$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft File: p7aF2RtOmIGWTnfVtOI591VSoYs.mft (raw, json) Hash identifier: SII40p+0I0FxT2oHSO4nWHgW5aNIPHxqhVKW3cD81z8= Subject key identifier: B7:03:44:CC:A1:81:68:92:84:55:83:9B:00:83:76:09:9F:CB:17:00 Authority key identifier: A7:B6:85:D9:1B:4E:98:81:96:4E:77:D5:B4:E2:39:F7:55:52:A1:8B Certificate issuer: /CN=A7B685D91B4E9881964E77D5B4E239F75552A18B Certificate serial: 0205 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/p7aF2RtOmIGWTnfVtOI591VSoYs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft Manifest number: 0205 Signing time: Wed 05 Nov 2025 09:28:15 +0000 Manifest this update: Wed 05 Nov 2025 09:28:15 +0000 Manifest next update: Fri 07 Nov 2025 09:28:15 +0000 Files and hashes: 1: p7aF2RtOmIGWTnfVtOI591VSoYs.crl (hash: PD2CxZsDnUFN41gqc91mhy6RYD01cfeOsYvW4ho5Rmc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/p7aF2RtOmIGWTnfVtOI591VSoYs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7B685D91B4E9881964E77D5B4E239F75552A18B Validity Not Before: Nov 5 09:28:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B70344CCA18168928455839B008376099FCB1700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:fc:c9:8a:ce:0e:24:02:36:12:19:73:41: a8:7b:60:92:68:db:b4:be:5c:1b:7d:12:bd:22:00: ce:27:d7:35:cd:19:79:a4:8f:cc:d9:df:11:3c:51: f3:db:ba:cb:8c:09:2b:ae:30:15:a9:0b:20:ea:b7: 95:5d:17:2a:33:25:09:a0:8e:ff:d1:33:54:4f:42: 12:0f:5e:ca:6e:c0:68:66:ee:a5:aa:00:fc:94:82: 3f:ec:f7:cf:e7:93:72:01:ce:5e:a1:16:17:61:c7: de:86:b6:53:4f:61:f8:04:bc:e3:c3:90:ef:2c:b6: 76:57:76:f5:91:12:69:7b:a1:36:c4:8f:21:77:f7: 43:8a:14:8a:92:69:02:d3:82:30:99:d0:6d:dd:6e: d3:e9:22:8b:cf:e8:e1:3b:1c:a5:7b:5a:49:13:d1: ae:ac:46:03:11:0a:55:b3:43:77:7a:a0:89:5d:3c: b4:d2:c9:3a:6f:d8:07:3e:ce:de:38:ff:47:d9:5b: 05:68:39:d1:55:a8:23:3e:a1:56:01:ee:ba:e3:bd: c0:c5:60:6d:77:b7:62:aa:b2:00:1d:b2:16:bc:7a: db:4a:ba:d7:32:72:ba:a6:46:aa:d3:f5:2c:7e:b6: c2:51:d3:d6:80:b2:3c:3c:25:d7:3e:6a:69:5e:67: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:03:44:CC:A1:81:68:92:84:55:83:9B:00:83:76:09:9F:CB:17:00 X509v3 Authority Key Identifier: keyid:A7:B6:85:D9:1B:4E:98:81:96:4E:77:D5:B4:E2:39:F7:55:52:A1:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/p7aF2RtOmIGWTnfVtOI591VSoYs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:51:c5:94:9f:3f:de:77:23:1d:a8:e9:45:61:05:bf:37:3d: cd:78:78:aa:0f:c1:e7:8d:a1:88:4d:ed:c7:dc:01:6a:7e:94: 40:30:cf:11:aa:c5:01:04:d0:57:4a:03:80:c6:9b:a4:a6:43: 4a:7e:9d:5c:cd:e3:3e:aa:e1:16:ad:1f:8c:21:d4:24:e1:92: 00:bd:48:37:d1:ff:24:d1:e1:21:20:81:da:83:ff:df:92:10: 78:b9:bf:62:91:7e:9f:50:1f:c9:60:a8:7e:fb:0c:75:f4:5a: 86:e2:05:12:67:32:a3:da:8f:53:88:c4:da:78:58:49:4a:66: a4:2f:18:9d:ae:e1:49:a8:7c:6f:c6:55:3b:0e:fb:2a:c3:04: 76:fd:40:fa:ea:0a:0f:24:d0:41:b2:ed:60:77:e5:15:26:4a: 31:e5:c6:2d:35:2b:3d:94:11:28:ea:96:38:4f:62:2f:32:1a: a3:f7:0c:8c:d1:da:06:81:fa:8f:c4:33:08:16:ef:be:be:c6: 40:68:d8:b8:8a:52:d9:cf:aa:11:17:e8:ed:dd:8e:f8:08:76: d3:54:84:05:5a:5b:7b:7b:e9:1d:5e:9b:6e:c3:03:c7:46:9f: f5:f4:a2:c6:32:25:04:a9:a9:0c:59:bf:ab:06:19:4b:ce:05: f1:3c:15:68 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTdC Njg1RDkxQjRFOTg4MTk2NEU3N0Q1QjRFMjM5Rjc1NTUyQTE4QjAeFw0yNTExMDUw OTI4MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3MDM0NENDQTE4MTY4 OTI4NDU1ODM5QjAwODM3NjA5OUZDQjE3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNSPzJis4OJAI2EhlzQah7YJJo27S+XBt9Er0iAM4n1zXNGXmk j8zZ3xE8UfPbusuMCSuuMBWpCyDqt5VdFyozJQmgjv/RM1RPQhIPXspuwGhm7qWq APyUgj/s98/nk3IBzl6hFhdhx96GtlNPYfgEvOPDkO8stnZXdvWREml7oTbEjyF3 90OKFIqSaQLTgjCZ0G3dbtPpIovP6OE7HKV7WkkT0a6sRgMRClWzQ3d6oIldPLTS yTpv2Ac+zt44/0fZWwVoOdFVqCM+oVYB7rrjvcDFYG13t2KqsgAdsha8ettKutcy crqmRqrT9Sx+tsJR09aAsjw8Jdc+amleZ+PhAgMBAAGjggINMIICCTAdBgNVHQ4E FgQUtwNEzKGBaJKEVYObAIN2CZ/LFwAwHwYDVR0jBBgwFoAUp7aF2RtOmIGWTnfV tOI591VSoYswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNQSVJB UFBTL3A3YUYyUnRPbUlHV1RuZlZ0T0k1OTFWU29Zcy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcDdhRjJSdE9tSUdXVG5mVnRPSTU5MVZTb1lzLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNQSVJBUFBTL3A3YUYyUnRPbUlH V1RuZlZ0T0k1OTFWU29Zcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCuUcWUnz/edyMdqOlFYQW/Nz3NeHiqD8HnjaGITe3H3AFqfpRAMM8RqsUB BNBXSgOAxpukpkNKfp1czeM+quEWrR+MIdQk4ZIAvUg30f8k0eEhIIHag//fkhB4 ub9ikX6fUB/JYKh++wx19FqG4gUSZzKj2o9TiMTaeFhJSmakLxidruFJqHxvxlU7 DvsqwwR2/UD66goPJNBBsu1gd+UVJkox5cYtNSs9lBEo6pY4T2IvMhqj9wyM0doG gfqPxDMIFu++vsZAaNi4ilLZz6oRF+jt3Y74CHbTVIQFWlt7e+kdXptuwwPHRp/1 9KLGMiUEqakMWb+rBhlLzgXxPBVo -----END CERTIFICATE-----Generated at Wed Nov 5 17:34:53 2025 by rpki-client