$ rpki-client -vvvf rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft File: ECE230A523016A2711501CE158F766961D12E232.mft (raw, json) Hash identifier: YI1jV2kU2nPLQDw3yR3XCRsjZPyEaH8QG9D2UzNipjU= Subject key identifier: D7:AF:BF:FD:25:5B:97:2C:7E:AB:6B:E9:3A:87:9A:CE:23:DA:D8:18 Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32 Certificate issuer: /CN=ECE230A523016A2711501CE158F766961D12E232 Certificate serial: 72EC364C69C9332CD6E7C3E195697878FC37E1F2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft Manifest number: B6 Signing time: Thu 24 Sep 2026 03:21:19 +0000 Manifest this update: Thu 24 Sep 2026 03:16:19 +0000 Manifest next update: Fri 25 Sep 2026 04:40:19 +0000 Files and hashes: 1: 3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (hash: oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=) 2: ECE230A523016A2711501CE158F766961D12E232.crl (hash: nszeqcIyW/6JtwUM0evTT0Lm+fnWcEBln2FxF+t9yTo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ec:36:4c:69:c9:33:2c:d6:e7:c3:e1:95:69:78:78:fc:37:e1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECE230A523016A2711501CE158F766961D12E232 Validity Not Before: Sep 24 03:16:19 2026 GMT Not After : Sep 25 04:40:19 2026 GMT Subject: CN=D7AFBFFD255B972C7EAB6BE93A879ACE23DAD818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c7:a8:45:e4:df:e3:42:22:c5:c0:fb:50:8d: bd:77:8b:b2:15:6a:de:87:52:28:52:52:13:4e:48: c7:41:89:28:41:37:af:18:d3:ef:a6:dc:1e:4b:16: 00:db:58:a9:a2:d6:63:71:e7:21:a4:a8:a5:d4:35: c1:b9:2e:ba:77:7c:f9:ae:8f:8f:f5:19:80:cd:7d: 89:ac:1e:3a:75:98:9a:96:ca:92:8e:a0:31:c6:26: 26:1c:1c:29:39:f0:d2:19:4e:c6:a5:7e:c4:f3:33: c8:a6:8d:ef:e7:16:a7:18:d3:97:52:bf:29:2a:26: 37:13:20:dc:60:4e:14:da:87:d8:b0:df:34:cc:b3: 95:74:d8:d1:c0:e6:35:80:19:9d:d8:e8:fe:5e:a3: a9:81:59:85:e6:66:6b:d3:4f:fe:c8:4a:56:44:8c: 7b:4b:c7:66:f8:42:bf:17:8c:36:c2:6b:50:c1:21: e0:d8:19:2a:0a:3e:52:3c:0f:81:be:97:8e:63:5a: cb:87:1c:cf:ca:1d:dc:d6:05:80:ca:c4:60:13:a8: 0f:77:c9:13:22:22:52:db:87:a2:3f:34:58:cf:c9: 9e:fc:2c:a2:bf:a3:46:a1:6a:91:81:b7:d9:5c:d6: 0d:b7:c8:ae:1b:39:f1:ef:f7:20:50:42:74:66:ce: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:BF:FD:25:5B:97:2C:7E:AB:6B:E9:3A:87:9A:CE:23:DA:D8:18 X509v3 Authority Key Identifier: keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:68:5f:38:55:30:77:57:70:7c:f7:55:ec:fd:eb:cf:0c: 79:ec:9d:31:7d:db:d0:04:c4:3b:dd:47:8d:a6:f6:fb:f8:de: c3:87:48:ec:64:cc:6f:33:28:3a:fe:2d:54:0e:b8:1a:d7:62: 73:a9:3a:19:98:ea:0c:98:93:53:2b:df:41:e7:5f:d0:22:6b: a6:32:a7:a4:ad:a4:5a:f2:a8:52:55:64:af:65:3b:bb:52:5e: 56:ab:f0:e0:31:64:8c:a1:31:8a:bf:09:19:68:df:00:c0:bf: dd:16:e4:00:99:34:0a:d8:aa:6e:df:32:b6:f8:43:23:ce:d0: 73:23:b4:3a:19:23:63:3a:0a:bc:a0:6e:dd:1f:54:5f:c0:ff: 94:90:76:5d:0b:5f:3a:38:e4:85:af:a4:98:33:53:ab:15:ba: e8:05:3b:df:d0:6c:91:d0:eb:56:b1:e2:ae:95:87:65:e4:42: ab:c8:cd:31:aa:13:14:5e:da:d9:e7:2e:44:56:2a:f2:bf:f1: 2c:85:08:19:04:0e:b9:68:86:36:c4:37:21:83:a9:9e:e6:54: ef:19:29:6a:f6:0a:49:6f:ad:67:6d:03:20:f0:6a:d9:e4:03: d4:e2:e1:88:7e:02:5b:db:66:f8:d1:60:62:46:c9:4d:67:99: 1e:f1:b4:cd -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUcuw2TGnJMyzW58PhlWl4ePw34fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2OTYx RDEyRTIzMjAeFw0yNjA5MjQwMzE2MTlaFw0yNjA5MjUwNDQwMTlaMDMxMTAvBgNV BAMTKEQ3QUZCRkZEMjU1Qjk3MkM3RUFCNkJFOTNBODc5QUNFMjNEQUQ4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKx6hF5N/jQiLFwPtQjb13i7IV at6HUihSUhNOSMdBiShBN68Y0++m3B5LFgDbWKmi1mNx5yGkqKXUNcG5Lrp3fPmu j4/1GYDNfYmsHjp1mJqWypKOoDHGJiYcHCk58NIZTsalfsTzM8imje/nFqcY05dS vykqJjcTINxgThTah9iw3zTMs5V02NHA5jWAGZ3Y6P5eo6mBWYXmZmvTT/7ISlZE jHtLx2b4Qr8XjDbCa1DBIeDYGSoKPlI8D4G+l45jWsuHHM/KHdzWBYDKxGATqA93 yRMiIlLbh6I/NFjPyZ78LKK/o0ahapGBt9lc1g23yK4bOfHv9yBQQnRmzv+1AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQU16+//SVblyx+q2vpOoeaziPa2BgwHwYDVR0j BBgwFoAU7OIwpSMBaicRUBzhWPdmlh0S4jIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkhSSS8w L0VDRTIzMEE1MjMwMTZBMjcxMTUwMUNFMTU4Rjc2Njk2MUQxMkUyMzIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2 OTYxRDEyRTIzMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05IUkkvMC9FQ0UyMzBBNTIzMDE2QTI3 MTE1MDFDRTE1OEY3NjY5NjFEMTJFMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7JoXzhVMHdXcHz3 Vez9688MeeydMX3b0ATEO91Hjab2+/jew4dI7GTMbzMoOv4tVA64Gtdic6k6GZjq DJiTUyvfQedf0CJrpjKnpK2kWvKoUlVkr2U7u1JeVqvw4DFkjKExir8JGWjfAMC/ 3RbkAJk0Ctiqbt8ytvhDI87QcyO0OhkjYzoKvKBu3R9UX8D/lJB2XQtfOjjkha+k mDNTqxW66AU739BskdDrVrHirpWHZeRCq8jNMaoTFF7a2ecuRFYq8r/xLIUIGQQO uWiGNsQ3IYOpnuZU7xkpavYKSW+tZ20DIPBq2eQD1OLhiH4CW9tm+NFgYkbJTWeZ HvG0zQ== -----END CERTIFICATE-----Generated at Thu Sep 24 08:50:10 2026 by rpki-client