$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft File: 4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json) Hash identifier: lRKRwbPHzeX78juAESUPTM0xTMToZyGi6wafTwcQdK0= Subject key identifier: E8:ED:92:E1:BC:EF:DA:C6:E7:6C:7C:2C:22:61:77:1F:A5:56:55:7D Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Certificate serial: 323DAEFA0DE723E9AE1DE52C41C3B144225F2E7E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft Manifest number: B7 Signing time: Tue 22 Sep 2026 06:05:00 +0000 Manifest this update: Tue 22 Sep 2026 06:00:00 +0000 Manifest next update: Wed 23 Sep 2026 09:52:00 +0000 Files and hashes: 1: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (hash: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=) 2: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: 5znYlnXT3D9gtHmhfO5Q7anb00GvfZsrdameMAgwAyo=) 3: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=) 4: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=) 5: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3d:ae:fa:0d:e7:23:e9:ae:1d:e5:2c:41:c3:b1:44:22:5f:2e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Validity Not Before: Sep 22 06:00:00 2026 GMT Not After : Sep 23 09:52:00 2026 GMT Subject: CN=E8ED92E1BCEFDAC6E76C7C2C2261771FA556557D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:65:f2:36:63:93:d9:58:fd:3c:09:6e:95: f0:04:50:d5:f8:41:51:28:53:0c:27:11:1a:80:f8: c7:32:6b:d6:cb:24:36:46:c6:27:01:62:9e:43:bc: df:dc:2e:90:b9:cf:78:30:3a:d9:d4:4a:af:b4:53: 7f:80:2c:cb:e5:e5:2f:b8:d2:ad:2e:a3:ab:61:31: d3:1b:e0:aa:b3:dd:da:09:1e:be:1c:99:30:1e:7e: 54:85:b2:10:c5:e8:94:4a:3f:82:6b:dd:0a:e9:1e: b0:dd:c5:a3:de:2b:79:29:cb:a8:2b:97:81:10:75: bb:91:48:86:b6:0d:43:da:52:c5:ae:0e:04:c0:f3: 64:b2:af:a0:bf:14:a0:c5:ef:f4:34:ae:8e:ff:d1: 62:be:f2:99:21:19:d1:9a:57:bf:26:7d:b3:23:91: 77:44:a7:10:b4:b0:58:19:1d:17:6f:f9:55:78:32: cd:0c:7a:e2:9a:43:8a:6b:6a:1a:21:d1:ea:90:a4: a3:36:1d:3d:4b:c8:29:17:62:46:bf:57:3d:59:7d: e2:cd:b3:10:9a:93:60:52:ff:9d:f1:85:de:79:60: 64:f1:71:ff:f8:40:44:41:de:81:9b:ba:7d:6a:47: f4:2f:95:61:14:cd:1a:79:be:81:37:45:29:76:24: 2c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:ED:92:E1:BC:EF:DA:C6:E7:6C:7C:2C:22:61:77:1F:A5:56:55:7D X509v3 Authority Key Identifier: keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:95:52:4a:14:33:4a:b4:5d:75:fa:94:af:a1:73:6d:eb:72: dc:f9:71:a2:55:d7:63:9e:24:0e:ab:e0:8a:33:f1:1c:98:12: 30:23:47:93:4f:22:d5:d5:d1:33:e5:a6:1d:86:52:a5:ca:99: 96:db:81:c9:64:25:c7:e2:c7:28:31:00:b2:8c:a6:0e:cf:bd: 92:a0:51:fc:c7:88:96:a4:d7:15:2b:e7:8a:42:76:3b:f2:b1: 22:3d:83:5d:83:c8:23:73:24:3c:61:da:ab:ef:44:84:6e:43: 59:31:f8:8d:f6:03:c3:4f:65:dc:e1:ae:60:75:13:a5:8e:bf: fb:6e:87:89:19:a5:51:89:74:15:e3:60:0a:a2:05:28:91:9b: df:e6:bf:ea:03:dd:ce:15:43:dc:5e:ca:88:e8:9e:85:3f:89: e8:88:bf:ca:77:de:62:09:66:57:e8:b7:3f:d8:d2:fc:ee:88: 1c:85:76:3a:1d:d0:1c:80:73:eb:59:c3:9b:f4:a0:a6:94:b8: 16:08:2e:3c:38:e0:30:e5:23:44:2c:ff:13:c5:ae:6e:27:41: 93:23:d6:b4:22:c0:f1:bc:38:b5:bb:ca:a4:9a:73:c3:0d:c2: f9:a4:05:f1:ac:c2:aa:22:69:82:bb:ed:b6:70:dc:b5:77:46: 6c:ac:1c:b5 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUMj2u+g3nI+muHeUsQcOxRCJfLn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2 OTI3Q0RFNTAeFw0yNjA5MjIwNjAwMDBaFw0yNjA5MjMwOTUyMDBaMDMxMTAvBgNV BAMTKEU4RUQ5MkUxQkNFRkRBQzZFNzZDN0MyQzIyNjE3NzFGQTU1NjU1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSGXyNmOT2Vj9PAlulfAEUNX4 QVEoUwwnERqA+Mcya9bLJDZGxicBYp5DvN/cLpC5z3gwOtnUSq+0U3+ALMvl5S+4 0q0uo6thMdMb4Kqz3doJHr4cmTAeflSFshDF6JRKP4Jr3QrpHrDdxaPeK3kpy6gr l4EQdbuRSIa2DUPaUsWuDgTA82Syr6C/FKDF7/Q0ro7/0WK+8pkhGdGaV78mfbMj kXdEpxC0sFgZHRdv+VV4Ms0MeuKaQ4prahoh0eqQpKM2HT1LyCkXYka/Vz1ZfeLN sxCak2BS/53xhd55YGTxcf/4QERB3oGbun1qR/QvlWEUzRp5voE3RSl2JCzTAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU6O2S4bzv2sbnbHwsImF3H6VWVX0wHwYDVR0j BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXQkVTVFdBUkUvMC80NTky NTYyNDU5Qjg4RTg2MUQ3RTQwQjI2OUI2NEVDQzY5MjdDREU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA B5VSShQzSrRddfqUr6Fzbety3PlxolXXY54kDqvgijPxHJgSMCNHk08i1dXRM+Wm HYZSpcqZltuByWQlx+LHKDEAsoymDs+9kqBR/MeIlqTXFSvnikJ2O/KxIj2DXYPI I3MkPGHaq+9EhG5DWTH4jfYDw09l3OGuYHUTpY6/+26HiRmlUYl0FeNgCqIFKJGb 3+a/6gPdzhVD3F7KiOiehT+J6Ii/ynfeYglmV+i3P9jS/O6IHIV2Oh3QHIBz61nD m/SgppS4FgguPDjgMOUjRCz/E8WubidBkyPWtCLA8bw4tbvKpJpzww3C+aQF8azC qiJpgrvttnDctXdGbKwctQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:58:19 2026 by rpki-client