$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft File: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json) Hash identifier: /c45ZlxpSUMhWF/SXIUsHN9H0N1OoQZ+1ypx1fZwlzs= Subject key identifier: BF:2B:0C:DB:60:81:10:7E:3A:BD:CF:CB:7D:2E:37:01:03:55:BA:4D Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12 Certificate issuer: /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12 Certificate serial: 5007A8A661BCB9AFD9422852B4B5844B22A067C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 11:52:04 +0000 Manifest this update: Mon 21 Sep 2026 11:47:04 +0000 Manifest next update: Tue 22 Sep 2026 15:38:04 +0000 Files and hashes: 1: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: 594uVrlMBs6ab907o5aa0kEtlL3b0Eu81TnEQTR1+IY=) 2: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:07:a8:a6:61:bc:b9:af:d9:42:28:52:b4:b5:84:4b:22:a0:67:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12 Validity Not Before: Sep 21 11:47:04 2026 GMT Not After : Sep 22 15:38:04 2026 GMT Subject: CN=BF2B0CDB6081107E3ABDCFCB7D2E37010355BA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:6e:be:e8:32:d2:90:2b:55:09:0b:64:59: bd:20:98:b1:04:a4:1e:e7:b8:78:8c:02:9a:90:27: 9b:d4:71:5e:ca:5f:14:2f:47:4f:e8:f8:5f:80:c4: 4b:03:6b:d1:1b:3b:d4:f3:6c:0c:3b:27:4d:27:7c: 8c:4b:03:fc:51:cb:02:2a:6b:34:24:be:cd:78:76: cb:a1:23:a2:a7:0d:93:5b:9a:c0:4d:97:24:69:a2: ea:a8:0e:aa:2a:4f:ba:1d:8e:86:5a:c3:c3:50:2f: dd:1a:5e:25:97:be:4f:5a:91:84:ad:39:5f:16:21: cc:87:b1:1e:66:bf:63:1f:5f:21:4a:3c:b1:e6:e7: f2:c5:da:21:39:f4:80:1b:0a:71:ef:f9:97:75:6e: 11:bf:9c:13:7c:c4:e6:0d:83:5c:98:8e:c7:5b:7c: 04:9b:9c:87:36:51:fa:7f:73:75:d5:be:89:98:f7: 75:65:a4:9d:0d:72:72:f8:f7:79:33:d7:ff:9e:d6: 8c:3c:ab:b9:4f:dc:40:3c:d1:6d:70:e9:68:ce:aa: 6c:d1:42:a7:20:d0:fe:7f:cb:db:4f:be:c9:25:57: 12:c6:3b:75:84:90:46:9b:52:92:cc:4e:e5:9a:b6: 1c:f5:13:89:c6:6a:07:96:79:7f:08:2c:ff:53:02: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2B:0C:DB:60:81:10:7E:3A:BD:CF:CB:7D:2E:37:01:03:55:BA:4D X509v3 Authority Key Identifier: keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6b:75:94:5b:a9:d2:23:2e:e9:77:d6:86:b5:bc:5a:87:45: 0e:c5:f0:a6:bd:cd:94:14:9c:ec:32:fc:e3:ba:1e:17:28:8e: 75:cd:15:ab:0a:76:c3:fa:23:3b:a0:2b:17:27:83:e6:f8:06: 71:ae:7a:2d:c9:65:c1:1f:b3:57:08:3f:97:c6:37:43:73:51: c1:e7:b8:3d:c2:7d:9b:b1:68:b3:5a:db:b6:af:30:3f:fc:06: ac:90:e1:8c:60:a0:6e:4e:ef:57:ef:f3:fd:06:9c:63:bb:3f: 0a:ff:8a:c4:dc:32:6a:c0:7f:db:33:e1:e1:69:76:0d:d1:fa: e5:c0:80:53:d3:35:b2:e9:c3:00:be:b6:55:cf:ef:81:4f:26: 29:f9:9b:0d:4a:c7:a3:db:57:75:eb:89:51:ad:00:6d:9e:dd: 57:43:0f:06:21:d6:58:3f:c3:95:62:f4:e8:70:b3:fe:46:97: 99:7d:8b:41:89:c4:f8:2c:dd:d2:64:e4:71:8f:2f:5b:9e:de: 41:f8:92:3d:35:a5:46:3e:77:2a:88:60:ef:ff:9b:ec:1a:6f: be:ff:6e:b5:80:ad:23:cb:57:71:61:d5:22:1b:af:8f:91:bb: aa:ff:5a:d1:54:c9:fa:b5:ab:97:d4:46:bb:86:d0:e4:a5:a2: ca:8d:29:da -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUUAeopmG8ua/ZQihStLWESyKgZ8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBCNDU4Q0UwQkU1OEUyMTc3OUQ1QUNBMDk2Q0VGQ0VC Q0VENUQxMjAeFw0yNjA5MjExMTQ3MDRaFw0yNjA5MjIxNTM4MDRaMDMxMTAvBgNV BAMTKEJGMkIwQ0RCNjA4MTEwN0UzQUJEQ0ZDQjdEMkUzNzAxMDM1NUJBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfX26+6DLSkCtVCQtkWb0gmLEE pB7nuHiMApqQJ5vUcV7KXxQvR0/o+F+AxEsDa9EbO9TzbAw7J00nfIxLA/xRywIq azQkvs14dsuhI6KnDZNbmsBNlyRpouqoDqoqT7odjoZaw8NQL90aXiWXvk9akYSt OV8WIcyHsR5mv2MfXyFKPLHm5/LF2iE59IAbCnHv+Zd1bhG/nBN8xOYNg1yYjsdb fASbnIc2Ufp/c3XVvomY93VlpJ0NcnL493kz1/+e1ow8q7lP3EA80W1w6WjOqmzR Qqcg0P5/y9tPvsklVxLGO3WEkEabUpLMTuWathz1E4nGageWeX8ILP9TAnuPAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUvysM22CBEH46vc/LfS43AQNVuk0wHwYDVR0j BBgwFoAU0LRYzgvljiF3nVrKCWzvzrztXRIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElBTkdD QUkvMC9EMEI0NThDRTBCRTU4RTIxNzc5RDVBQ0EwOTZDRUZDRUJDRUQ1RDEyLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwQjQ1OENFMEJFNThFMjE3NzlENUFDQTA5 NkNFRkNFQkNFRDVEMTIuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFOR0NBSS8wL0QwQjQ1OENF MEJFNThFMjE3NzlENUFDQTA5NkNFRkNFQkNFRDVEMTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUa3WU W6nSIy7pd9aGtbxah0UOxfCmvc2UFJzsMvzjuh4XKI51zRWrCnbD+iM7oCsXJ4Pm +AZxrnotyWXBH7NXCD+XxjdDc1HB57g9wn2bsWizWtu2rzA//AaskOGMYKBuTu9X 7/P9Bpxjuz8K/4rE3DJqwH/bM+HhaXYN0frlwIBT0zWy6cMAvrZVz++BTyYp+ZsN Ssej21d164lRrQBtnt1XQw8GIdZYP8OVYvTocLP+RpeZfYtBicT4LN3SZORxjy9b nt5B+JI9NaVGPncqiGDv/5vsGm++/261gK0jy1dxYdUiG6+Pkbuq/1rRVMn6tauX 1Ea7htDkpaLKjSna -----END CERTIFICATE-----Generated at Tue Sep 22 07:46:11 2026 by rpki-client