$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: bhOYC0axZfHr6owQV7vZrPbC7WSK72LZXyEkqFlXMdU= Subject key identifier: AD:28:AD:71:E1:BB:5F:6A:8D:D6:FB:46:67:B8:20:0B:71:77:2E:FA Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 73A9B865B448DA6DCCC63BDA393B6813F1A915BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: 71 Signing time: Tue 28 Jul 2026 02:17:12 +0000 Manifest this update: Tue 28 Jul 2026 02:12:12 +0000 Manifest next update: Wed 29 Jul 2026 04:49:12 +0000 Files and hashes: 1: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) 2: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 3: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 4: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 5: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: ZZ1w9TJkorlLwY49gxFmfhG5YkKeBk8ETdezPhdCF+o=) 6: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) 7: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 8: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 9: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) 10: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a9:b8:65:b4:48:da:6d:cc:c6:3b:da:39:3b:68:13:f1:a9:15:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Jul 28 02:12:12 2026 GMT Not After : Jul 29 04:49:12 2026 GMT Subject: CN=AD28AD71E1BB5F6A8DD6FB4667B8200B71772EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:0c:7d:ec:e7:c7:9f:79:a5:36:bf:7b:3b: d3:9f:0e:77:27:f1:36:b2:2a:6b:3a:62:f4:32:32: ee:9b:78:2f:60:9a:7a:8d:6f:91:86:c1:76:46:e2: db:61:ae:a7:72:46:5c:7d:f2:e6:42:e5:d1:0d:e8: e7:da:dc:19:dd:6e:06:e4:01:63:83:c1:50:56:e8: 1e:cc:a2:99:6d:cc:d2:c1:25:b5:8c:06:09:43:9c: b5:d3:48:86:9c:18:a8:2b:99:08:4f:84:2c:52:fe: 22:f1:df:f2:ca:ff:1b:b5:eb:de:42:21:0b:27:96: c1:ea:a1:16:34:1b:a6:01:49:4e:a9:5e:fb:ba:da: cd:91:8f:78:b0:86:16:79:0f:36:a5:33:e4:9b:b8: 8b:eb:01:a4:84:fa:fa:f6:a1:73:67:9a:bc:6f:b2: d7:fc:fc:ce:fd:4e:5d:68:62:86:a7:73:ef:28:87: 2c:f4:c5:67:e7:ba:e4:4b:9c:4e:0b:e1:55:55:5c: f2:a6:4d:b0:2f:54:43:cc:28:84:97:75:f9:1e:79: b3:8f:a4:15:62:67:28:9d:10:eb:ae:9e:bc:04:80: e5:5e:c4:84:08:17:77:e0:12:79:e5:bf:3a:da:19: 64:64:c3:1c:bb:ba:3d:3b:30:bc:94:4e:10:7e:d6: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:28:AD:71:E1:BB:5F:6A:8D:D6:FB:46:67:B8:20:0B:71:77:2E:FA X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:fe:05:bb:49:ba:e6:d7:e6:b4:35:cd:6c:cd:7a:d0:35: f9:e8:a4:ad:21:d2:d7:1f:4c:56:97:29:b2:7c:ea:49:56:c8: 15:72:fd:d8:37:5c:03:9f:b4:9c:84:cf:a0:2c:f9:02:89:5e: 69:8b:fa:3a:e5:97:a9:be:76:6d:0d:50:f3:07:71:cf:36:d1: fe:a2:c9:b1:4d:6a:82:77:70:53:55:a8:c9:40:d8:c4:fc:64: a4:9b:d6:20:49:dd:27:09:7d:7f:3b:5c:7d:e2:a6:1b:51:95: 01:76:87:d0:a3:25:b6:fd:22:ac:35:86:06:22:0b:bc:9e:ce: 83:e6:3b:11:7c:ff:13:5d:74:b1:12:be:ac:fa:7c:2c:f1:c2: 37:29:17:dd:9d:78:1f:da:01:c7:44:33:3e:60:88:a7:c0:dd: 20:6d:f6:f3:27:f1:cb:0c:fa:95:47:19:b2:bb:9e:0f:c3:a8: 0c:cd:d1:d2:6c:80:3b:d7:ca:73:22:76:93:bb:a2:68:ef:26: dd:fa:0f:c2:cb:8d:85:77:a6:49:f5:e3:fe:72:9e:cf:6f:1d: 45:4a:b5:7d:36:9c:c2:b7:8d:31:9c:49:8d:9f:35:f4:50:9c: 4a:fe:4d:87:d0:fa:ae:5d:c7:4d:83:c4:a0:a8:31:7c:51:d8: e1:8b:9a:49 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUc6m4ZbRI2m3MxjvaOTtoE/GpFb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjA3MjgwMjEyMTJaFw0yNjA3MjkwNDQ5MTJaMDMxMTAvBgNV BAMTKEFEMjhBRDcxRTFCQjVGNkE4REQ2RkI0NjY3QjgyMDBCNzE3NzJFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTywx97OfHn3mlNr97O9OfDncn 8TayKms6YvQyMu6beC9gmnqNb5GGwXZG4tthrqdyRlx98uZC5dEN6Ofa3Bndbgbk AWODwVBW6B7MopltzNLBJbWMBglDnLXTSIacGKgrmQhPhCxS/iLx3/LK/xu1695C IQsnlsHqoRY0G6YBSU6pXvu62s2Rj3iwhhZ5DzalM+SbuIvrAaSE+vr2oXNnmrxv stf8/M79Tl1oYoanc+8ohyz0xWfnuuRLnE4L4VVVXPKmTbAvVEPMKISXdfkeebOP pBViZyidEOuunrwEgOVexIQIF3fgEnnlvzraGWRkwxy7uj07MLyUThB+1iwNAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUrSitceG7X2qN1vtGZ7ggC3F3LvowHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTP+BbtJ uubX5rQ1zWzNetA1+eikrSHS1x9MVpcpsnzqSVbIFXL92DdcA5+0nITPoCz5Aole aYv6OuWXqb52bQ1Q8wdxzzbR/qLJsU1qgndwU1WoyUDYxPxkpJvWIEndJwl9fztc feKmG1GVAXaH0KMltv0irDWGBiILvJ7Og+Y7EXz/E110sRK+rPp8LPHCNykX3Z14 H9oBx0QzPmCIp8DdIG328yfxywz6lUcZsrueD8OoDM3R0myAO9fKcyJ2k7uiaO8m 3foPwsuNhXemSfXj/nKez28dRUq1fTacwreNMZxJjZ819FCcSv5Nh9D6rl3HTYPE oKgxfFHY4YuaSQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:51:11 2026 by rpki-client