$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft File: aGGW3gPV2jAP80-5M56yqPE90pc.mft (raw, json) Hash identifier: p8X473O8tPxmI4xcgt0C3Rzl5eISgDEmUzs8Vips3Pk= Subject key identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 Authority key identifier: 68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 Certificate issuer: /CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Certificate serial: 0D4E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft Manifest number: 0D4E Signing time: Wed 05 Nov 2025 10:01:26 +0000 Manifest this update: Wed 05 Nov 2025 10:01:26 +0000 Manifest next update: Fri 07 Nov 2025 10:01:26 +0000 Files and hashes: 1: aGGW3gPV2jAP80-5M56yqPE90pc.crl (hash: ON4joIMuXTraUrj6tfDF5UzeEM8ddxs7gmSniF8ROYo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Validity Not Before: Nov 5 10:01:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6C4B094FA0068711B8F2F4E9F4310B43D86CA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:9c:03:ce:1d:4a:cb:ed:cb:a1:a4:96:45: 0f:8f:7d:29:75:cb:77:ba:52:c2:a8:07:3a:87:24: b3:3f:9d:7c:31:b8:3f:e4:fa:ac:36:85:62:ab:da: 59:5a:17:89:0d:ad:9e:59:a7:f2:d5:0a:3a:c9:c2: 89:dd:d9:2b:3a:91:df:38:66:80:a5:2f:64:4c:78: 1a:aa:eb:51:8f:98:92:6f:d4:31:89:97:4b:95:78: 40:85:3b:b9:2c:3c:73:31:1d:29:b9:e2:ed:3c:7e: 33:f6:d2:ac:4c:74:9d:f9:2d:b5:95:84:a5:5c:f9: a5:87:6c:81:cc:8e:2f:c4:55:e0:d9:43:42:dd:c4: b6:dd:a4:ff:13:47:e4:a4:e8:95:95:0e:54:bc:ee: 53:de:b1:27:06:f6:4d:da:e1:e2:42:c8:26:f0:79: c4:0a:50:b9:b5:bd:5b:81:88:be:50:37:02:6d:13: 5e:fa:05:aa:9a:c0:7e:08:82:18:a9:95:b5:b8:e9: 48:56:40:0e:94:5b:1f:c4:cd:28:2d:65:41:2d:e9: 31:f6:8c:9f:bb:74:57:56:34:7b:fe:29:fe:17:58: 8d:6d:6b:d9:8c:dc:ec:18:4a:44:57:04:4d:de:f0: 80:34:6c:42:1b:13:ae:8d:c9:2a:8b:f7:2f:34:c8: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 X509v3 Authority Key Identifier: keyid:68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2d:54:d4:bf:a4:3d:de:6b:0e:3b:6c:25:b1:3b:a3:19:9c: d7:5b:00:58:f7:37:b7:c9:ac:db:7b:de:29:e0:03:d2:ce:95: af:6d:53:84:de:3d:d8:a2:7c:26:7c:87:76:f1:e1:d6:7a:0b: e9:7b:3f:39:da:64:7c:05:6e:d9:b5:9a:dc:ff:fe:8c:dd:f4: 0b:e5:3f:8b:d8:ca:4b:b0:a0:99:0e:33:2e:8d:6d:16:34:3a: eb:fb:35:0f:65:96:60:ba:21:d6:08:50:9a:fc:e8:fb:74:13: 08:bf:1b:24:13:8e:df:bd:1a:31:6b:01:20:2b:48:85:15:23: e1:3e:fd:8e:69:04:dc:b3:7d:be:52:ac:ae:f0:1d:f7:21:c0: 20:95:7e:2e:2a:57:47:e4:71:0c:0e:d5:fd:1c:cf:f3:89:22: d4:b2:c3:0c:37:d2:83:55:e4:8c:e9:68:26:fe:a9:58:c5:8e: 1d:a7:55:91:24:e0:5e:18:05:5f:49:51:46:1f:c5:66:fa:00: 51:7e:cd:74:8e:fe:e3:25:fb:43:c9:0f:12:d3:b1:96:b8:f4: 64:49:4c:27:59:fd:dd:89:25:a6:a8:ff:52:ca:e5:29:54:ba: 58:e9:c2:cd:e1:d8:cc:ca:e1:5d:af:cc:b9:15:6c:1a:95:d5: 7e:59:b8:03 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjg2 MTk2REUwM0Q1REEzMDBGRjM0RkI5MzM5RUIyQThGMTNERDI5NzAeFw0yNTExMDUx MDAxMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDNEIwOTRGQTAwNjg3 MTFCOEYyRjRFOUY0MzEwQjQzRDg2Q0E5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6GpwDzh1Ky+3LoaSWRQ+PfSl1y3e6UsKoBzqHJLM/nXwxuD/k +qw2hWKr2llaF4kNrZ5Zp/LVCjrJwond2Ss6kd84ZoClL2RMeBqq61GPmJJv1DGJ l0uVeECFO7ksPHMxHSm54u08fjP20qxMdJ35LbWVhKVc+aWHbIHMji/EVeDZQ0Ld xLbdpP8TR+Sk6JWVDlS87lPesScG9k3a4eJCyCbwecQKULm1vVuBiL5QNwJtE176 BaqawH4IghiplbW46UhWQA6UWx/EzSgtZUEt6TH2jJ+7dFdWNHv+Kf4XWI1ta9mM 3OwYSkRXBE3e8IA0bEIbE66NySqL9y80yHLdAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUbEsJT6AGhxG48vTp9DELQ9hsqcEwHwYDVR0jBBgwFoAUaGGW3gPV2jAP80+5 M56yqPE90pcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFJDTE9V RC9hR0dXM2dQVjJqQVA4MC01TTU2eXFQRTkwcGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2FHR1czZ1BWMmpBUDgwLTVNNTZ5cVBFOTBwYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RSQ0xPVUQvYUdHVzNnUFYyakFQODAt NU01NnlxUEU5MHBjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AI8tVNS/pD3eaw47bCWxO6MZnNdbAFj3N7fJrNt73ingA9LOla9tU4TePdiifCZ8 h3bx4dZ6C+l7PznaZHwFbtm1mtz//ozd9AvlP4vYykuwoJkOMy6NbRY0Ouv7NQ9l lmC6IdYIUJr86Pt0Ewi/GyQTjt+9GjFrASArSIUVI+E+/Y5pBNyzfb5SrK7wHfch wCCVfi4qV0fkcQwO1f0cz/OJItSywww30oNV5IzpaCb+qVjFjh2nVZEk4F4YBV9J UUYfxWb6AFF+zXSO/uMl+0PJDxLTsZa49GRJTCdZ/d2JJaao/1LK5SlUuljpws3h 2MzK4V2vzLkVbBqV1X5ZuAM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:16 2025 by rpki-client