$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json) Hash identifier: 2pr9D6PgmrB0vxkEyqpGItjB5jFC9BNre9ma9bj4lHo= Subject key identifier: 88:0B:32:28:D2:D2:5A:EB:24:93:8B:DE:BB:31:3F:9B:41:61:55:18 Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42 Certificate serial: 24C53CEC8825F0E584472AB2FBEBDB85119345D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft Manifest number: B7 Signing time: Mon 21 Sep 2026 05:56:21 +0000 Manifest this update: Mon 21 Sep 2026 05:51:21 +0000 Manifest next update: Tue 22 Sep 2026 08:03:21 +0000 Files and hashes: 1: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: aXXZw4fqShQdvktnDZOiQ3MG0ayRH8cIUz3chg/n04g=) 2: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=) 3: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=) 4: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=) 5: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=) 6: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c5:3c:ec:88:25:f0:e5:84:47:2a:b2:fb:eb:db:85:11:93:45:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42 Validity Not Before: Sep 21 05:51:21 2026 GMT Not After : Sep 22 08:03:21 2026 GMT Subject: CN=880B3228D2D25AEB24938BDEBB313F9B41615518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:3e:13:51:25:3a:4b:8e:1d:73:96:26:05: b4:2a:1e:84:68:70:03:ed:14:63:bb:7f:4e:70:62: 8e:28:ba:5a:7c:71:56:3f:f7:4b:af:a7:ce:bd:79: 3f:de:53:34:4b:75:17:00:4a:aa:ac:55:83:24:39: 82:09:6b:23:59:c1:e6:b5:d2:1e:41:97:10:74:7a: 41:24:2a:5b:5a:51:09:c6:46:f6:69:80:e5:b6:e2: 4b:39:fe:d0:7d:95:b2:56:fb:17:e3:fd:a5:bc:a4: 2e:06:50:d4:62:3a:35:ec:8b:a7:0f:bd:eb:54:a0: 31:e6:ad:17:d2:53:99:8a:ce:48:23:67:63:c5:d8: ed:7e:0c:c5:30:8d:2f:ac:c7:a6:9f:a7:01:fb:53: f0:86:e3:69:85:56:de:10:74:be:29:8a:55:b6:3d: 34:db:02:a9:28:6d:5e:d6:ab:72:ac:7e:5c:52:88: 2b:23:01:23:c4:77:d7:dc:58:a5:52:0e:24:0d:0b: c6:f2:02:97:c2:3a:2c:e0:04:73:5e:d0:f5:16:79: e5:ac:82:3d:8c:1b:8d:37:f2:e2:30:87:a7:ae:51: 92:b4:12:03:a6:d8:38:70:3e:22:b2:74:1d:13:1e: bf:57:f6:ce:40:f4:ed:27:ae:c0:b7:b6:6f:4e:e0: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0B:32:28:D2:D2:5A:EB:24:93:8B:DE:BB:31:3F:9B:41:61:55:18 X509v3 Authority Key Identifier: keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6a:c7:c2:f1:05:15:72:1a:0f:1a:ff:29:1a:31:fb:53:9b: 76:07:76:37:e8:a0:c1:d0:0c:1a:15:12:54:48:b3:20:6e:c3: e2:4d:f6:99:0a:89:09:4b:c9:a0:9b:4a:79:b3:af:3d:ee:15: b3:e5:d5:84:de:e1:63:47:9d:1a:58:d1:e7:5d:26:a1:c8:86: 4c:1b:ac:e7:5e:7a:f1:bc:41:01:34:da:d8:65:0b:19:65:46: 43:42:d7:d0:41:eb:10:76:f9:ee:58:52:f8:cf:3b:d6:0b:09: f8:00:c3:49:8b:bc:4c:07:cd:ae:14:10:76:5b:95:97:15:79: cd:b0:dd:45:05:69:d2:c5:91:79:2d:77:c7:17:b9:eb:0b:ac: 7d:08:6e:3c:14:95:e4:0d:e7:bf:75:7f:b7:cb:29:4f:95:e9: b2:73:81:a4:1b:78:0b:16:96:49:9f:46:53:5e:12:9a:2a:3c: d2:b1:68:56:f8:7b:d5:e7:f4:e2:85:65:10:56:41:b4:42:19: aa:1d:48:84:b6:ea:4b:97:33:34:9c:f6:e7:68:03:62:a0:ec: 6d:6f:24:5e:72:49:06:c0:e5:73:86:2b:82:d4:fb:dc:66:14: c6:c0:eb:b6:24:f9:02:8f:47:bb:e0:e0:0e:d1:79:25:90:a5: 85:33:30:b5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUJMU87Igl8OWERyqy++vbhRGTRdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhERDcx OEU3MEQ0MjAeFw0yNjA5MjEwNTUxMjFaFw0yNjA5MjIwODAzMjFaMDMxMTAvBgNV BAMTKDg4MEIzMjI4RDJEMjVBRUIyNDkzOEJERUJCMzEzRjlCNDE2MTU1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqkT4TUSU6S44dc5YmBbQqHoRo cAPtFGO7f05wYo4oulp8cVY/90uvp869eT/eUzRLdRcASqqsVYMkOYIJayNZwea1 0h5BlxB0ekEkKltaUQnGRvZpgOW24ks5/tB9lbJW+xfj/aW8pC4GUNRiOjXsi6cP vetUoDHmrRfSU5mKzkgjZ2PF2O1+DMUwjS+sx6afpwH7U/CG42mFVt4QdL4pilW2 PTTbAqkobV7Wq3KsflxSiCsjASPEd9fcWKVSDiQNC8byApfCOizgBHNe0PUWeeWs gj2MG4038uIwh6euUZK0EgOm2DhwPiKydB0THr9X9s5A9O0nrsC3tm9O4HeFAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUiAsyKNLSWuskk4veuzE/m0FhVRgwHwYDVR0j BBgwFoAUQyc09AkgIFymRDo7mTCN1xjnDUIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdEUy8w LzQzMjczNEY0MDkyMDIwNUNBNjQ0M0EzQjk5MzA4REQ3MThFNzBENDIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhE RDcxOEU3MEQ0Mi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRFMvMC80MzI3MzRGNDA5MjAyMDVD QTY0NDNBM0I5OTMwOERENzE4RTcwRDQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmrHwvEFFXIaDxr/ KRox+1Obdgd2N+igwdAMGhUSVEizIG7D4k32mQqJCUvJoJtKebOvPe4Vs+XVhN7h Y0edGljR510mociGTBus51568bxBATTa2GULGWVGQ0LX0EHrEHb57lhS+M871gsJ +ADDSYu8TAfNrhQQdluVlxV5zbDdRQVp0sWReS13xxe56wusfQhuPBSV5A3nv3V/ t8spT5XpsnOBpBt4CxaWSZ9GU14Smio80rFoVvh71ef04oVlEFZBtEIZqh1IhLbq S5czNJz252gDYqDsbW8kXnJJBsDlc4YrgtT73GYUxsDrtiT5Ao9Hu+DgDtF5JZCl hTMwtQ== -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:18 2026 by rpki-client