$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft File: 2963CB623A578334B7033062B58BFED2DC07BB04.mft (raw, json) Hash identifier: cXTFcYbnfkg+QGAvxDF20NH3TRhGuOKUmH3hPrOl9rE= Subject key identifier: A2:3C:3C:50:97:02:29:7F:9F:36:2B:00:26:1E:5D:54:86:44:86:D0 Authority key identifier: 29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 Certificate issuer: /CN=2963CB623A578334B7033062B58BFED2DC07BB04 Certificate serial: 5225D0A55CB21D02C028E473B157F8E10068AD80 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject info access: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 17:54:38 +0000 Manifest this update: Tue 28 Jul 2026 17:49:38 +0000 Manifest next update: Wed 29 Jul 2026 21:30:38 +0000 Files and hashes: 1: 2963CB623A578334B7033062B58BFED2DC07BB04.crl (hash: VWF1+5t/i9mEJ6nErDv//oc5vMn6aOXi9TGeTV8e5vo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:25:d0:a5:5c:b2:1d:02:c0:28:e4:73:b1:57:f8:e1:00:68:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2963CB623A578334B7033062B58BFED2DC07BB04 Validity Not Before: Jul 28 17:49:38 2026 GMT Not After : Jul 29 21:30:38 2026 GMT Subject: CN=A23C3C509702297F9F362B00261E5D54864486D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:cb:05:48:36:15:3a:8c:dc:06:6f:e2:8e: 1f:27:a5:09:a1:8d:97:1c:aa:7f:e8:8e:2c:7d:9d: c6:85:35:59:be:c9:b7:b7:ce:06:29:88:e1:d3:91: 33:16:04:2b:a6:a9:53:3a:95:cc:08:b4:f2:7b:71: 51:04:1e:9f:1f:26:cb:f6:c1:ab:9d:c9:e1:b3:4a: 4a:93:28:a4:ef:05:05:09:2b:b6:d0:2b:96:a4:8a: 03:06:61:63:e7:c4:e1:df:bf:d1:f7:fa:1f:4e:3e: c1:7a:c5:6c:48:16:72:00:43:0e:f2:ec:ac:38:57: 8c:df:a6:a1:81:00:23:20:29:97:1b:70:31:51:74: 5d:c4:70:fb:5b:27:0f:a3:64:a6:5b:29:56:bb:e9: 92:d7:8b:07:dd:7e:30:bd:da:6d:32:a8:ed:aa:f8: 38:d4:e9:c9:9c:cb:62:a9:58:f8:b8:37:cc:39:6a: e2:4b:b0:3d:f5:8d:ae:11:1c:c8:03:75:26:e9:c9: 23:e5:be:07:66:6b:bf:3b:75:c5:dd:d7:00:33:56: 29:b3:5d:9b:e0:d6:e4:a7:0e:61:76:d8:5f:7f:d4: fd:09:34:80:66:26:db:9c:8b:cb:34:a0:ba:30:03: 48:39:e4:56:9f:ba:f9:c3:2b:97:e3:73:25:2e:d0: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3C:3C:50:97:02:29:7F:9F:36:2B:00:26:1E:5D:54:86:44:86:D0 X509v3 Authority Key Identifier: keyid:29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:70:b9:e5:0e:54:1d:cc:4f:a7:ec:61:c4:81:66:37:2a:64: d5:10:fc:b1:c3:f4:e7:43:52:77:75:03:fa:24:8e:4b:b2:68: e7:58:12:55:86:d5:d2:4b:39:83:95:97:45:c4:c7:dc:03:e7: 0c:ef:ad:fc:58:97:9b:db:8d:1d:36:4e:21:d2:87:db:bc:3f: 4c:cd:dd:da:e9:af:5f:e9:1e:ec:63:74:24:86:4a:bd:1c:06: fd:00:da:6e:88:25:55:d0:8b:e6:d5:09:96:1c:e0:c1:32:f0: a7:2b:ad:f7:c5:49:9f:47:c6:c0:d8:82:6d:b2:c4:7e:fe:2a: 37:b3:0e:ae:a2:b3:30:c0:d1:fd:95:80:52:e6:fd:d1:0f:c1: 31:f1:53:65:b9:c8:e1:79:88:bf:6f:11:08:cb:b0:81:27:99: 9f:a7:44:c0:9e:44:e3:86:f6:9a:e7:ac:42:4a:cd:41:9d:24: d0:e9:29:02:ad:b4:b1:01:20:27:d1:13:33:3e:c6:7c:ff:eb: 22:5d:ca:d7:e2:d9:11:5e:e1:27:2a:29:00:6d:08:12:19:25: 73:8e:14:a7:35:3a:b7:2e:bc:1e:84:b8:f2:b1:82:a5:b3:84: 69:97:f8:13:bd:58:f3:28:10:88:34:37:de:e8:78:4b:8c:1e: 34:cb:26:4f -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUUiXQpVyyHQLAKORzsVf44QBorYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJE QzA3QkIwNDAeFw0yNjA3MjgxNzQ5MzhaFw0yNjA3MjkyMTMwMzhaMDMxMTAvBgNV BAMTKEEyM0MzQzUwOTcwMjI5N0Y5RjM2MkIwMDI2MUU1RDU0ODY0NDg2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBssFSDYVOozcBm/ijh8npQmh jZccqn/ojix9ncaFNVm+ybe3zgYpiOHTkTMWBCumqVM6lcwItPJ7cVEEHp8fJsv2 waudyeGzSkqTKKTvBQUJK7bQK5akigMGYWPnxOHfv9H3+h9OPsF6xWxIFnIAQw7y 7Kw4V4zfpqGBACMgKZcbcDFRdF3EcPtbJw+jZKZbKVa76ZLXiwfdfjC92m0yqO2q +DjU6cmcy2KpWPi4N8w5auJLsD31ja4RHMgDdSbpySPlvgdma787dcXd1wAzVimz XZvg1uSnDmF22F9/1P0JNIBmJtuci8s0oLowA0g55FafuvnDK5fjcyUu0DD3AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUojw8UJcCKX+fNisAJh5dVIZEhtAwHwYDVR0j BBgwFoAUKWPLYjpXgzS3AzBitYv+0twHuwQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAv Mjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yOTYzQ0I2MjNBNTc4MzM0QjcwMzMwNjJCNThCRkVE MkRDMDdCQjA0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAvMjk2M0NCNjIzQTU3ODMzNEI3 MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIRwueUOVB3MT6fsYcSB ZjcqZNUQ/LHD9OdDUnd1A/okjkuyaOdYElWG1dJLOYOVl0XEx9wD5wzvrfxYl5vb jR02TiHSh9u8P0zN3drpr1/pHuxjdCSGSr0cBv0A2m6IJVXQi+bVCZYc4MEy8Kcr rffFSZ9HxsDYgm2yxH7+KjezDq6iszDA0f2VgFLm/dEPwTHxU2W5yOF5iL9vEQjL sIEnmZ+nRMCeROOG9prnrEJKzUGdJNDpKQKttLEBICfREzM+xnz/6yJdytfi2RFe 4ScqKQBtCBIZJXOOFKc1OrcuvB6EuPKxgqWzhGmX+BO9WPMoEIg0N97oeEuMHjTL Jk8= -----END CERTIFICATE-----Generated at Tue Jul 28 23:17:27 2026 by rpki-client