$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json) Hash identifier: 6RXW2nm6+7IVNqR295URNVU1ID/TCYJ1vcLr11lYkvA= Subject key identifier: 24:A5:3A:DA:0B:82:04:84:E1:99:FC:81:DB:FC:33:ED:FB:A8:21:21 Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Certificate serial: 625484403DF589A7CCD8059EDAE0CF0593C0C9BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 12:03:50 +0000 Manifest this update: Tue 28 Jul 2026 11:58:50 +0000 Manifest next update: Wed 29 Jul 2026 14:59:50 +0000 Files and hashes: 1: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=) 2: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: R5Ke5l0QD9skh6Em6Zn9HdxRYEFQBk6aI19WEt/NiQg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:54:84:40:3d:f5:89:a7:cc:d8:05:9e:da:e0:cf:05:93:c0:c9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Validity Not Before: Jul 28 11:58:50 2026 GMT Not After : Jul 29 14:59:50 2026 GMT Subject: CN=24A53ADA0B820484E199FC81DBFC33EDFBA82121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:06:c7:62:a4:99:48:df:8b:ba:d0:17:58: 04:4c:03:36:86:8e:33:4e:ac:dc:65:eb:d5:a6:17: a0:ff:c1:1b:69:ef:09:55:66:3b:37:f4:73:c9:c4: 7b:b4:79:6e:fa:9a:a6:d5:af:50:6d:5b:25:34:89: 90:81:ff:81:93:54:dd:a9:c9:15:62:f0:24:dd:8c: e0:20:a8:f7:02:c6:2c:41:1b:cf:60:49:96:12:05: 27:a7:4c:b3:35:18:1b:de:21:98:0a:62:f3:24:cb: bb:05:06:24:3c:55:91:25:8f:a6:eb:96:a8:7b:38: cd:23:a6:03:95:cb:22:68:5e:9e:ec:3a:77:15:48: 33:88:d0:db:17:19:64:c3:08:fc:33:85:92:e8:18: 9c:35:40:01:05:1c:c1:38:34:8e:94:05:d5:d7:aa: 6a:c7:48:c5:90:bf:7b:21:43:89:1f:1d:58:ba:fb: 2e:f1:d3:7d:06:28:6a:6e:90:97:06:80:92:bb:cb: b1:f1:47:43:8b:17:5c:0b:63:04:47:05:af:c2:1e: 62:a4:41:54:5b:88:fb:19:0c:45:e4:f4:9b:da:48: a9:be:05:54:6a:60:cb:87:d0:66:e6:5f:8a:e3:03: 61:99:eb:d6:cd:aa:54:56:7d:1b:0d:7a:9d:67:50: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A5:3A:DA:0B:82:04:84:E1:99:FC:81:DB:FC:33:ED:FB:A8:21:21 X509v3 Authority Key Identifier: keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9b:52:7e:f2:e1:21:f0:bd:1e:4a:dd:1b:fe:f2:5d:e5:29: 37:39:97:b5:38:eb:11:cc:df:82:72:21:e8:e9:7c:c8:d7:32: b6:df:1d:4a:ad:4a:3d:b1:be:36:8b:f4:e6:0d:fa:d5:cc:45: 4d:19:8b:a6:88:c1:ab:c9:9b:4d:a0:55:7f:66:ad:17:7a:5d: 4c:20:81:51:7e:6e:68:4d:23:3d:d8:44:97:70:50:41:49:0e: cd:c5:69:08:2e:9d:9f:c2:ad:a5:25:8e:e5:01:a4:a6:5c:83: 8a:70:bd:58:4b:36:3a:eb:47:c1:ee:e2:af:1f:e0:93:c0:15: 05:10:26:63:14:6b:6d:94:39:f9:f7:e4:47:22:08:66:a6:9a: d7:71:84:92:9a:0f:cd:46:8c:e3:2e:85:b9:04:f6:fa:0a:bf: 5b:1b:85:a2:6a:4e:72:f2:ba:5d:cb:94:a2:10:a5:1d:5c:97: 36:b2:84:90:02:17:05:24:e3:bc:8b:4e:de:a6:5e:65:eb:05: f6:f3:33:96:bc:66:c9:9a:da:2e:f6:86:fe:31:e8:f0:11:c1: b4:63:42:91:c4:d0:ec:f9:c1:b6:df:b8:bd:86:f1:c5:04:16: 0f:f4:a4:70:f5:cf:dd:d1:13:a9:0d:ce:08:02:7b:e1:f8:b9: a7:9f:8f:cf -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUYlSEQD31iafM2AWe2uDPBZPAyb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5 OTdDNkU4MjAeFw0yNjA3MjgxMTU4NTBaFw0yNjA3MjkxNDU5NTBaMDMxMTAvBgNV BAMTKDI0QTUzQURBMEI4MjA0ODRFMTk5RkM4MURCRkMzM0VERkJBODIxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRQbHYqSZSN+LutAXWARMAzaG jjNOrNxl69WmF6D/wRtp7wlVZjs39HPJxHu0eW76mqbVr1BtWyU0iZCB/4GTVN2p yRVi8CTdjOAgqPcCxixBG89gSZYSBSenTLM1GBveIZgKYvMky7sFBiQ8VZElj6br lqh7OM0jpgOVyyJoXp7sOncVSDOI0NsXGWTDCPwzhZLoGJw1QAEFHME4NI6UBdXX qmrHSMWQv3shQ4kfHVi6+y7x030GKGpukJcGgJK7y7HxR0OLF1wLYwRHBa/CHmKk QVRbiPsZDEXk9JvaSKm+BVRqYMuH0GbmX4rjA2GZ69bNqlRWfRsNep1nUCPpAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUJKU62guCBIThmfyB2/wz7fuoISEwHwYDVR0j BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0 QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqm1J+8uEh8L0e St0b/vJd5Sk3OZe1OOsRzN+CciHo6XzI1zK23x1KrUo9sb42i/TmDfrVzEVNGYum iMGryZtNoFV/Zq0Xel1MIIFRfm5oTSM92ESXcFBBSQ7NxWkILp2fwq2lJY7lAaSm XIOKcL1YSzY660fB7uKvH+CTwBUFECZjFGttlDn59+RHIghmpprXcYSSmg/NRozj LoW5BPb6Cr9bG4Wiak5y8rpdy5SiEKUdXJc2soSQAhcFJOO8i07epl5l6wX28zOW vGbJmtou9ob+MejwEcG0Y0KRxNDs+cG237i9hvHFBBYP9KRw9c/d0ROpDc4IAnvh +Lmnn4/P -----END CERTIFICATE-----Generated at Tue Jul 28 18:30:49 2026 by rpki-client