$ rpki-client -vvvf rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft File: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft (raw, json) Hash identifier: ShNS4zU6uPHipjBNiWJ63Wju4GIi5Shb2izEnMND728= Subject key identifier: EC:D9:B3:F0:55:14:0E:C6:A6:98:B7:B2:04:9A:B9:31:9A:D4:1B:07 Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68 Certificate issuer: /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68 Certificate serial: 09874351229898D26734B5A2DC679BA49762F7E2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 17:06:40 +0000 Manifest this update: Mon 21 Sep 2026 17:01:40 +0000 Manifest next update: Tue 22 Sep 2026 17:11:40 +0000 Files and hashes: 1: 323430333a623763303a3a2f33322d3332203d3e20313331363633.roa (hash: Mt8YVfAFEz60eNMhlP46Ju7thmG6SaKiJ1M/RQIpa58=) 2: 208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl (hash: QmrVTUDZ4lbWoHHpSqZ5sj4KbAg7Mw32sjQdBxjx2QY=) 3: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (hash: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:87:43:51:22:98:98:d2:67:34:b5:a2:dc:67:9b:a4:97:62:f7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68 Validity Not Before: Sep 21 17:01:40 2026 GMT Not After : Sep 22 17:11:40 2026 GMT Subject: CN=ECD9B3F055140EC6A698B7B2049AB9319AD41B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:fb:bf:d0:94:23:50:0a:c6:c9:ba:d9:09: 38:b7:0a:78:2f:b6:9b:39:c7:cb:80:23:0b:c7:cc: 3d:c4:61:d4:1c:c2:ef:15:a3:d3:23:59:6b:4d:ac: c3:16:33:06:ce:60:1d:19:f6:ef:6e:70:c0:2b:b5: ea:7e:b6:e8:09:7a:ef:24:8d:ce:dd:b5:3d:d6:a8: f3:ba:f0:ee:5f:cc:bf:09:f6:cf:bb:10:46:7a:78: 27:61:9d:b7:25:d0:64:1e:e0:6d:08:02:f7:71:96: 3f:6a:9a:40:3e:ae:45:a7:be:8f:ba:20:b2:ba:56: f8:c4:a6:74:a6:53:5d:ee:c6:c6:a9:70:c5:77:d0: 70:60:af:57:09:bd:e5:2c:30:ba:bc:8c:42:13:7e: f1:5b:81:1f:20:87:5c:8c:2a:5c:59:5a:7f:37:7e: 1a:04:18:a9:cc:17:35:3d:d2:3a:d7:b5:a2:7c:5c: c7:a7:c3:12:c4:c7:69:99:2d:71:81:99:ad:12:2d: e2:1e:13:fa:cd:1b:cd:81:47:5b:25:75:94:8d:75: 92:e7:89:ce:d6:a9:f6:a3:db:17:a2:92:1e:52:72: 77:d3:ce:5f:b7:cc:cd:f6:c2:17:ff:6a:0c:95:ac: 98:2a:6c:42:3a:ea:b6:b9:3a:e3:0d:b3:0f:d2:51: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:B3:F0:55:14:0E:C6:A6:98:B7:B2:04:9A:B9:31:9A:D4:1B:07 X509v3 Authority Key Identifier: keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:e4:26:e1:81:3e:44:c9:1f:0c:11:81:25:f8:4a:ac:3d:c4: 8a:83:0b:7e:1f:ab:7a:41:ec:cd:75:ca:46:8b:68:25:db:d6: 37:1c:a4:16:76:88:af:7e:69:5a:a5:85:6e:70:6b:a6:26:5f: 3c:42:ee:ec:31:c4:f1:12:81:81:78:82:e7:6a:3b:60:4c:2d: 1c:20:57:28:33:e7:9b:e9:5b:9c:01:b6:51:6f:30:db:02:a2: 54:78:2c:ae:7c:02:06:6f:ec:a0:12:58:87:da:c1:72:cc:51: 34:e7:cf:cf:2f:5b:6e:4d:f2:06:69:59:7a:13:01:e6:ff:48: 0f:39:25:b3:0f:d7:d6:a6:3a:cf:05:d2:bf:23:e8:33:48:a0: 77:f3:b2:c9:b0:e1:36:11:0c:1e:e0:5b:16:56:07:28:45:63: 7b:e8:70:3a:cf:c6:f0:61:8f:63:be:06:13:15:d0:32:9b:f3: 32:36:9a:e1:f1:db:97:31:7b:9b:a4:58:2b:ab:7f:25:bc:00: d8:20:0f:d4:c5:97:d0:af:85:6d:09:e8:e9:ea:06:8e:9e:95: 28:3d:05:5e:fb:1e:b5:c1:6c:51:f3:a1:fd:47:77:2b:35:60: fc:92:00:aa:ed:b2:17:32:ac:a9:22:a6:ac:da:93:2b:05:cc: b0:b6:68:a1 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUCYdDUSKYmNJnNLWi3GebpJdi9+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QzlBRjJFNTlFQUEzMERCMTNFNTA5NjlCRDg2NkI2 NzNEQUI2ODAeFw0yNjA5MjExNzAxNDBaFw0yNjA5MjIxNzExNDBaMDMxMTAvBgNV BAMTKEVDRDlCM0YwNTUxNDBFQzZBNjk4QjdCMjA0OUFCOTMxOUFENDFCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLPu/0JQjUArGybrZCTi3Cngv tps5x8uAIwvHzD3EYdQcwu8Vo9MjWWtNrMMWMwbOYB0Z9u9ucMArtep+tugJeu8k jc7dtT3WqPO68O5fzL8J9s+7EEZ6eCdhnbcl0GQe4G0IAvdxlj9qmkA+rkWnvo+6 ILK6VvjEpnSmU13uxsapcMV30HBgr1cJveUsMLq8jEITfvFbgR8gh1yMKlxZWn83 fhoEGKnMFzU90jrXtaJ8XMenwxLEx2mZLXGBma0SLeIeE/rNG82BR1sldZSNdZLn ic7Wqfaj2xeikh5ScnfTzl+3zM32whf/agyVrJgqbEI66ra5OuMNsw/SUShJAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU7Nmz8FUUDsammLeyBJq5MZrUGwcwHwYDVR0j BBgwFoAUIIya8uWeqjDbE+UJab2Ga2c9q2gwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0lHQUJZ VEUvMC8yMDhDOUFGMkU1OUVBQTMwREIxM0U1MDk2OUJEODY2QjY3M0RBQjY4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzIwOEM5QUYyRTU5RUFBMzBEQjEzRTUwOTY5 QkQ4NjZCNjczREFCNjguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HSUdBQllURS8wLzIwOEM5QUYy RTU5RUFBMzBEQjEzRTUwOTY5QkQ4NjZCNjczREFCNjgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDS5Cbh gT5EyR8MEYEl+EqsPcSKgwt+H6t6QezNdcpGi2gl29Y3HKQWdoivfmlapYVucGum Jl88Qu7sMcTxEoGBeILnajtgTC0cIFcoM+eb6VucAbZRbzDbAqJUeCyufAIGb+yg EliH2sFyzFE058/PL1tuTfIGaVl6EwHm/0gPOSWzD9fWpjrPBdK/I+gzSKB387LJ sOE2EQwe4FsWVgcoRWN76HA6z8bwYY9jvgYTFdAym/MyNprh8duXMXubpFgrq38l vADYIA/UxZfQr4VtCejp6gaOnpUoPQVe+x61wWxR86H9R3crNWD8kgCq7bIXMqyp Iqas2pMrBcywtmih -----END CERTIFICATE-----Generated at Tue Sep 22 12:17:01 2026 by rpki-client