$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft File: j7Fo7f1zY3PNzDeZraCrPXeebaI.mft (raw, json) Hash identifier: DTl123152YPghkKGB7u9wJBaOSzPpenetctQzeBOI08= Subject key identifier: 53:15:DB:F9:5E:E4:02:9A:80:B1:6D:2C:CE:81:CB:B6:56:F1:74:B4 Authority key identifier: 8F:B1:68:ED:FD:73:63:73:CD:CC:37:99:AD:A0:AB:3D:77:9E:6D:A2 Certificate issuer: /CN=8FB168EDFD736373CDCC3799ADA0AB3D779E6DA2 Certificate serial: 0D80 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/j7Fo7f1zY3PNzDeZraCrPXeebaI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft Manifest number: 0D7E Signing time: Wed 05 Nov 2025 09:28:19 +0000 Manifest this update: Wed 05 Nov 2025 09:28:19 +0000 Manifest next update: Fri 07 Nov 2025 09:28:19 +0000 Files and hashes: 1: hqRZcWjWN8WrmwT0V6s3nN5Xz4E.roa (hash: R0BnmauMWKKzP9G7scILSymxCo0aSQMrZ2DKl6lBHAs=) 2: j7Fo7f1zY3PNzDeZraCrPXeebaI.crl (hash: RWUT12fMXjhe8qu3b21aogBC+G6/P1TqfKYMCAKY99w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/j7Fo7f1zY3PNzDeZraCrPXeebaI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB168EDFD736373CDCC3799ADA0AB3D779E6DA2 Validity Not Before: Nov 5 09:28:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5315DBF95EE4029A80B16D2CCE81CBB656F174B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:15:6c:30:4b:40:6b:ce:62:a6:f9:99:64: 1c:d8:f5:77:3a:50:fb:67:0f:ca:84:8e:8c:38:e0: 22:b6:61:b6:7f:9e:90:14:88:a5:b1:02:34:0b:eb: 0d:30:d1:d5:3b:e7:23:47:d3:72:d3:d8:92:f6:dd: 4a:a6:97:6f:f1:59:6b:42:de:bf:ab:26:35:d1:02: 09:7b:b8:65:0a:ac:97:9b:36:4e:d2:97:7a:b4:9a: 3c:59:8e:e5:11:73:e2:ed:e4:cd:17:63:6b:61:86: 76:c5:01:3f:c2:18:1e:51:47:3f:81:b1:db:91:b5: cb:03:75:e3:37:c9:1b:55:f1:f9:25:a7:45:06:11: 70:e1:8b:46:0f:3e:a4:e3:65:c9:9d:c6:db:13:a2: c4:c9:de:b5:a2:e8:c9:71:91:74:75:3b:9d:9b:bc: f1:c8:12:e3:84:c6:98:7e:de:8a:1b:29:55:50:e6: 78:f1:90:40:ff:95:07:cf:66:c9:59:7d:d6:17:3f: 25:f9:0f:d7:6c:8a:eb:61:59:ac:3d:c2:79:6e:f9: 33:65:2f:a0:92:08:79:bc:dd:12:3c:a0:1b:49:6b: 6e:82:f2:97:63:56:bd:7a:bf:26:24:35:df:e5:29: d7:81:c9:67:27:37:cc:4c:e1:65:fa:08:dc:b5:25: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:15:DB:F9:5E:E4:02:9A:80:B1:6D:2C:CE:81:CB:B6:56:F1:74:B4 X509v3 Authority Key Identifier: keyid:8F:B1:68:ED:FD:73:63:73:CD:CC:37:99:AD:A0:AB:3D:77:9E:6D:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/j7Fo7f1zY3PNzDeZraCrPXeebaI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:33:04:ab:a6:c1:e4:d1:5a:62:8b:c8:22:1c:59:bc:0c:a9: 0f:7f:d5:5f:2e:91:6f:a9:88:d1:b1:d1:7e:c0:34:5e:94:3a: f4:fd:c0:0d:42:c5:d9:e4:89:a1:d6:9f:2f:6e:8e:66:3f:b3: 4e:e9:79:c1:3a:33:5e:02:86:70:6b:41:1d:fb:71:7e:99:7d: b5:4b:85:c4:cc:18:e6:32:2b:55:1e:47:b9:29:5e:11:62:72: 9c:17:d5:be:5b:36:cb:8e:d8:2c:20:d3:44:a2:46:40:0f:3c: e5:fe:62:3f:42:9a:13:03:3a:74:c8:02:0d:9d:c8:d9:e8:8b: 54:64:b3:05:39:12:20:4e:64:3c:40:77:ce:fc:ea:d7:39:e1: e4:a5:b3:c7:01:eb:25:50:93:0b:73:0d:b5:49:47:1e:fb:8a: 00:fc:58:4d:21:8f:9d:7a:6b:2d:4d:78:52:46:aa:2c:04:7a: 3e:ec:69:29:01:65:61:ae:5c:47:c2:21:6f:ba:8b:8d:44:1d: ed:b3:2a:85:f1:92:79:66:d8:3e:58:85:ea:6a:d9:3f:98:c1: 92:f3:f8:ac:13:4a:30:3c:4b:82:15:9d:73:14:e6:f8:e5:e2: a4:10:69:27:d3:cb:bc:a9:32:01:7c:c3:c4:1f:74:68:ea:37: 67:3e:34:af -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEZC MTY4RURGRDczNjM3M0NEQ0MzNzk5QURBMEFCM0Q3NzlFNkRBMjAeFw0yNTExMDUw OTI4MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUzMTVEQkY5NUVFNDAy OUE4MEIxNkQyQ0NFODFDQkI2NTZGMTc0QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9DxVsMEtAa85ipvmZZBzY9Xc6UPtnD8qEjow44CK2YbZ/npAU iKWxAjQL6w0w0dU75yNH03LT2JL23Uqml2/xWWtC3r+rJjXRAgl7uGUKrJebNk7S l3q0mjxZjuURc+Lt5M0XY2thhnbFAT/CGB5RRz+BsduRtcsDdeM3yRtV8fklp0UG EXDhi0YPPqTjZcmdxtsTosTJ3rWi6MlxkXR1O52bvPHIEuOExph+3oobKVVQ5njx kED/lQfPZslZfdYXPyX5D9dsiuthWaw9wnlu+TNlL6CSCHm83RI8oBtJa26C8pdj Vr16vyYkNd/lKdeByWcnN8xM4WX6CNy1JXvfAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUUxXb+V7kApqAsW0szoHLtlbxdLQwHwYDVR0jBBgwFoAUj7Fo7f1zY3PNzDeZ raCrPXeebaIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQldJWi9q N0ZvN2YxelkzUE56RGVacmFDclBYZWViYUkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2o3Rm83ZjF6WTNQTnpEZVpyYUNyUFhlZWJhSS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0JXSVovajdGbzdmMXpZM1BOekRlWnJhQ3JQ WGVlYmFJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAEMzBKum weTRWmKLyCIcWbwMqQ9/1V8ukW+piNGx0X7ANF6UOvT9wA1CxdnkiaHWny9ujmY/ s07pecE6M14ChnBrQR37cX6ZfbVLhcTMGOYyK1UeR7kpXhFicpwX1b5bNsuO2Cwg 00SiRkAPPOX+Yj9CmhMDOnTIAg2dyNnoi1RkswU5EiBOZDxAd8786tc54eSls8cB 6yVQkwtzDbVJRx77igD8WE0hj516ay1NeFJGqiwEej7saSkBZWGuXEfCIW+6i41E He2zKoXxknlm2D5Yhepq2T+YwZLz+KwTSjA8S4IVnXMU5vjl4qQQaSfTy7ypMgF8 w8QfdGjqN2c+NK8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:15:50 2025 by rpki-client