$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft File: CA678C886D87F023B9297877BF550E88E90AE169.mft (raw, json) Hash identifier: ekSjYydaAQ/nfa1QiPxW60+g3rhpuPLDv5+cBFYhu1A= Subject key identifier: FB:23:C7:56:14:94:72:D0:EE:4C:D6:94:C9:18:CB:A3:59:DC:AD:2C Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 Certificate issuer: /CN=CA678C886D87F023B9297877BF550E88E90AE169 Certificate serial: 0AD0FAC7E1B7BE0C0C863A5E6B77B346AC3B8B3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 16:24:24 +0000 Manifest this update: Tue 28 Jul 2026 16:19:24 +0000 Manifest next update: Wed 29 Jul 2026 20:04:24 +0000 Files and hashes: 1: 34392e3231332e33342e302f32332d3234203d3e203231383539.roa (hash: fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=) 2: CA678C886D87F023B9297877BF550E88E90AE169.crl (hash: swUAyiHJXwEhw7eD1TSDZXjMu8VNXKaH+pDwmml0VyM=) 3: 34392e3231332e33342e302f32332d3234203d3e2037353336.roa (hash: UiYvDw3Nz5+XLnUJ6ot0sHBwCYvrMQN4qa4YEtJyIAc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d0:fa:c7:e1:b7:be:0c:0c:86:3a:5e:6b:77:b3:46:ac:3b:8b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169 Validity Not Before: Jul 28 16:19:24 2026 GMT Not After : Jul 29 20:04:24 2026 GMT Subject: CN=FB23C756149472D0EE4CD694C918CBA359DCAD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:99:9e:9e:f1:b1:76:28:e3:a2:7c:a4:bd: 16:6d:8b:b5:21:51:d6:80:31:a3:26:33:d3:c3:59: 03:19:cb:81:94:e1:90:68:c2:c1:cd:23:8c:21:f2: 05:84:d3:31:64:82:78:9d:08:4e:f1:71:a2:62:c4: 6d:bf:83:67:bb:95:0f:66:c0:5b:48:d0:22:ba:1f: 37:62:1c:44:5a:14:70:89:8a:7f:80:48:39:6e:b1: 60:a6:a5:e6:2c:96:57:a5:e2:7f:dc:d0:dd:a1:d4: 74:22:83:5e:f4:6d:e3:70:c6:5e:80:eb:b1:40:9f: b5:92:6a:99:1f:68:53:5e:58:71:2d:80:a1:fb:3b: a7:1f:7c:f8:20:9a:63:74:db:44:19:82:47:2b:44: fb:05:09:16:db:c1:34:c1:ae:09:98:62:7b:04:99: b4:9e:bb:02:31:f8:4a:83:06:b7:bf:66:f0:b7:da: b8:09:c3:d2:e4:01:72:f9:51:e1:e7:9e:ec:c3:ee: d0:fc:72:59:ef:c7:6d:8e:20:4c:4c:05:35:f8:11: 95:4a:8b:8f:ed:aa:04:1b:87:07:e5:d4:68:6f:f7: 91:e8:92:64:3f:71:f3:68:45:b9:a3:c4:6c:3a:9c: 17:d2:a0:07:f6:bd:18:8f:d1:86:25:33:8e:10:0a: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:23:C7:56:14:94:72:D0:EE:4C:D6:94:C9:18:CB:A3:59:DC:AD:2C X509v3 Authority Key Identifier: keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:38:c3:47:de:34:61:21:d7:ab:60:02:a0:2f:c7:2e:a4:1b: 99:22:ad:cf:0c:62:b0:0b:b5:1c:8d:a9:60:f7:c6:b8:c7:97: b6:08:42:ca:c1:97:59:4d:2a:75:ea:88:33:d1:1c:0e:b8:4a: 1a:79:e5:6b:0f:a0:dd:a2:48:95:55:2f:93:79:a5:e9:8b:61: 80:d1:70:b4:42:f5:cf:8d:ff:c6:2b:59:07:fe:73:a3:0e:70: a4:d7:d4:57:57:c7:38:37:49:be:ef:f3:6a:d1:03:77:fd:db: 08:ba:47:8b:ad:93:d5:29:e9:8b:d9:bb:10:59:95:83:df:31: 63:68:81:86:c9:50:73:ab:1c:09:2a:7a:1e:3d:2f:26:be:61: a7:6b:2b:ef:81:52:92:7b:00:63:d4:d8:8e:4a:a9:db:dc:0f: 88:fe:57:f2:8d:8c:d5:25:ef:ff:f1:02:00:7f:70:d4:22:8f: 02:87:77:cf:5f:ce:e3:fc:41:f3:10:e2:94:55:dd:1e:19:3b: f8:f3:a2:d5:54:85:e9:e3:ff:43:94:a3:78:fa:5a:38:05:da: b9:1d:ed:3e:60:da:9a:b9:2f:17:27:6d:61:ea:d6:46:4b:4b: b7:1a:0d:fd:84:75:17:f4:b6:16:fd:e3:69:4e:29:2d:86:60: a0:4b:e3:7e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUCtD6x+G3vgwMhjpea3ezRqw7iz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1NTBFODhF OTBBRTE2OTAeFw0yNjA3MjgxNjE5MjRaFw0yNjA3MjkyMDA0MjRaMDMxMTAvBgNV BAMTKEZCMjNDNzU2MTQ5NDcyRDBFRTRDRDY5NEM5MThDQkEzNTlEQ0FEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1y5menvGxdijjonykvRZti7Uh UdaAMaMmM9PDWQMZy4GU4ZBowsHNI4wh8gWE0zFkgnidCE7xcaJixG2/g2e7lQ9m wFtI0CK6HzdiHERaFHCJin+ASDlusWCmpeYsllel4n/c0N2h1HQig170beNwxl6A 67FAn7WSapkfaFNeWHEtgKH7O6cffPggmmN020QZgkcrRPsFCRbbwTTBrgmYYnsE mbSeuwIx+EqDBre/ZvC32rgJw9LkAXL5UeHnnuzD7tD8clnvx22OIExMBTX4EZVK i4/tqgQbhwfl1Ghv95HokmQ/cfNoRbmjxGw6nBfSoAf2vRiP0YYlM44QCrEVAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU+yPHVhSUctDuTNaUyRjLo1ncrSwwHwYDVR0j BBgwFoAUymeMiG2H8CO5KXh3v1UOiOkK4WkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJWUlZ SS8wL0NBNjc4Qzg4NkQ4N0YwMjNCOTI5Nzg3N0JGNTUwRTg4RTkwQUUxNjkuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1 NTBFODhFOTBBRTE2OS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISVlJWUkvMC9DQTY3OEM4ODZE ODdGMDIzQjkyOTc4NzdCRjU1MEU4OEU5MEFFMTY5Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzjDR940 YSHXq2ACoC/HLqQbmSKtzwxisAu1HI2pYPfGuMeXtghCysGXWU0qdeqIM9EcDrhK Gnnlaw+g3aJIlVUvk3ml6YthgNFwtEL1z43/xitZB/5zow5wpNfUV1fHODdJvu/z atEDd/3bCLpHi62T1Snpi9m7EFmVg98xY2iBhslQc6scCSp6Hj0vJr5hp2sr74FS knsAY9TYjkqp29wPiP5X8o2M1SXv//ECAH9w1CKPAod3z1/O4/xB8xDilFXdHhk7 +POi1VSF6eP/Q5SjePpaOAXauR3tPmDamrkvFydtYerWRktLtxoN/YR1F/S2Fv3j aU4pLYZgoEvjfg== -----END CERTIFICATE-----Generated at Wed Jul 29 13:29:51 2026 by rpki-client