$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft File: 5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft (raw, json) Hash identifier: Y8etu5Yfd9J+xjmMJ31AYCUvyQamQlBrYoNltVvZ45Y= Subject key identifier: 22:CD:CF:9F:F3:2B:64:D4:E1:CA:26:DA:EB:BB:DD:E2:82:99:A2:4F Authority key identifier: 5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9 Certificate issuer: /CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9 Certificate serial: 20BE1AB7E4F8E40E92594433BDF8AC059C1B8652 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft Manifest number: B3 Signing time: Sun 20 Sep 2026 08:24:06 +0000 Manifest this update: Sun 20 Sep 2026 08:19:06 +0000 Manifest next update: Mon 21 Sep 2026 11:59:06 +0000 Files and hashes: 1: 3132322e35302e31342e302f32332d3234203d3e2037353336.roa (hash: vVJHt/f1AMl0GaECltUazq9tAkyL9lzn9YdVIEJwFWc=) 2: 3132322e35302e31342e302f32332d3234203d3e203231383539.roa (hash: NUTSczzO1jBlL3ynQG4ErzB2wpeQoaGOQ6PppTSNjqg=) 3: 5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl (hash: 9O5W3p3PEBMXKJf3Du3afZ/JQJza3VCUT8bnUqZOroM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:be:1a:b7:e4:f8:e4:0e:92:59:44:33:bd:f8:ac:05:9c:1b:86:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9 Validity Not Before: Sep 20 08:19:06 2026 GMT Not After : Sep 21 11:59:06 2026 GMT Subject: CN=22CDCF9FF32B64D4E1CA26DAEBBBDDE28299A24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c6:73:c2:36:87:59:0a:7d:9d:29:e2:e9:66: 9b:09:cf:4d:06:f5:6a:e1:a8:51:c5:dd:30:27:e8: 03:61:b4:73:be:a7:5a:16:8c:5d:e6:f9:f0:17:23: f9:2a:07:89:52:c9:9d:9d:92:ae:45:a4:07:22:22: 93:26:ef:de:81:e1:b4:04:96:9f:23:94:38:c0:28: 49:d8:a2:8c:2b:79:51:b7:03:1d:7f:9d:25:73:ac: a0:d7:78:74:5e:f3:9f:53:60:d0:8f:ad:10:89:5a: f0:6c:12:76:2d:52:ff:74:7b:e7:e9:af:84:6e:27: 68:73:3e:b4:66:82:41:e5:c8:d0:d9:6f:f7:18:40: 05:2b:24:19:d7:21:5e:69:46:ec:c2:29:4a:7c:c4: 96:80:e6:23:07:7a:cf:0f:24:a5:ce:8a:f7:d2:98: 69:61:fd:2f:24:f5:60:bd:ee:f4:c4:09:a8:78:30: 2f:18:a4:20:2d:c5:89:55:08:06:1f:5d:21:aa:72: b3:59:48:07:e7:47:84:24:41:6c:91:4a:f9:49:9b: 7e:e8:5e:ad:43:13:2e:33:01:c9:f2:8a:41:d9:35: 19:82:c8:9a:93:2e:d5:2d:7e:04:79:46:3d:39:79: 7b:f1:c5:18:d6:0a:fc:f0:93:3f:cf:8a:70:39:1d: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CD:CF:9F:F3:2B:64:D4:E1:CA:26:DA:EB:BB:DD:E2:82:99:A2:4F X509v3 Authority Key Identifier: keyid:5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e8:62:0c:e5:c8:f9:54:02:82:6a:d3:9b:eb:06:2f:08:6b: e6:99:e3:8b:99:6b:36:49:6c:7c:60:9b:f8:73:a6:a2:0a:c3: 61:aa:c6:0a:4f:d4:80:ac:54:a2:24:ae:14:4e:9a:36:cd:53: cb:5f:10:36:92:4d:c8:e0:b9:6e:f9:06:aa:ad:2c:c1:17:ef: 53:68:11:bb:c6:91:81:6f:c3:6c:4d:b4:e9:06:3e:4d:00:c5: ec:dd:1d:89:79:46:ea:fb:ba:f4:dc:7d:34:7a:3a:7a:21:dd: cc:30:4c:ee:b9:02:47:2a:0c:ad:e4:55:3a:be:74:bf:5b:bf: a4:cb:25:ac:3b:d6:23:09:78:03:59:09:38:80:eb:f1:fe:05: 3b:72:0f:50:c8:28:b8:10:a6:49:1b:ce:98:48:ed:af:b5:3e: 90:42:f0:85:1b:d8:0a:19:73:81:01:59:d4:1b:35:f3:75:75: 12:f6:cd:90:28:6a:f1:c2:9c:ce:9f:b0:78:63:25:0d:5f:93: 8c:48:19:0c:2e:b6:32:37:78:d2:56:12:b4:9d:26:81:ed:eb: 14:33:a1:0e:d4:72:26:99:12:4d:7d:9e:c3:fc:e9:4d:af:3e: 04:4f:04:85:73:26:b8:25:10:dd:ef:11:c5:4b:4a:92:df:10: 5f:69:05:f1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIL4at+T45A6SWUQzvfisBZwbhlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1OUVERjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYy OTI4NDBDOTAeFw0yNjA5MjAwODE5MDZaFw0yNjA5MjExMTU5MDZaMDMxMTAvBgNV BAMTKDIyQ0RDRjlGRjMyQjY0RDRFMUNBMjZEQUVCQkJEREUyODI5OUEyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChxnPCNodZCn2dKeLpZpsJz00G 9WrhqFHF3TAn6ANhtHO+p1oWjF3m+fAXI/kqB4lSyZ2dkq5FpAciIpMm796B4bQE lp8jlDjAKEnYoowreVG3Ax1/nSVzrKDXeHRe859TYNCPrRCJWvBsEnYtUv90e+fp r4RuJ2hzPrRmgkHlyNDZb/cYQAUrJBnXIV5pRuzCKUp8xJaA5iMHes8PJKXOivfS mGlh/S8k9WC97vTECah4MC8YpCAtxYlVCAYfXSGqcrNZSAfnR4QkQWyRSvlJm37o Xq1DEy4zAcnyikHZNRmCyJqTLtUtfgR5Rj05eXvxxRjWCvzwkz/PinA5HSmlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUIs3Pn/MrZNThyiba67vd4oKZok8wHwYDVR0j BBgwFoAUWlnt+D2z2fw623XR2/t4NikoQMkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJQU9D T1JQLzAvNUE1OUVERjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYyOTI4NDBDOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS81QTU5RURGODNEQjNEOUZDM0FEQjc1RDFE QkZCNzgzNjI5Mjg0MEM5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJQU9DT1JQLzAvNUE1OUVE RjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYyOTI4NDBDOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKno YgzlyPlUAoJq05vrBi8Ia+aZ44uZazZJbHxgm/hzpqIKw2GqxgpP1ICsVKIkrhRO mjbNU8tfEDaSTcjguW75BqqtLMEX71NoEbvGkYFvw2xNtOkGPk0AxezdHYl5Rur7 uvTcfTR6Onoh3cwwTO65AkcqDK3kVTq+dL9bv6TLJaw71iMJeANZCTiA6/H+BTty D1DIKLgQpkkbzphI7a+1PpBC8IUb2AoZc4EBWdQbNfN1dRL2zZAoavHCnM6fsHhj JQ1fk4xIGQwutjI3eNJWErSdJoHt6xQzoQ7UciaZEk19nsP86U2vPgRPBIVzJrgl EN3vEcVLSpLfEF9pBfE= -----END CERTIFICATE-----Generated at Sun Sep 20 23:45:52 2026 by rpki-client