$ rpki-client -vvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft File: 164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json) Hash identifier: R0bSggzN2OrAEb7qa+80UDUFEAVlI8JTTmycnvVchXg= Subject key identifier: D0:C3:69:96:25:1A:89:F8:2F:F5:CF:83:E2:D6:7E:1F:BE:DA:96:BB Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63 Certificate issuer: /CN=164EB710D7AA83CB67EE2E709B4F195437239363 Certificate serial: 60CA0C40CB5F146F8BD6A0279D4C599CBBA45282 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft Manifest number: 69 Signing time: Tue 28 Jul 2026 00:12:00 +0000 Manifest this update: Tue 28 Jul 2026 00:07:00 +0000 Manifest next update: Wed 29 Jul 2026 01:45:00 +0000 Files and hashes: 1: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: qqQb2hmwiTdHT2+ql+bQcXu/Fy/OiSmSbx3OfjrYSMM=) 2: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 01:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ca:0c:40:cb:5f:14:6f:8b:d6:a0:27:9d:4c:59:9c:bb:a4:52:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363 Validity Not Before: Jul 28 00:07:00 2026 GMT Not After : Jul 29 01:45:00 2026 GMT Subject: CN=D0C36996251A89F82FF5CF83E2D67E1FBEDA96BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:fa:73:09:d9:05:a2:c1:0a:9a:c4:68:19: 70:e6:87:7d:b0:ca:6d:ac:9a:04:57:4a:c5:b8:02: 96:45:59:a5:e8:e3:2c:23:c6:93:88:0a:c2:98:92: 15:c2:b1:a3:c2:d6:3f:77:57:b7:f1:d5:e0:f6:1d: f7:e3:d9:44:ec:a7:bd:2e:82:3c:eb:96:c2:e6:d7: 19:b2:8f:8c:40:bb:85:72:cd:72:74:dc:01:dc:00: 71:32:93:80:7b:e2:00:6c:6b:f6:75:b1:bb:ed:cb: af:09:af:8d:4d:3d:c6:1c:1a:42:7b:07:e9:bd:91: da:6f:7e:a0:ce:12:2a:9c:14:9e:f3:90:a0:f2:2d: cc:1a:f0:c1:80:54:f9:7e:58:96:f0:0a:41:be:e7: f0:43:2d:0f:77:54:b5:65:71:49:5e:82:61:66:a3: 23:47:06:0c:ca:3c:c2:fe:6e:1f:bd:43:b1:04:b5: 63:62:fc:c7:9d:ae:3b:9a:71:8d:0b:cf:70:24:0f: 95:01:da:6a:53:38:20:ee:f0:78:56:b0:4a:8a:ad: d1:32:d6:23:1d:14:cc:10:a4:fc:89:07:77:82:08: e3:3a:1d:33:96:a6:2b:09:c8:97:16:f1:4b:c2:f8: a5:9b:9f:f2:ba:ed:61:c8:b7:69:66:1c:60:de:a7: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C3:69:96:25:1A:89:F8:2F:F5:CF:83:E2:D6:7E:1F:BE:DA:96:BB X509v3 Authority Key Identifier: keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f1:4d:7b:31:c2:3a:67:de:fd:cd:76:65:46:95:ef:d6:6a: 4e:52:c7:d2:e5:4b:10:5a:30:98:1f:a1:94:d7:27:bb:c3:23: 9f:68:16:78:41:9b:b3:fa:96:a6:bf:65:d3:7e:6a:70:4a:0d: 5c:74:4d:36:c3:07:ad:df:60:e9:36:3b:d0:25:d6:52:88:ae: 36:39:31:2a:d5:46:7f:9a:4a:1f:11:d1:3c:69:a1:8d:6d:39: 96:c9:0e:ab:99:b7:5b:0f:41:93:82:6b:e0:fb:0b:2b:a1:84: 8a:05:31:e0:af:ea:be:d9:24:d3:ad:a9:20:7b:76:c2:8f:bb: 2f:3e:15:21:12:fd:17:19:af:25:a9:dc:53:1c:be:c9:de:b6: 4e:96:a3:da:f8:3e:27:00:d3:ae:cc:7f:2c:75:f0:f2:91:ab: 76:c5:65:02:fe:5f:1a:85:20:66:59:79:e4:d1:c6:96:b7:19: 1b:93:18:e8:4b:ab:8e:2f:fd:fd:b4:4f:46:a0:86:49:a0:df: fc:5b:c8:35:c6:ce:be:48:2d:13:4f:ff:21:7a:91:66:92:a4: 3e:b3:59:78:27:2b:43:5b:c1:eb:c2:3f:79:6b:2f:0c:e4:ac: ce:fa:80:5d:d7:c7:bb:48:4b:6a:cd:fe:a2:7f:24:f7:af:c1: eb:8c:2f:c5 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUYMoMQMtfFG+L1qAnnUxZnLukUoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQz NzIzOTM2MzAeFw0yNjA3MjgwMDA3MDBaFw0yNjA3MjkwMTQ1MDBaMDMxMTAvBgNV BAMTKEQwQzM2OTk2MjUxQTg5RjgyRkY1Q0Y4M0UyRDY3RTFGQkVEQTk2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnvpzCdkFosEKmsRoGXDmh32w ym2smgRXSsW4ApZFWaXo4ywjxpOICsKYkhXCsaPC1j93V7fx1eD2Hffj2UTsp70u gjzrlsLm1xmyj4xAu4VyzXJ03AHcAHEyk4B74gBsa/Z1sbvty68Jr41NPcYcGkJ7 B+m9kdpvfqDOEiqcFJ7zkKDyLcwa8MGAVPl+WJbwCkG+5/BDLQ93VLVlcUlegmFm oyNHBgzKPML+bh+9Q7EEtWNi/MedrjuacY0Lz3AkD5UB2mpTOCDu8HhWsEqKrdEy 1iMdFMwQpPyJB3eCCOM6HTOWpisJyJcW8UvC+KWbn/K67WHIt2lmHGDep793AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU0MNpliUaifgv9c+D4tZ+H77alrswHwYDVR0j BBgwFoAUFk63ENeqg8tn7i5wm08ZVDcjk2MwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VS LzAvMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xNjRFQjcxMEQ3QUE4M0NCNjdFRTJFNzA5QjRG MTk1NDM3MjM5MzYzLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VSLzAvMTY0RUI3MTBEN0FB ODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACTxTXsxwjpn 3v3NdmVGle/Wak5Sx9LlSxBaMJgfoZTXJ7vDI59oFnhBm7P6lqa/ZdN+anBKDVx0 TTbDB63fYOk2O9Al1lKIrjY5MSrVRn+aSh8R0TxpoY1tOZbJDquZt1sPQZOCa+D7 CyuhhIoFMeCv6r7ZJNOtqSB7dsKPuy8+FSES/RcZryWp3FMcvsnetk6Wo9r4PicA 067Mfyx18PKRq3bFZQL+XxqFIGZZeeTRxpa3GRuTGOhLq44v/f20T0aghkmg3/xb yDXGzr5ILRNP/yF6kWaSpD6zWXgnK0NbwevCP3lrLwzkrM76gF3Xx7tIS2rN/qJ/ JPevweuML8U= -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:15 2026 by rpki-client