$ rpki-client -vvvf rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft File: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft (raw, json) Hash identifier: MhNj6eP0mSF+/LcLGUf1ihAEslImq7zqx7OiiNKRlCw= Subject key identifier: CC:3E:0F:52:42:52:E6:BE:F1:89:68:E7:1B:56:7D:70:38:E8:98:8B Authority key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B Certificate issuer: /CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Certificate serial: 0AF7A7D9BD245FBEB838E9F97A6444A614BA4F7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 17:15:40 +0000 Manifest this update: Thu 24 Sep 2026 17:10:40 +0000 Manifest next update: Fri 25 Sep 2026 17:34:40 +0000 Files and hashes: 1: 3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa (hash: OqVP0uLmbV0LsJpz9XRBwsukxxQL93Tm+zzp3azYLeM=) 2: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl (hash: TXfRRE30+lyri3tvjdCHVtXYmC18LvDayPqEHucs9FM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f7:a7:d9:bd:24:5f:be:b8:38:e9:f9:7a:64:44:a6:14:ba:4f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Validity Not Before: Sep 24 17:10:40 2026 GMT Not After : Sep 25 17:34:40 2026 GMT Subject: CN=CC3E0F524252E6BEF18968E71B567D7038E8988B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:83:bd:b3:2b:29:ac:2d:cf:bd:92:4a:43: 09:84:00:4a:78:28:7d:d2:20:f1:01:a9:b5:9e:0b: ca:d2:30:0c:00:d9:8a:eb:5c:0f:df:f6:f1:bf:73: 87:37:a7:7a:a0:50:5e:77:74:71:f9:82:a3:55:36: 0a:f3:66:bd:d0:1d:6a:7f:4f:ad:32:07:56:8d:ac: d4:21:27:1e:6d:52:e9:45:e1:e1:c3:b8:6a:96:01: 27:df:48:f7:04:c8:47:22:f0:06:ce:78:48:1b:09: 7d:1d:9f:7f:49:67:e5:0d:c4:70:85:33:52:cc:56: 18:b3:4e:f0:7c:17:1a:4b:11:d6:60:dc:3a:30:d2: 7a:93:5a:99:76:da:4e:a1:6b:49:06:b8:4b:22:56: af:8c:ee:31:f9:69:26:a8:d6:6a:d0:1a:21:bd:48: 0e:a0:de:42:a5:26:11:ee:da:f8:68:12:42:2b:ac: 2f:83:67:cc:cb:e4:82:a1:78:96:9d:64:f9:50:33: c5:12:7a:1a:61:46:a8:c3:4a:b5:e9:8d:70:de:e3: ec:cc:08:91:12:96:26:d3:e8:fe:12:5b:68:cf:09: 6c:d0:81:3b:53:21:77:33:b0:1c:1a:57:6e:df:77: 29:ca:75:28:62:09:ad:4b:9a:9e:3a:19:b2:07:1c: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3E:0F:52:42:52:E6:BE:F1:89:68:E7:1B:56:7D:70:38:E8:98:8B X509v3 Authority Key Identifier: keyid:BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e6:20:e2:c7:cd:f7:e6:00:bf:40:82:bc:36:37:90:95:9f: 2e:c5:2f:cb:62:57:12:bc:28:a7:f7:9b:d6:f2:c8:5a:cc:99: fb:ad:15:ce:90:83:d5:af:c8:48:4d:47:a0:c1:ee:a5:40:89: d8:5d:5e:ff:7e:e2:58:4e:b1:b4:1b:7b:b8:f2:66:08:16:42: ef:86:d2:31:6e:9f:e5:36:5e:35:27:06:f3:5d:af:c0:80:64: 8f:9b:f8:8e:c4:b2:ab:0c:fe:d4:c9:77:e6:86:5a:69:e4:8c: 7d:9b:c0:d3:a9:db:97:c9:ec:6a:d0:31:d7:98:0b:09:90:29: 9a:e6:ae:9c:2c:52:77:8f:49:11:19:d2:8c:76:ad:8b:6d:4b: 44:7a:4d:08:25:98:02:0a:00:38:1a:cf:a8:f9:b0:f8:84:27: 35:ff:6e:52:f1:0a:88:c8:85:88:46:b5:6b:4d:88:75:02:16: 9b:05:83:47:49:63:3d:63:0e:b9:bb:33:a1:86:85:27:62:8e: 49:7f:37:fa:a8:d5:9b:bd:63:a1:6a:d2:08:7d:c5:30:2d:8f: c3:5a:08:f7:3a:f8:d0:80:c5:d1:3b:21:5c:9c:f5:7e:99:93: bb:cb:e5:dc:f7:f3:b5:a6:86:7f:f6:a5:c6:d4:26:b0:ab:46: 7d:2a:9a:aa -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUCven2b0kX764OOn5emREphS6T38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwMUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJB Q0UzQzEwQjAeFw0yNjA5MjQxNzEwNDBaFw0yNjA5MjUxNzM0NDBaMDMxMTAvBgNV BAMTKENDM0UwRjUyNDI1MkU2QkVGMTg5NjhFNzFCNTY3RDcwMzhFODk4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpIO9sysprC3PvZJKQwmEAEp4 KH3SIPEBqbWeC8rSMAwA2YrrXA/f9vG/c4c3p3qgUF53dHH5gqNVNgrzZr3QHWp/ T60yB1aNrNQhJx5tUulF4eHDuGqWASffSPcEyEci8AbOeEgbCX0dn39JZ+UNxHCF M1LMVhizTvB8FxpLEdZg3Dow0nqTWpl22k6ha0kGuEsiVq+M7jH5aSao1mrQGiG9 SA6g3kKlJhHu2vhoEkIrrC+DZ8zL5IKheJadZPlQM8USehphRqjDSrXpjXDe4+zM CJESlibT6P4SW2jPCWzQgTtTIXczsBwaV27fdynKdShiCa1Lmp46GbIHHH3rAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUzD4PUkJS5r7xiWjnG1Z9cDjomIswHwYDVR0j BBgwFoAUvQH/5a0oeZnjPEWG6R5jQqzjwQswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAv QkQwMUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9CRDAxRkZFNUFEMjg3OTk5RTMzQzQ1ODZFOTFFNjM0 MkFDRTNDMTBCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAvQkQwMUZGRTVBRDI4Nzk5OUUz M0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHzmIOLHzffmAL9Agrw2 N5CVny7FL8tiVxK8KKf3m9byyFrMmfutFc6Qg9WvyEhNR6DB7qVAidhdXv9+4lhO sbQbe7jyZggWQu+G0jFun+U2XjUnBvNdr8CAZI+b+I7EsqsM/tTJd+aGWmnkjH2b wNOp25fJ7GrQMdeYCwmQKZrmrpwsUnePSREZ0ox2rYttS0R6TQglmAIKADgaz6j5 sPiEJzX/blLxCojIhYhGtWtNiHUCFpsFg0dJYz1jDrm7M6GGhSdijkl/N/qo1Zu9 Y6Fq0gh9xTAtj8NaCPc6+NCAxdE7IVyc9X6Zk7vL5dz387Wmhn/2pcbUJrCrRn0q mqo= -----END CERTIFICATE-----Generated at Thu Sep 24 22:36:18 2026 by rpki-client