$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json) Hash identifier: oHZPCOQvddBuhgkraG9q0KB0jAUmnq/PFCasR5PobLM= Subject key identifier: 67:0C:20:2E:25:70:2C:73:16:A4:E2:E3:52:7F:71:2D:FD:E9:8B:5A Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Certificate serial: 31B509913E1946D140BB6A52FF655247536772D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft Manifest number: F5 Signing time: Mon 09 Nov 2026 19:54:27 +0000 Manifest this update: Mon 09 Nov 2026 19:49:27 +0000 Manifest next update: Tue 10 Nov 2026 20:59:27 +0000 Files and hashes: 1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: lxrXhRgaQqc4gECwXj239SLUrTF3LqDnV2nPSAloDU8=) 2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 15:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b5:09:91:3e:19:46:d1:40:bb:6a:52:ff:65:52:47:53:67:72:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Validity Not Before: Nov 9 19:49:27 2026 GMT Not After : Nov 10 20:59:27 2026 GMT Subject: CN=670C202E25702C7316A4E2E3527F712DFDE98B5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:cf:23:ff:f3:4b:17:72:1e:31:b6:d9:eb: 86:5f:a2:62:68:df:94:86:64:63:b2:6a:6b:e4:70: f6:c7:b2:bc:8d:39:96:d6:1f:e7:10:66:09:6a:c7: 83:a5:96:f2:6f:c5:02:fb:cd:fb:9f:ea:ae:97:64: 28:d7:bd:4f:21:81:f5:66:7e:e3:ab:18:77:64:ed: ab:06:c7:c9:ab:f0:0c:9a:1e:df:b0:f4:e0:f4:fc: 9e:01:b9:4d:aa:ef:8d:fc:47:36:fd:5c:55:d0:75: a5:52:97:61:64:b8:38:e9:78:a2:2f:df:df:69:03: 82:df:68:27:63:2d:49:f5:b7:40:e2:4f:34:c7:d9: 70:56:f4:ca:f0:e5:54:c7:fa:eb:e6:f5:e9:4a:f2: 92:6f:f8:58:15:90:e9:7f:65:18:7e:2d:10:c8:f7: 06:8c:0f:6e:57:cb:68:2b:0f:f2:af:1f:9c:ac:55: 53:7a:27:ff:15:cc:db:cd:ad:bc:9c:d5:3a:8d:88: c8:0c:14:29:0f:5c:9c:0e:31:75:46:a4:b4:b4:f0: 37:c9:33:a0:45:0a:15:1d:7f:c9:b4:d2:93:d2:38: 14:78:6d:1b:93:ab:ad:14:4b:05:1f:ab:fe:1c:94: d8:44:0b:c7:98:e2:40:24:df:a4:3a:ce:a3:84:31: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:20:2E:25:70:2C:73:16:A4:E2:E3:52:7F:71:2D:FD:E9:8B:5A X509v3 Authority Key Identifier: keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cf:55:9e:15:06:ff:38:fe:69:d8:f2:ed:b6:f7:9b:82:f9: 80:ab:9f:e2:db:c6:73:6c:90:c4:cd:b0:f6:90:83:84:c5:4b: 3b:2c:8c:6d:a3:ac:70:eb:08:ba:e0:c6:67:36:c9:81:96:5b: d0:e8:a0:32:3c:b7:f8:6c:6d:2f:b8:99:a6:ee:ed:39:6a:c3: d0:37:5a:78:55:a3:70:a7:61:d4:06:c3:e7:07:48:00:15:91: 43:cf:be:b1:9b:07:15:e3:3e:5f:f9:68:f1:e9:8d:95:f3:ca: 9d:ed:6b:d5:e5:c7:69:0f:be:a3:e8:79:ce:12:4d:39:0e:86: 2c:15:72:fb:00:55:90:37:1c:6e:f2:d9:06:e8:e6:19:5e:ab: 55:f8:89:6d:da:c9:44:e3:04:c1:31:0c:ac:1c:e2:1b:9e:1a: 21:66:6f:90:2a:f7:64:3d:71:8b:95:0d:f7:8f:55:d2:55:b2: ea:1c:83:cb:d0:6a:d3:53:60:18:55:ea:3c:f4:0f:73:fd:0f: 4d:d4:31:cd:f4:72:64:d4:ab:1a:38:b3:6b:87:66:d8:82:05: 28:6a:f1:2b:49:19:71:b0:19:15:3a:ad:8d:f8:55:c1:4f:3a: bd:8c:be:d6:fa:18:fe:44:c6:76:47:57:bd:5d:bf:ec:5a:a6: 92:04:c7:10 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMbUJkT4ZRtFAu2pS/2VSR1NnctMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYz RkYyREEwQzAeFw0yNjExMDkxOTQ5MjdaFw0yNjExMTAyMDU5MjdaMDMxMTAvBgNV BAMTKDY3MEMyMDJFMjU3MDJDNzMxNkE0RTJFMzUyN0Y3MTJERkRFOThCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNc8j//NLF3IeMbbZ64ZfomJo 35SGZGOyamvkcPbHsryNOZbWH+cQZglqx4OllvJvxQL7zfuf6q6XZCjXvU8hgfVm fuOrGHdk7asGx8mr8AyaHt+w9OD0/J4BuU2q7438Rzb9XFXQdaVSl2FkuDjpeKIv 399pA4LfaCdjLUn1t0DiTzTH2XBW9Mrw5VTH+uvm9elK8pJv+FgVkOl/ZRh+LRDI 9waMD25Xy2grD/KvH5ysVVN6J/8VzNvNrbyc1TqNiMgMFCkPXJwOMXVGpLS08DfJ M6BFChUdf8m00pPSOBR4bRuTq60USwUfq/4clNhEC8eY4kAk36Q6zqOEMbQbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUZwwgLiVwLHMWpOLjUn9xLf3pi1owHwYDVR0j BBgwFoAUWdmOjLur3N97Ii2lAPXN5j/y2gwwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19I Q0VCLzEvNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC81OUQ5OEU4Q0JCQUJEQ0RGN0IyMjJEQTUw MEY1Q0RFNjNGRjJEQTBDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19IQ0VCLzEvNTlEOThF OENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAALP VZ4VBv84/mnY8u2295uC+YCrn+LbxnNskMTNsPaQg4TFSzssjG2jrHDrCLrgxmc2 yYGWW9DooDI8t/hsbS+4mabu7Tlqw9A3WnhVo3CnYdQGw+cHSAAVkUPPvrGbBxXj Pl/5aPHpjZXzyp3ta9Xlx2kPvqPoec4STTkOhiwVcvsAVZA3HG7y2Qbo5hleq1X4 iW3ayUTjBMExDKwc4hueGiFmb5Aq92Q9cYuVDfePVdJVsuocg8vQatNTYBhV6jz0 D3P9D03UMc30cmTUqxo4s2uHZtiCBShq8StJGXGwGRU6rY34VcFPOr2Mvtb6GP5E xnZHV71dv+xappIExxA= -----END CERTIFICATE-----Generated at Tue Nov 10 03:15:36 2026 by rpki-client