$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json) Hash identifier: czFwYV8vVQQqYAmd8DO7QACiWboAewAWIDJtavC3QBM= Subject key identifier: 9D:A6:BE:AA:F7:2A:98:A2:7C:77:93:82:3F:56:45:BB:D9:93:64:EA Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 Certificate issuer: /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Certificate serial: 2EF5C26B0A8D58F8D8A6CC3DC15FEB993819F797 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft Manifest number: B3 Signing time: Mon 21 Sep 2026 03:30:39 +0000 Manifest this update: Mon 21 Sep 2026 03:25:39 +0000 Manifest next update: Tue 22 Sep 2026 03:48:39 +0000 Files and hashes: 1: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=) 2: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=) 3: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: /xzwAoZLK7sZikdYIabWWTbQSA/1W2XgFs4zQdxlgDU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f5:c2:6b:0a:8d:58:f8:d8:a6:cc:3d:c1:5f:eb:99:38:19:f7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Validity Not Before: Sep 21 03:25:39 2026 GMT Not After : Sep 22 03:48:39 2026 GMT Subject: CN=9DA6BEAAF72A98A27C7793823F5645BBD99364EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7e:00:d3:3b:19:e9:59:ee:64:53:1d:d8:da: 62:25:ce:3b:3a:92:dc:88:4a:71:94:3b:e7:6c:78: 5e:c8:9c:7b:42:64:70:dd:69:99:2a:32:87:4f:34: d9:22:39:fb:08:73:57:60:ae:28:9e:86:eb:8b:8c: 29:cc:b0:48:76:39:56:2f:44:49:dc:98:1e:87:6b: 46:2b:a5:09:f1:77:c4:78:f8:8b:11:0f:1d:b1:7e: 8c:5e:b3:35:16:4a:6f:12:1d:16:1c:81:58:2c:62: 4e:55:9c:92:8f:37:ea:30:ea:94:b7:25:9b:1a:89: da:b3:96:dc:c6:98:23:bf:89:d6:a3:29:97:a9:1e: 8f:5d:2a:a4:27:dd:73:24:0a:5f:b8:a7:50:71:ae: 70:a8:1d:f0:67:66:eb:4c:be:3e:f9:b8:d3:f8:bf: 24:74:a7:8b:c9:de:57:a7:1c:40:03:69:58:80:00: 36:26:87:98:fb:05:3a:d0:08:ab:a3:31:34:07:75: 33:ca:92:10:39:77:bd:88:d5:b2:51:b0:c6:7c:b9: a9:cf:9f:11:79:d5:42:ca:fb:4d:f4:87:91:29:20: ec:eb:e1:b2:b3:68:ba:71:5c:1e:68:46:9f:fc:db: c5:30:4c:9f:5d:ed:25:58:a6:14:8d:aa:a2:05:e7: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A6:BE:AA:F7:2A:98:A2:7C:77:93:82:3F:56:45:BB:D9:93:64:EA X509v3 Authority Key Identifier: keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:14:70:86:d3:70:6e:07:d9:07:02:ee:76:3e:ab:3e:32:13: 60:3a:01:03:8e:ff:81:28:4e:a4:9e:92:d2:77:65:e1:75:fa: 3f:7d:a8:9e:d5:21:35:2e:ed:0a:91:84:ef:d9:bd:1d:a8:e7: 64:f2:04:a2:36:58:e0:a1:70:0e:b0:27:bf:de:10:f3:fb:2d: 92:b8:d0:ca:d6:1e:00:14:56:1a:75:42:f6:5b:dd:de:f3:9c: 09:d6:34:ab:11:b2:55:73:bf:1d:46:d2:05:e0:ce:41:4f:7d: 15:4c:db:78:ee:ea:ba:e2:18:80:af:2a:ac:22:9a:73:0d:c2: 2c:4f:c5:b7:4f:b2:5f:fc:e2:f0:3a:af:9c:91:91:f1:0c:2a: 88:26:77:cf:58:3c:91:6a:bb:93:7f:58:b1:6f:0a:de:64:f0: f8:45:c4:4e:1e:b2:a9:74:06:7f:ba:30:2a:2e:9a:d7:d0:03: 16:73:59:98:77:d3:a8:ca:65:6e:8a:23:88:c5:b2:c7:2d:78: 69:82:2e:04:16:54:b5:10:53:b9:ec:7c:ce:a5:1c:45:ec:63: d5:2e:18:4e:8f:c5:f6:ac:f3:3f:1e:ca:2f:ef:1f:68:85:d9: 26:82:fa:12:68:43:30:0c:86:a7:a4:c3:33:39:37:60:a5:3e: 8e:72:db:e0 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIULvXCawqNWPjYpsw9wV/rmTgZ95cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4NkMyMzE3MURGRkFG NUFEN0REODAeFw0yNjA5MjEwMzI1MzlaFw0yNjA5MjIwMzQ4MzlaMDMxMTAvBgNV BAMTKDlEQTZCRUFBRjcyQTk4QTI3Qzc3OTM4MjNGNTY0NUJCRDk5MzY0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3fgDTOxnpWe5kUx3Y2mIlzjs6 ktyISnGUO+dseF7InHtCZHDdaZkqModPNNkiOfsIc1dgriiehuuLjCnMsEh2OVYv REncmB6Ha0YrpQnxd8R4+IsRDx2xfoxeszUWSm8SHRYcgVgsYk5VnJKPN+ow6pS3 JZsaidqzltzGmCO/idajKZepHo9dKqQn3XMkCl+4p1BxrnCoHfBnZutMvj75uNP4 vyR0p4vJ3lenHEADaViAADYmh5j7BTrQCKujMTQHdTPKkhA5d72I1bJRsMZ8uanP nxF51ULK+030h5EpIOzr4bKzaLpxXB5oRp/828UwTJ9d7SVYphSNqqIF56xNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUnaa+qvcqmKJ8d5OCP1ZFu9mTZOowHwYDVR0j BBgwFoAUNtqRQt4dyAnvAIbCMXHf+vWtfdgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hBUk1X QVkvMC8zNkRBOTE0MkRFMURDODA5RUYwMDg2QzIzMTcxREZGQUY1QUQ3REQ4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMx NzFERkZBRjVBRDdERDguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8wLzM2REE5MTQy REUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWFHCG 03BuB9kHAu52Pqs+MhNgOgEDjv+BKE6knpLSd2Xhdfo/faie1SE1Lu0KkYTv2b0d qOdk8gSiNljgoXAOsCe/3hDz+y2SuNDK1h4AFFYadUL2W93e85wJ1jSrEbJVc78d RtIF4M5BT30VTNt47uq64hiAryqsIppzDcIsT8W3T7Jf/OLwOq+ckZHxDCqIJnfP WDyRaruTf1ixbwreZPD4RcROHrKpdAZ/ujAqLprX0AMWc1mYd9OoymVuiiOIxbLH LXhpgi4EFlS1EFO57HzOpRxF7GPVLhhOj8X2rPM/Hsov7x9ohdkmgvoSaEMwDIan pMMzOTdgpT6Octvg -----END CERTIFICATE-----Generated at Mon Sep 21 16:29:49 2026 by rpki-client