$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft File: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft (raw, json) Hash identifier: iyuICIV8Klgl0lQD0eiQAP6ZvFvEesLZQ6c8RuF9ZE4= Subject key identifier: 67:1A:E7:2A:81:DA:3E:F4:12:47:6E:8A:6E:4F:49:0A:9C:41:90:4D Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A Certificate issuer: /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A Certificate serial: 230D46B863C31FD81E8A566171BA2A1C3D74BE75 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft Manifest number: BA Signing time: Wed 23 Sep 2026 04:16:34 +0000 Manifest this update: Wed 23 Sep 2026 04:11:34 +0000 Manifest next update: Thu 24 Sep 2026 07:32:34 +0000 Files and hashes: 1: 3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (hash: Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=) 2: 3232332e3136352e382e302f32342d3234203d3e20313333393535.roa (hash: 211j9d7v6cqKfTJDkyYktBBdrb7sSCkBHmY96MN17tA=) 3: 3232332e3136352e31302e302f32342d3234203d3e20313333393535.roa (hash: 34le8Xt54+WlmHbA7MxBAZytMwZ88iAqDKmDa3GmapE=) 4: 3232332e3136352e31322e302f32342d3234203d3e20313333393535.roa (hash: 9G6BmFXh8fI5XHgtWuAKkjyuUhCjr0NlC/99CzJuGCU=) 5: 3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (hash: vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=) 6: AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl (hash: hBfwMGS2om3cAbHPJBVhRhMmtHzxbxrQDCfVGvh1HwI=) 7: 3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (hash: fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0d:46:b8:63:c3:1f:d8:1e:8a:56:61:71:ba:2a:1c:3d:74:be:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A Validity Not Before: Sep 23 04:11:34 2026 GMT Not After : Sep 24 07:32:34 2026 GMT Subject: CN=671AE72A81DA3EF412476E8A6E4F490A9C41904D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:e2:7f:2c:76:9a:2a:0f:27:88:cf:23:15: fa:b3:0a:f8:d5:71:f9:6a:97:f7:9a:5c:6e:74:1e: 2b:c7:8a:97:f5:29:38:dd:fb:94:11:3c:f0:80:ca: 86:34:37:36:a2:da:98:67:47:68:bd:ce:a7:cb:65: 47:f4:6a:6d:14:b7:cd:cc:98:d2:c7:0e:c9:f9:00: 59:52:f7:44:98:c9:43:ef:84:dd:0e:49:91:0e:b5: a0:e0:23:bb:ff:6b:db:fc:da:ab:4c:cc:b6:85:de: 27:eb:90:0e:e2:e8:18:e1:7b:ae:38:ec:ab:e1:c8: 3c:79:18:03:26:2f:e1:f7:ea:b2:09:83:e9:36:08: bd:a5:0e:89:63:02:6d:dc:f9:dd:2d:24:f6:27:99: e8:17:27:6b:47:29:2f:bf:a2:79:23:0f:05:5a:b8: 37:e7:dd:8a:ee:9b:b7:d0:60:4d:fa:67:64:7b:e4: 85:ae:e4:13:77:61:b2:ba:a9:94:8b:c9:95:8b:92: f4:12:b0:48:c3:1f:d9:77:f8:5e:7d:2f:45:20:3c: 31:17:9b:17:dd:19:e3:e3:18:95:ec:d4:94:4d:9d: 2e:85:1d:63:bf:60:89:f1:6f:13:58:90:2f:6f:c9: 15:19:66:23:53:a6:3d:ae:c0:e1:75:7d:37:5e:77: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1A:E7:2A:81:DA:3E:F4:12:47:6E:8A:6E:4F:49:0A:9C:41:90:4D X509v3 Authority Key Identifier: keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:18:f2:d7:1f:c3:07:6b:4a:cf:e0:ab:57:cf:37:3a:13: 5a:bc:97:a7:84:dd:4c:da:99:a9:de:16:83:f0:88:07:31:05: ba:9c:ca:eb:ba:8f:2b:3b:8b:3f:14:4c:cd:4c:53:32:c5:57: aa:c5:a9:78:e2:4d:77:f7:94:7b:62:98:a5:db:17:ef:29:19: b2:08:73:87:0d:a1:94:87:e6:09:1a:c9:c7:b7:e0:9a:43:02: 26:ae:21:ac:ef:59:a0:db:26:64:fa:7c:9d:bc:80:46:bf:33: 13:8a:5e:c2:b8:fb:21:ce:a2:3c:40:b8:4c:cf:40:a7:c5:1f: e5:56:25:09:95:fa:5b:66:bc:c2:07:ff:3c:a7:00:0e:7b:54: 0e:cc:3c:7a:1e:d3:07:22:55:b9:52:0a:8a:0d:77:b1:e6:a9: 48:5c:e3:65:04:fb:51:64:ed:82:8f:fd:74:1f:2e:9e:d3:3c: 9f:b6:e4:33:c6:8a:72:1f:f7:ad:c7:bc:6a:c1:21:cf:61:66: 6c:82:ef:bf:d4:28:72:a6:92:a1:23:00:be:42:da:f5:20:b1: b8:69:5f:9e:30:dc:64:87:f6:4b:86:04:9d:2e:0b:df:93:23: ff:0e:b6:b1:dc:d8:65:1c:55:da:28:ea:02:c3:17:e3:3b:5b: 6f:69:ec:02 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUIw1GuGPDH9geilZhcboqHD10vnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4ODgyMjQyMTMy OTdFRUIzQTAeFw0yNjA5MjMwNDExMzRaFw0yNjA5MjQwNzMyMzRaMDMxMTAvBgNV BAMTKDY3MUFFNzJBODFEQTNFRjQxMjQ3NkU4QTZFNEY0OTBBOUM0MTkwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6OJ/LHaaKg8niM8jFfqzCvjV cflql/eaXG50HivHipf1KTjd+5QRPPCAyoY0Nzai2phnR2i9zqfLZUf0am0Ut83M mNLHDsn5AFlS90SYyUPvhN0OSZEOtaDgI7v/a9v82qtMzLaF3ifrkA7i6Bjhe644 7KvhyDx5GAMmL+H36rIJg+k2CL2lDoljAm3c+d0tJPYnmegXJ2tHKS+/onkjDwVa uDfn3Yrum7fQYE36Z2R75IWu5BN3YbK6qZSLyZWLkvQSsEjDH9l3+F59L0UgPDEX mxfdGePjGJXs1JRNnS6FHWO/YInxbxNYkC9vyRUZZiNTpj2uwOF1fTded98TAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUZxrnKoHaPvQSR26Kbk9JCpxBkE0wHwYDVR0j BBgwFoAUrXnL3rORxw8Kna14iCJCEyl+6zowDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdELUNP TS1UVy8wL0FENzlDQkRFQjM5MUM3MEYwQTlEQUQ3ODg4MjI0MjEzMjk3RUVCM0Eu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUQ3OUNCREVCMzkxQzcwRjBBOURBRDc4 ODgyMjQyMTMyOTdFRUIzQS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRC1DT00tVFcvMC9BRDc5 Q0JERUIzOTFDNzBGMEE5REFENzg4ODIyNDIxMzI5N0VFQjNBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA HkoY8tcfwwdrSs/gq1fPNzoTWryXp4TdTNqZqd4Wg/CIBzEFupzK67qPKzuLPxRM zUxTMsVXqsWpeOJNd/eUe2KYpdsX7ykZsghzhw2hlIfmCRrJx7fgmkMCJq4hrO9Z oNsmZPp8nbyARr8zE4pewrj7Ic6iPEC4TM9Ap8Uf5VYlCZX6W2a8wgf/PKcADntU Dsw8eh7TByJVuVIKig13seapSFzjZQT7UWTtgo/9dB8untM8n7bkM8aKch/3rce8 asEhz2FmbILvv9QocqaSoSMAvkLa9SCxuGlfnjDcZIf2S4YEnS4L35Mj/w62sdzY ZRxV2ijqAsMX4ztbb2nsAg== -----END CERTIFICATE-----Generated at Wed Sep 23 20:24:46 2026 by rpki-client