$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft File: 3BFFB675B95FCD73A993F3228774251092970E7B.mft (raw, json) Hash identifier: 3XC1xB54pdH8KiG4wALjIJ+Z/XNiCvqYuVTBPvOjSjg= Subject key identifier: EC:98:49:69:B2:BC:6B:38:97:D7:A3:6E:08:47:E2:95:50:EE:D5:1E Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B Certificate serial: 5F36B03B8339EEEDBA63D9ECAF3278FE20E37DC8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft Manifest number: CA Signing time: Wed 07 Oct 2026 10:17:51 +0000 Manifest this update: Wed 07 Oct 2026 10:12:51 +0000 Manifest next update: Thu 08 Oct 2026 11:57:51 +0000 Files and hashes: 1: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (hash: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI=) 2: 3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (hash: /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=) 3: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (hash: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=) 4: 3BFFB675B95FCD73A993F3228774251092970E7B.crl (hash: +bHoR0Fs/emBTdrObcHduRUfaY6azQhacjFi5mJeQh0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 11:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:b0:3b:83:39:ee:ed:ba:63:d9:ec:af:32:78:fe:20:e3:7d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B Validity Not Before: Oct 7 10:12:51 2026 GMT Not After : Oct 8 11:57:51 2026 GMT Subject: CN=EC984969B2BC6B3897D7A36E0847E29550EED51E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:27:d5:51:b2:6c:cb:e8:ea:7c:40:d4:f0: 88:74:d4:5d:05:ad:d4:f9:63:5f:b8:aa:bd:46:cb: b2:ab:af:2a:8a:90:63:82:93:64:2a:33:c7:0a:a1: 98:5d:84:f6:ac:e2:ec:95:5e:8a:8c:31:b0:61:8b: ad:cc:18:a2:89:3d:aa:63:8a:4c:41:0a:81:7f:b8: cc:b8:91:c7:a5:33:94:ef:b5:6c:c9:8c:bc:3c:fc: 3a:fa:4a:53:7f:1e:79:1e:62:be:04:02:60:7c:e0: e0:6c:e8:c9:85:55:a4:09:11:3b:e9:56:b1:4b:55: 27:2f:96:05:a3:bf:d1:37:ab:cb:b3:ce:de:44:83: 54:b8:04:78:dc:90:2c:81:70:5c:6e:f2:b4:61:03: c8:48:85:ba:d2:19:46:10:2c:6f:f7:25:e7:79:64: aa:1c:68:e6:b6:02:00:df:ce:c8:2d:a5:fb:fb:21: 45:7a:00:ec:04:1b:d8:e1:5b:14:56:b6:e4:ae:f1: 59:09:ae:aa:86:de:72:81:91:50:74:dc:8c:b7:ef: 29:de:c0:75:25:58:a5:73:14:83:62:53:a3:43:33: 01:d7:d6:41:bb:94:43:c7:9c:bc:76:20:60:c0:82: eb:03:67:fd:b7:7d:59:56:42:f5:d4:a0:ff:cf:71: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:49:69:B2:BC:6B:38:97:D7:A3:6E:08:47:E2:95:50:EE:D5:1E X509v3 Authority Key Identifier: keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:eb:48:7a:f7:f4:60:73:51:5a:d1:72:e4:52:c5:07:bb:91: 68:cb:f3:dd:9c:aa:c4:1a:5d:9c:3d:d1:9e:4b:b5:0e:9a:48: a0:d3:66:6e:ec:e6:42:7d:0b:27:cb:91:37:0a:ed:b4:a1:5e: 6a:53:6a:9f:c4:dc:47:ff:47:41:6d:31:14:75:8e:f4:ba:24: c0:83:1f:92:15:0a:a5:49:20:65:91:83:8c:2a:45:37:12:e7: 39:6f:d7:a9:7d:a6:aa:d5:76:07:17:0d:c0:a2:d9:90:d2:58: 72:5c:19:c8:41:11:36:f0:4e:43:aa:08:28:81:1b:0c:2f:79: a5:28:b0:c0:3e:c3:40:25:e2:e3:39:eb:d8:96:71:30:17:9d: 41:77:9d:ec:9c:4c:76:99:78:b6:63:73:d0:fa:10:f2:88:df: 63:61:c6:4a:f9:de:8f:8c:ad:fa:94:82:21:9a:9b:3e:66:00: fd:26:7a:59:5a:d4:f7:58:12:19:b1:37:5c:39:15:2a:7f:15: 16:5f:e9:d2:26:07:a2:df:77:c7:91:ca:f3:c6:ad:58:7e:c9: f4:57:ac:c5:b6:d6:ec:83:98:7c:7d:ea:8d:09:75:17:eb:c8: 48:28:13:55:f7:14:f7:b4:55:e1:1d:89:b5:3f:80:31:9d:4a: 25:04:0b:e2 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUXzawO4M57u26Y9nsrzJ4/iDjfcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5 Mjk3MEU3QjAeFw0yNjEwMDcxMDEyNTFaFw0yNjEwMDgxMTU3NTFaMDMxMTAvBgNV BAMTKEVDOTg0OTY5QjJCQzZCMzg5N0Q3QTM2RTA4NDdFMjk1NTBFRUQ1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLSfVUbJsy+jqfEDU8Ih01F0F rdT5Y1+4qr1Gy7KrryqKkGOCk2QqM8cKoZhdhPas4uyVXoqMMbBhi63MGKKJPapj ikxBCoF/uMy4kcelM5TvtWzJjLw8/Dr6SlN/HnkeYr4EAmB84OBs6MmFVaQJETvp VrFLVScvlgWjv9E3q8uzzt5Eg1S4BHjckCyBcFxu8rRhA8hIhbrSGUYQLG/3Jed5 ZKocaOa2AgDfzsgtpfv7IUV6AOwEG9jhWxRWtuSu8VkJrqqG3nKBkVB03Iy37yne wHUlWKVzFINiU6NDMwHX1kG7lEPHnLx2IGDAgusDZ/23fVlWQvXUoP/PcTTnAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU7JhJabK8aziX16NuCEfilVDu1R4wHwYDVR0j BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3 NDI1MTA5Mjk3MEU3Qi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zQkZGQjY3NUI5 NUZDRDczQTk5M0YzMjI4Nzc0MjUxMDkyOTcwRTdCLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJutIevf0 YHNRWtFy5FLFB7uRaMvz3ZyqxBpdnD3Rnku1DppIoNNmbuzmQn0LJ8uRNwrttKFe alNqn8TcR/9HQW0xFHWO9LokwIMfkhUKpUkgZZGDjCpFNxLnOW/XqX2mqtV2BxcN wKLZkNJYclwZyEERNvBOQ6oIKIEbDC95pSiwwD7DQCXi4znr2JZxMBedQXed7JxM dpl4tmNz0PoQ8ojfY2HGSvnej4yt+pSCIZqbPmYA/SZ6WVrU91gSGbE3XDkVKn8V Fl/p0iYHot93x5HK88atWH7J9FesxbbW7IOYfH3qjQl1F+vISCgTVfcU97RV4R2J tT+AMZ1KJQQL4g== -----END CERTIFICATE-----Generated at Thu Oct 8 02:27:17 2026 by rpki-client