$ rpki-client -vvvf rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft File: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft (raw, json) Hash identifier: fBruEClo22e38nZi4CWMnDVRVc2pg4Lo3K0vOSO3hAo= Subject key identifier: 15:3E:FC:7C:EF:C2:67:9D:88:6F:E1:E5:FC:91:51:68:B8:23:CF:3D Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 Certificate issuer: /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Certificate serial: 5E4D1FC1F794423C64E9E6567523BA394B794A6C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 22:12:55 +0000 Manifest this update: Mon 21 Sep 2026 22:07:55 +0000 Manifest next update: Wed 23 Sep 2026 01:21:55 +0000 Files and hashes: 1: A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl (hash: 0dGazK21/PDkYOy/XWZpp3Q40jsNzQsRhHcWC1i4GBA=) 2: 3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (hash: 47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=) 3: 3130332e3136302e3232342e302f32332d3234203d3e20313331363539.roa (hash: 7S4FcOba0oK0ThFobE5ZoA1Yfm0vEJ1gjov31dZGXJY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:1f:c1:f7:94:42:3c:64:e9:e6:56:75:23:ba:39:4b:79:4a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8 Validity Not Before: Sep 21 22:07:55 2026 GMT Not After : Sep 23 01:21:55 2026 GMT Subject: CN=153EFC7CEFC2679D886FE1E5FC915168B823CF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d9:26:f7:d4:d3:91:5f:55:ca:b4:54:5b:20: 98:6b:40:7b:fe:24:b2:cc:17:2b:30:73:7d:2c:97: b3:54:15:3f:9e:50:a2:c2:d1:9b:5e:f8:35:4f:dd: 8c:1b:d3:3e:0b:2a:42:ca:32:d0:15:e6:89:6e:0e: 3b:b4:74:69:75:e2:3e:37:de:c1:d5:81:86:f2:68: 77:35:ce:14:57:3f:c3:74:3e:b5:50:d8:84:ad:d5: 44:1e:4c:d2:b3:e7:ae:35:8f:43:57:77:4b:36:cc: 41:11:75:ac:b3:6e:0c:60:a1:16:73:87:2b:01:f8: cd:e0:33:d7:e0:c9:ce:7d:6d:55:69:3a:92:c9:cd: f9:21:36:a5:f4:00:0a:1f:4c:48:7e:6c:4e:19:8e: ea:4b:8e:68:49:0f:f6:c1:7c:bc:4f:59:9a:37:e8: 82:84:25:a2:8b:b0:ac:76:34:7a:0c:c8:f7:53:d2: 80:88:95:50:b5:7d:0e:54:5b:0d:f0:39:5a:cb:a7: 57:46:69:b6:17:9e:02:a0:e4:17:e0:84:9f:d4:51: 39:c4:15:6a:f8:6b:21:ee:18:9d:c7:39:63:4c:a5: 34:74:44:cc:72:96:f8:92:6e:9c:08:11:c5:8e:3a: b7:fd:f3:a4:09:72:f1:a3:e4:43:94:83:ef:e5:98: c0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3E:FC:7C:EF:C2:67:9D:88:6F:E1:E5:FC:91:51:68:B8:23:CF:3D X509v3 Authority Key Identifier: keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7e:9f:62:44:39:b3:35:a5:b5:cd:c7:4c:dd:fa:10:3f:19: 85:15:b7:79:8d:ed:b9:5c:75:95:d4:98:d5:42:b5:e0:cb:ab: 3b:9e:ca:46:63:8b:55:55:39:fc:83:af:bf:29:66:2f:69:47: 4a:76:be:53:0f:39:54:0a:26:79:48:c2:1b:b2:53:37:be:cd: 81:1f:49:37:f7:98:e9:cf:b7:a0:45:e8:33:e2:6e:22:35:42: be:2a:6b:68:61:34:79:f2:90:93:63:e8:4f:14:8b:a9:f7:1e: ce:66:ec:3c:3d:31:fb:0c:d0:21:db:46:98:b9:94:a8:4c:5a: c6:49:59:57:7b:90:cb:e4:c0:7a:1e:01:06:ba:9f:62:18:71: 92:ce:69:9a:fa:71:85:c9:1f:a2:aa:2a:e2:7f:7f:a0:e6:f1: 84:04:93:63:94:5d:54:e9:e1:e3:62:7e:e7:ff:60:b7:0f:52: 84:32:3b:ab:f1:8a:29:70:51:e8:95:20:52:6b:79:92:71:6d: f8:ee:3d:cc:3b:cb:4d:43:7e:62:7b:0c:2e:d9:89:18:a4:a5: de:ab:e0:27:fa:9d:54:de:cb:eb:cc:3d:a2:f1:3b:4f:18:a6: 44:c5:5f:86:9f:79:7f:8a:79:65:c8:e5:f5:65:29:55:5d:ab: f9:5a:49:07 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUXk0fwfeUQjxk6eZWdSO6OUt5SmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkZGRDk4RDY3QjFEQ0Y3NjRENkM2MEQ5RDhGNzdC MThDODBGODAeFw0yNjA5MjEyMjA3NTVaFw0yNjA5MjMwMTIxNTVaMDMxMTAvBgNV BAMTKDE1M0VGQzdDRUZDMjY3OUQ4ODZGRTFFNUZDOTE1MTY4QjgyM0NGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh2Sb31NORX1XKtFRbIJhrQHv+ JLLMFyswc30sl7NUFT+eUKLC0Zte+DVP3Ywb0z4LKkLKMtAV5oluDju0dGl14j43 3sHVgYbyaHc1zhRXP8N0PrVQ2ISt1UQeTNKz5641j0NXd0s2zEERdayzbgxgoRZz hysB+M3gM9fgyc59bVVpOpLJzfkhNqX0AAofTEh+bE4ZjupLjmhJD/bBfLxPWZo3 6IKEJaKLsKx2NHoMyPdT0oCIlVC1fQ5UWw3wOVrLp1dGabYXngKg5BfghJ/UUTnE FWr4ayHuGJ3HOWNMpTR0RMxylviSbpwIEcWOOrf986QJcvGj5EOUg+/lmMB5AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUFT78fO/CZ52Ib+Hl/JFRaLgjzz0wHwYDVR0j BBgwFoAUp5//2Y1nsdz3ZNbGDZ2Pd7GMgPgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVUR1VB UkQvMC9BNzlGRkZEOThENjdCMURDRjc2NEQ2QzYwRDlEOEY3N0IxOEM4MEY4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0E3OUZGRkQ5OEQ2N0IxRENGNzY0RDZDNjBE OUQ4Rjc3QjE4QzgwRjguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ORVRHVUFSRC8wL0E3OUZGRkQ5 OEQ2N0IxRENGNzY0RDZDNjBEOUQ4Rjc3QjE4QzgwRjgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAfp9i RDmzNaW1zcdM3foQPxmFFbd5je25XHWV1JjVQrXgy6s7nspGY4tVVTn8g6+/KWYv aUdKdr5TDzlUCiZ5SMIbslM3vs2BH0k395jpz7egRegz4m4iNUK+KmtoYTR58pCT Y+hPFIup9x7OZuw8PTH7DNAh20aYuZSoTFrGSVlXe5DL5MB6HgEGup9iGHGSzmma +nGFyR+iqirif3+g5vGEBJNjlF1U6eHjYn7n/2C3D1KEMjur8YopcFHolSBSa3mS cW347j3MO8tNQ35iewwu2YkYpKXeq+An+p1U3svrzD2i8TtPGKZExV+Gn3l/inll yOX1ZSlVXav5WkkH -----END CERTIFICATE-----Generated at Tue Sep 22 06:23:02 2026 by rpki-client