$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft File: POusQFclHIqquVTcIgsiSWvu9WM.mft (raw, json) Hash identifier: qN59GDhQloO5ANzQiFsqUVJMQsVdn5vaVavSz4+nQvY= Subject key identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Certificate serial: 03AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft Manifest number: 03A0 Signing time: Tue 24 Jun 2025 10:01:28 +0000 Manifest this update: Tue 24 Jun 2025 10:01:28 +0000 Manifest next update: Thu 26 Jun 2025 10:01:28 +0000 Files and hashes: 1: POusQFclHIqquVTcIgsiSWvu9WM.crl (hash: zMSTQFYtZpuM5M2Cr34lrFJ1HPNt0zSuOw6+OilQOAo=) 2: XC4Us5letSN9wSAxml54Gor9YVA.roa (hash: DuQyRZJyC/4CPp02vlagbKqPh1oZOnwzCnVn2HW+gqQ=) 3: juiwpCIDvIAphERKA7ryIbUCp6A.roa (hash: 7iS7IE8nK4IGzaVTM0DTiryjMO5B+V9utqs5ZmjJejA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Validity Not Before: Jun 24 10:01:28 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8CD023F29E25DE9D3BBA766BB4D1201BA7074DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:c8:2c:ab:24:28:82:73:e4:d4:7b:89:27: 22:a9:1c:80:9a:96:6e:19:52:cb:4c:30:68:87:42: 7f:4e:6d:9d:c7:f8:91:a0:af:55:5e:9d:a6:a5:5f: be:57:be:b8:69:95:fe:cd:2a:2d:8c:8a:73:01:61: 27:8a:8b:b4:22:c7:68:ed:bb:be:57:3b:e3:b6:e7: bd:b0:d0:c5:f0:64:ec:c1:48:5f:27:ce:ec:17:59: c0:57:3d:1c:ac:d2:70:13:2c:dc:64:24:13:19:51: cb:c3:d8:3c:35:6e:7e:e2:25:78:bd:36:23:42:fd: dc:7e:29:ba:73:59:ca:ab:eb:92:f8:89:39:4f:fe: f2:ee:10:fa:b9:32:81:2a:e6:1f:35:ec:ae:0f:f3: 70:7d:6e:0b:d6:6b:e4:ff:c4:9f:5a:85:db:63:50: ee:bf:f1:90:62:e9:2e:16:48:cf:c5:d6:e4:99:51: 45:57:ca:3f:14:60:e7:04:a6:06:ac:b0:ef:1c:24: 89:ca:f0:d5:b8:6f:73:20:ec:1f:42:6c:8e:fc:2c: 5d:2d:52:ab:1f:9f:ae:54:46:79:29:40:62:f5:08: da:05:bd:5b:c8:2f:d3:93:6b:00:b7:53:e3:9b:ec: c6:ad:f7:cc:f7:66:91:a7:9c:87:6f:01:ce:89:24: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB X509v3 Authority Key Identifier: keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bf:bc:9e:93:41:22:01:ae:63:32:84:fe:82:ca:6a:5b:41: 84:fd:c4:ab:94:41:97:0a:60:86:54:76:7f:87:0d:6f:67:41: 03:71:b5:3b:00:76:4b:31:01:64:4a:73:42:ce:ae:a2:1d:d1: b9:e0:6a:95:69:d3:db:ce:0c:bc:96:80:b3:ab:8f:ba:67:c3: 73:be:8f:e8:25:f4:67:81:c0:0e:5c:37:c8:9e:74:5e:f0:97: ca:93:5b:f6:cc:c8:54:75:8e:05:ac:59:20:1e:f2:4d:6e:24: af:4e:bb:99:ce:b2:90:70:b1:3b:87:7e:69:14:fe:0a:dd:d9: 57:ab:88:98:b2:49:66:3a:00:18:a3:59:53:6a:71:03:ad:7a: af:5a:7e:f4:25:5f:ea:9d:c8:2a:60:9d:cc:64:eb:b0:42:51: 1a:1e:55:dc:92:cc:61:0a:40:9c:56:9d:03:9d:69:2a:58:7e: 0c:ac:0d:fa:6f:07:e4:20:a1:5f:29:fc:c3:0c:da:21:13:8d: fb:2c:75:d1:53:c7:07:20:52:c0:cf:d9:d7:96:86:31:89:7d: 87:ba:07:96:fa:88:df:38:bb:a9:55:90:47:94:b7:65:65:16: 3e:44:32:a1:0a:c2:01:f4:55:cd:2e:8b:80:77:fc:bb:a9:1c: a7:02:ed:00 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNTA2MjQx MDAxMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4Q0QwMjNGMjlFMjVE RTlEM0JCQTc2NkJCNEQxMjAxQkE3MDc0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkSMgsqyQognPk1HuJJyKpHICalm4ZUstMMGiHQn9ObZ3H+JGg r1VenaalX75Xvrhplf7NKi2MinMBYSeKi7Qix2jtu75XO+O2572w0MXwZOzBSF8n zuwXWcBXPRys0nATLNxkJBMZUcvD2Dw1bn7iJXi9NiNC/dx+KbpzWcqr65L4iTlP /vLuEPq5MoEq5h817K4P83B9bgvWa+T/xJ9ahdtjUO6/8ZBi6S4WSM/F1uSZUUVX yj8UYOcEpgassO8cJInK8NW4b3Mg7B9CbI78LF0tUqsfn65URnkpQGL1CNoFvVvI L9OTawC3U+Ob7Mat98z3ZpGnnIdvAc6JJIy5AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUyM0CPyniXenTu6dmu00SAbpwdNswHwYDVR0jBBgwFoAUPOusQFclHIqquVTc IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvUE91c1FGY2xI SXFxdVZUY0lnc2lTV3Z1OVdNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFW/vJ6TQSIBrmMyhP6CympbQYT9xKuUQZcKYIZUdn+HDW9nQQNxtTsA dksxAWRKc0LOrqId0bngapVp09vODLyWgLOrj7pnw3O+j+gl9GeBwA5cN8iedF7w l8qTW/bMyFR1jgWsWSAe8k1uJK9Ou5nOspBwsTuHfmkU/grd2VeriJiySWY6ABij WVNqcQOteq9afvQlX+qdyCpgncxk67BCURoeVdySzGEKQJxWnQOdaSpYfgysDfpv B+QgoV8p/MMM2iETjfssddFTxwcgUsDP2deWhjGJfYe6B5b6iN84u6lVkEeUt2Vl Fj5EMqEKwgH0Vc0ui4B3/LupHKcC7QA= -----END CERTIFICATE-----Generated at Tue Jun 24 20:39:29 2025 by rpki-client