$ rpki-client -vvf rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft File: D7FDD2309EFAC257359F67A560160D59D372E164.mft (raw, json) Hash identifier: T8iVHYb0gFxmu5bq6qRIB5vYCKdeUsfrSxrRkBPXr4Y= Subject key identifier: 43:D1:86:D4:35:DA:F3:10:09:2D:66:D3:F4:C5:D1:C1:C5:44:21:FD Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 Certificate issuer: /CN=D7FDD2309EFAC257359F67A560160D59D372E164 Certificate serial: 57905BC70029132DCA5BD05D23E33749B245B5C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft Manifest number: 2D Signing time: Fri 12 Jun 2026 16:02:14 +0000 Manifest this update: Fri 12 Jun 2026 15:57:14 +0000 Manifest next update: Sat 13 Jun 2026 17:17:14 +0000 Files and hashes: 1: 3130332e3233362e3232362e302f32332d3234203d3e203138303431.roa (hash: AzoWjoqKzfT2i2xH8uvnREwwRYXtqWtGT2FrkUty/Fw=) 2: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (hash: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two=) 3: D7FDD2309EFAC257359F67A560160D59D372E164.crl (hash: tPwcBGYW8i3QeaLl9Unyj8URZwoxxOkJLaFaUhMEUrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 17:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:90:5b:c7:00:29:13:2d:ca:5b:d0:5d:23:e3:37:49:b2:45:b5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164 Validity Not Before: Jun 12 15:57:14 2026 GMT Not After : Jun 13 17:17:14 2026 GMT Subject: CN=43D186D435DAF310092D66D3F4C5D1C1C54421FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:81:db:2e:3c:5d:9a:33:c9:d9:a3:ea:bc: 8a:35:7c:28:a4:cd:78:c6:e7:e6:17:16:ec:c8:7f: 63:bd:6f:d6:0e:c7:15:c4:6e:36:21:a8:05:68:7f: 0d:60:b2:76:63:28:70:c8:09:e7:93:49:8c:1c:69: 80:0a:86:e3:bf:15:76:ff:d6:5e:24:2c:da:87:82: b2:2e:fc:9d:3e:88:e3:bf:8b:0d:f6:dd:f0:d9:8b: 1c:04:d1:46:f4:a3:94:f0:02:cc:47:a3:5b:ca:9a: 76:19:6e:5f:c7:5c:04:e0:84:a5:82:ab:a6:43:5a: 71:1a:ad:09:14:b3:5e:fb:99:9e:7a:54:08:f7:38: 63:cd:30:eb:fe:f6:4c:4a:79:56:e4:04:bb:72:e3: 6f:cb:3c:11:1a:4c:fd:bc:54:ab:0c:be:d7:40:33: f9:e9:93:e7:50:ad:66:7d:ba:7b:f0:73:eb:04:12: b5:40:de:ec:5b:bb:f2:fd:82:98:cd:d1:3c:0a:cc: 9c:0b:53:c4:ae:a3:85:6e:9f:9b:ea:ba:20:a7:d5: 07:09:a4:bf:7c:26:17:e8:00:a7:b1:ea:33:c5:d0: c1:d0:c6:43:8d:b6:21:de:69:a4:9b:7b:49:df:20: 4b:93:e8:ed:d2:4e:46:9a:11:de:25:1c:dd:07:72: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:86:D4:35:DA:F3:10:09:2D:66:D3:F4:C5:D1:C1:C5:44:21:FD X509v3 Authority Key Identifier: keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ee:0f:61:15:4d:5c:51:70:1e:a6:e8:8b:74:e6:cb:0e:d7: b1:e8:75:67:d5:ce:95:20:89:c0:2e:28:e6:30:84:3e:0d:62: c6:8f:d9:ee:ab:8b:85:73:6e:4a:a4:47:63:6e:6f:ea:a8:53: 3d:b6:99:84:c3:67:3a:cf:b0:d6:9f:5c:d5:99:87:68:da:9f: a0:ed:25:60:5a:04:a2:7c:8e:aa:2b:18:c9:4b:67:c1:21:07: 80:90:e0:f1:a5:b3:b8:07:00:f3:ce:1f:16:11:5c:65:11:58: 15:9e:3c:65:43:3b:0f:51:8e:f8:35:74:39:72:b6:8d:8b:34: 6e:3f:51:a6:a5:61:5e:c7:fd:2c:e5:ba:6e:2f:55:60:1c:ae: 98:37:0b:40:c1:cf:54:35:97:90:d9:d2:7a:f2:1c:8e:44:17: a0:d4:61:13:df:9c:ce:a1:4d:f9:2a:12:83:a4:c2:9d:dc:a2: f4:de:95:fd:92:fa:a3:5a:e0:e7:ce:c4:9e:45:3f:6f:77:78: 05:d4:5d:c4:86:29:f6:ac:e7:fb:ad:ec:45:2c:e4:75:c5:8a: 96:63:79:1f:93:13:23:d8:39:07:62:9c:c3:59:4c:fe:08:7f: 90:d0:1d:5c:c0:c0:27:09:38:09:de:c6:f4:8c:f6:d1:ee:52: 1f:a6:e9:2f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUV5BbxwApEy3KW9BdI+M3SbJFtccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlE MzcyRTE2NDAeFw0yNjA2MTIxNTU3MTRaFw0yNjA2MTMxNzE3MTRaMDMxMTAvBgNV BAMTKDQzRDE4NkQ0MzVEQUYzMTAwOTJENjZEM0Y0QzVEMUMxQzU0NDIxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2oHbLjxdmjPJ2aPqvIo1fCik zXjG5+YXFuzIf2O9b9YOxxXEbjYhqAVofw1gsnZjKHDICeeTSYwcaYAKhuO/FXb/ 1l4kLNqHgrIu/J0+iOO/iw323fDZixwE0Ub0o5TwAsxHo1vKmnYZbl/HXATghKWC q6ZDWnEarQkUs177mZ56VAj3OGPNMOv+9kxKeVbkBLty42/LPBEaTP28VKsMvtdA M/npk+dQrWZ9unvwc+sEErVA3uxbu/L9gpjN0TwKzJwLU8Suo4Vun5vquiCn1QcJ pL98JhfoAKex6jPF0MHQxkONtiHeaaSbe0nfIEuT6O3STkaaEd4lHN0HcsoNAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUQ9GG1DXa8xAJLWbT9MXRwcVEIf0wHwYDVR0j BBgwFoAU1/3SMJ76wlc1n2elYBYNWdNy4WQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAv RDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9EN0ZERDIzMDlFRkFDMjU3MzU5RjY3QTU2MDE2MEQ1 OUQzNzJFMTY0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAvRDdGREQyMzA5RUZBQzI1NzM1 OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKPuD2EVTVxRcB6m6It0 5ssO17HodWfVzpUgicAuKOYwhD4NYsaP2e6ri4VzbkqkR2Nub+qoUz22mYTDZzrP sNafXNWZh2jan6DtJWBaBKJ8jqorGMlLZ8EhB4CQ4PGls7gHAPPOHxYRXGURWBWe PGVDOw9Rjvg1dDlyto2LNG4/UaalYV7H/Szlum4vVWAcrpg3C0DBz1Q1l5DZ0nry HI5EF6DUYRPfnM6hTfkqEoOkwp3covTelf2S+qNa4OfOxJ5FP293eAXUXcSGKfas 5/ut7EUs5HXFipZjeR+TEyPYOQdinMNZTP4If5DQHVzAwCcJOAnexvSM9tHuUh+m 6S8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:05:13 2026 by rpki-client