$ rpki-client -vvvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: xhi4Yikz+bvuRu7ya8lZqM87rALp7iXi4zVnuguV5po= Subject key identifier: EC:6E:33:ED:64:36:B8:34:2F:C0:39:B9:B0:D1:57:91:3B:CC:9C:D5 Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 35E31983D921BCE7324594D8D0ADFF9B3FC0FFC1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 06:51:28 +0000 Manifest this update: Mon 21 Sep 2026 06:46:28 +0000 Manifest next update: Tue 22 Sep 2026 06:54:28 +0000 Files and hashes: 1: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 2: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) 3: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: ajIcrbQvasAmEVnSQAQUwbTpzy27GUKak4g8lMtwdYM=) 4: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:19:83:d9:21:bc:e7:32:45:94:d8:d0:ad:ff:9b:3f:c0:ff:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Sep 21 06:46:28 2026 GMT Not After : Sep 22 06:54:28 2026 GMT Subject: CN=EC6E33ED6436B8342FC039B9B0D157913BCC9CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:0c:0d:18:2f:f8:45:89:b0:a4:87:e6:41: d4:cf:be:86:52:fa:61:08:f3:f0:b9:50:79:c4:94: d6:c5:a8:34:b1:2b:d7:0e:bb:e8:b4:38:11:72:fc: 3b:7f:7a:d8:62:e2:c4:97:e0:ed:7c:cd:98:7f:78: 10:68:74:3f:36:13:fc:95:0a:03:90:8b:5f:f8:d2: b2:89:e2:5c:ed:47:ef:94:7d:fe:b7:b6:c4:4c:28: bf:32:db:1d:7f:4a:f0:4a:83:c7:37:f5:52:f3:74: 04:b4:57:05:35:10:74:07:9f:0d:70:17:bc:dc:be: 7e:9c:4d:a6:8c:ca:39:da:57:1b:14:b7:ee:8b:23: d1:29:7e:56:33:e5:d4:98:b5:26:02:16:e8:f5:01: c0:46:4b:ab:53:8f:d7:05:6d:3c:c4:83:a6:6b:df: 4f:63:26:cd:36:ab:34:06:81:6e:02:b1:80:61:2f: e8:30:da:0b:65:93:a2:96:d7:2a:93:42:08:ac:85: d3:3f:bd:ae:71:51:d5:c4:57:07:cb:54:fa:99:b6: 33:57:7d:2c:83:04:2b:bc:9a:af:92:fa:2c:34:a5: 72:73:9e:58:3d:5d:f5:ab:2d:93:df:db:ce:8c:35: 93:50:6d:89:ee:49:9f:eb:e0:89:0c:e3:4f:26:2f: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:33:ED:64:36:B8:34:2F:C0:39:B9:B0:D1:57:91:3B:CC:9C:D5 X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0a:06:a4:c0:fb:67:fd:34:19:d5:e0:df:ff:70:2c:c7:dc: 70:6f:09:59:25:6e:39:ca:14:8b:c8:d0:f5:8f:d6:70:fd:f8: b8:81:c5:b5:db:9d:3a:9f:b4:24:1e:b1:1b:78:0d:5a:17:65: 05:e6:cd:9b:d4:58:a1:2f:4d:ad:42:f9:47:79:e5:9c:3c:ce: 00:ba:2d:bd:51:ad:0f:24:38:0a:6b:2e:79:7c:8c:e7:88:ee: 37:a7:da:ba:fb:9c:ea:03:60:4b:24:23:ca:cc:de:fa:60:4f: 07:91:6b:58:28:7c:bc:b7:3d:10:60:9d:4c:a7:76:8f:00:db: c0:09:38:59:be:15:99:3f:45:2c:09:58:dc:c1:24:e1:99:eb: e3:2e:d5:0c:12:a1:95:b9:92:d1:63:b8:0d:41:6f:ee:9b:41: bc:f1:91:d2:33:cf:94:16:b0:37:02:82:98:22:37:98:a0:22: 56:29:19:9c:a3:6d:30:d9:fe:d1:dd:66:cc:c4:bf:02:53:00: 79:23:63:da:9a:e8:1f:26:13:97:59:4d:1c:a8:2c:81:69:51: 9e:32:1a:bf:f7:97:72:70:81:83:8c:fa:16:d5:0c:39:a6:fb: 7e:ca:89:cc:09:06:75:a9:6c:7e:f5:d1:72:db:c2:33:39:77: 16:fa:e2:df -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUNeMZg9khvOcyRZTY0K3/mz/A/8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA5MjEwNjQ2MjhaFw0yNjA5MjIwNjU0MjhaMDMxMTAvBgNV BAMTKEVDNkUzM0VENjQzNkI4MzQyRkMwMzlCOUIwRDE1NzkxM0JDQzlDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4wwNGC/4RYmwpIfmQdTPvoZS +mEI8/C5UHnElNbFqDSxK9cOu+i0OBFy/Dt/ethi4sSX4O18zZh/eBBodD82E/yV CgOQi1/40rKJ4lztR++Uff63tsRMKL8y2x1/SvBKg8c39VLzdAS0VwU1EHQHnw1w F7zcvn6cTaaMyjnaVxsUt+6LI9EpflYz5dSYtSYCFuj1AcBGS6tTj9cFbTzEg6Zr 309jJs02qzQGgW4CsYBhL+gw2gtlk6KW1yqTQgishdM/va5xUdXEVwfLVPqZtjNX fSyDBCu8mq+S+iw0pXJznlg9XfWrLZPf286MNZNQbYnuSZ/r4IkM408mL1E9AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU7G4z7WQ2uDQvwDm5sNFXkTvMnNUwHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAoKBqTA+2f9 NBnV4N//cCzH3HBvCVklbjnKFIvI0PWP1nD9+LiBxbXbnTqftCQesRt4DVoXZQXm zZvUWKEvTa1C+Ud55Zw8zgC6Lb1RrQ8kOAprLnl8jOeI7jen2rr7nOoDYEskI8rM 3vpgTweRa1gofLy3PRBgnUyndo8A28AJOFm+FZk/RSwJWNzBJOGZ6+Mu1QwSoZW5 ktFjuA1Bb+6bQbzxkdIzz5QWsDcCgpgiN5igIlYpGZyjbTDZ/tHdZszEvwJTAHkj Y9qa6B8mE5dZTRyoLIFpUZ4yGr/3l3JwgYOM+hbVDDmm+37KicwJBnWpbH710XLb wjM5dxb64t8= -----END CERTIFICATE-----Generated at Mon Sep 21 23:24:35 2026 by rpki-client