$ rpki-client -vvvf rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft File: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft (raw, json) Hash identifier: SjWFVL/zqzat54OO6baZy30MMHDelaee+lJO2C6uozY= Subject key identifier: AB:7F:D6:B2:82:62:41:A8:17:19:A0:1B:7A:47:49:B0:55:06:94:3A Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D Certificate issuer: /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Certificate serial: 261DA8A008B938525943CE275DF8B18ABFA0D0F8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft Manifest number: BC Signing time: Fri 25 Sep 2026 21:14:10 +0000 Manifest this update: Fri 25 Sep 2026 21:09:10 +0000 Manifest next update: Sat 26 Sep 2026 23:25:10 +0000 Files and hashes: 1: 36312e36352e3230382e302f32302d3234203d3e203138303436.roa (hash: vRIqijp979dxoSTc2NKisYL6rD337qk+R1Y6aC4riSQ=) 2: 36312e36352e3139322e302f32302d3234203d3e203138343133.roa (hash: 2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=) 3: 9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl (hash: z3QgoJjCnIGGyYjXUxw049qlO6uJZfYOwZzfgn6rUf8=) 4: 36312e36372e302e302f32302d3234203d3e203138343133.roa (hash: 4OAaz01ws8LVf2JI1ICMosiWzPxRsaL73hiseT4WS1E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1d:a8:a0:08:b9:38:52:59:43:ce:27:5d:f8:b1:8a:bf:a0:d0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D Validity Not Before: Sep 25 21:09:10 2026 GMT Not After : Sep 26 23:25:10 2026 GMT Subject: CN=AB7FD6B2826241A81719A01B7A4749B05506943A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:2e:86:06:3e:09:24:a5:fc:f2:85:86:50: 4c:57:2b:15:50:da:fa:21:87:fe:24:67:e3:68:d3: 9f:32:fc:af:d8:a3:aa:b5:3f:48:7f:41:72:21:6a: 11:51:7f:44:db:dd:da:bf:70:8b:d3:9a:61:a3:04: 06:79:40:d9:2b:30:3c:5d:71:3e:e3:fb:19:c6:99: b9:98:f8:ad:48:c4:cb:d2:89:5f:e4:a5:b4:6c:a7: 57:66:fa:bb:a4:73:30:a5:8a:0a:06:cb:36:1e:b4: 0b:12:a7:f2:a6:8d:42:81:72:61:01:f7:ee:57:9b: bc:cf:a7:2d:1e:ba:d2:50:13:69:2b:8b:b6:12:18: 39:70:50:ea:b7:01:f1:29:ce:31:14:e4:a3:47:4d: 9e:cd:3b:9f:98:38:35:59:d0:af:b5:50:4a:da:4f: 30:3b:51:fc:cb:33:cf:97:82:75:59:d4:7e:97:79: b7:8f:a8:2d:54:7c:82:7b:91:27:91:30:f5:e5:ee: 81:cf:f2:c0:b0:70:e3:e9:fb:94:2c:90:19:a4:7c: 0c:ce:66:2e:10:cd:18:74:63:59:e6:d6:4b:74:a3: c3:ca:3c:db:54:e6:cb:94:21:70:3e:83:b9:df:de: 3c:0a:fa:0b:35:c9:35:a1:45:00:74:4a:57:5d:38: c9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7F:D6:B2:82:62:41:A8:17:19:A0:1B:7A:47:49:B0:55:06:94:3A X509v3 Authority Key Identifier: keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:83:5a:2c:df:a6:bd:57:36:fe:f4:91:e7:f2:41:c1:2a:8f: b0:8f:6b:5f:39:14:dd:ba:85:c4:71:44:38:49:0c:41:af:47: d0:fa:65:b1:88:b7:8a:35:be:45:d8:f5:78:ea:02:ae:bf:8a: df:9e:a6:52:a8:06:11:a8:09:25:18:18:d3:2c:05:7f:06:8e: 52:c4:5a:3e:9f:15:d8:2d:06:c4:93:a1:b7:7e:c2:cd:2b:21: cf:ce:d0:0a:34:60:75:bc:70:15:ac:83:bf:6d:d1:9f:b5:bb: f2:4a:4d:ac:d4:f5:c9:0a:3f:b0:dc:a8:ee:e6:82:34:83:06: 57:20:fa:b7:ce:94:e9:c4:90:4f:94:64:d0:21:ea:b8:07:b7: 3f:30:f1:82:d0:8b:84:1d:3e:97:ed:47:bb:c0:b4:45:2f:e2: 36:8e:b3:cf:91:ab:9d:fb:c5:01:4b:69:de:b1:07:c6:65:1e: bc:1c:4f:ee:bd:26:ae:d5:a8:ee:46:ec:8e:21:b6:93:90:d2: 23:50:f7:6e:8d:e8:22:a0:e3:ac:94:b3:cd:83:2e:48:1d:20: f9:63:f5:2d:d9:be:ce:7d:69:52:39:c4:41:fe:64:1f:e9:fd: bf:0c:df:75:6d:9c:de:16:ab:09:39:5d:c2:80:1c:32:7e:5c: 25:5f:6a:0c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJh2ooAi5OFJZQ84nXfixir+g0PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlEMThE RTdEMTE4RDAeFw0yNjA5MjUyMTA5MTBaFw0yNjA5MjYyMzI1MTBaMDMxMTAvBgNV BAMTKEFCN0ZENkIyODI2MjQxQTgxNzE5QTAxQjdBNDc0OUIwNTUwNjk0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZni6GBj4JJKX88oWGUExXKxVQ 2vohh/4kZ+No058y/K/Yo6q1P0h/QXIhahFRf0Tb3dq/cIvTmmGjBAZ5QNkrMDxd cT7j+xnGmbmY+K1IxMvSiV/kpbRsp1dm+rukczCligoGyzYetAsSp/KmjUKBcmEB 9+5Xm7zPpy0eutJQE2kri7YSGDlwUOq3AfEpzjEU5KNHTZ7NO5+YODVZ0K+1UEra TzA7UfzLM8+XgnVZ1H6XebePqC1UfIJ7kSeRMPXl7oHP8sCwcOPp+5QskBmkfAzO Zi4QzRh0Y1nm1kt0o8PKPNtU5suUIXA+g7nf3jwK+gs1yTWhRQB0SlddOMnXAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUq3/WsoJiQagXGaAbekdJsFUGlDowHwYDVR0j BBgwFoAUn8mbH0gSzKLo0dVqBp+dGN59EY0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1RCQy8w LzlGQzk5QjFGNDgxMkNDQTJFOEQxRDU2QTA2OUY5RDE4REU3RDExOEQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUZDOTlCMUY0ODEyQ0NBMkU4RDFENTZBMDY5RjlE MThERTdEMTE4RC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dUQkMvMC85RkM5OUIxRjQ4MTJDQ0Ey RThEMUQ1NkEwNjlGOUQxOERFN0QxMThELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4NaLN+mvVc2/vSR 5/JBwSqPsI9rXzkU3bqFxHFEOEkMQa9H0PplsYi3ijW+Rdj1eOoCrr+K356mUqgG EagJJRgY0ywFfwaOUsRaPp8V2C0GxJOht37CzSshz87QCjRgdbxwFayDv23Rn7W7 8kpNrNT1yQo/sNyo7uaCNIMGVyD6t86U6cSQT5Rk0CHquAe3PzDxgtCLhB0+l+1H u8C0RS/iNo6zz5GrnfvFAUtp3rEHxmUevBxP7r0mrtWo7kbsjiG2k5DSI1D3bo3o IqDjrJSzzYMuSB0g+WP1Ldm+zn1pUjnEQf5kH+n9vwzfdW2c3harCTldwoAcMn5c JV9qDA== -----END CERTIFICATE-----Generated at Sat Sep 26 03:33:16 2026 by rpki-client