$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft File: 5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft (raw, json) Hash identifier: S/xAtHHN/ia6x2WtHoWCVzr5h9DGaqyQP9c72Y6biVg= Subject key identifier: 2C:16:CE:DD:CF:B3:0A:44:26:D0:AB:71:7F:80:07:67:D5:25:0A:C0 Authority key identifier: 5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9 Certificate issuer: /CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9 Certificate serial: 1AD4AA347F1B0EDF4681BEE80609026F1E80EA21 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft Manifest number: F1 Signing time: Thu 05 Nov 2026 11:03:01 +0000 Manifest this update: Thu 05 Nov 2026 10:58:01 +0000 Manifest next update: Fri 06 Nov 2026 14:44:01 +0000 Files and hashes: 1: 3132322e35302e31342e302f32332d3234203d3e203231383539.roa (hash: NUTSczzO1jBlL3ynQG4ErzB2wpeQoaGOQ6PppTSNjqg=) 2: 3132322e35302e31342e302f32332d3234203d3e2037353336.roa (hash: vVJHt/f1AMl0GaECltUazq9tAkyL9lzn9YdVIEJwFWc=) 3: 5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl (hash: EeP8uYE+l2s8Ln21dhNsAX+z+8vEpNc5IxWfGKRTR24=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 14:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d4:aa:34:7f:1b:0e:df:46:81:be:e8:06:09:02:6f:1e:80:ea:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9 Validity Not Before: Nov 5 10:58:01 2026 GMT Not After : Nov 6 14:44:01 2026 GMT Subject: CN=2C16CEDDCFB30A4426D0AB717F800767D5250AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:bc:ba:4d:70:89:e2:b1:f7:73:fb:07:04: 74:b9:48:0b:14:f7:5b:eb:e5:59:0d:db:e3:7c:1e: bd:6b:ca:9f:43:3a:94:ce:1b:d5:1e:d0:15:98:6c: 7d:7d:5e:55:4b:a4:91:f0:fa:7e:2d:15:0d:6c:dc: e8:78:c8:39:73:c8:bc:da:4e:c0:06:9c:2f:c7:08: 89:5d:2d:5f:81:5d:cb:ac:da:a1:0f:41:df:10:4f: 20:97:a7:ee:0d:84:60:c0:13:4f:0a:70:44:3b:dd: a8:c4:1f:4c:3f:d6:71:a3:86:55:01:33:86:dc:6e: 02:c9:36:55:ca:62:93:ef:9f:73:4c:5d:25:06:7f: 10:6e:7f:22:6f:e6:a4:11:3f:ad:d7:e0:6a:aa:c0: e2:17:da:73:57:43:68:a3:f1:a4:76:6a:28:f3:bd: 86:e5:d6:e4:3f:f6:a0:68:79:b6:f3:9b:ba:a9:9d: 83:b7:eb:06:6a:0a:ca:0e:1a:cb:42:48:87:ba:7a: 8c:b9:68:06:bc:29:ae:26:75:03:65:d2:03:ec:82: 69:a7:d8:9e:85:c3:83:e5:1f:55:13:b4:16:ba:75: 3a:94:e4:67:aa:86:c3:89:61:46:92:18:e8:06:32: 3c:a9:b5:c6:ee:f2:c4:a2:f2:48:75:33:06:87:f3: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:CE:DD:CF:B3:0A:44:26:D0:AB:71:7F:80:07:67:D5:25:0A:C0 X509v3 Authority Key Identifier: keyid:5A:59:ED:F8:3D:B3:D9:FC:3A:DB:75:D1:DB:FB:78:36:29:28:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCORP/0/5A59EDF83DB3D9FC3ADB75D1DBFB7836292840C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:36:62:34:3e:49:ce:97:a5:b9:63:43:aa:5c:b1:5a:18:87: c7:e1:93:7d:a0:b6:e5:45:e9:8b:05:80:c6:df:81:13:72:68: 24:d4:24:2e:14:ac:a9:46:48:88:42:dc:6e:c9:ef:6d:07:36: e7:0e:44:1e:5b:22:b9:05:f6:9f:5c:3a:ce:27:bb:76:3f:6f: f8:a8:34:3c:ce:d8:f6:3c:ea:0a:53:27:70:c2:d2:c3:9e:27: 7b:56:56:45:71:34:1e:83:91:5e:b3:1f:63:77:69:9a:e0:5d: f1:56:b1:a3:30:a5:e9:c8:f8:56:82:e4:ef:c7:42:38:71:9a: 5e:2d:d3:28:cc:3f:77:38:54:f1:92:db:c5:5a:d5:7e:33:5e: 24:4a:d8:8d:7e:42:25:cb:76:cf:0f:e6:ea:ee:89:21:1a:44: 39:65:1f:0a:9a:e6:80:d8:64:82:3d:ce:be:92:30:bb:ff:89: 02:b6:a1:ce:e2:c4:d0:0e:9e:eb:89:78:8a:60:0e:10:b7:01: e4:25:c9:bb:65:b7:07:13:01:85:db:10:27:13:70:99:9d:8a: ba:07:12:eb:ec:3b:60:be:ef:d8:1b:91:de:0e:a8:6a:24:00: 0b:65:05:d0:f2:26:a3:56:21:37:fe:64:23:be:e1:35:36:b7: e1:e8:10:7e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGtSqNH8bDt9Ggb7oBgkCbx6A6iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE1OUVERjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYy OTI4NDBDOTAeFw0yNjExMDUxMDU4MDFaFw0yNjExMDYxNDQ0MDFaMDMxMTAvBgNV BAMTKDJDMTZDRUREQ0ZCMzBBNDQyNkQwQUI3MTdGODAwNzY3RDUyNTBBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ17y6TXCJ4rH3c/sHBHS5SAsU 91vr5VkN2+N8Hr1ryp9DOpTOG9Ue0BWYbH19XlVLpJHw+n4tFQ1s3Oh4yDlzyLza TsAGnC/HCIldLV+BXcus2qEPQd8QTyCXp+4NhGDAE08KcEQ73ajEH0w/1nGjhlUB M4bcbgLJNlXKYpPvn3NMXSUGfxBufyJv5qQRP63X4GqqwOIX2nNXQ2ij8aR2aijz vYbl1uQ/9qBoebbzm7qpnYO36wZqCsoOGstCSIe6eoy5aAa8Ka4mdQNl0gPsgmmn 2J6Fw4PlH1UTtBa6dTqU5GeqhsOJYUaSGOgGMjyptcbu8sSi8kh1MwaH8y9nAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQULBbO3c+zCkQm0Ktxf4AHZ9UlCsAwHwYDVR0j BBgwFoAUWlnt+D2z2fw623XR2/t4NikoQMkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJQU9D T1JQLzAvNUE1OUVERjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYyOTI4NDBDOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS81QTU5RURGODNEQjNEOUZDM0FEQjc1RDFE QkZCNzgzNjI5Mjg0MEM5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJQU9DT1JQLzAvNUE1OUVE RjgzREIzRDlGQzNBREI3NUQxREJGQjc4MzYyOTI4NDBDOS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALU2 YjQ+Sc6XpbljQ6pcsVoYh8fhk32gtuVF6YsFgMbfgRNyaCTUJC4UrKlGSIhC3G7J 720HNucORB5bIrkF9p9cOs4nu3Y/b/ioNDzO2PY86gpTJ3DC0sOeJ3tWVkVxNB6D kV6zH2N3aZrgXfFWsaMwpenI+FaC5O/HQjhxml4t0yjMP3c4VPGS28Va1X4zXiRK 2I1+QiXLds8P5uruiSEaRDllHwqa5oDYZII9zr6SMLv/iQK2oc7ixNAOnuuJeIpg DhC3AeQlybtltwcTAYXbECcTcJmdiroHEuvsO2C+79gbkd4OqGokAAtlBdDyJqNW ITf+ZCO+4TU2t+HoEH4= -----END CERTIFICATE-----Generated at Thu Nov 5 18:53:56 2026 by rpki-client