$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json) Hash identifier: eeZQOhRPHABG8ObnXnWBbcTuUqkHypavYBGQ7kNQnyI= Subject key identifier: 38:AB:A1:98:76:85:93:D7:28:7E:48:14:BB:3A:F7:8B:BD:61:30:6E Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Certificate issuer: /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Certificate serial: 2E2C72ACD46D9B000CD4D8485347C95C396E0A82 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft Manifest number: 46 Signing time: Tue 28 Jul 2026 15:39:19 +0000 Manifest this update: Tue 28 Jul 2026 15:34:19 +0000 Manifest next update: Wed 29 Jul 2026 18:58:19 +0000 Files and hashes: 1: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: FVymi6HCzMCSy9no6oj1wXw9Zz3Quwwo6sbiwX0wc/I=) 2: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2c:72:ac:d4:6d:9b:00:0c:d4:d8:48:53:47:c9:5c:39:6e:0a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Validity Not Before: Jul 28 15:34:19 2026 GMT Not After : Jul 29 18:58:19 2026 GMT Subject: CN=38ABA198768593D7287E4814BB3AF78BBD61306E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:02:67:4c:97:fa:b9:8f:46:42:9a:28:d6: cd:a3:36:92:5b:93:93:55:85:75:ba:ad:94:87:a7: de:2f:ae:d6:ad:b9:a2:cb:77:f1:ef:fc:e4:e7:27: 9b:cc:af:b0:06:a0:92:1d:73:84:25:f8:ac:76:f0: 56:35:aa:64:d3:b7:34:87:9f:4a:e7:03:77:df:f4: cc:bd:5e:1e:34:03:3c:d0:80:97:8c:71:7d:9b:46: 32:86:7b:1d:d0:f9:35:c3:7e:db:46:8b:87:89:0b: 54:b5:9e:91:50:ce:70:ef:c8:bc:5c:6a:f0:87:5f: 31:3a:7f:fa:d3:6e:cc:ae:89:9a:58:14:dc:7a:e1: d9:3a:86:9e:01:92:ef:f3:fd:8b:15:fb:6d:b6:14: e4:ce:6a:57:85:26:f7:91:b3:1e:40:1f:7e:57:8d: 57:85:19:a5:b5:bb:70:0d:23:c7:60:28:cb:a3:92: 16:32:6f:2c:28:a4:64:31:36:0d:c8:13:3a:f7:73: b3:8d:c6:ba:8a:ce:40:5d:9b:b8:32:ee:a3:af:91: fb:33:c1:fb:b6:31:9b:6e:d6:8b:e6:e7:53:b7:ca: b4:21:9b:fe:de:9b:75:55:cb:48:65:00:05:52:fd: af:06:b8:0c:a2:69:4b:9e:31:30:d8:39:8e:5b:1b: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AB:A1:98:76:85:93:D7:28:7E:48:14:BB:3A:F7:8B:BD:61:30:6E X509v3 Authority Key Identifier: keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e6:45:30:1c:fb:f1:02:6e:53:76:df:80:db:14:e6:3f:6f: 04:fb:c3:3e:11:07:eb:0e:36:32:27:b5:ab:b0:91:20:f1:93: 1f:65:d6:93:07:44:d8:ca:09:45:39:71:c5:e2:71:83:25:db: 27:70:f7:82:62:db:10:0b:b6:fb:36:e5:a9:da:d3:cf:d6:ed: 43:42:18:ea:43:14:a8:c3:5f:2d:4b:0b:f4:85:d8:06:ff:11: 16:59:c1:12:9d:28:cc:6c:74:fa:43:c9:4a:65:bc:c4:3d:e4: c2:8c:fc:c5:71:fa:6c:df:34:aa:ba:0d:d5:37:1b:ca:f7:c4: d4:e6:d3:3c:5e:31:a1:2d:74:80:25:c5:e1:62:57:c4:86:59: c3:2b:81:75:fc:bf:58:9a:39:6a:ae:20:35:b9:35:85:a8:4f: 9b:a3:80:68:69:b1:60:e5:12:cd:3b:c5:44:02:7a:04:7a:b3: 51:3a:ba:83:ae:88:a8:0b:c1:a6:47:d5:82:9c:cf:76:dd:6f: b6:b0:b9:20:81:e3:72:7c:48:dc:fe:f9:ae:54:02:3c:3d:c7: 59:ea:be:da:7f:c7:a3:28:10:47:47:fd:43:6c:2b:c3:d8:7c: b8:79:78:38:b9:50:84:4f:26:95:cd:63:04:31:cb:ae:ed:73: ec:0f:5a:f6 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULixyrNRtmwAM1NhIU0fJXDluCoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRD MUEzOUJCMDAeFw0yNjA3MjgxNTM0MTlaFw0yNjA3MjkxODU4MTlaMDMxMTAvBgNV BAMTKDM4QUJBMTk4NzY4NTkzRDcyODdFNDgxNEJCM0FGNzhCQkQ2MTMwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2QJnTJf6uY9GQpoo1s2jNpJb k5NVhXW6rZSHp94vrtatuaLLd/Hv/OTnJ5vMr7AGoJIdc4Ql+Kx28FY1qmTTtzSH n0rnA3ff9My9Xh40AzzQgJeMcX2bRjKGex3Q+TXDfttGi4eJC1S1npFQznDvyLxc avCHXzE6f/rTbsyuiZpYFNx64dk6hp4Bku/z/YsV+222FOTOaleFJveRsx5AH35X jVeFGaW1u3ANI8dgKMujkhYybywopGQxNg3IEzr3c7ONxrqKzkBdm7gy7qOvkfsz wfu2MZtu1ovm51O3yrQhm/7em3VVy0hlAAVS/a8GuAyiaUueMTDYOY5bGykhAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUOKuhmHaFk9cofkgUuzr3i71hMG4wHwYDVR0j BBgwFoAU5oxMEDApuEFCpcqz77hS/cGjm7AwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FNjhDNEMxMDMwMjlCODQxNDJBNUNBQjNFRkI4 NTJGREMxQTM5QkIwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzEvRTY4QzRDMTAzMDI5 Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJvmRTAc+/EC blN234DbFOY/bwT7wz4RB+sONjIntauwkSDxkx9l1pMHRNjKCUU5ccXicYMl2ydw 94Ji2xALtvs25ana08/W7UNCGOpDFKjDXy1LC/SF2Ab/ERZZwRKdKMxsdPpDyUpl vMQ95MKM/MVx+mzfNKq6DdU3G8r3xNTm0zxeMaEtdIAlxeFiV8SGWcMrgXX8v1ia OWquIDW5NYWoT5ujgGhpsWDlEs07xUQCegR6s1E6uoOuiKgLwaZH1YKcz3bdb7aw uSCB43J8SNz++a5UAjw9x1nqvtp/x6MoEEdH/UNsK8PYfLh5eDi5UIRPJpXNYwQx y67tc+wPWvY= -----END CERTIFICATE-----Generated at Tue Jul 28 22:07:31 2026 by rpki-client