$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft File: 9B5DA40B0F23621450755917A456431F689EB049.mft (raw, json) Hash identifier: Z8F6iMt4WkSeTCytllBWh7DBMUek83tYcMmNxZ+HJto= Subject key identifier: ED:1F:37:58:5E:DC:01:43:6D:16:62:30:FD:AA:B9:80:76:F8:38:9D Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49 Certificate issuer: /CN=9B5DA40B0F23621450755917A456431F689EB049 Certificate serial: 0DC832CD88D45A8470C25AC750E12BB806DB2241 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft Manifest number: B7 Signing time: Tue 22 Sep 2026 08:25:21 +0000 Manifest this update: Tue 22 Sep 2026 08:20:21 +0000 Manifest next update: Wed 23 Sep 2026 11:02:21 +0000 Files and hashes: 1: 3130332e3133302e3233362e302f32332d3234203d3e203633393130.roa (hash: 8S5OsugAwixeQ8Ag9hxeeLoX3QQmkvW+iKjWp7BvVWA=) 2: 323430303a663432303a3a2f33322d3634203d3e203633393130.roa (hash: nHJZCc2ObG/YAr0XIyCnCXOkUDdTdP47YAnSTHpOSa4=) 3: 9B5DA40B0F23621450755917A456431F689EB049.crl (hash: vjjh7h50p5GxkGY2d0zhKPVdscO3DgP4vKx0MweE8/0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c8:32:cd:88:d4:5a:84:70:c2:5a:c7:50:e1:2b:b8:06:db:22:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049 Validity Not Before: Sep 22 08:20:21 2026 GMT Not After : Sep 23 11:02:21 2026 GMT Subject: CN=ED1F37585EDC01436D166230FDAAB98076F8389D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:c9:6f:12:36:22:f2:96:3f:7f:0b:3f:43: d3:c8:55:c0:51:ac:bd:4e:26:89:37:dc:e1:73:b1: 38:b1:97:e1:52:f0:5d:2c:5e:23:c2:ca:3c:c9:ed: 65:4b:e2:e6:36:10:53:cf:93:db:84:95:59:19:6d: b7:23:a4:f1:8b:d2:bc:5a:92:df:d3:27:a8:5a:5f: 4f:83:f4:a6:01:da:84:16:da:cc:97:c5:35:08:4f: c0:4f:44:fc:46:56:cd:e1:d2:18:c5:6c:21:c8:62: 59:1c:30:8d:b3:ed:7b:2b:4e:8b:bb:74:c8:df:4b: ce:af:2a:c9:57:a1:dc:2c:a0:cb:22:e3:ce:a5:12: 39:0e:cd:65:05:2b:0a:36:76:4f:f2:d7:bd:02:ad: a1:61:86:6f:99:03:6c:0e:db:c4:be:c2:cb:d7:eb: 5d:80:90:05:da:16:24:59:45:98:a4:e3:49:df:06: b0:85:76:f9:ec:c8:e0:3f:33:6b:0a:b6:b1:59:d0: 89:67:d3:30:e6:fd:c5:91:43:73:7a:1d:83:ac:9a: ba:87:55:8a:cd:21:62:8a:b7:b3:d0:8f:b8:e2:66: c8:12:c4:08:b6:fa:66:a6:1d:b9:f2:5f:9b:f0:04: 84:37:b9:6b:e0:cc:59:dd:a2:60:d7:14:10:3b:1f: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1F:37:58:5E:DC:01:43:6D:16:62:30:FD:AA:B9:80:76:F8:38:9D X509v3 Authority Key Identifier: keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e3:71:2d:4f:ae:59:5c:2a:69:b3:19:de:92:79:58:b9:76: f4:bb:70:75:22:bd:07:8e:3d:95:cc:18:0a:82:00:44:f8:30: da:da:1f:2a:f8:aa:7f:ee:8f:cf:51:2d:a6:08:cb:b1:d0:f9: 5c:5f:b5:8a:45:b4:98:a0:70:9b:2a:1d:94:2c:58:85:e5:9a: 25:44:0a:25:2f:84:ed:0c:98:88:63:ab:d1:3e:ff:ca:64:3a: 00:12:69:02:05:20:f1:d3:f0:51:86:86:6b:c4:f4:c9:19:70: 91:c2:92:63:50:ea:64:d8:ff:b8:68:ef:1e:88:a9:b2:40:2b: f3:0b:24:b4:64:12:05:49:0b:d1:a4:5e:1e:e8:c2:74:f6:6b: 8d:ea:5e:2d:2c:29:e6:be:31:73:c4:f2:b4:e8:19:08:29:57: c3:4c:b8:2d:93:3a:89:4b:41:ca:45:f6:cf:96:d6:79:68:22: fa:32:86:fd:b5:95:82:4d:68:19:e5:9f:30:1d:33:46:44:85: ad:d6:92:96:ee:c5:d5:cd:41:f3:49:60:34:e2:28:a3:95:0c: b4:0d:67:3d:de:9c:a5:04:67:00:d4:ed:f0:97:54:bd:ab:d4: e6:01:50:ed:91:2a:ed:9c:49:1c:de:e9:f6:05:71:1f:96:3a: fb:4d:ca:63 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUDcgyzYjUWoRwwlrHUOEruAbbIkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1REE0MEIwRjIzNjIxNDUwNzU1OTE3QTQ1NjQzMUY2 ODlFQjA0OTAeFw0yNjA5MjIwODIwMjFaFw0yNjA5MjMxMTAyMjFaMDMxMTAvBgNV BAMTKEVEMUYzNzU4NUVEQzAxNDM2RDE2NjIzMEZEQUFCOTgwNzZGODM4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmyslvEjYi8pY/fws/Q9PIVcBR rL1OJok33OFzsTixl+FS8F0sXiPCyjzJ7WVL4uY2EFPPk9uElVkZbbcjpPGL0rxa kt/TJ6haX0+D9KYB2oQW2syXxTUIT8BPRPxGVs3h0hjFbCHIYlkcMI2z7XsrTou7 dMjfS86vKslXodwsoMsi486lEjkOzWUFKwo2dk/y170CraFhhm+ZA2wO28S+wsvX 612AkAXaFiRZRZik40nfBrCFdvnsyOA/M2sKtrFZ0Iln0zDm/cWRQ3N6HYOsmrqH VYrNIWKKt7PQj7jiZsgSxAi2+mamHbnyX5vwBIQ3uWvgzFndomDXFBA7HxZBAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU7R83WF7cAUNtFmIw/aq5gHb4OJ0wHwYDVR0j BBgwFoAUm12kCw8jYhRQdVkXpFZDH2iesEkwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xBUksv MC85QjVEQTQwQjBGMjM2MjE0NTA3NTU5MTdBNDU2NDMxRjY4OUVCMDQ5LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzlCNURBNDBCMEYyMzYyMTQ1MDc1NTkxN0E0NTY0 MzFGNjg5RUIwNDkuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTEFSSy8wLzlCNURBNDBCMEYyMzYy MTQ1MDc1NTkxN0E0NTY0MzFGNjg5RUIwNDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCP43EtT65ZXCpp sxneknlYuXb0u3B1Ir0Hjj2VzBgKggBE+DDa2h8q+Kp/7o/PUS2mCMux0PlcX7WK RbSYoHCbKh2ULFiF5ZolRAolL4TtDJiIY6vRPv/KZDoAEmkCBSDx0/BRhoZrxPTJ GXCRwpJjUOpk2P+4aO8eiKmyQCvzCyS0ZBIFSQvRpF4e6MJ09muN6l4tLCnmvjFz xPK06BkIKVfDTLgtkzqJS0HKRfbPltZ5aCL6Mob9tZWCTWgZ5Z8wHTNGRIWt1pKW 7sXVzUHzSWA04iijlQy0DWc93pylBGcA1O3wl1S9q9TmAVDtkSrtnEkc3un2BXEf ljr7Tcpj -----END CERTIFICATE-----Generated at Tue Sep 22 20:11:11 2026 by rpki-client