$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json) Hash identifier: Yaml1U+1T16HIecjHQkOg2eeRrLfnUccXwFJTuqyjnU= Subject key identifier: BF:E9:87:C2:8E:7E:E7:DF:D3:04:E5:BB:6C:B1:BA:BF:08:2B:68:D4 Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Certificate serial: 5D7370FC4429584AD9AA33A04A05D977DBCD6092 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft Manifest number: B8 Signing time: Wed 23 Sep 2026 07:06:54 +0000 Manifest this update: Wed 23 Sep 2026 07:01:54 +0000 Manifest next update: Thu 24 Sep 2026 10:11:54 +0000 Files and hashes: 1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: GMiDKXKm5zJFUO3ud3v9NF+Y8DT2xCJ804t4GxC5LGo=) 2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:73:70:fc:44:29:58:4a:d9:aa:33:a0:4a:05:d9:77:db:cd:60:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Validity Not Before: Sep 23 07:01:54 2026 GMT Not After : Sep 24 10:11:54 2026 GMT Subject: CN=BFE987C28E7EE7DFD304E5BB6CB1BABF082B68D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:3c:91:78:51:29:c3:1c:e3:8a:17:13:32: 93:fc:b6:9a:a8:1d:2a:74:bf:69:6a:1b:f7:db:14: 4b:91:ad:99:82:8e:01:0c:48:f3:0c:7f:59:3b:a5: 36:4f:f2:ae:c9:db:1e:08:27:82:e6:5d:80:d1:20: 0a:60:8e:1e:af:c6:f7:dc:c0:92:0c:5a:71:1b:50: bb:54:7b:b9:e9:c1:6f:e0:e6:dc:4e:1d:fd:c8:6a: 47:25:e5:c9:44:92:31:64:04:0d:c7:69:e0:93:f4: 6b:0e:2c:d1:c8:2d:23:71:23:12:ed:4d:60:ac:c6: 26:69:22:7f:04:c1:57:f0:4a:c1:1e:e0:75:d2:95: 45:52:c1:2a:dd:1d:3b:07:cf:2c:4b:f4:7f:e1:34: 39:a0:b5:b6:c6:e9:35:ba:1b:9b:3c:85:67:57:d3: 56:56:9c:80:20:9f:83:a9:bc:c4:2d:0c:cb:3d:59: fe:5b:65:90:9c:9b:b9:73:36:c5:ed:9c:15:eb:5e: 97:45:20:b5:89:d9:3d:a9:b5:fc:88:6b:80:41:6d: bb:5b:50:3e:b6:7c:46:57:e0:0e:8f:99:03:5b:81: 52:f8:30:1a:e0:18:ae:52:91:f6:cf:2f:74:35:ca: 3b:0f:f8:a3:8e:40:71:cc:6d:45:5b:cd:de:c6:e0: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E9:87:C2:8E:7E:E7:DF:D3:04:E5:BB:6C:B1:BA:BF:08:2B:68:D4 X509v3 Authority Key Identifier: keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:33:35:48:cd:6c:ba:e1:67:bd:6b:66:c0:2e:86:1d:7b:5f: 1a:e5:c3:7f:6f:b4:d0:f3:85:13:68:23:74:63:6d:37:49:6a: b5:4d:eb:43:90:01:7c:70:37:b0:2c:33:e7:ac:fe:a7:98:08: 9c:ec:c8:30:34:22:db:67:e1:fa:eb:ec:1c:e2:48:51:1b:1e: fc:2d:c0:ba:d5:e7:5f:53:87:96:6f:36:cd:97:1b:eb:b8:f4: 22:57:4d:00:60:22:2f:2d:51:cb:22:62:09:69:71:84:0f:3c: b0:43:1f:25:7d:5d:b2:99:a9:2c:ab:2e:58:31:84:e8:8d:c7: b3:05:26:58:15:e8:10:a2:ee:8a:66:61:48:e3:d3:9b:5b:9b: b2:61:5f:e8:15:14:2e:6a:75:9e:ba:7a:cb:94:22:26:eb:2b: 98:66:12:a8:75:af:09:bf:d3:fe:40:ba:79:9e:50:2f:a2:cc: 18:4a:90:df:b6:25:ea:b6:b4:44:33:0c:ac:0d:83:8b:3b:bc: 8e:5c:ad:2e:df:e1:02:85:60:c8:ba:74:61:3f:5e:7d:96:17: 48:df:cd:29:41:a9:89:7c:27:c7:b2:41:e9:d7:3c:e0:a8:20: 23:60:27:ab:2e:78:b6:e6:d5:04:c9:d5:46:7e:a5:a2:45:ae: a9:84:27:d1 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUXXNw/EQpWErZqjOgSgXZd9vNYJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5 OTdDNkU4MjAeFw0yNjA5MjMwNzAxNTRaFw0yNjA5MjQxMDExNTRaMDMxMTAvBgNV BAMTKEJGRTk4N0MyOEU3RUU3REZEMzA0RTVCQjZDQjFCQUJGMDgyQjY4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2jyReFEpwxzjihcTMpP8tpqo HSp0v2lqG/fbFEuRrZmCjgEMSPMMf1k7pTZP8q7J2x4IJ4LmXYDRIApgjh6vxvfc wJIMWnEbULtUe7npwW/g5txOHf3Iakcl5clEkjFkBA3HaeCT9GsOLNHILSNxIxLt TWCsxiZpIn8EwVfwSsEe4HXSlUVSwSrdHTsHzyxL9H/hNDmgtbbG6TW6G5s8hWdX 01ZWnIAgn4OpvMQtDMs9Wf5bZZCcm7lzNsXtnBXrXpdFILWJ2T2ptfyIa4BBbbtb UD62fEZX4A6PmQNbgVL4MBrgGK5SkfbPL3Q1yjsP+KOOQHHMbUVbzd7G4K+bAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUv+mHwo5+59/TBOW7bLG6vwgraNQwHwYDVR0j BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0 QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5MzVIzWy64We9 a2bALoYde18a5cN/b7TQ84UTaCN0Y203SWq1TetDkAF8cDewLDPnrP6nmAic7Mgw NCLbZ+H66+wc4khRGx78LcC61edfU4eWbzbNlxvruPQiV00AYCIvLVHLImIJaXGE DzywQx8lfV2ymaksqy5YMYTojcezBSZYFegQou6KZmFI49ObW5uyYV/oFRQuanWe unrLlCIm6yuYZhKoda8Jv9P+QLp5nlAvoswYSpDftiXqtrREMwysDYOLO7yOXK0u 3+EChWDIunRhP159lhdI380pQamJfCfHskHp1zzgqCAjYCerLni25tUEydVGfqWi Ra6phCfR -----END CERTIFICATE-----Generated at Thu Sep 24 04:03:39 2026 by rpki-client