$ rpki-client -vvvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft File: D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json) Hash identifier: zlG3mLczbipisB9WeA29onwcGjNriW//lMPHCm0oI5s= Subject key identifier: 22:F0:05:25:3F:F6:3A:9A:F0:79:60:D7:35:27:77:2B:9C:37:CD:06 Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 Certificate issuer: /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Certificate serial: 30B9CE4C283A31EE374B3616F198046145BABF56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft Manifest number: B5 Signing time: Wed 23 Sep 2026 16:28:13 +0000 Manifest this update: Wed 23 Sep 2026 16:23:13 +0000 Manifest next update: Thu 24 Sep 2026 20:01:13 +0000 Files and hashes: 1: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=) 2: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: ULLPZdw7yVqzLS2lgC9daiqBYQK9FFsUz1P77x66Yws=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b9:ce:4c:28:3a:31:ee:37:4b:36:16:f1:98:04:61:45:ba:bf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Validity Not Before: Sep 23 16:23:13 2026 GMT Not After : Sep 24 20:01:13 2026 GMT Subject: CN=22F005253FF63A9AF07960D73527772B9C37CD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:5d:a2:4e:b5:d6:c3:f7:1d:99:05:34:3e: 30:a4:4d:3e:7a:85:b0:08:cd:d2:d5:4d:f8:cf:81: de:b8:bd:78:bc:d8:42:ea:e3:6d:80:18:84:b8:5d: 42:56:a6:8e:dc:4f:f4:68:8e:ba:57:27:92:59:d9: a2:b7:c0:d3:67:eb:08:d0:06:9a:05:c4:58:78:cf: 21:2e:27:0b:c0:99:4e:d1:11:64:12:61:bf:29:04: 0e:a3:3d:fa:8a:c4:05:85:9b:b8:68:9a:7e:55:56: 87:db:0c:ca:40:fe:0d:5b:3d:47:84:cf:4b:5e:b1: 37:52:b4:2d:44:9e:ab:56:9f:68:51:19:3c:17:08: d9:61:48:ca:f9:c3:33:2b:62:de:a9:81:b3:d1:e2: de:f1:52:60:16:34:31:c2:ef:7f:a9:50:07:7d:3b: 3d:70:9c:28:1f:8f:fc:fe:22:3b:77:a6:fe:cf:45: ad:ba:11:11:18:37:28:fa:91:a4:7b:fd:90:80:8f: 4f:2d:ec:00:05:8c:81:e1:5c:70:e7:3c:d4:8f:a7: 61:26:0c:89:ef:de:13:a5:ba:c4:3a:36:bd:bd:a2: 3e:68:1c:ba:6b:2e:a7:97:90:9d:86:46:f1:84:74: 92:18:8e:fa:2a:34:79:46:49:f8:6f:59:f8:e8:6e: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:05:25:3F:F6:3A:9A:F0:79:60:D7:35:27:77:2B:9C:37:CD:06 X509v3 Authority Key Identifier: keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cf:fb:ad:42:28:23:44:9a:13:f5:5c:c3:c9:a0:df:e2:07: 27:e5:ee:bc:a8:50:15:18:eb:6c:6e:0d:31:b4:b1:93:a9:11: 7b:31:ea:d1:39:4b:84:64:a5:45:77:49:07:37:73:2d:10:60: a6:ce:48:2d:69:63:3d:8b:7f:f7:4c:7d:8f:95:33:db:c2:19: e6:7c:7e:43:b8:18:c1:7a:f2:f2:11:c9:44:50:bb:70:84:47: c6:41:72:38:46:a3:8b:18:3c:1a:e1:3c:5f:e0:93:a6:a8:48: 8f:c4:63:af:d2:dc:38:c4:01:60:6a:ce:c2:d5:86:96:42:89: db:d1:bf:b9:da:a5:44:39:8e:c2:70:58:5f:25:81:46:84:31: 82:d5:bd:95:bf:90:79:ee:a2:be:19:f8:32:f3:3a:61:2e:02: 07:3c:85:f8:f3:75:f6:d8:eb:bc:8f:af:61:cb:97:33:c1:ed: c3:76:08:3c:d7:1b:65:aa:04:4f:00:e4:d3:9f:95:5f:ba:4b: 9f:31:07:45:6f:16:ae:19:c7:b1:2a:b1:47:bf:eb:ab:d1:14: 67:08:ab:d5:37:75:9a:73:09:81:2c:4b:65:83:c1:6c:18:6a: 9f:7e:18:12:d5:15:98:31:c0:d0:a9:d3:fc:91:e0:6e:18:e7: 3c:38:9d:09 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUMLnOTCg6Me43SzYW8ZgEYUW6v1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBFMDk0MDczOUM3QzhBMUUzOUZBOTkzQTE1OUYyNzkw MUFEMTIyNzAeFw0yNjA5MjMxNjIzMTNaFw0yNjA5MjQyMDAxMTNaMDMxMTAvBgNV BAMTKDIyRjAwNTI1M0ZGNjNBOUFGMDc5NjBENzM1Mjc3NzJCOUMzN0NEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9V2iTrXWw/cdmQU0PjCkTT56 hbAIzdLVTfjPgd64vXi82ELq422AGIS4XUJWpo7cT/RojrpXJ5JZ2aK3wNNn6wjQ BpoFxFh4zyEuJwvAmU7REWQSYb8pBA6jPfqKxAWFm7homn5VVofbDMpA/g1bPUeE z0tesTdStC1EnqtWn2hRGTwXCNlhSMr5wzMrYt6pgbPR4t7xUmAWNDHC73+pUAd9 Oz1wnCgfj/z+Ijt3pv7PRa26EREYNyj6kaR7/ZCAj08t7AAFjIHhXHDnPNSPp2Em DInv3hOlusQ6Nr29oj5oHLprLqeXkJ2GRvGEdJIYjvoqNHlGSfhvWfjoblKxAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUIvAFJT/2OprweWDXNSd3K5w3zQYwHwYDVR0j BBgwFoAU0OCUBznHyKHjn6mToVnyeQGtEicwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VSVkNP TVAvMC9EMEUwOTQwNzM5QzdDOEExRTM5RkE5OTNBMTU5RjI3OTAxQUQxMjI3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwRTA5NDA3MzlDN0M4QTFFMzlGQTk5M0Ex NTlGMjc5MDFBRDEyMjcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRVJWQ09NUC8wL0QwRTA5NDA3 MzlDN0M4QTFFMzlGQTk5M0ExNTlGMjc5MDFBRDEyMjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrz/ut QigjRJoT9VzDyaDf4gcn5e68qFAVGOtsbg0xtLGTqRF7MerROUuEZKVFd0kHN3Mt EGCmzkgtaWM9i3/3TH2PlTPbwhnmfH5DuBjBevLyEclEULtwhEfGQXI4RqOLGDwa 4Txf4JOmqEiPxGOv0tw4xAFgas7C1YaWQonb0b+52qVEOY7CcFhfJYFGhDGC1b2V v5B57qK+Gfgy8zphLgIHPIX483X22Ou8j69hy5czwe3Ddgg81xtlqgRPAOTTn5Vf ukufMQdFbxauGcexKrFHv+ur0RRnCKvVN3WacwmBLEtlg8FsGGqffhgS1RWYMcDQ qdP8keBuGOc8OJ0J -----END CERTIFICATE-----Generated at Wed Sep 23 20:23:53 2026 by rpki-client