$ rpki-client -vvvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft File: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json) Hash identifier: Xr4T9hT5i1jVBYpnmtu27uyT/cMRdTjcw+tZtaUY0Os= Subject key identifier: 76:27:15:A1:AF:E5:0C:54:AF:C4:A7:C3:7C:2B:4E:40:0A:78:55:03 Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49 Certificate issuer: /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849 Certificate serial: 4E30282D1D3E195ED1A04A937AE7C312CAB13BB3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft Manifest number: B4 Signing time: Tue 22 Sep 2026 06:50:05 +0000 Manifest this update: Tue 22 Sep 2026 06:45:05 +0000 Manifest next update: Wed 23 Sep 2026 07:31:05 +0000 Files and hashes: 1: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=) 2: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=) 3: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: nkdAOl6BeRESf7XUG17xUxN3uWKFMRfQ773u+2nqXqk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:30:28:2d:1d:3e:19:5e:d1:a0:4a:93:7a:e7:c3:12:ca:b1:3b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849 Validity Not Before: Sep 22 06:45:05 2026 GMT Not After : Sep 23 07:31:05 2026 GMT Subject: CN=762715A1AFE50C54AFC4A7C37C2B4E400A785503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:04:71:4e:56:dc:eb:8d:5f:2c:73:2d:99: 44:24:a9:be:60:41:60:48:da:59:e0:b3:c1:c8:cb: 28:4a:7e:41:03:34:b3:cd:ad:30:ca:17:d5:e6:6c: e6:8b:aa:7b:75:ad:6c:f1:d8:80:c7:e2:99:98:67: 98:1f:3b:d6:82:7c:29:72:11:ea:8c:59:b8:21:45: dd:0b:b1:ee:82:3d:fb:0d:00:64:63:cf:b6:3b:be: 49:07:04:a8:11:82:7d:59:b9:e2:ea:e6:bb:75:25: 81:c8:c2:e3:2e:c8:e2:14:fc:53:0f:ce:59:f7:b9: dc:06:fb:0c:92:90:f9:90:f4:b7:38:73:14:9f:71: 7d:f9:f2:18:a5:8c:23:57:69:ea:98:fd:e9:58:b2: 85:a3:db:b1:a9:19:76:64:30:7c:c5:42:b3:08:da: c0:13:6f:bd:5c:ea:a5:58:24:75:c3:ed:a3:33:f5: 65:a6:a7:1e:5c:a7:1e:9b:40:9f:5f:b3:3b:4c:74: b6:79:25:43:34:77:68:d8:e4:e4:8e:f0:2e:0d:3b: 7e:76:1c:16:48:64:39:a9:07:ee:5d:0a:76:64:23: 98:26:34:31:0c:76:d9:10:76:6a:9e:d5:73:9f:24: 82:00:b5:47:86:e4:42:34:8f:b8:3f:e1:41:2c:ac: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:15:A1:AF:E5:0C:54:AF:C4:A7:C3:7C:2B:4E:40:0A:78:55:03 X509v3 Authority Key Identifier: keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:75:39:6b:06:08:63:8f:2a:2e:bc:72:c3:5b:23:25:73:e6: f0:23:9f:03:5d:d5:22:05:c4:b8:ab:f1:7c:ed:58:e4:8b:b1: de:8d:61:b8:98:e8:d6:fe:9a:ad:82:36:65:84:c2:68:da:78: 16:67:d8:40:6e:d7:a4:ed:d8:cc:0c:bd:0c:34:8e:53:a6:a0: 49:07:e4:4b:ed:c5:f0:2d:b2:8e:4b:96:6d:8f:c2:e7:2f:38: 90:f4:35:8a:60:93:bf:1a:57:b4:a9:28:ca:92:61:0c:bd:51: dc:24:a5:ba:ad:05:ae:0f:c2:e5:f5:30:f1:c2:ee:f0:46:76: 41:45:69:e3:64:d4:2f:8b:d5:4c:39:d0:ae:10:47:09:94:14: 3a:f2:08:6e:bb:7e:81:26:c3:77:74:5c:a6:75:69:58:95:7f: 91:8b:be:5c:9c:81:c3:04:82:ee:1a:ac:55:3c:35:2e:a5:1f: 87:6e:f3:73:e5:a3:12:b7:d2:13:05:93:6a:40:69:1e:84:eb: a5:20:83:e7:79:5f:40:61:27:1c:a5:7f:d9:ae:a4:81:5d:b2: 00:97:7b:6d:a9:e3:fd:be:e5:2a:65:7b:31:56:09:d1:28:c9: de:79:c1:4f:8a:0c:cd:f1:bf:d6:3f:2f:cc:e2:ea:5d:d9:32: c8:86:78:fe -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUTjAoLR0+GV7RoEqTeufDEsqxO7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1 QThCRTg0OTAeFw0yNjA5MjIwNjQ1MDVaFw0yNjA5MjMwNzMxMDVaMDMxMTAvBgNV BAMTKDc2MjcxNUExQUZFNTBDNTRBRkM0QTdDMzdDMkI0RTQwMEE3ODU1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmwRxTlbc641fLHMtmUQkqb5g QWBI2lngs8HIyyhKfkEDNLPNrTDKF9XmbOaLqnt1rWzx2IDH4pmYZ5gfO9aCfCly EeqMWbghRd0Lse6CPfsNAGRjz7Y7vkkHBKgRgn1ZueLq5rt1JYHIwuMuyOIU/FMP zln3udwG+wySkPmQ9Lc4cxSfcX358hiljCNXaeqY/elYsoWj27GpGXZkMHzFQrMI 2sATb71c6qVYJHXD7aMz9WWmpx5cpx6bQJ9fsztMdLZ5JUM0d2jY5OSO8C4NO352 HBZIZDmpB+5dCnZkI5gmNDEMdtkQdmqe1XOfJIIAtUeG5EI0j7g/4UEsrEWDAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUdicVoa/lDFSvxKfDfCtOQAp4VQMwHwYDVR0j BBgwFoAUhpcVBPQrewrxiD6N+luqVVqL6EkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAv ODY5NzE1MDRGNDJCN0IwQUYxODgzRThERkE1QkFBNTU1QThCRTg0OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS84Njk3MTUwNEY0MkI3QjBBRjE4ODNFOERGQTVCQUE1 NTVBOEJFODQ5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0dVLzAvODY5NzE1MDRGNDJCN0IwQUYx ODgzRThERkE1QkFBNTU1QThCRTg0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALR1OWsGCGOPKi68csNb IyVz5vAjnwNd1SIFxLir8XztWOSLsd6NYbiY6Nb+mq2CNmWEwmjaeBZn2EBu16Tt 2MwMvQw0jlOmoEkH5EvtxfAtso5Llm2PwucvOJD0NYpgk78aV7SpKMqSYQy9Udwk pbqtBa4PwuX1MPHC7vBGdkFFaeNk1C+L1Uw50K4QRwmUFDryCG67foEmw3d0XKZ1 aViVf5GLvlycgcMEgu4arFU8NS6lH4du83PloxK30hMFk2pAaR6E66Ugg+d5X0Bh Jxylf9mupIFdsgCXe22p4/2+5SplezFWCdEoyd55wU+KDM3xv9Y/L8zi6l3ZMsiG eP4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:05:04 2026 by rpki-client