$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json) Hash identifier: zcyq8HGFYN+ybCHr6NJO+fnU3GMKoQt9OVMjHUVVuFc= Subject key identifier: 03:55:9F:F4:93:C8:04:EF:DA:9F:65:7A:FF:B0:D9:2E:F6:38:AE:86 Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 1449B52F555924AF271C0398F57ABCF352456207 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft Manifest number: BF Signing time: Sun 20 Sep 2026 13:09:33 +0000 Manifest this update: Sun 20 Sep 2026 13:04:33 +0000 Manifest next update: Mon 21 Sep 2026 16:04:33 +0000 Files and hashes: 1: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=) 2: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=) 3: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=) 4: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=) 5: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=) 6: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=) 7: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=) 8: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=) 9: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: cObmiXMp2iRIiA9Bks05mtgSbOqxCdWYCgRpeJCtP6s=) 10: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=) 11: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=) 12: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=) 13: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=) 14: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=) 15: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=) 16: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=) 17: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:49:b5:2f:55:59:24:af:27:1c:03:98:f5:7a:bc:f3:52:45:62:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: Sep 20 13:04:33 2026 GMT Not After : Sep 21 16:04:33 2026 GMT Subject: CN=03559FF493C804EFDA9F657AFFB0D92EF638AE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:5e:79:40:33:26:81:1a:42:a0:e7:62:3e: 23:6c:da:1c:47:b2:54:78:1b:f6:20:88:6e:97:ba: 22:01:7f:51:a5:af:0c:3e:a9:a7:75:0c:df:0c:2f: 83:b6:e3:29:40:d5:c7:24:bb:d4:39:20:ee:70:c6: b6:03:99:bc:82:84:9b:4f:27:2c:6e:5c:da:fe:6a: cf:b9:7c:9f:cd:7c:6f:68:3b:62:22:17:31:bf:3f: ee:69:f1:75:be:42:46:ac:8f:22:6a:c9:e8:26:8b: d9:53:96:b2:e9:cd:fe:04:53:ce:55:e9:f2:96:c0: ad:a8:3c:40:b2:cf:ae:ca:a7:6e:03:be:29:2c:65: 5c:88:e6:65:1d:3f:2f:e0:50:57:d0:9c:53:4e:a3: e6:45:71:b9:67:d6:60:db:35:88:4f:70:6b:c2:0c: e5:e6:c5:f6:0c:95:7a:4a:ca:50:7e:fc:45:87:84: ad:aa:2d:3e:50:5b:34:b0:bf:8c:5e:26:f0:39:3a: e4:16:68:9d:e1:0c:15:f0:b5:da:20:a9:c3:f7:ba: d2:c4:ca:30:d3:49:c1:dd:7b:cb:ed:4b:6e:30:82: 01:ef:84:80:c4:7f:a0:d2:9c:00:50:4d:36:41:60: ee:33:01:2e:9d:0f:0a:68:ff:6b:99:75:28:dd:8d: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:9F:F4:93:C8:04:EF:DA:9F:65:7A:FF:B0:D9:2E:F6:38:AE:86 X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0f:4a:ea:6a:55:86:a4:4e:da:50:8f:38:5f:8a:fb:bd:be: f9:f2:32:53:42:7c:0f:8b:f3:76:34:d4:84:c0:ea:58:7d:1d: a0:0a:3e:08:90:96:34:76:b0:18:fd:b3:a2:d3:3a:2c:2d:cc: d5:d6:ab:d1:e8:38:76:5b:37:01:d4:0f:07:6c:e6:a1:83:6b: d2:d9:86:f9:a6:8f:9d:f5:d5:ba:c2:d1:7b:cc:83:ad:a3:38: 14:ed:d5:3a:34:ca:f5:0c:b6:39:bc:d6:59:8b:f7:6b:c2:86: 1d:8b:d7:bb:c0:c6:7d:5a:9f:0d:d7:e7:8a:a0:bd:94:15:a5: d3:e3:38:0d:12:56:3a:39:3a:cd:01:41:13:40:53:fb:c3:d1: ad:59:3c:92:29:91:be:aa:37:fc:65:ea:a0:0c:54:1f:87:32: fa:71:1f:01:61:e7:38:a6:1e:b3:75:81:6c:a2:97:bc:e3:04: a1:3a:04:fd:99:b8:2a:81:49:57:8a:fb:d1:7b:f1:39:7d:d4: 46:4d:95:5a:67:89:9f:5b:41:c5:d2:9f:d7:01:69:9f:1f:c4: d0:0b:6c:9f:98:40:d8:bb:30:01:2a:6e:d1:9e:93:e2:11:dd: e9:96:18:f6:5a:53:1f:f4:ba:d5:f5:d4:c9:9d:7b:6b:cd:06: 27:95:cc:04 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUFEm1L1VZJK8nHAOY9Xq881JFYgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA5MjAxMzA0MzNaFw0yNjA5MjExNjA0MzNaMDMxMTAvBgNV BAMTKDAzNTU5RkY0OTNDODA0RUZEQTlGNjU3QUZGQjBEOTJFRjYzOEFFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoF55QDMmgRpCoOdiPiNs2hxH slR4G/YgiG6XuiIBf1Glrww+qad1DN8ML4O24ylA1ccku9Q5IO5wxrYDmbyChJtP JyxuXNr+as+5fJ/NfG9oO2IiFzG/P+5p8XW+QkasjyJqyegmi9lTlrLpzf4EU85V 6fKWwK2oPECyz67Kp24DviksZVyI5mUdPy/gUFfQnFNOo+ZFcbln1mDbNYhPcGvC DOXmxfYMlXpKylB+/EWHhK2qLT5QWzSwv4xeJvA5OuQWaJ3hDBXwtdogqcP3utLE yjDTScHde8vtS24wggHvhIDEf6DSnABQTTZBYO4zAS6dDwpo/2uZdSjdjVqfAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUA1Wf9JPIBO/an2V6/7DZLvY4roYwHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvQzAzNEJEOUM3MjM1REMyRDJD QzFGRDdFMjFENDNERDA2QUZEQzM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFsPSupqVYakTtpQjzhf ivu9vvnyMlNCfA+L83Y01ITA6lh9HaAKPgiQljR2sBj9s6LTOiwtzNXWq9HoOHZb NwHUDwds5qGDa9LZhvmmj5311brC0XvMg62jOBTt1To0yvUMtjm81lmL92vChh2L 17vAxn1anw3X54qgvZQVpdPjOA0SVjo5Os0BQRNAU/vD0a1ZPJIpkb6qN/xl6qAM VB+HMvpxHwFh5zimHrN1gWyil7zjBKE6BP2ZuCqBSVeK+9F78Tl91EZNlVpniZ9b QcXSn9cBaZ8fxNALbJ+YQNi7MAEqbtGek+IR3emWGPZaUx/0utX11Mmde2vNBieV zAQ= -----END CERTIFICATE-----Generated at Mon Sep 21 03:17:25 2026 by rpki-client