$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft File: 30886A5C2BBD980DCAD17065B483FDADE1588115.mft (raw, json) Hash identifier: LK0BaUM/McTtastEsNFs8wdHGfM8kkYQ1rD4LaBAYDg= Subject key identifier: 82:43:F2:A1:7D:DA:28:7A:08:06:93:BA:05:B2:ED:F2:F6:FC:D1:AA Authority key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15 Certificate issuer: /CN=30886A5C2BBD980DCAD17065B483FDADE1588115 Certificate serial: 7ECFAABF113972BE6D75E50AD242DA80E1FB5818 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 11:48:25 +0000 Manifest this update: Tue 28 Jul 2026 11:43:25 +0000 Manifest next update: Wed 29 Jul 2026 13:14:25 +0000 Files and hashes: 1: 3130332e3138302e31342e302f32332d3234203d3e203633383933.roa (hash: dIUSmyYxKhCOy30LHVb9g7/r4ZV90ZHq3KAUNhUgfNQ=) 2: 323430303a353036303a3a2f33322d3634203d3e203633383933.roa (hash: BHydVbU3JrPLjHj9vIjP5kSoTesZAdHvlP38+Eg+13A=) 3: 30886A5C2BBD980DCAD17065B483FDADE1588115.crl (hash: Eaf6CFnqcsKBk7tmUxnNTcNleCbhhcWC3Tx2yypUBYk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cf:aa:bf:11:39:72:be:6d:75:e5:0a:d2:42:da:80:e1:fb:58:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30886A5C2BBD980DCAD17065B483FDADE1588115 Validity Not Before: Jul 28 11:43:25 2026 GMT Not After : Jul 29 13:14:25 2026 GMT Subject: CN=8243F2A17DDA287A080693BA05B2EDF2F6FCD1AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:b4:31:e4:22:5b:db:2b:a0:0c:64:3c:05: 99:38:89:8f:4b:6b:24:a8:1b:24:b2:27:10:95:27: 24:c9:c9:6a:f9:92:8e:51:15:d2:11:ee:42:de:79: 89:2f:96:d9:75:2d:0b:1c:6c:21:0e:7f:19:b2:a0: 8a:07:eb:1f:94:f3:ab:64:94:0a:b2:8b:57:26:e7: 82:6e:19:bf:b2:b1:09:6f:12:db:ed:d0:52:6d:e3: 35:9d:5a:44:c4:12:19:b3:b3:39:b0:23:c4:72:8b: e8:35:42:39:47:3a:b0:14:b8:a1:e9:a2:1b:4f:2d: 85:9d:be:38:da:dd:ef:92:2c:91:2d:a4:64:54:96: 90:97:7d:d8:8f:14:ec:9c:41:35:2b:a4:3b:ef:54: ff:fa:59:37:c3:d3:f9:2c:a5:32:9c:75:4a:f6:8a: 8a:7f:48:4b:1c:9d:37:0d:6e:a2:e3:2e:77:7c:85: 6f:4d:a7:f4:14:51:02:d0:8f:b7:29:7f:56:1c:c4: 58:cf:2a:ba:86:18:26:71:b3:e7:ee:98:f2:7d:82: 53:f2:b8:25:7d:f4:60:7e:cb:20:cf:b2:17:e8:b7: 57:60:fb:ce:61:d1:ae:13:7f:4d:4e:d5:32:e1:53: 85:ba:70:a2:e7:b3:b1:d0:5d:d6:d2:c2:9d:18:f0: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:43:F2:A1:7D:DA:28:7A:08:06:93:BA:05:B2:ED:F2:F6:FC:D1:AA X509v3 Authority Key Identifier: keyid:30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:99:8b:82:ad:81:91:84:1b:9b:be:e9:98:d3:8e:36:a0:1e: eb:d8:cf:91:09:2c:e0:5a:86:a3:58:75:fb:41:a8:fd:5f:cb: b4:9d:2e:91:b1:8c:07:7f:0d:6e:d9:a8:9d:50:fc:e9:87:77: ba:34:ef:50:1e:1d:82:5d:0b:f5:eb:52:54:ea:30:96:bc:3c: b0:42:9f:21:7d:44:8e:6a:b6:ee:2f:c6:5f:21:55:05:8e:4a: 50:80:b1:81:45:aa:32:15:0d:ec:d0:72:ef:e6:55:a8:91:78: d6:c3:8b:0f:94:25:37:be:0d:dd:34:c0:97:dd:a6:e3:be:20: 2c:2b:d6:04:0d:6f:44:a9:ca:77:e0:fd:d0:33:c0:00:80:96: 4a:26:79:c3:20:b6:69:84:2c:33:e2:df:91:ce:fe:eb:fb:74: 78:44:76:75:ea:76:62:21:1d:68:b0:d9:15:74:b4:1d:f7:e9: 2f:ba:12:f9:ff:6d:f7:36:a7:57:d9:3e:8a:8a:3d:a9:70:d7: 13:2f:12:5a:63:c9:43:5b:0d:ea:5b:c4:09:3e:34:f7:50:a0: 90:0a:31:9c:42:72:fd:30:87:d1:16:9f:8a:a0:a8:27:2d:7e: 5d:a4:06:e6:c7:e9:85:77:9c:e7:ba:55:80:85:24:cd:5f:a1: ad:76:d6:ef -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUfs+qvxE5cr5tdeUK0kLagOH7WBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4ODZBNUMyQkJEOTgwRENBRDE3MDY1QjQ4M0ZEQURF MTU4ODExNTAeFw0yNjA3MjgxMTQzMjVaFw0yNjA3MjkxMzE0MjVaMDMxMTAvBgNV BAMTKDgyNDNGMkExN0REQTI4N0EwODA2OTNCQTA1QjJFREYyRjZGQ0QxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLx7Qx5CJb2yugDGQ8BZk4iY9L aySoGySyJxCVJyTJyWr5ko5RFdIR7kLeeYkvltl1LQscbCEOfxmyoIoH6x+U86tk lAqyi1cm54JuGb+ysQlvEtvt0FJt4zWdWkTEEhmzszmwI8Ryi+g1QjlHOrAUuKHp ohtPLYWdvjja3e+SLJEtpGRUlpCXfdiPFOycQTUrpDvvVP/6WTfD0/kspTKcdUr2 iop/SEscnTcNbqLjLnd8hW9Np/QUUQLQj7cpf1YcxFjPKrqGGCZxs+fumPJ9glPy uCV99GB+yyDPshfot1dg+85h0a4Tf01O1TLhU4W6cKLns7HQXdbSwp0Y8MipAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUgkPyoX3aKHoIBpO6BbLt8vb80aowHwYDVR0j BBgwFoAUMIhqXCu9mA3K0XBltIP9reFYgRUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz ODQ3MC8wLzMwODg2QTVDMkJCRDk4MERDQUQxNzA2NUI0ODNGREFERTE1ODgxMTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMzA4ODZBNUMyQkJEOTgwRENBRDE3MDY1 QjQ4M0ZEQURFMTU4ODExNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0NzAvMC8zMDg4 NkE1QzJCQkQ5ODBEQ0FEMTcwNjVCNDgzRkRBREUxNTg4MTE1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA CpmLgq2BkYQbm77pmNOONqAe69jPkQks4FqGo1h1+0Go/V/LtJ0ukbGMB38Nbtmo nVD86Yd3ujTvUB4dgl0L9etSVOowlrw8sEKfIX1Ejmq27i/GXyFVBY5KUICxgUWq MhUN7NBy7+ZVqJF41sOLD5QlN74N3TTAl92m474gLCvWBA1vRKnKd+D90DPAAICW SiZ5wyC2aYQsM+Lfkc7+6/t0eER2dep2YiEdaLDZFXS0HffpL7oS+f9t9zanV9k+ ioo9qXDXEy8SWmPJQ1sN6lvECT4091CgkAoxnEJy/TCH0RafiqCoJy1+XaQG5sfp hXec57pVgIUkzV+hrXbW7w== -----END CERTIFICATE-----Generated at Wed Jul 29 04:29:14 2026 by rpki-client