$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft File: C2fHjjXSNjKiVTKu_otKn8q-O00.mft (raw, json) Hash identifier: WUhtfsiFuPqATV0NreBTNNr2KjvOONa5/u+q1ORz1CI= Subject key identifier: AA:EA:58:C1:BD:94:32:45:29:A7:6D:58:72:81:D4:E2:2E:73:11:1A Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Certificate issuer: /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Certificate serial: 0489 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft Manifest number: 0481 Signing time: Tue 04 Nov 2025 10:28:29 +0000 Manifest this update: Tue 04 Nov 2025 10:28:29 +0000 Manifest next update: Thu 06 Nov 2025 10:28:29 +0000 Files and hashes: 1: 7KdD1snMJTjVQpV_X2wJQCgI-PM.roa (hash: BMiyy7wskNfH0SDMvAXR7HTBFnxRDBZKLWmsHAXLOJQ=) 2: C2fHjjXSNjKiVTKu_otKn8q-O00.crl (hash: IWCG9nl0aAlNCU+0+FAkM1nkId3zjh1Dv+JfSxDa7aI=) 3: y_1Noo8NgLvvdz1RNh2uETC7t0E.roa (hash: 6yV2F/G0L0I5DQmnCAUPAD1FsBQEqtvhtwyEgMq5oiU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Validity Not Before: Nov 4 10:28:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AAEA58C1BD94324529A76D587281D4E22E73111A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:45:3d:27:11:6b:cd:3e:21:cf:f1:4e:2e: 27:5d:0c:40:82:01:81:e7:17:ba:67:83:a6:a7:56: cf:bf:64:86:1f:c7:69:0a:e1:14:9c:33:1c:fe:de: 76:de:c3:1a:ce:ff:93:b5:66:e1:24:85:91:c1:61: de:a0:82:d6:2f:2f:30:8a:84:4e:8f:3d:e5:c2:92: 73:18:0d:f2:65:fd:38:6e:c9:76:64:6f:1f:eb:3a: 00:45:6d:66:9d:55:c6:61:b1:49:9a:bb:bb:a3:c8: e9:a9:09:d5:27:d9:4e:a5:a2:0b:18:d0:12:81:05: 02:f3:85:df:34:c5:cc:7c:83:07:f9:d3:b8:2f:da: 0c:e4:f0:f9:36:a5:fb:17:2b:e7:ce:f3:1b:57:98: 11:e8:c6:99:bb:d5:37:40:53:66:72:59:86:07:b8: c9:7d:82:b5:ea:f6:e6:e7:87:ac:4f:51:ed:06:1d: b9:54:d5:0e:d6:86:bd:fb:09:6c:2b:86:41:f3:c7: 7b:45:20:32:4a:f7:a7:42:dc:6d:7a:8b:6e:ac:ad: 8a:23:51:e5:f1:46:6f:db:03:64:13:2c:ec:e8:58: 62:e7:7e:2e:3b:89:dc:bd:46:a5:71:00:ac:fe:9c: 13:34:7d:3e:b7:c1:b4:8c:72:16:c0:e0:4d:97:f7: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:58:C1:BD:94:32:45:29:A7:6D:58:72:81:D4:E2:2E:73:11:1A X509v3 Authority Key Identifier: keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:2f:94:6a:3b:7c:76:26:78:7e:48:e2:4a:23:bb:cb:ed:01: 51:c9:74:73:61:1c:5d:cd:5a:e4:12:45:5c:a4:13:8e:25:06: 62:21:7f:97:b3:ae:c1:d6:f4:89:bd:61:66:85:c0:13:cb:92: 46:9c:e4:f5:3e:fb:30:ec:48:f2:53:48:77:73:b3:c7:9b:10: d9:76:8d:ec:7e:40:38:5d:76:af:7c:e9:cd:27:3a:82:18:08: b9:cb:eb:88:9f:8e:22:bd:7d:ca:96:ff:00:48:c2:46:45:16: 2a:92:43:16:ba:80:9b:49:9c:6a:25:e0:5f:a3:55:d8:cd:7d: 00:70:12:3e:b5:98:df:fb:fa:ab:94:6b:c5:99:b2:42:3d:ab: ae:8e:35:0d:15:5d:51:6d:ec:dd:2d:ad:43:45:af:4d:3d:9f: 69:ff:a7:80:d0:39:e8:62:7e:38:ed:7a:28:7a:c2:43:68:37: 1e:1e:1d:e9:42:20:10:38:21:22:ab:ac:28:e6:3b:06:09:3b: 4e:9c:09:06:88:18:ed:69:ea:8e:12:63:f2:8f:f0:85:9b:e5: 64:c5:68:bd:c6:05:0b:60:73:f0:d7:c5:37:2b:dc:8e:a1:23: bd:37:39:b5:dc:38:9d:3e:19:8d:2c:bc:36:dc:3f:54:de:2d: 0a:c3:d7:a3 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI2 N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0RDAeFw0yNTExMDQx MDI4MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBRUE1OEMxQkQ5NDMy NDUyOUE3NkQ1ODcyODFENEUyMkU3MzExMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm50U9JxFrzT4hz/FOLiddDECCAYHnF7png6anVs+/ZIYfx2kK 4RScMxz+3nbewxrO/5O1ZuEkhZHBYd6ggtYvLzCKhE6PPeXCknMYDfJl/ThuyXZk bx/rOgBFbWadVcZhsUmau7ujyOmpCdUn2U6logsY0BKBBQLzhd80xcx8gwf507gv 2gzk8Pk2pfsXK+fO8xtXmBHoxpm71TdAU2ZyWYYHuMl9grXq9ubnh6xPUe0GHblU 1Q7Whr37CWwrhkHzx3tFIDJK96dC3G16i26srYojUeXxRm/bA2QTLOzoWGLnfi47 idy9RqVxAKz+nBM0fT63wbSMchbA4E2X975BAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUqupYwb2UMkUpp21YcoHU4i5zERowHwYDVR0jBBgwFoAUC2fHjjXSNjKiVTKu /otKn8q+O00wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9DMmZIampYU05qS2lWVEt1X290S244cS1PMDAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvQzJmSGpqWFNO aktpVlRLdV9vdEtuOHEtTzAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADEvlGo7fHYmeH5I4koju8vtAVHJdHNhHF3NWuQSRVykE44lBmIhf5ez rsHW9Im9YWaFwBPLkkac5PU++zDsSPJTSHdzs8ebENl2jex+QDhddq986c0nOoIY CLnL64ifjiK9fcqW/wBIwkZFFiqSQxa6gJtJnGol4F+jVdjNfQBwEj61mN/7+quU a8WZskI9q66ONQ0VXVFt7N0trUNFr009n2n/p4DQOehifjjteih6wkNoNx4eHelC IBA4ISKrrCjmOwYJO06cCQaIGO1p6o4SY/KP8IWb5WTFaL3GBQtgc/DXxTcr3I6h I703ObXcOJ0+GY0svDbcP1TeLQrD16M= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:33 2025 by rpki-client