$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft File: 2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json) Hash identifier: 5Zplx2xGy5ab8uuznwMzfxMwtTKk2VupfadSQW3BMQ8= Subject key identifier: 8E:1D:5B:0C:14:0D:67:7C:9C:C8:AE:D3:71:57:96:E3:19:40:5F:2D Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53 Certificate issuer: /CN=2D63D0213010A74651A161277EB9CBDC9CF65853 Certificate serial: 14AFDF7D76AA54A5A3537C2DE88AC1CA4B860056 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft Manifest number: B5 Signing time: Tue 22 Sep 2026 05:33:49 +0000 Manifest this update: Tue 22 Sep 2026 05:28:49 +0000 Manifest next update: Wed 23 Sep 2026 08:05:49 +0000 Files and hashes: 1: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: rqLTc8kJitIS5xq28boyNUUMyERtNk0zPlXOJ+EATKo=) 2: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:af:df:7d:76:aa:54:a5:a3:53:7c:2d:e8:8a:c1:ca:4b:86:00:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853 Validity Not Before: Sep 22 05:28:49 2026 GMT Not After : Sep 23 08:05:49 2026 GMT Subject: CN=8E1D5B0C140D677C9CC8AED3715796E319405F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:30:77:90:1f:68:77:88:91:b8:76:55:d5: bc:61:a1:1f:05:56:8d:9c:fd:a9:8a:6b:49:be:0c: 22:ba:7b:ca:61:f6:64:c8:55:3c:ab:81:8b:e9:0b: 47:b3:54:97:85:17:52:fb:6d:44:e0:9b:74:0c:d2: b2:11:e4:71:8f:7d:d5:1d:3a:5e:8c:86:d7:ea:3b: 42:72:04:f5:45:ce:a2:b2:66:ba:15:18:ba:ac:98: 8f:92:00:c1:20:e1:67:44:9b:b6:7f:03:4a:f5:04: d2:07:8b:db:1a:88:38:4e:9e:83:cb:61:35:10:3f: 45:e4:26:76:39:64:74:9f:ef:ea:83:56:43:eb:e8: a5:c4:65:f9:30:fd:ee:47:32:93:30:9f:04:7b:6f: 60:fc:cf:bf:43:ba:99:e5:63:31:30:81:4e:88:95: 25:b6:2d:8b:1b:2c:49:f1:72:78:39:f5:85:e8:6a: 5e:37:31:3e:cf:3d:3f:a6:d5:5c:d5:b9:22:31:19: 49:17:56:b0:e8:5e:04:67:ff:a8:81:47:a9:96:ef: b7:7a:b8:c1:cb:49:b0:c9:17:11:19:6f:8d:50:a7: d3:3a:d9:7a:a9:58:4b:37:95:25:e6:d3:c4:1a:6b: fb:23:b0:98:85:06:69:5d:56:c0:b6:64:9c:2e:ec: 8d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1D:5B:0C:14:0D:67:7C:9C:C8:AE:D3:71:57:96:E3:19:40:5F:2D X509v3 Authority Key Identifier: keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:40:58:d1:2d:c5:d5:ca:46:53:02:3e:aa:8a:a6:95:4b:fd: 74:bb:89:db:d2:0c:58:65:54:d9:f8:c1:8d:f3:3e:7f:6d:b3: 27:85:a6:12:24:77:62:60:60:5f:ca:52:e2:f7:23:2c:f2:cf: 2b:31:39:80:85:84:f0:3b:de:52:bf:2f:b7:bd:d8:a4:35:99: c6:4a:94:fb:08:af:c0:8e:a7:a9:b0:97:05:c0:7d:8d:7a:00: 05:62:0f:39:6c:36:86:81:45:69:8f:47:27:5b:f8:2a:59:c9: 45:a1:80:e3:d3:3e:f8:13:5c:9a:0e:3b:77:17:5a:3b:39:e0: 25:3f:08:b8:9e:d6:1d:33:ea:12:15:af:4e:cb:96:48:66:c7: 5a:8f:59:6e:54:2b:29:c0:c0:1f:e6:2d:20:52:12:fc:34:8b: ec:2f:25:1e:16:04:ca:5d:b7:70:09:e5:05:ee:af:03:8d:f8: 88:dc:ab:4a:2f:be:65:b0:6e:58:92:14:6d:87:4e:b8:5d:46: c2:eb:06:a2:a1:cf:bc:1a:82:e2:97:70:b5:36:85:75:fb:9c: 07:28:ab:72:bd:2a:55:a4:d2:91:7b:9f:a0:eb:76:5f:ba:ae: a4:b2:5e:da:5e:ea:8b:06:0c:39:6a:a5:a3:68:74:25:5d:41: 25:ad:f9:b4 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUFK/ffXaqVKWjU3wt6IrBykuGAFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2M0QwMjEzMDEwQTc0NjUxQTE2MTI3N0VCOUNCREM5 Q0Y2NTg1MzAeFw0yNjA5MjIwNTI4NDlaFw0yNjA5MjMwODA1NDlaMDMxMTAvBgNV BAMTKDhFMUQ1QjBDMTQwRDY3N0M5Q0M4QUVEMzcxNTc5NkUzMTk0MDVGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwDB3kB9od4iRuHZV1bxhoR8F Vo2c/amKa0m+DCK6e8ph9mTIVTyrgYvpC0ezVJeFF1L7bUTgm3QM0rIR5HGPfdUd Ol6MhtfqO0JyBPVFzqKyZroVGLqsmI+SAMEg4WdEm7Z/A0r1BNIHi9saiDhOnoPL YTUQP0XkJnY5ZHSf7+qDVkPr6KXEZfkw/e5HMpMwnwR7b2D8z79DupnlYzEwgU6I lSW2LYsbLEnxcng59YXoal43MT7PPT+m1VzVuSIxGUkXVrDoXgRn/6iBR6mW77d6 uMHLSbDJFxEZb41Qp9M62XqpWEs3lSXm08Qaa/sjsJiFBmldVsC2ZJwu7I2BAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUjh1bDBQNZ3ycyK7TcVeW4xlAXy0wHwYDVR0j BBgwFoAULWPQITAQp0ZRoWEnfrnL3Jz2WFMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv MC8yRDYzRDAyMTMwMTBBNzQ2NTFBMTYxMjc3RUI5Q0JEQzlDRjY1ODUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzJENjNEMDIxMzAxMEE3NDY1MUExNjEyNzdFQjlD QkRDOUNGNjU4NTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8wLzJENjNEMDIxMzAxMEE3 NDY1MUExNjEyNzdFQjlDQkRDOUNGNjU4NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpQFjRLcXVykZT Aj6qiqaVS/10u4nb0gxYZVTZ+MGN8z5/bbMnhaYSJHdiYGBfylLi9yMs8s8rMTmA hYTwO95Svy+3vdikNZnGSpT7CK/AjqepsJcFwH2NegAFYg85bDaGgUVpj0cnW/gq WclFoYDj0z74E1yaDjt3F1o7OeAlPwi4ntYdM+oSFa9Oy5ZIZsdaj1luVCspwMAf 5i0gUhL8NIvsLyUeFgTKXbdwCeUF7q8DjfiI3KtKL75lsG5YkhRth064XUbC6wai oc+8GoLil3C1NoV1+5wHKKtyvSpVpNKRe5+g63Zfuq6ksl7aXuqLBgw5aqWjaHQl XUElrfm0 -----END CERTIFICATE-----Generated at Tue Sep 22 09:21:00 2026 by rpki-client