$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CJME/fJIxVSTFgNhpHTsW9C1qUr6XjiE.mft File: fJIxVSTFgNhpHTsW9C1qUr6XjiE.mft (raw, json) Hash identifier: lRmC/fvT7v0Y0qhKNtxAiGDZ3PbfDYprU9aN9DdmWVU= Subject key identifier: BB:84:31:F2:72:F6:B3:C0:01:C2:AE:2C:66:5B:50:50:8A:C4:80:DA Authority key identifier: 7C:92:31:55:24:C5:80:D8:69:1D:3B:16:F4:2D:6A:52:BE:97:8E:21 Certificate issuer: /CN=7C92315524C580D8691D3B16F42D6A52BE978E21 Certificate serial: 018D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fJIxVSTFgNhpHTsW9C1qUr6XjiE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/fJIxVSTFgNhpHTsW9C1qUr6XjiE.mft Manifest number: 018D Signing time: Wed 05 Nov 2025 10:00:51 +0000 Manifest this update: Wed 05 Nov 2025 10:00:51 +0000 Manifest next update: Fri 07 Nov 2025 10:00:51 +0000 Files and hashes: 1: fJIxVSTFgNhpHTsW9C1qUr6XjiE.crl (hash: Y59G0/4kZgA5V1Wjfb6DW2poNZMKy/Cn3TqAt25k7CQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/fJIxVSTFgNhpHTsW9C1qUr6XjiE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/fJIxVSTFgNhpHTsW9C1qUr6XjiE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fJIxVSTFgNhpHTsW9C1qUr6XjiE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C92315524C580D8691D3B16F42D6A52BE978E21 Validity Not Before: Nov 5 10:00:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BB8431F272F6B3C001C2AE2C665B50508AC480DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8b:a4:fc:d6:e7:f9:79:8d:04:44:48:b0:64: c1:d8:ab:ee:a9:d2:b5:5c:76:49:9f:7b:0d:66:08: 4f:fa:50:9c:30:22:b4:f4:77:4a:38:53:2a:b5:b2: 59:76:9b:ac:e0:9c:a9:81:7a:06:3f:bc:25:81:5e: 72:96:50:7f:6b:16:70:42:d3:39:73:87:1c:58:2f: ab:3c:c2:8b:c8:7a:f5:6a:18:f1:a7:db:81:a7:a8: dd:12:f8:cf:9f:4f:8f:6c:56:a5:80:4d:21:41:a5: 5b:b6:7e:f5:e7:26:05:8b:73:73:f5:bd:2f:13:ff: d8:4e:18:bb:29:b4:4f:c4:a2:59:68:77:69:05:f4: 73:18:2d:8f:b8:27:bb:0e:c8:5e:59:c0:bb:4a:ad: ff:d2:2d:3a:36:73:4f:60:fd:27:22:f7:a6:ec:e8: cd:d6:67:1d:95:51:fd:4a:64:54:8f:4b:76:2a:ce: 9d:9c:27:fb:44:b4:0b:94:53:ea:7b:7a:71:d9:e7: bf:22:49:ef:55:56:83:81:d2:c8:6b:9d:cf:0c:67: 9e:76:69:08:9f:9b:96:80:bc:86:7e:e1:15:e1:f1: 9a:63:05:40:67:4b:95:c9:4e:29:36:03:90:96:dc: bf:5c:ff:29:b7:a3:e3:00:59:69:bd:29:81:25:bc: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:84:31:F2:72:F6:B3:C0:01:C2:AE:2C:66:5B:50:50:8A:C4:80:DA X509v3 Authority Key Identifier: keyid:7C:92:31:55:24:C5:80:D8:69:1D:3B:16:F4:2D:6A:52:BE:97:8E:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/fJIxVSTFgNhpHTsW9C1qUr6XjiE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fJIxVSTFgNhpHTsW9C1qUr6XjiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/fJIxVSTFgNhpHTsW9C1qUr6XjiE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:6b:8d:23:3b:15:cb:90:94:99:3b:12:67:c4:24:70:fb:e9: 61:0c:1d:5a:b0:ea:62:5c:60:75:36:d8:5f:e1:75:90:e1:1c: da:df:e4:64:fe:85:40:ec:cd:36:08:80:13:31:fc:cd:9c:43: 5e:49:44:7f:5f:c8:1b:26:64:77:29:f5:5c:aa:2b:ce:30:82: 31:18:90:47:4d:71:34:f2:21:e3:0b:59:96:e6:ae:af:c1:b9: ce:1f:25:d5:13:f4:57:b0:04:15:88:79:35:d2:6e:da:ea:20: 76:7e:8d:e2:ac:2d:df:c0:1e:c5:6a:c9:1d:4d:16:84:ec:49: 6d:0c:b5:e5:ec:c7:11:75:2c:48:33:3b:81:0f:e5:45:d7:fe: c9:96:30:66:49:e2:84:54:0a:73:99:32:e9:3b:d9:55:b3:8a: 9b:41:5d:4c:7c:72:ab:27:5d:8e:94:94:fb:b3:63:bf:ef:0a: 3c:b1:7f:0b:be:cc:61:ca:96:48:43:70:78:bc:17:d4:9e:59: 95:98:e6:26:0f:7f:d8:3d:5a:eb:06:79:5a:0b:f6:9f:8b:bb: ab:04:ef:16:ff:59:c7:b7:f3:b5:66:6b:3a:63:8d:25:07:7e: 9c:22:3e:95:04:8d:dd:0c:ee:57:e6:f3:19:eb:da:a7:ea:5e: 00:10:f8:93 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M5 MjMxNTUyNEM1ODBEODY5MUQzQjE2RjQyRDZBNTJCRTk3OEUyMTAeFw0yNTExMDUx MDAwNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJCODQzMUYyNzJGNkIz QzAwMUMyQUUyQzY2NUI1MDUwOEFDNDgwREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzi6T81uf5eY0EREiwZMHYq+6p0rVcdkmfew1mCE/6UJwwIrT0 d0o4Uyq1sll2m6zgnKmBegY/vCWBXnKWUH9rFnBC0zlzhxxYL6s8wovIevVqGPGn 24GnqN0S+M+fT49sVqWATSFBpVu2fvXnJgWLc3P1vS8T/9hOGLsptE/Eollod2kF 9HMYLY+4J7sOyF5ZwLtKrf/SLTo2c09g/Sci96bs6M3WZx2VUf1KZFSPS3Yqzp2c J/tEtAuUU+p7enHZ578iSe9VVoOB0shrnc8MZ552aQifm5aAvIZ+4RXh8ZpjBUBn S5XJTik2A5CW3L9c/ym3o+MAWWm9KYElvNBDAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUu4Qx8nL2s8ABwq4sZltQUIrEgNowHwYDVR0jBBgwFoAUfJIxVSTFgNhpHTsW 9C1qUr6XjiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0pNRS9m Skl4VlNURmdOaHBIVHNXOUMxcVVyNlhqaUUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2ZKSXhWU1RGZ05ocEhUc1c5QzFxVXI2WGppRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0NKTUUvZkpJeFZTVEZnTmhwSFRzVzlDMXFV cjZYamlFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBALdrjSM7 FcuQlJk7EmfEJHD76WEMHVqw6mJcYHU22F/hdZDhHNrf5GT+hUDszTYIgBMx/M2c Q15JRH9fyBsmZHcp9VyqK84wgjEYkEdNcTTyIeMLWZbmrq/Buc4fJdUT9FewBBWI eTXSbtrqIHZ+jeKsLd/AHsVqyR1NFoTsSW0MteXsxxF1LEgzO4EP5UXX/smWMGZJ 4oRUCnOZMuk72VWziptBXUx8cqsnXY6UlPuzY7/vCjyxfwu+zGHKlkhDcHi8F9Se WZWY5iYPf9g9WusGeVoL9p+Lu6sE7xb/Wce387VmazpjjSUHfpwiPpUEjd0M7lfm 8xnr2qfqXgAQ+JM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:16:27 2025 by rpki-client