$ rpki-client -vvf rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft File: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft (raw, json) Hash identifier: DcHUWOELTiuOCcoyts4hXPLpz8hRLB+Gxq6yW55yxRw= Subject key identifier: DF:C8:C6:3E:78:92:FA:A0:16:B2:94:F6:BA:3D:48:7C:EF:70:BF:98 Authority key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B Certificate issuer: /CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Certificate serial: 7A4F9932E2159C3AD1A9B4C668D51E4091218CA9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 07:12:47 +0000 Manifest this update: Tue 28 Jul 2026 07:07:47 +0000 Manifest next update: Wed 29 Jul 2026 08:54:47 +0000 Files and hashes: 1: 3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa (hash: OqVP0uLmbV0LsJpz9XRBwsukxxQL93Tm+zzp3azYLeM=) 2: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl (hash: 8TSkTvdpUbMDfzw7cAEKpDhWyJrSoRNjbkwPY/qeuLo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4f:99:32:e2:15:9c:3a:d1:a9:b4:c6:68:d5:1e:40:91:21:8c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Validity Not Before: Jul 28 07:07:47 2026 GMT Not After : Jul 29 08:54:47 2026 GMT Subject: CN=DFC8C63E7892FAA016B294F6BA3D487CEF70BF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:ba:11:2c:76:29:4b:03:1b:c0:92:29:76: 77:5a:9d:36:8b:b1:22:a5:f6:0f:8d:68:8a:60:8c: 92:40:cd:2e:ba:a1:31:bf:53:11:5e:ad:a8:e4:3e: 54:c1:1f:c2:4c:96:65:e7:56:af:e3:5a:fa:6c:4f: 41:40:34:a2:45:2a:e3:8a:ff:b1:33:0f:21:54:43: c8:8a:90:30:13:da:07:41:f6:c6:65:59:78:05:8b: a1:7d:ab:75:3b:07:30:04:7e:1d:d7:d6:7e:ba:19: 55:d9:cf:87:e0:d8:b0:c8:78:7e:b7:b6:a2:bb:43: bd:ca:9a:02:00:47:62:ba:30:06:51:9e:37:d0:e0: e9:fc:4d:95:a7:02:92:00:8a:fd:8f:be:24:f4:cb: 6e:e8:cf:06:47:1f:89:1c:29:56:c0:0f:f2:08:af: e0:c8:47:40:9b:84:0a:dd:38:81:ce:3f:25:7b:79: b6:ba:4b:e9:4f:fc:1e:f1:31:fc:d0:78:c8:18:4e: 7c:3c:94:41:3f:7a:5c:1e:9b:8d:fc:c3:c6:4c:df: 0e:de:eb:a9:6f:ae:3b:1f:33:4c:22:7d:fd:dd:5f: 71:87:74:53:10:23:bd:dd:48:de:1e:16:85:55:9b: 37:6b:da:91:2b:04:b4:0e:18:94:c2:c7:5d:af:14: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C8:C6:3E:78:92:FA:A0:16:B2:94:F6:BA:3D:48:7C:EF:70:BF:98 X509v3 Authority Key Identifier: keyid:BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:be:aa:df:19:15:ec:b5:00:96:5f:e9:8c:ab:03:dc:0c:c5: 06:48:96:11:1f:e0:00:20:5e:8c:63:b1:ff:7f:0f:cf:64:1e: 1b:64:4c:14:aa:6e:97:92:63:75:4b:84:c5:6a:ec:c6:cf:3c: 0b:23:e3:92:5d:f8:d9:6b:a3:df:73:51:40:31:e3:29:90:39: 42:ce:b6:04:d7:f8:2e:92:28:86:49:84:6d:1e:13:a4:54:82: e9:ce:b0:2a:7f:d7:18:7c:60:ec:50:84:8f:40:35:62:b2:b3: a2:7a:04:22:bf:b6:19:16:51:b5:ef:29:0a:21:c6:d6:36:4a: 6b:e2:39:65:c1:a7:4e:37:ce:e7:76:6f:11:37:28:ad:a0:e3: 07:a7:14:6f:0c:ea:27:94:91:64:94:58:e9:fa:df:38:66:e7: 0d:8c:02:f7:ea:53:75:3c:6f:31:ce:f4:78:e2:70:77:06:14: 70:57:93:c1:54:ca:2d:90:ef:b6:fa:d0:87:05:27:f2:d5:f8: 7c:e2:0f:a5:84:97:e7:0d:26:b1:d7:47:09:cf:77:df:1d:f0: 4f:65:91:0e:42:b2:47:d5:46:24:18:51:8d:26:0d:ee:0b:ee: cb:62:c0:64:13:be:c3:06:90:ea:19:7e:b9:38:d0:45:a8:36: f2:45:48:b3 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUek+ZMuIVnDrRqbTGaNUeQJEhjKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwMUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJB Q0UzQzEwQjAeFw0yNjA3MjgwNzA3NDdaFw0yNjA3MjkwODU0NDdaMDMxMTAvBgNV BAMTKERGQzhDNjNFNzg5MkZBQTAxNkIyOTRGNkJBM0Q0ODdDRUY3MEJGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89roRLHYpSwMbwJIpdndanTaL sSKl9g+NaIpgjJJAzS66oTG/UxFerajkPlTBH8JMlmXnVq/jWvpsT0FANKJFKuOK /7EzDyFUQ8iKkDAT2gdB9sZlWXgFi6F9q3U7BzAEfh3X1n66GVXZz4fg2LDIeH63 tqK7Q73KmgIAR2K6MAZRnjfQ4On8TZWnApIAiv2PviT0y27ozwZHH4kcKVbAD/II r+DIR0CbhArdOIHOPyV7eba6S+lP/B7xMfzQeMgYTnw8lEE/elwem438w8ZM3w7e 66lvrjsfM0wiff3dX3GHdFMQI73dSN4eFoVVmzdr2pErBLQOGJTCx12vFN0BAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU38jGPniS+qAWspT2uj1IfO9wv5gwHwYDVR0j BBgwFoAUvQH/5a0oeZnjPEWG6R5jQqzjwQswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAv QkQwMUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9CRDAxRkZFNUFEMjg3OTk5RTMzQzQ1ODZFOTFFNjM0 MkFDRTNDMTBCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAvQkQwMUZGRTVBRDI4Nzk5OUUz M0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEu+qt8ZFey1AJZf6Yyr A9wMxQZIlhEf4AAgXoxjsf9/D89kHhtkTBSqbpeSY3VLhMVq7MbPPAsj45Jd+Nlr o99zUUAx4ymQOULOtgTX+C6SKIZJhG0eE6RUgunOsCp/1xh8YOxQhI9ANWKys6J6 BCK/thkWUbXvKQohxtY2SmviOWXBp043zud2bxE3KK2g4wenFG8M6ieUkWSUWOn6 3zhm5w2MAvfqU3U8bzHO9HjicHcGFHBXk8FUyi2Q77b60IcFJ/LV+HziD6WEl+cN JrHXRwnPd98d8E9lkQ5CskfVRiQYUY0mDe4L7stiwGQTvsMGkOoZfrk40EWoNvJF SLM= -----END CERTIFICATE-----Generated at Tue Jul 28 19:51:36 2026 by rpki-client