$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: CIL4ZoIh++BPTL/u0QQyaM/dxZDJrVtvDtTpKeiJlf0= Subject key identifier: E6:3E:F9:16:DB:F0:C0:71:AB:2B:61:17:81:BA:78:1C:45:2C:46:21 Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 0DD945B10D7EA281DF361DDC3D67CFDEE723327A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: 0103 Signing time: Sun 15 Nov 2026 12:28:24 +0000 Manifest this update: Sun 15 Nov 2026 12:23:24 +0000 Manifest next update: Mon 16 Nov 2026 16:05:24 +0000 Files and hashes: 1: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 2: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) 3: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 4: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 5: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) 6: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: Jx+2oUCC4azW8340XxcZ+GQ+OoKk1NqFbNcIwGXPsmA=) 7: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 8: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 9: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) 10: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d9:45:b1:0d:7e:a2:81:df:36:1d:dc:3d:67:cf:de:e7:23:32:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Nov 15 12:23:24 2026 GMT Not After : Nov 16 16:05:24 2026 GMT Subject: CN=E63EF916DBF0C071AB2B611781BA781C452C4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:73:c8:2d:d6:45:5a:0e:87:4d:03:2e:7e: a6:24:67:15:e5:a3:45:dd:92:86:1c:e8:94:9e:7a: 15:2d:9d:4d:86:70:d0:b8:62:14:e3:8c:73:3f:bb: 4b:3b:7a:11:9e:e5:e8:3e:71:f7:a3:fa:bd:bc:84: 2f:65:53:9d:18:f2:40:5c:9e:21:23:5d:be:a4:09: 82:56:2b:f1:bc:7a:b8:2d:ee:6d:73:42:c2:9a:1c: 14:05:91:2a:b1:4b:0a:6a:db:b2:92:5d:5c:40:91: 03:26:a7:6a:39:6a:a0:03:2a:93:cc:3d:18:2f:e1: 8b:a6:c3:ed:36:8c:7b:2e:58:22:05:56:20:17:d2: a2:8a:da:02:b0:fe:eb:54:6e:db:04:1a:cc:68:9b: 43:66:1d:02:ac:2b:df:ed:63:5f:01:69:66:dd:70: ae:68:cf:f7:84:27:4c:0a:fd:85:4b:87:75:be:4c: 63:68:d2:33:58:d0:5e:52:55:5b:29:72:10:a2:8f: 4e:e5:c1:09:73:5a:47:e5:11:f9:0c:0a:b9:d6:ad: e4:1f:45:e2:27:77:f9:4c:d8:ab:63:05:39:51:f1: d8:60:66:41:ee:da:8a:00:41:28:5d:52:7e:70:72: af:3d:26:f9:c1:47:97:1a:53:ba:bd:4b:7d:e2:4e: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3E:F9:16:DB:F0:C0:71:AB:2B:61:17:81:BA:78:1C:45:2C:46:21 X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:83:cb:0b:a3:a0:bd:56:35:80:a1:8d:fe:87:65:a0:36:fa: 43:ba:d4:cd:f4:b6:38:15:59:80:43:7e:63:1b:7e:da:61:38: 52:6a:3b:99:28:f0:01:87:51:a1:84:0b:3a:03:e3:1b:27:07: 98:e6:e7:22:0d:36:0c:49:72:89:ec:1a:50:8d:71:e9:3b:3a: f0:99:d3:ca:48:f0:84:f2:14:70:98:40:9b:74:d3:5e:5e:07: 0b:4d:89:69:3b:0c:63:f2:08:ab:da:76:5e:e7:19:8a:45:08: cb:64:9f:ac:ce:30:dc:59:27:e2:df:7a:26:46:9a:c8:43:88: f1:7e:96:16:c6:5f:ab:86:9e:44:58:8c:6f:06:87:3f:48:82: 42:6a:d5:bb:b1:8b:cd:04:85:2f:d1:f3:31:3a:08:5e:01:43: 9a:48:e0:49:91:54:6f:e2:3d:78:1a:a1:27:23:b3:9b:d6:6c: be:0f:e2:82:dc:ec:9c:dc:04:ac:38:3d:6b:5c:ea:12:09:4c: 68:e3:ed:e0:8b:ea:c8:2d:5f:2b:63:dd:9a:44:ed:2d:98:6e: 35:7c:e7:52:66:6b:64:66:9c:09:02:c9:08:b7:d3:47:50:45: 50:a0:5b:8e:aa:f9:ed:fd:0a:28:59:40:d8:33:34:24:ff:0e: 30:40:c2:9c -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUDdlFsQ1+ooHfNh3cPWfP3ucjMnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjExMTUxMjIzMjRaFw0yNjExMTYxNjA1MjRaMDMxMTAvBgNV BAMTKEU2M0VGOTE2REJGMEMwNzFBQjJCNjExNzgxQkE3ODFDNDUyQzQ2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvHPILdZFWg6HTQMufqYkZxXl o0XdkoYc6JSeehUtnU2GcNC4YhTjjHM/u0s7ehGe5eg+cfej+r28hC9lU50Y8kBc niEjXb6kCYJWK/G8ergt7m1zQsKaHBQFkSqxSwpq27KSXVxAkQMmp2o5aqADKpPM PRgv4Yumw+02jHsuWCIFViAX0qKK2gKw/utUbtsEGsxom0NmHQKsK9/tY18BaWbd cK5oz/eEJ0wK/YVLh3W+TGNo0jNY0F5SVVspchCij07lwQlzWkflEfkMCrnWreQf ReInd/lM2KtjBTlR8dhgZkHu2ooAQShdUn5wcq89JvnBR5caU7q9S33iTv7HAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU5j75FtvwwHGrK2EXgbp4HEUsRiEwHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIPLC6Og vVY1gKGN/odloDb6Q7rUzfS2OBVZgEN+Yxt+2mE4Umo7mSjwAYdRoYQLOgPjGycH mObnIg02DElyiewaUI1x6Ts68JnTykjwhPIUcJhAm3TTXl4HC02JaTsMY/IIq9p2 XucZikUIy2SfrM4w3Fkn4t96JkaayEOI8X6WFsZfq4aeRFiMbwaHP0iCQmrVu7GL zQSFL9HzMToIXgFDmkjgSZFUb+I9eBqhJyOzm9Zsvg/igtzsnNwErDg9a1zqEglM aOPt4IvqyC1fK2PdmkTtLZhuNXznUmZrZGacCQLJCLfTR1BFUKBbjqr57f0KKFlA 2DM0JP8OMEDCnA== -----END CERTIFICATE-----Generated at Sun Nov 15 16:31:08 2026 by rpki-client