$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft File: aMrB-gTYDP4-K-l8erGFK2ZWU18.mft (raw, json) Hash identifier: rRMQr3onzOC5+oJO1PN0RSzg7jUistIQJveP1fde1U4= Subject key identifier: 06:C2:74:CC:25:B5:C7:36:BD:BE:A4:AD:32:37:AF:D5:46:1B:69:09 Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Certificate serial: 1374 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft Manifest number: 1365 Signing time: Sat 21 Jun 2025 09:29:58 +0000 Manifest this update: Sat 21 Jun 2025 09:29:58 +0000 Manifest next update: Mon 23 Jun 2025 09:29:58 +0000 Files and hashes: 1: 3jx5GdUf5gMAK9-4ae9ojtZgcB0.roa (hash: atwhpbJyyBBSoDUx9t5hcvCTpc7kQ0JQR+wBQ2WQpqU=) 2: aMrB-gTYDP4-K-l8erGFK2ZWU18.crl (hash: WQ+mbByWMtyIQOQgrYgWxnrVAFQLnljx3Mq2iPAySh0=) 3: bxTrnezpDP1Xa8VQF3cI6cbxo1M.roa (hash: pRLptR+u3w4r/JlUVL383TWJSatNcKhO5Ix/NmSTnpY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4980 (0x1374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Validity Not Before: Jun 21 09:29:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=06C274CC25B5C736BDBEA4AD3237AFD5461B6909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:87:c4:0b:a7:37:be:2d:dd:5c:55:39:28: 31:c9:ca:ac:20:56:97:9a:40:08:e1:0e:b0:b4:9b: 15:3f:da:29:fd:41:72:26:82:fd:dc:23:f8:89:06: 98:f9:bf:5c:89:dd:f2:87:c3:74:4f:c2:0d:4b:f1: 0e:36:f4:dc:0b:9c:5d:15:66:d3:c2:ed:67:e2:e3: aa:68:4d:f1:c4:a0:52:1c:5b:7d:d0:da:b9:23:83: 55:2e:71:36:db:a6:cf:97:7f:25:cb:7f:0a:50:1c: d7:cf:09:08:e5:bd:63:95:f7:b9:c8:9e:ba:d0:79: 53:ac:69:e6:b2:23:3f:8e:95:7c:26:c6:e7:2d:19: e2:e5:13:8b:a3:70:ce:26:36:ed:12:70:ed:6d:42: 1a:3c:2f:b5:49:45:4d:49:8c:50:a5:5c:88:16:53: df:f6:9c:3e:eb:f6:4d:9f:3b:f6:4c:6c:eb:ea:47: 80:69:19:b5:df:15:ec:fd:8c:04:70:0b:ab:41:8a: 7a:2a:71:21:8a:50:f6:50:c7:d5:a4:3e:a8:3e:e6: 7c:86:6c:e7:8b:69:fc:f7:f0:55:8c:69:f5:ca:c8: a7:d6:2c:c4:f4:56:2f:e8:b2:f2:e1:39:fb:41:49: 1b:40:4f:63:3a:31:4d:9d:48:3f:ea:4b:35:fd:d7: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:74:CC:25:B5:C7:36:BD:BE:A4:AD:32:37:AF:D5:46:1B:69:09 X509v3 Authority Key Identifier: keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:80:7f:db:0a:95:14:35:9b:d3:83:b9:83:47:f1:05:3d: dd:b9:0e:e1:b4:95:60:b4:82:fd:2a:d1:93:aa:cd:cd:43:94: 55:f7:20:a5:94:bd:e8:b2:e9:00:cf:f3:0e:20:50:8d:04:1d: ce:a0:71:72:72:a7:34:8b:4e:7d:91:e9:b7:cc:b9:93:c6:21: e1:f7:6e:87:93:d3:51:b6:62:5e:b9:d2:de:c8:9b:c2:ba:b0: ba:12:dd:4d:33:3e:aa:ff:c3:7a:4e:35:7f:98:e8:9f:13:76: 78:7f:20:9e:61:df:85:e2:36:ce:50:19:ec:35:16:60:ff:83: 5c:a8:ac:2d:18:f3:e6:85:78:cf:e2:c1:0c:ab:da:84:bb:cb: 33:74:c4:1d:6a:43:6e:ec:e9:ff:2a:d0:19:b8:9a:03:2c:a0: ba:53:0b:99:2f:b9:9c:20:97:5f:5f:30:57:95:52:32:a2:8f: 2a:06:fa:d5:2f:89:26:bc:85:93:4e:a7:74:2c:6f:8d:9f:80: aa:8c:9b:fa:ef:fe:84:1a:8f:32:88:65:2f:e6:e8:b0:91:6a: 53:80:2e:44:5b:13:fb:c8:ef:25:f1:f6:cf:5a:51:bd:c4:50: 78:86:a8:a4:b0:13:7c:57:72:28:87:69:2c:60:0b:23:c3:fd: 22:89:2b:54 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICE3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNTA2MjEw OTI5NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2QzI3NENDMjVCNUM3 MzZCREJFQTRBRDMyMzdBRkQ1NDYxQjY5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT1YfEC6c3vi3dXFU5KDHJyqwgVpeaQAjhDrC0mxU/2in9QXIm gv3cI/iJBpj5v1yJ3fKHw3RPwg1L8Q429NwLnF0VZtPC7Wfi46poTfHEoFIcW33Q 2rkjg1UucTbbps+XfyXLfwpQHNfPCQjlvWOV97nInrrQeVOsaeayIz+OlXwmxuct GeLlE4ujcM4mNu0ScO1tQho8L7VJRU1JjFClXIgWU9/2nD7r9k2fO/ZMbOvqR4Bp GbXfFez9jARwC6tBinoqcSGKUPZQx9WkPqg+5nyGbOeLafz38FWMafXKyKfWLMT0 Vi/osvLhOftBSRtAT2M6MU2dSD/qSzX91xN/AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUBsJ0zCW1xza9vqStMjev1UYbaQkwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8 erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9hTXJCLWdUWURQNC1L LWw4ZXJHRksyWldVMTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJuAf9sKlRQ1m9ODuYNH8QU93bkO4bSVYLSC/SrRk6rNzUOUVfcgpZS96LLp AM/zDiBQjQQdzqBxcnKnNItOfZHpt8y5k8Yh4fduh5PTUbZiXrnS3sibwrqwuhLd TTM+qv/Dek41f5jonxN2eH8gnmHfheI2zlAZ7DUWYP+DXKisLRjz5oV4z+LBDKva hLvLM3TEHWpDbuzp/yrQGbiaAyygulMLmS+5nCCXX18wV5VSMqKPKgb61S+JJryF k06ndCxvjZ+Aqoyb+u/+hBqPMohlL+bosJFqU4AuRFsT+8jvJfH2z1pRvcRQeIao pLATfFdyKIdpLGALI8P9IokrVA== -----END CERTIFICATE-----Generated at Sun Jun 22 08:57:47 2025 by rpki-client