$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft File: 4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json) Hash identifier: wrfoyCskaECzd50PsqKvlsfyxNzS06KkPixvngafTqU= Subject key identifier: 6E:13:B7:4F:47:83:DD:44:5F:2E:B4:80:CA:FD:BD:FF:C1:00:E6:2C Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Certificate serial: 1BC695E4E6AC0A6E6EE21FEAFA07C5A289AFD378 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 11:12:02 +0000 Manifest this update: Mon 21 Sep 2026 11:07:02 +0000 Manifest next update: Tue 22 Sep 2026 14:03:02 +0000 Files and hashes: 1: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=) 2: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (hash: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=) 3: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: hJIpCjEQ3n/NgzPtAzM9CLg4S3ZNH6aKCM3zOiMiNtI=) 4: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=) 5: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:95:e4:e6:ac:0a:6e:6e:e2:1f:ea:fa:07:c5:a2:89:af:d3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Validity Not Before: Sep 21 11:07:02 2026 GMT Not After : Sep 22 14:03:02 2026 GMT Subject: CN=6E13B74F4783DD445F2EB480CAFDBDFFC100E62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:27:57:1c:45:b0:9c:17:16:87:8d:e4:cd: e2:c6:3c:44:56:ce:39:cc:83:b8:a2:5d:38:29:e7: 29:25:76:41:99:c4:1b:23:f7:21:ec:dd:d3:c2:46: bb:a1:d0:30:b9:ef:a2:29:4a:10:3e:eb:c4:3f:2c: 8c:1b:72:c5:c5:0b:26:63:39:2a:30:87:61:35:e0: 94:a8:85:5a:9a:0a:8b:7f:b7:79:56:a2:13:71:80: 95:65:f6:98:08:9b:79:47:a4:c6:b3:ed:8e:e4:8b: 3b:b8:db:5a:74:de:55:fd:99:16:7a:d9:99:3c:31: 38:87:fe:c4:35:f5:7e:12:01:d2:3f:d6:d7:1d:2d: 6e:8b:f0:f6:51:24:2e:c0:16:bb:3d:67:f4:6b:d8: c5:f3:d2:38:d0:06:95:c7:0f:97:ab:ac:2c:6c:c2: d4:2e:70:6d:a2:27:2c:79:8f:62:5c:0f:9f:97:94: a8:46:ad:e9:ca:13:c9:22:70:00:8e:ce:1f:e8:b1: 14:c8:07:9d:05:ec:19:18:f3:60:6c:9e:2c:44:e8: 34:6c:17:0f:40:63:7e:6b:a0:6c:29:dd:d8:31:9e: 06:03:19:6e:4c:c7:b4:53:fa:de:22:b3:a8:f5:e6: 41:de:5c:2c:84:a6:eb:d0:59:ef:54:33:72:15:81: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:13:B7:4F:47:83:DD:44:5F:2E:B4:80:CA:FD:BD:FF:C1:00:E6:2C X509v3 Authority Key Identifier: keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bc:ab:a0:69:7a:d3:ed:a4:9e:4a:43:a3:dd:12:80:78:85: 7e:37:72:eb:4a:69:e8:ee:db:39:e9:0e:35:e3:6e:1f:08:76: 3a:a0:73:80:60:f4:c2:af:a8:67:b6:7f:03:3d:ba:c2:85:3b: 02:16:ba:3b:b3:f9:54:31:73:ec:04:9c:d0:dc:ba:78:b6:67: 58:13:e4:88:27:fe:63:81:d1:db:73:11:58:24:96:9d:ef:0c: 03:76:5a:e7:6b:a2:0a:1b:ef:77:8a:c4:66:1a:73:65:32:a6: 1a:af:8b:d8:88:77:af:4c:53:b2:6a:d8:06:d9:2c:2e:31:2c: df:63:24:ec:93:33:1e:d2:c3:13:26:44:51:61:ef:92:9e:4a: db:dc:dc:21:24:35:3d:f3:87:15:60:4b:c3:d9:e2:f5:da:9c: f4:f2:14:f3:bc:ce:e4:79:d5:51:96:b9:ab:f9:f7:7d:0c:dc: d4:59:7f:a1:15:06:a7:8b:c5:70:00:36:de:eb:9e:19:68:c5: 40:8e:69:aa:91:ab:6d:a6:46:a3:5e:b6:08:9e:97:57:eb:c4: b5:9a:39:46:7f:a1:30:02:c9:c3:36:6f:cb:7e:ef:d7:60:99: fa:52:c5:2b:70:97:e1:32:ac:0e:75:e3:32:a8:db:19:ca:30: 8d:f9:3d:b4 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUG8aV5OasCm5u4h/q+gfFoomv03gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2 OTI3Q0RFNTAeFw0yNjA5MjExMTA3MDJaFw0yNjA5MjIxNDAzMDJaMDMxMTAvBgNV BAMTKDZFMTNCNzRGNDc4M0RENDQ1RjJFQjQ4MENBRkRCREZGQzEwMEU2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CydXHEWwnBcWh43kzeLGPERW zjnMg7iiXTgp5ykldkGZxBsj9yHs3dPCRruh0DC576IpShA+68Q/LIwbcsXFCyZj OSowh2E14JSohVqaCot/t3lWohNxgJVl9pgIm3lHpMaz7Y7kizu421p03lX9mRZ6 2Zk8MTiH/sQ19X4SAdI/1tcdLW6L8PZRJC7AFrs9Z/Rr2MXz0jjQBpXHD5errCxs wtQucG2iJyx5j2JcD5+XlKhGrenKE8kicACOzh/osRTIB50F7BkY82BsnixE6DRs Fw9AY35roGwp3dgxngYDGW5Mx7RT+t4is6j15kHeXCyEpuvQWe9UM3IVgTgFAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUbhO3T0eD3URfLrSAyv29/8EA5iwwHwYDVR0j BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXQkVTVFdBUkUvMC80NTky NTYyNDU5Qjg4RTg2MUQ3RTQwQjI2OUI2NEVDQzY5MjdDREU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA GryroGl60+2knkpDo90SgHiFfjdy60pp6O7bOekONeNuHwh2OqBzgGD0wq+oZ7Z/ Az26woU7Aha6O7P5VDFz7ASc0Ny6eLZnWBPkiCf+Y4HR23MRWCSWne8MA3Za52ui Chvvd4rEZhpzZTKmGq+L2Ih3r0xTsmrYBtksLjEs32Mk7JMzHtLDEyZEUWHvkp5K 29zcISQ1PfOHFWBLw9ni9dqc9PIU87zO5HnVUZa5q/n3fQzc1Fl/oRUGp4vFcAA2 3uueGWjFQI5pqpGrbaZGo162CJ6XV+vEtZo5Rn+hMALJwzZvy37v12CZ+lLFK3CX 4TKsDnXjMqjbGcowjfk9tA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:50:22 2026 by rpki-client