$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json) Hash identifier: oGNL6DmWg+EuN/8CUad24y4m9Ur2C+DxzWaPQmtgv8E= Subject key identifier: 46:71:CC:99:E6:53:A9:F1:1F:A7:C4:FC:20:7D:23:73:48:AC:03:34 Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA Certificate serial: 2B145A95083F363F2F1E4724AC85329D690A226E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft Manifest number: B1 Signing time: Sun 20 Sep 2026 01:48:13 +0000 Manifest this update: Sun 20 Sep 2026 01:43:13 +0000 Manifest next update: Mon 21 Sep 2026 04:54:13 +0000 Files and hashes: 1: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=) 2: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: RmL/+2gBb3ZONSFOlVlBfujcdIK8tQkzISzLEGxYoyE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 04:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:14:5a:95:08:3f:36:3f:2f:1e:47:24:ac:85:32:9d:69:0a:22:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA Validity Not Before: Sep 20 01:43:13 2026 GMT Not After : Sep 21 04:54:13 2026 GMT Subject: CN=4671CC99E653A9F11FA7C4FC207D237348AC0334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:4a:a1:e6:5f:bf:5d:55:6d:a5:9b:dd:03: 59:20:64:50:35:b5:70:fd:ca:8b:86:35:1b:a4:b2: 66:c7:d1:16:d8:50:34:25:c5:93:b9:81:70:9f:7d: 8e:5f:eb:2e:98:b9:d8:26:cc:15:c1:5d:61:09:a2: 13:ca:a5:49:6e:e1:94:bd:8c:74:7c:d3:f4:56:3d: a4:4b:be:3b:f9:10:23:cb:90:0c:96:f0:ba:0c:27: 03:c4:a2:9b:55:2e:b2:cc:89:e1:39:26:88:3c:53: 30:31:b3:06:22:89:e8:05:c0:8c:7b:e2:1f:84:c2: c3:aa:f6:a4:67:e3:90:94:27:24:b1:d3:f7:08:bb: a8:30:49:17:8b:9c:ea:44:cf:db:b4:a2:31:82:8e: 2e:4f:f7:04:9a:3a:98:64:63:76:62:71:58:67:35: 8c:0d:43:c5:5c:7d:c9:39:aa:8f:42:a6:be:3a:64: 5d:14:49:46:a1:12:28:fc:fd:a1:fb:07:81:1a:e8: 17:f0:cc:9f:d5:ad:15:a0:87:4b:13:98:87:d2:e1: ec:31:53:20:28:3f:8d:75:20:05:43:1b:10:0d:75: 74:fd:78:61:d0:0f:55:0c:6e:6e:81:e3:15:76:ca: 1e:3b:b8:01:6c:bf:9e:09:28:83:4b:8c:0a:19:4a: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:71:CC:99:E6:53:A9:F1:1F:A7:C4:FC:20:7D:23:73:48:AC:03:34 X509v3 Authority Key Identifier: keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b2:f0:fa:dc:50:d5:21:64:8d:7f:74:16:2d:77:c6:ae:26: 98:f7:97:2c:72:04:a8:34:93:97:44:78:98:7d:1c:68:66:57: 14:3d:82:c2:a0:ac:e8:d7:4d:82:93:f0:63:02:30:bf:bd:2c: 71:30:ea:f8:52:b5:23:cf:9a:76:24:83:ee:24:1e:73:e8:93: fd:09:74:31:4e:c7:b4:e9:44:94:50:d8:21:62:ce:a2:c7:7a: 9f:d6:df:f6:91:c0:f8:90:1c:af:8e:b7:ab:a4:72:c1:e5:a9: 76:e6:54:15:aa:7e:0c:09:f5:69:ed:52:49:58:79:1a:ed:28: e3:f9:37:d2:ed:f5:c8:92:33:c5:e3:93:78:5b:b2:fb:9b:82: 16:96:73:7f:5a:68:1a:b9:6d:06:3f:9f:7b:02:73:74:c3:02: 61:a7:25:c2:34:5b:18:08:24:12:3e:67:37:17:40:3c:56:3e: 34:00:17:35:53:9f:81:e0:1d:b5:1c:27:80:54:2c:c7:30:75: 4a:6d:fe:37:c7:c7:b6:41:c3:68:ed:8f:a3:e4:84:52:5f:04: 36:80:ae:b6:e0:0e:41:05:b6:3c:73:ea:45:23:13:c9:77:ad: 89:0a:82:dd:d2:d1:71:1b:6c:1e:c8:e8:39:98:86:c9:53:5c: d3:e1:87:6d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUKxRalQg/Nj8vHkckrIUynWkKIm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0QjQxQTEzQUJCMEQ2MUExNTRBQjMxODlDOUJGRDJE QUVENERFQTAeFw0yNjA5MjAwMTQzMTNaFw0yNjA5MjEwNDU0MTNaMDMxMTAvBgNV BAMTKDQ2NzFDQzk5RTY1M0E5RjExRkE3QzRGQzIwN0QyMzczNDhBQzAzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJEqh5l+/XVVtpZvdA1kgZFA1 tXD9youGNRuksmbH0RbYUDQlxZO5gXCffY5f6y6YudgmzBXBXWEJohPKpUlu4ZS9 jHR80/RWPaRLvjv5ECPLkAyW8LoMJwPEoptVLrLMieE5Jog8UzAxswYiiegFwIx7 4h+EwsOq9qRn45CUJySx0/cIu6gwSReLnOpEz9u0ojGCji5P9wSaOphkY3ZicVhn NYwNQ8Vcfck5qo9Cpr46ZF0USUahEij8/aH7B4Ea6BfwzJ/VrRWgh0sTmIfS4ewx UyAoP411IAVDGxANdXT9eGHQD1UMbm6B4xV2yh47uAFsv54JKINLjAoZSjLdAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQURnHMmeZTqfEfp8T8IH0jc0isAzQwHwYDVR0j BBgwFoAUA0tBoTq7DWGhVKsxicm/0trtTeowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTFVPU0kv MC8wMzRCNDFBMTNBQkIwRDYxQTE1NEFCMzE4OUM5QkZEMkRBRUQ0REVBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzAzNEI0MUExM0FCQjBENjFBMTU0QUIzMTg5QzlC RkQyREFFRDRERUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MVU9TSS8wLzAzNEI0MUExM0FCQjBE NjFBMTU0QUIzMTg5QzlCRkQyREFFRDRERUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAsvD63FDVIWSN f3QWLXfGriaY95cscgSoNJOXRHiYfRxoZlcUPYLCoKzo102Ck/BjAjC/vSxxMOr4 UrUjz5p2JIPuJB5z6JP9CXQxTse06USUUNghYs6ix3qf1t/2kcD4kByvjrerpHLB 5al25lQVqn4MCfVp7VJJWHka7Sjj+TfS7fXIkjPF45N4W7L7m4IWlnN/WmgauW0G P597AnN0wwJhpyXCNFsYCCQSPmc3F0A8Vj40ABc1U5+B4B21HCeAVCzHMHVKbf43 x8e2QcNo7Y+j5IRSXwQ2gK624A5BBbY8c+pFIxPJd62JCoLd0tFxG2weyOg5mIbJ U1zT4Ydt -----END CERTIFICATE-----Generated at Sun Sep 20 17:53:29 2026 by rpki-client