$ rpki-client -vvvf rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft File: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft (raw, json) Hash identifier: HtI3s4GqyLNdBTMiZqQnGj1Oi+CgRu4gbrY/G6Q9Nf8= Subject key identifier: 6D:DB:2A:F4:B5:59:2E:D6:EE:F4:2E:B5:A0:E6:64:6F:4F:2C:FF:76 Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Certificate serial: 3E4E71E5EF0A84E041570D6FB588EA19B843A2A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft Manifest number: B5 Signing time: Mon 21 Sep 2026 12:42:08 +0000 Manifest this update: Mon 21 Sep 2026 12:37:08 +0000 Manifest next update: Tue 22 Sep 2026 14:19:08 +0000 Files and hashes: 1: 3231312e37392e39382e302f32332d3234203d3e2037343833.roa (hash: CV931fhtw0I4Ug+ZdjJ2kNYqIh93pZBX4rG+jxT2d9s=) 2: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (hash: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=) 3: 3231312e37392e39382e302f32332d3234203d3e203231383539.roa (hash: I1jX/SnnFc+gmcZStVqiSrnNdoqyaCZ0ExujTfgAaX0=) 4: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl (hash: RXY8Kbi01vtEt26EapCL1hbe7faYGTbdGPUgIriuIwQ=) 5: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (hash: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4e:71:e5:ef:0a:84:e0:41:57:0d:6f:b5:88:ea:19:b8:43:a2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Validity Not Before: Sep 21 12:37:08 2026 GMT Not After : Sep 22 14:19:08 2026 GMT Subject: CN=6DDB2AF4B5592ED6EEF42EB5A0E6646F4F2CFF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:02:4a:44:77:17:df:df:d4:15:df:06:c7: 56:bd:0d:fb:14:01:f8:cb:1e:1a:b3:22:b2:90:2a: 24:a4:5f:be:1a:95:8c:7f:c5:83:d7:0c:56:62:cb: 69:e4:df:e7:e8:ba:a0:cc:d0:60:62:51:c6:c1:f2: 28:43:76:87:b4:cf:1d:35:ae:8f:da:72:50:1f:bf: 5e:97:6d:73:bc:2d:83:fb:93:f9:ba:26:fe:31:51: 6c:4a:e0:ca:b6:3f:48:c3:31:0c:da:a2:94:ce:a4: 5e:a4:d0:9a:67:22:75:00:b8:77:c0:05:59:da:e8: ac:ba:d1:6f:59:e3:15:2b:5b:1a:3d:03:0c:2e:28: da:92:3c:ea:c7:94:81:53:aa:94:57:d4:ba:62:ab: 50:fd:b6:a0:f2:63:3c:7f:80:1d:30:f1:08:9c:d6: e4:f6:5c:13:37:dd:df:98:38:b3:23:c5:86:68:ff: 78:e1:72:4a:fe:cc:36:8d:01:59:dc:ac:2c:8c:0c: b5:d0:99:1e:f0:5f:fd:1b:e3:83:4b:f9:04:2b:f7: ab:0d:2b:47:a0:a5:31:6f:16:cc:e0:0a:09:e5:ed: c6:c8:29:13:17:2d:5f:79:d8:fd:25:42:27:c6:5e: 39:c4:51:d1:27:10:41:62:ac:3e:4f:55:75:b5:ef: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DB:2A:F4:B5:59:2E:D6:EE:F4:2E:B5:A0:E6:64:6F:4F:2C:FF:76 X509v3 Authority Key Identifier: keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:88:62:33:72:35:4f:e9:9f:1e:84:0c:57:c9:5e:04:71:b8: a3:58:c7:7a:80:35:4b:27:a8:9d:3a:bf:66:49:f4:ce:70:e6: cb:8c:26:df:83:34:5b:12:a9:64:1e:80:f4:06:8f:f2:2d:50: d1:ba:be:fd:a4:85:c7:d5:2d:e6:11:38:cc:02:52:78:8b:2a: 2b:ca:02:8c:d5:85:c4:4b:41:09:87:2a:73:ef:17:e4:00:f6: 3a:b9:d7:23:b4:0d:4c:40:77:6a:82:ed:d1:16:c8:c9:91:05: 0a:c2:01:92:52:6f:89:34:42:3e:77:cc:5d:aa:1e:62:a4:30: 4b:a0:0e:fa:a1:20:01:4a:a1:28:cf:ca:cb:6a:18:4a:17:2a: 5c:1e:2b:44:84:02:09:09:0d:a7:d7:bb:f1:e1:d2:22:df:12: 8c:10:2d:16:65:b5:09:7f:35:87:81:5a:7e:70:b9:19:b2:cd: 72:b3:1d:0d:c6:9e:77:2e:c6:f6:56:be:8f:ae:86:1c:48:92: 4d:68:68:47:08:27:47:0b:6e:16:f0:62:0c:cd:11:64:a9:06: e6:f7:4d:73:b0:ff:dc:72:d3:ac:34:c1:34:3f:db:a3:a1:41: e4:e7:1c:3e:8e:bb:f5:56:f5:1a:47:d2:be:d6:a8:ed:73:bf: 74:b2:53:8d -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPk5x5e8KhOBBVw1vtYjqGbhDoqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThDNjJBRkM1 MzMzQTJBODAeFw0yNjA5MjExMjM3MDhaFw0yNjA5MjIxNDE5MDhaMDMxMTAvBgNV BAMTKDZEREIyQUY0QjU1OTJFRDZFRUY0MkVCNUEwRTY2NDZGNEYyQ0ZGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxAJKRHcX39/UFd8Gx1a9DfsU AfjLHhqzIrKQKiSkX74alYx/xYPXDFZiy2nk3+fouqDM0GBiUcbB8ihDdoe0zx01 ro/aclAfv16XbXO8LYP7k/m6Jv4xUWxK4Mq2P0jDMQzaopTOpF6k0JpnInUAuHfA BVna6Ky60W9Z4xUrWxo9AwwuKNqSPOrHlIFTqpRX1Lpiq1D9tqDyYzx/gB0w8Qic 1uT2XBM33d+YOLMjxYZo/3jhckr+zDaNAVncrCyMDLXQmR7wX/0b44NL+QQr96sN K0egpTFvFszgCgnl7cbIKRMXLV952P0lQifGXjnEUdEnEEFirD5PVXW175YNAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUbdsq9LVZLtbu9C61oOZkb08s/3YwHwYDVR0j BBgwFoAUQycW7gVM69xi/ALd6MYq/FMzoqgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9SREFU Vy8wLzQzMjcxNkVFMDU0Q0VCREM2MkZDMDJEREU4QzYyQUZDNTMzM0EyQTguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThD NjJBRkM1MzMzQTJBOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PUkRBVFcvMC80MzI3MTZFRTA1 NENFQkRDNjJGQzAyRERFOEM2MkFGQzUzMzNBMkE4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIhiM3I1 T+mfHoQMV8leBHG4o1jHeoA1SyeonTq/Zkn0znDmy4wm34M0WxKpZB6A9AaP8i1Q 0bq+/aSFx9Ut5hE4zAJSeIsqK8oCjNWFxEtBCYcqc+8X5AD2OrnXI7QNTEB3aoLt 0RbIyZEFCsIBklJviTRCPnfMXaoeYqQwS6AO+qEgAUqhKM/Ky2oYShcqXB4rRIQC CQkNp9e78eHSIt8SjBAtFmW1CX81h4FafnC5GbLNcrMdDcaedy7G9la+j66GHEiS TWhoRwgnRwtuFvBiDM0RZKkG5vdNc7D/3HLTrDTBND/bo6FB5OccPo679Vb1GkfS vtao7XO/dLJTjQ== -----END CERTIFICATE-----Generated at Mon Sep 21 23:44:29 2026 by rpki-client