$ rpki-client -vvf rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft File: ECE230A523016A2711501CE158F766961D12E232.mft (raw, json) Hash identifier: nFG34F5aEmSro9PgMUyXSrE5dXbu4rc5QCITH4u2nK0= Subject key identifier: 7F:A9:B6:98:EC:C4:19:84:83:96:B1:76:2A:0C:5B:22:D3:99:22:36 Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32 Certificate issuer: /CN=ECE230A523016A2711501CE158F766961D12E232 Certificate serial: 223718CCAD72DCE7DB55A8109E8D0283D5DFBC3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft Manifest number: 69 Signing time: Tue 28 Jul 2026 04:52:31 +0000 Manifest this update: Tue 28 Jul 2026 04:47:31 +0000 Manifest next update: Wed 29 Jul 2026 06:55:31 +0000 Files and hashes: 1: ECE230A523016A2711501CE158F766961D12E232.crl (hash: 5mXkTbmsQ8BeapBNNaaiCyPyBdlThbMOOodDgDzQ79w=) 2: 3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (hash: oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 06:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:37:18:cc:ad:72:dc:e7:db:55:a8:10:9e:8d:02:83:d5:df:bc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECE230A523016A2711501CE158F766961D12E232 Validity Not Before: Jul 28 04:47:31 2026 GMT Not After : Jul 29 06:55:31 2026 GMT Subject: CN=7FA9B698ECC419848396B1762A0C5B22D3992236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:03:9b:00:1a:05:41:57:88:d7:f5:13:6b: 78:fd:83:38:04:fe:95:5a:ab:e2:a9:cd:09:9a:92: 6d:20:42:59:a9:05:e2:47:2f:ce:28:7d:76:b7:4b: 53:93:92:eb:99:91:34:ac:4b:5f:0e:1c:fc:1e:9b: e0:ff:19:9c:a2:71:6c:0a:42:1c:bd:6c:0f:f8:56: 2f:10:59:7e:db:5a:3a:17:47:20:9a:2b:8a:50:a3: 12:dd:fe:a7:8b:2b:62:f2:48:68:04:83:bd:db:c0: b1:0e:2f:ab:f8:cb:9c:15:f8:29:ee:8c:e1:17:68: 18:2b:99:32:82:b6:a8:7a:e8:cd:af:b1:e4:fe:3e: 12:54:cd:3e:3e:b2:71:2d:87:86:31:10:75:d9:f1: 05:60:13:71:a6:3f:0b:aa:bb:5f:21:29:56:3f:2e: 21:88:86:fa:9d:1f:d8:36:80:91:fa:c3:ff:1f:d9: 20:51:d2:17:df:1d:ec:88:12:04:07:96:ff:01:84: b3:e4:9c:17:4b:73:89:bb:c2:c9:e6:84:03:83:50: 23:e7:ba:63:3d:3c:08:76:3a:aa:9d:27:a6:79:6b: 78:11:15:53:30:5e:19:9b:6b:b4:c6:35:7d:1d:a6: e1:cd:f3:ab:2d:ff:db:2c:d9:da:ed:fe:97:3b:32: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A9:B6:98:EC:C4:19:84:83:96:B1:76:2A:0C:5B:22:D3:99:22:36 X509v3 Authority Key Identifier: keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4e:ea:22:7c:f7:8b:81:c3:33:ab:b5:85:f3:03:a2:94:6a: ee:1f:ee:fe:37:c0:86:51:ee:c3:0c:60:5b:7d:73:e5:f4:82: ab:30:6e:85:17:b1:4e:b5:89:77:b4:cf:f2:e8:76:aa:1e:e1: 66:f0:a1:9d:4f:f4:7e:42:5a:a0:40:ba:b3:dd:59:67:b4:77: 1b:9b:e8:d4:03:d2:bf:91:d4:6d:2c:32:a1:d5:17:ae:65:91: 57:65:fa:1c:5a:7a:fb:05:1b:bc:4b:43:bc:4e:b7:fb:be:6e: d3:73:74:49:c2:41:22:f0:05:18:c4:6e:5f:56:d7:4a:46:c1: f2:cd:ce:9d:89:24:aa:42:c0:bd:db:18:52:22:29:01:9a:bd: a7:95:63:43:cd:d7:c1:13:aa:8c:22:fc:ee:de:70:4b:bf:12: 4a:99:3a:0f:09:cd:04:36:f5:1f:bc:e5:ae:1e:c3:65:10:a9: 13:6c:b5:f8:d0:70:ec:4f:86:c0:4f:c3:59:05:fd:96:a2:93: e7:e8:76:3e:77:f8:dd:9e:56:89:82:31:f2:2b:7e:5e:79:85: 35:ad:f9:d2:2d:a3:7e:46:8d:c3:b5:91:59:ab:f2:7d:4b:9f: 1a:be:b1:9c:5b:62:2a:f8:94:92:28:c0:0d:d6:30:23:1a:c0: a7:c6:e2:9c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIjcYzK1y3OfbVagQno0Cg9XfvD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2OTYx RDEyRTIzMjAeFw0yNjA3MjgwNDQ3MzFaFw0yNjA3MjkwNjU1MzFaMDMxMTAvBgNV BAMTKDdGQTlCNjk4RUNDNDE5ODQ4Mzk2QjE3NjJBMEM1QjIyRDM5OTIyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrwObABoFQVeI1/UTa3j9gzgE /pVaq+KpzQmakm0gQlmpBeJHL84ofXa3S1OTkuuZkTSsS18OHPwem+D/GZyicWwK Qhy9bA/4Vi8QWX7bWjoXRyCaK4pQoxLd/qeLK2LySGgEg73bwLEOL6v4y5wV+Cnu jOEXaBgrmTKCtqh66M2vseT+PhJUzT4+snEth4YxEHXZ8QVgE3GmPwuqu18hKVY/ LiGIhvqdH9g2gJH6w/8f2SBR0hffHeyIEgQHlv8BhLPknBdLc4m7wsnmhAODUCPn umM9PAh2OqqdJ6Z5a3gRFVMwXhmba7TGNX0dpuHN86st/9ss2drt/pc7MqwpAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUf6m2mOzEGYSDlrF2KgxbItOZIjYwHwYDVR0j BBgwFoAU7OIwpSMBaicRUBzhWPdmlh0S4jIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkhSSS8w L0VDRTIzMEE1MjMwMTZBMjcxMTUwMUNFMTU4Rjc2Njk2MUQxMkUyMzIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2 OTYxRDEyRTIzMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05IUkkvMC9FQ0UyMzBBNTIzMDE2QTI3 MTE1MDFDRTE1OEY3NjY5NjFEMTJFMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj07qInz3i4HDM6u1 hfMDopRq7h/u/jfAhlHuwwxgW31z5fSCqzBuhRexTrWJd7TP8uh2qh7hZvChnU/0 fkJaoEC6s91ZZ7R3G5vo1APSv5HUbSwyodUXrmWRV2X6HFp6+wUbvEtDvE63+75u 03N0ScJBIvAFGMRuX1bXSkbB8s3OnYkkqkLAvdsYUiIpAZq9p5VjQ83XwROqjCL8 7t5wS78SSpk6DwnNBDb1H7zlrh7DZRCpE2y1+NBw7E+GwE/DWQX9lqKT5+h2Pnf4 3Z5WiYIx8it+XnmFNa350i2jfkaNw7WRWavyfUufGr6xnFtiKviUkijADdYwIxrA p8binA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:46 2026 by rpki-client