:aa:d1:5d:14:e1:8d:1b:24:44:9f:18: e6:6a:75:c7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURXEDinq8Det6EKjRUNIcjDkEp6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjA3MjgyMTE0NTNaFw0yNjA3MjkyMzM4NTNaMDMxMTAvBgNV BAMTKDYwQTdBNEUzMjY4QjcxQzM5QzBBRUI3RDREREZERDM0OEE0Nzk3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuREXLqj+FVjSGfJ0KVzwVEQc 0DEpm3jHcEsl1kN4kwNYF/JwZt0ZZTvYoRG4uEiYCcjwSaqvZ30EiihhWh8sVMLv SLWugdDRuQblwrbpdRJh7wbUEN0yIHXNs6+GtfTwIlX/SI1Mm4pDWecJNLKihys0 b2iLnGxAfFNtKzV2MzH764Q27Z9Jk0cm53fSGdoLBG51LeMBP4DKWyEhNBUuyU5C dMak8PveYU3oNnIEx/t8XMp8USqr2LhmuuMCQcWFdBNN3/fKeSGk4M39ay9In2hA l5BFMLe0Z22T2OyxOQcVmyKjLvgPbjbXjiugdBc5CTwoTHlwLTUBNKEvEdQPAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUYKek4yaLccOcCut9Td/dNIpHl9wwHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKe0 6VegTJW4nmojVs+h/ONs0SMg2wRTnvJ2pu2SfPOtmcOe2H5+QXnW0XRp8R/TuWuK NOngOM2zA0tZCHs+eQd4L3XPlAbnrWjA/My66FQQKXZvLOSmSdXS/Bg34kq2I/rI wKU8wCG7TFIqd5Mif1U9go3Dmcq3aJYGyXAJoQArqvY2LvHh3gRLKG3Vl2waI5qX i2jLnIGvkk8In7vHbAhV1g50J8SD/vzKryBjF1RpvD9oK6CkFU4WflTnmzTGbbMU I/vnpWa/q0yEDyiBkp4MPRhZLi/V3oKGFHdGHPngPDKUPOM70qzolpA7DhhB9O+q 0V0U4Y0bJESfGOZqdcc= -----END CERTIFICATE-----Generated at Tue Jul 28 23:04:50 2026 by rpki-client