$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft File: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json) Hash identifier: Glif2QkNn3TtDz4hRw+y211NKXsjIQIi6BySy132358= Subject key identifier: B0:B8:93:E7:26:26:98:4E:5F:75:E9:6B:73:EC:47:0C:75:91:E2:97 Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 Certificate issuer: /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Certificate serial: 0C5C4A811EAD2926086469D14F34161C77633A9F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft Manifest number: B9 Signing time: Tue 22 Sep 2026 21:00:40 +0000 Manifest this update: Tue 22 Sep 2026 20:55:40 +0000 Manifest next update: Wed 23 Sep 2026 22:31:40 +0000 Files and hashes: 1: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=) 2: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=) 3: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=) 4: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: qNh98iySF6xAwAc9ts1iOIGlFLBcDLI0H/uS/bZDAVg=) 5: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=) 6: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5c:4a:81:1e:ad:29:26:08:64:69:d1:4f:34:16:1c:77:63:3a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8 Validity Not Before: Sep 22 20:55:40 2026 GMT Not After : Sep 23 22:31:40 2026 GMT Subject: CN=B0B893E72626984E5F75E96B73EC470C7591E297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:7e:fc:71:c8:6f:27:3f:de:de:07:99:fa: b0:72:47:22:fe:fa:af:a4:1b:8f:ac:3e:c3:36:f9: 48:3b:60:a6:f6:3d:7b:c6:f3:c6:ef:fe:4a:e9:0b: ca:c3:1b:cf:a0:5c:95:61:a9:54:36:16:07:28:b5: 48:25:17:66:7a:a7:da:60:ba:2a:28:fe:c2:b2:80: 1b:2d:48:06:32:b6:f2:3b:b2:9a:f0:0f:29:06:a5: c8:d8:a5:1e:b3:b0:0c:ab:c7:31:d9:8c:1a:47:91: 47:5e:6c:e9:7c:76:23:36:5e:de:13:35:f3:fe:a2: 05:34:4e:30:5a:07:57:34:dd:82:0b:be:fa:a3:1d: 9e:12:6d:3e:ea:30:3f:1a:f0:b3:8c:69:4d:97:32: 66:fc:d6:e0:ce:da:80:fc:77:d8:c8:76:1d:37:1a: 1f:8f:51:6d:da:a7:86:9e:60:59:cf:e1:f5:f3:10: 4e:45:6e:2c:79:7c:50:ae:ce:04:89:a1:bd:db:98: 87:27:67:91:66:29:70:2c:a5:e8:6b:64:97:8f:30: 96:60:3f:fd:94:33:86:7d:92:c4:15:b9:05:5b:d3: 63:87:22:98:6e:1a:4b:2f:0c:cb:ff:9e:29:a8:e5: 79:4d:60:19:72:2e:63:5e:69:5b:50:a1:da:70:5f: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B8:93:E7:26:26:98:4E:5F:75:E9:6B:73:EC:47:0C:75:91:E2:97 X509v3 Authority Key Identifier: keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:57:f5:3c:3c:26:f4:0a:5b:c3:a7:7a:c6:c7:e3:b7:8e:6c: fa:cc:b0:5a:0e:6f:96:35:2a:09:8e:ee:ca:a4:1c:5b:35:63: 79:d7:d4:40:f3:5f:bf:63:c7:4e:c5:0f:d1:f9:35:22:5b:9f: 08:97:75:96:a5:f7:43:4e:22:d5:30:8d:ea:95:8e:39:8e:d1: fb:02:08:7f:fe:ef:3c:1a:63:97:fe:a5:7c:5a:27:fb:ec:e8: f5:e2:95:1d:b0:51:99:7e:b0:17:d0:16:54:25:ef:b5:21:92: b6:61:1f:25:d6:d7:df:f0:9d:04:dc:01:d0:79:f0:71:bb:72: f8:3d:a4:44:34:05:37:bf:9e:6f:12:87:66:54:e5:5a:e3:d6: 64:cd:71:32:ff:fd:6a:36:b8:79:71:51:b0:34:6a:cf:47:fb: d0:05:b7:e3:7d:71:d1:5e:14:2e:30:b0:1b:e4:f7:dc:0a:ff: b4:00:d7:db:a0:5a:2b:36:79:ea:cd:64:4c:a8:c5:44:ce:a9: e8:84:c7:e5:5a:29:1f:68:70:38:1b:a4:45:da:4e:f2:b1:7e: 4b:42:56:34:e0:59:17:07:64:48:01:fa:47:aa:c1:ee:2c:4b: ba:bd:3a:1d:ff:f5:7c:75:65:b5:3d:1c:cf:b4:01:65:83:11: 66:e2:db:07 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUDFxKgR6tKSYIZGnRTzQWHHdjOp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYy RjUzQzlDODAeFw0yNjA5MjIyMDU1NDBaFw0yNjA5MjMyMjMxNDBaMDMxMTAvBgNV BAMTKEIwQjg5M0U3MjYyNjk4NEU1Rjc1RTk2QjczRUM0NzBDNzU5MUUyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nn78cchvJz/e3geZ+rByRyL+ +q+kG4+sPsM2+Ug7YKb2PXvG88bv/krpC8rDG8+gXJVhqVQ2FgcotUglF2Z6p9pg uioo/sKygBstSAYytvI7sprwDykGpcjYpR6zsAyrxzHZjBpHkUdebOl8diM2Xt4T NfP+ogU0TjBaB1c03YILvvqjHZ4SbT7qMD8a8LOMaU2XMmb81uDO2oD8d9jIdh03 Gh+PUW3ap4aeYFnP4fXzEE5Fbix5fFCuzgSJob3bmIcnZ5FmKXAspehrZJePMJZg P/2UM4Z9ksQVuQVb02OHIphuGksvDMv/nimo5XlNYBlyLmNeaVtQodpwX2TFAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUsLiT5yYmmE5fdelrc+xHDHWR4pcwHwYDVR0j BBgwFoAUgkKjngV36Ogr+GPQEk/1ry9TycgwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERE LzEvODI0MkEzOUUwNTc3RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC84MjQyQTM5RTA1NzdFOEU4MkJGODYzRDAxMjRG RjVBRjJGNTNDOUM4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUSERELzEvODI0MkEzOUUwNTc3 RThFODJCRjg2M0QwMTI0RkY1QUYyRjUzQzlDOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEtX9Tw8JvQK W8OnesbH47eObPrMsFoOb5Y1KgmO7sqkHFs1Y3nX1EDzX79jx07FD9H5NSJbnwiX dZal90NOItUwjeqVjjmO0fsCCH/+7zwaY5f+pXxaJ/vs6PXilR2wUZl+sBfQFlQl 77UhkrZhHyXW19/wnQTcAdB58HG7cvg9pEQ0BTe/nm8Sh2ZU5Vrj1mTNcTL//Wo2 uHlxUbA0as9H+9AFt+N9cdFeFC4wsBvk99wK/7QA19ugWis2eerNZEyoxUTOqeiE x+VaKR9ocDgbpEXaTvKxfktCVjTgWRcHZEgB+keqwe4sS7q9Oh3/9Xx1ZbU9HM+0 AWWDEWbi2wc= -----END CERTIFICATE-----Generated at Tue Sep 22 23:49:27 2026 by rpki-client