$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json) Hash identifier: ziiJRf/N0hW+ToI7QGwIjEDZyQqFzfc1MenZbSaP3sk= Subject key identifier: 29:4F:8B:23:95:51:37:E6:BF:B0:B9:A3:D1:B9:A6:0C:B3:E6:D4:77 Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C Certificate serial: 0283B2A8888689C483C0A7D0DDE5BE20B02846BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft Manifest number: B2 Signing time: Sun 20 Sep 2026 09:24:10 +0000 Manifest this update: Sun 20 Sep 2026 09:19:10 +0000 Manifest next update: Mon 21 Sep 2026 12:26:10 +0000 Files and hashes: 1: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=) 2: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: LSTpdHum/HBOph/yFoIb41W0L4Da+dNXhsqm3mc/ac0=) 3: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=) 4: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=) 5: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:83:b2:a8:88:86:89:c4:83:c0:a7:d0:dd:e5:be:20:b0:28:46:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C Validity Not Before: Sep 20 09:19:10 2026 GMT Not After : Sep 21 12:26:10 2026 GMT Subject: CN=294F8B23955137E6BFB0B9A3D1B9A60CB3E6D477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:63:67:72:9e:6f:6f:98:ea:02:35:dc:0c: f4:cf:41:66:1c:77:a0:40:63:d6:f7:bb:99:73:76: 65:69:c7:17:0d:60:7e:de:b8:b3:d0:6d:57:7e:b0: 60:b8:34:fc:ad:98:aa:da:8e:b1:40:7b:ec:d7:1a: f5:3b:d0:da:10:90:7b:bf:5e:eb:8d:ae:c5:19:9d: d2:a8:bf:1e:7f:6c:d4:ba:3c:92:40:a6:d1:05:18: 87:9a:25:12:be:6a:9f:c6:0e:7f:14:3c:20:99:64: 0e:bd:b3:99:50:06:af:db:e0:ae:b9:45:0e:cc:f8: 29:dc:f9:7c:93:83:96:00:bc:c0:5a:45:1c:1c:a0: c6:3e:95:e7:ed:60:c5:17:71:46:a8:d9:d1:1b:97: ef:ae:cd:1d:31:27:e7:b9:d6:2e:61:3c:7b:6e:07: 72:61:a8:07:93:6e:8a:1e:01:23:9a:ab:53:39:09: 37:31:5f:5f:1b:f4:c5:fb:a1:72:c7:97:1d:e0:f3: b0:70:a3:a2:d9:38:c0:f5:bd:62:9f:d6:02:bd:f5: 74:bb:c4:64:c8:34:e2:25:e0:60:9e:a9:84:af:47: 6e:e6:c3:9b:c1:f7:39:1e:12:78:2e:b5:9d:f0:5f: 54:e5:ba:64:dc:32:10:e9:91:8e:37:d3:b0:4a:6c: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4F:8B:23:95:51:37:E6:BF:B0:B9:A3:D1:B9:A6:0C:B3:E6:D4:77 X509v3 Authority Key Identifier: keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:75:f2:b4:28:e5:64:0a:03:25:aa:49:cd:49:97:69:a7:ec: 51:4d:fa:75:ef:5e:2c:85:4e:4e:64:69:94:b7:4f:ec:da:1d: 47:99:1b:00:ba:de:75:01:00:81:1a:64:dc:e1:21:de:fb:06: 42:17:d6:0c:87:34:72:e4:f0:8e:0d:a1:02:26:e7:ec:11:75: c4:62:13:52:43:49:34:4c:e1:d2:d4:3c:f2:a7:8a:4a:3e:b1: 32:b8:96:b5:6d:24:4e:20:6d:ca:c3:8d:01:86:d0:a6:c0:b9: 81:c4:f4:61:56:c2:ba:72:84:3a:f1:7c:d2:cf:79:be:18:3d: 53:22:69:49:a3:cd:33:d7:12:36:aa:88:54:4c:b6:ce:31:21: 51:23:d0:9f:4f:88:68:26:f2:b3:84:4b:9f:bc:d1:be:86:16: ec:e2:b9:41:0f:13:cf:65:db:17:05:f1:2f:ed:0f:60:42:d1: 98:fc:ee:da:7e:19:c8:af:8c:39:7e:74:e3:68:5f:3d:28:28: 81:15:a5:c5:2a:df:d3:e1:12:59:ca:99:c8:67:d0:c2:23:21: 97:b8:2a:48:1c:72:d0:21:ae:4f:aa:46:cf:8a:f7:1f:7c:bb: 6f:c8:13:dc:2f:5b:bf:12:78:ff:c5:8c:70:74:35:b8:38:bb: d4:6b:6f:02 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUAoOyqIiGicSDwKfQ3eW+ILAoRr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJC OThGRTE0QzAeFw0yNjA5MjAwOTE5MTBaFw0yNjA5MjExMjI2MTBaMDMxMTAvBgNV BAMTKDI5NEY4QjIzOTU1MTM3RTZCRkIwQjlBM0QxQjlBNjBDQjNFNkQ0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDWNncp5vb5jqAjXcDPTPQWYc d6BAY9b3u5lzdmVpxxcNYH7euLPQbVd+sGC4NPytmKrajrFAe+zXGvU70NoQkHu/ XuuNrsUZndKovx5/bNS6PJJAptEFGIeaJRK+ap/GDn8UPCCZZA69s5lQBq/b4K65 RQ7M+Cnc+XyTg5YAvMBaRRwcoMY+leftYMUXcUao2dEbl++uzR0xJ+e51i5hPHtu B3JhqAeTbooeASOaq1M5CTcxX18b9MX7oXLHlx3g87Bwo6LZOMD1vWKf1gK99XS7 xGTINOIl4GCeqYSvR27mw5vB9zkeEngutZ3wX1TlumTcMhDpkY4307BKbCX9AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUKU+LI5VRN+a/sLmj0bmmDLPm1HcwHwYDVR0j BBgwFoAUIzL0X4NnsHnLv1gzG2A3krmP4UwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZ LzAvMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMzMyRjQ1RjgzNjdCMDc5Q0JCRjU4MzMxQjYw Mzc5MkI5OEZFMTRDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZLzAvMjMzMkY0NUY4MzY3 QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACt18rQo5WQK AyWqSc1Jl2mn7FFN+nXvXiyFTk5kaZS3T+zaHUeZGwC63nUBAIEaZNzhId77BkIX 1gyHNHLk8I4NoQIm5+wRdcRiE1JDSTRM4dLUPPKniko+sTK4lrVtJE4gbcrDjQGG 0KbAuYHE9GFWwrpyhDrxfNLPeb4YPVMiaUmjzTPXEjaqiFRMts4xIVEj0J9PiGgm 8rOES5+80b6GFuziuUEPE89l2xcF8S/tD2BC0Zj87tp+GcivjDl+dONoXz0oKIEV pcUq39PhElnKmchn0MIjIZe4KkgcctAhrk+qRs+K9x98u2/IE9wvW78SeP/FjHB0 Nbg4u9RrbwI= -----END CERTIFICATE-----Generated at Sun Sep 20 23:48:44 2026 by rpki-client