$ rpki-client -vvvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json) Hash identifier: DUcXnNcVmaFyefmUqh271rmsnuc9ef5baRejmVp1a+Q= Subject key identifier: D0:AC:BC:8F:93:0D:AA:0E:6D:1A:8F:D5:F5:CE:D4:51:FF:36:BB:83 Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Certificate serial: 08CB450AABACB0CF5322EC7C007ABE431F937AF0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft Manifest number: B5 Signing time: Tue 22 Sep 2026 08:20:21 +0000 Manifest this update: Tue 22 Sep 2026 08:15:21 +0000 Manifest next update: Wed 23 Sep 2026 12:05:21 +0000 Files and hashes: 1: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=) 2: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: e1KuLOYz/JRzi1w68TLP8aOsofYPzAsNeo1C3hEOPUM=) 3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=) 4: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cb:45:0a:ab:ac:b0:cf:53:22:ec:7c:00:7a:be:43:1f:93:7a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Validity Not Before: Sep 22 08:15:21 2026 GMT Not After : Sep 23 12:05:21 2026 GMT Subject: CN=D0ACBC8F930DAA0E6D1A8FD5F5CED451FF36BB83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:eb:98:86:1b:5f:4a:e7:59:25:3f:58:bc: 5d:ad:e5:5a:a4:31:82:f1:82:aa:f2:fc:db:4c:db: 85:75:c8:ef:3a:05:e8:ae:54:03:f5:00:f2:c2:9e: b5:41:63:2a:47:c9:7c:2a:50:c6:28:94:23:92:5c: 72:20:99:1b:69:cf:16:72:ec:d8:e1:86:d1:50:14: c7:61:18:ee:0e:66:5a:d3:b1:3c:46:f6:f2:ad:d8: 59:0b:44:f5:b5:94:1b:1c:28:02:ae:ae:48:a7:93: 11:10:70:a8:ad:e0:bb:1c:ac:5a:b0:af:6e:df:b1: 70:9d:98:34:e1:b8:4b:fa:d2:8a:4e:68:4e:51:47: e1:89:fd:9c:a7:68:13:a2:64:15:d1:2e:40:49:24: a7:68:09:b4:28:d2:12:8c:26:39:f7:5b:39:91:59: a2:09:2e:58:d8:ba:12:86:4f:20:2a:fa:94:82:dc: 4a:77:77:7f:08:85:31:72:4e:0e:52:38:e0:57:c3: 52:45:1f:57:a5:a0:b9:b3:03:f2:5f:64:34:e0:54: 98:64:69:9a:f1:c2:08:30:e5:97:15:b6:33:27:fc: ee:45:34:f8:3e:1f:31:73:0c:bd:89:e8:f4:3f:30: 4e:99:b7:a5:62:ba:bd:8c:1d:4b:41:30:93:6c:90: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AC:BC:8F:93:0D:AA:0E:6D:1A:8F:D5:F5:CE:D4:51:FF:36:BB:83 X509v3 Authority Key Identifier: keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:d8:77:6f:dc:b8:87:f8:e4:7b:7c:ef:f4:c6:9f:10:df: e2:4c:6d:fa:79:47:79:be:a4:3f:69:70:f1:51:83:f5:ea:23: 3e:03:f5:2d:36:40:09:d8:c5:ae:c6:da:b3:e4:3a:97:78:13: 8d:d1:b2:55:17:58:9c:fc:58:71:f7:03:42:63:a6:5e:e3:ed: e0:c3:b0:23:1c:71:24:f2:f2:7c:cb:2b:30:96:1c:39:c8:a7: e1:c5:41:ac:7d:9a:11:c0:1a:0c:4c:3d:88:f8:bd:06:d6:c6: 19:40:82:87:cc:d7:8c:e8:d7:d9:3e:73:85:8f:92:f8:c6:59: 19:b5:17:fa:4b:9b:1d:0a:ac:0a:22:61:e3:9f:68:bb:e7:60: c2:ee:bb:c4:46:c3:5f:59:6d:62:b9:bc:0b:9e:92:7e:97:d8: f8:98:a0:a6:79:34:21:a8:39:d6:f2:c0:b6:a7:4d:75:e9:a5: 66:e5:2a:e6:b9:58:16:3c:c8:d3:c6:fc:65:78:f3:f6:a0:f5: 93:c3:81:6f:38:cb:d4:ee:b4:58:f0:92:d1:39:f0:13:cb:28: 89:74:d4:a4:ca:95:4e:da:bd:85:71:4a:ee:b9:49:25:37:49: f8:88:52:56:d9:34:48:65:0c:d5:ae:f9:09:c1:68:2b:1b:72: bf:48:0f:3c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUCMtFCqussM9TIux8AHq+Qx+TevAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEz MjU3MDVGMDAeFw0yNjA5MjIwODE1MjFaFw0yNjA5MjMxMjA1MjFaMDMxMTAvBgNV BAMTKEQwQUNCQzhGOTMwREFBMEU2RDFBOEZENUY1Q0VENDUxRkYzNkJCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhOuYhhtfSudZJT9YvF2t5Vqk MYLxgqry/NtM24V1yO86BeiuVAP1APLCnrVBYypHyXwqUMYolCOSXHIgmRtpzxZy 7NjhhtFQFMdhGO4OZlrTsTxG9vKt2FkLRPW1lBscKAKurkinkxEQcKit4LscrFqw r27fsXCdmDThuEv60opOaE5RR+GJ/ZynaBOiZBXRLkBJJKdoCbQo0hKMJjn3WzmR WaIJLljYuhKGTyAq+pSC3Ep3d38IhTFyTg5SOOBXw1JFH1eloLmzA/JfZDTgVJhk aZrxwggw5ZcVtjMn/O5FNPg+HzFzDL2J6PQ/ME6Zt6Viur2MHUtBMJNskLe5AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU0Ky8j5MNqg5tGo/V9c7UUf82u4MwHwYDVR0j BBgwFoAUaFhM0cfrCAjhri3kwZXM4TJXBfAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAv Njg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEzMjU3MDVGMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS82ODU4NENEMUM3RUIwODA4RTFBRTJERTRDMTk1Q0NF MTMyNTcwNUYwLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAvNjg1ODRDRDFDN0VCMDgwOEUx QUUyREU0QzE5NUNDRTEzMjU3MDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI3W2Hdv3LiH+OR7fO/0 xp8Q3+JMbfp5R3m+pD9pcPFRg/XqIz4D9S02QAnYxa7G2rPkOpd4E43RslUXWJz8 WHH3A0Jjpl7j7eDDsCMccSTy8nzLKzCWHDnIp+HFQax9mhHAGgxMPYj4vQbWxhlA gofM14zo19k+c4WPkvjGWRm1F/pLmx0KrAoiYeOfaLvnYMLuu8RGw19ZbWK5vAue kn6X2PiYoKZ5NCGoOdbywLanTXXppWblKua5WBY8yNPG/GV48/ag9ZPDgW84y9Tu tFjwktE58BPLKIl01KTKlU7avYVxSu65SSU3SfiIUlbZNEhlDNWu+QnBaCsbcr9I Dzw= -----END CERTIFICATE-----Generated at Tue Sep 22 22:54:04 2026 by rpki-client