$ rpki-client -vvvf rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft File: 985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft (raw, json) Hash identifier: zeEgh0fudDfKNxPMZbRATElqEen14/TdD644WTT0kls= Subject key identifier: 96:3A:C7:04:56:84:23:14:0B:72:E9:69:17:29:F6:B1:4E:B1:F6:89 Authority key identifier: 98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B Certificate issuer: /CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B Certificate serial: 2AAA1D1D2A51BB5E1E7333D17593C55F0F058C96 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft Manifest number: B9 Signing time: Mon 21 Sep 2026 05:35:53 +0000 Manifest this update: Mon 21 Sep 2026 05:30:53 +0000 Manifest next update: Tue 22 Sep 2026 07:59:53 +0000 Files and hashes: 1: 3136302e33302e3231312e302f32342d3234203d3e20333936393832.roa (hash: J8m05DGYS3tyQ4bsSSQjjKphRPcMWgg0kZ9JSdNSHmY=) 2: 3136302e33302e3231302e302f32342d3234203d3e20313532363133.roa (hash: 3V+eLijCrneWsUaRvj4OtnRRirUVmLqCfv2HSVSfeog=) 3: 985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl (hash: I/xQOWN4LibhgOmwHhHMyt7Z1wOxIfTXDTLFWKe2ayA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:aa:1d:1d:2a:51:bb:5e:1e:73:33:d1:75:93:c5:5f:0f:05:8c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985AF7058B94D432A9181F30B0AE306C97BD4F3B Validity Not Before: Sep 21 05:30:53 2026 GMT Not After : Sep 22 07:59:53 2026 GMT Subject: CN=963AC704568423140B72E9691729F6B14EB1F689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:78:96:34:96:4f:5f:a1:eb:fd:99:a2:e7: ed:00:f6:b1:2b:1a:7c:97:fe:60:2f:51:e5:0f:49: 01:9e:70:e0:02:c9:d1:24:9f:02:6b:74:3e:30:d7: 07:22:29:20:30:a7:ff:07:b0:6f:85:56:8c:66:d5: 4b:a7:9d:45:21:89:ab:75:bb:59:90:dd:e2:ef:fa: b4:aa:17:5e:60:df:b4:09:ed:20:44:86:ab:44:9d: d8:9c:28:6f:96:a1:29:6a:e9:63:95:21:07:d3:79: 39:37:eb:e2:bd:23:22:42:80:86:c8:e3:a4:a3:24: 71:de:2e:40:9c:8a:c4:6a:b8:1e:8d:c9:d0:b3:17: 56:b4:9a:d1:bf:1e:e8:de:a1:af:87:9a:46:b8:e9: fe:cb:5e:48:e6:30:18:52:86:e6:7d:ba:4a:ca:35: 31:98:f8:2f:11:59:9e:1c:cc:ea:38:f2:d7:b0:dc: d1:3e:75:fe:35:ea:6c:4b:ad:f5:7d:a8:9f:21:6e: 88:cd:37:5f:f9:ff:d6:95:4f:34:64:75:bd:c9:43: 58:53:a9:0c:2f:46:4f:f5:c2:0e:a0:94:a7:df:f8: a9:91:cc:f5:2e:cb:87:53:3b:a9:c9:db:39:5d:81: 81:54:22:90:2b:bb:9a:be:91:ea:cf:de:74:f2:f1: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:C7:04:56:84:23:14:0B:72:E9:69:17:29:F6:B1:4E:B1:F6:89 X509v3 Authority Key Identifier: keyid:98:5A:F7:05:8B:94:D4:32:A9:18:1F:30:B0:AE:30:6C:97:BD:4F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/985AF7058B94D432A9181F30B0AE306C97BD4F3B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/1/985AF7058B94D432A9181F30B0AE306C97BD4F3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a6:12:e5:1c:17:27:a1:94:b4:5a:71:cd:af:8f:cd:3b:b8: 77:c2:d4:ee:6f:18:e6:3b:a7:1d:ef:90:69:6c:6a:1e:a2:79: 9e:6f:ee:13:58:70:f5:39:df:66:df:8d:b9:ec:8d:97:3f:89: c2:05:ac:21:64:d9:81:66:9b:2d:db:de:e3:ed:cd:c2:bd:f7: 75:f2:af:09:7b:12:4f:c9:70:f3:73:d6:7c:5a:75:dc:9a:69: 57:24:52:13:bd:6e:34:a0:47:4d:26:e6:53:ad:8a:03:bc:13: 73:dc:05:ff:01:e9:fe:a5:40:bf:d0:31:91:7c:67:e2:9c:b5: d8:50:c6:00:78:35:84:53:73:9a:0c:e3:27:11:b3:20:1f:b7: 77:95:51:66:af:38:2d:2f:b5:cb:ca:9e:ca:d6:5e:39:b9:f0: 0f:0c:a0:fb:86:4d:26:8d:f2:0a:b6:7d:55:5b:1a:e6:4e:0b: 12:b6:ee:60:09:8e:bf:44:bc:73:b2:b6:f7:c2:a1:a4:c4:52: 5b:fa:28:6c:df:ae:7a:25:d6:df:2f:bc:5d:b2:64:d0:c8:2b: 69:0d:18:42:82:f2:58:e3:05:74:80:f1:98:0d:18:b7:9f:75: 47:ee:f3:16:0b:b0:8b:10:8d:90:39:b5:ff:94:d7:6e:64:12: 67:d9:e0:57 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUKqodHSpRu14eczPRdZPFXw8FjJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1QUY3MDU4Qjk0RDQzMkE5MTgxRjMwQjBBRTMwNkM5 N0JENEYzQjAeFw0yNjA5MjEwNTMwNTNaFw0yNjA5MjIwNzU5NTNaMDMxMTAvBgNV BAMTKDk2M0FDNzA0NTY4NDIzMTQwQjcyRTk2OTE3MjlGNkIxNEVCMUY2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DXiWNJZPX6Hr/Zmi5+0A9rEr GnyX/mAvUeUPSQGecOACydEknwJrdD4w1wciKSAwp/8HsG+FVoxm1UunnUUhiat1 u1mQ3eLv+rSqF15g37QJ7SBEhqtEndicKG+WoSlq6WOVIQfTeTk36+K9IyJCgIbI 46SjJHHeLkCcisRquB6NydCzF1a0mtG/Hujeoa+Hmka46f7LXkjmMBhShuZ9ukrK NTGY+C8RWZ4czOo48tew3NE+df416mxLrfV9qJ8hbojNN1/5/9aVTzRkdb3JQ1hT qQwvRk/1wg6glKff+KmRzPUuy4dTO6nJ2zldgYFUIpAru5q+kerP3nTy8S3FAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUljrHBFaEIxQLculpFyn2sU6x9okwHwYDVR0j BBgwFoAUmFr3BYuU1DKpGB8wsK4wbJe9TzswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09ERVVQ VEVDSC8xLzk4NUFGNzA1OEI5NEQ0MzJBOTE4MUYzMEIwQUUzMDZDOTdCRDRGM0Iu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzAvOTg1QUY3MDU4Qjk0RDQzMkE5MTgxRjMw QjBBRTMwNkM5N0JENEYzQi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NPREVVUFRFQ0gvMS85ODVB RjcwNThCOTRENDMyQTkxODFGMzBCMEFFMzA2Qzk3QkQ0RjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA i6YS5RwXJ6GUtFpxza+PzTu4d8LU7m8Y5junHe+QaWxqHqJ5nm/uE1hw9TnfZt+N ueyNlz+JwgWsIWTZgWabLdve4+3Nwr33dfKvCXsST8lw83PWfFp13JppVyRSE71u NKBHTSbmU62KA7wTc9wF/wHp/qVAv9AxkXxn4py12FDGAHg1hFNzmgzjJxGzIB+3 d5VRZq84LS+1y8qeytZeObnwDwyg+4ZNJo3yCrZ9VVsa5k4LErbuYAmOv0S8c7K2 98KhpMRSW/oobN+ueiXW3y+8XbJk0MgraQ0YQoLyWOMFdIDxmA0Yt591R+7zFguw ixCNkDm1/5TXbmQSZ9ngVw== -----END CERTIFICATE-----Generated at Mon Sep 21 19:59:45 2026 by rpki-client