$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft File: ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft (raw, json) Hash identifier: Rf1jBKsaby1j4bcNKyFWT7MqwA35iR6QAMttVJyvsdg= Subject key identifier: A3:7C:8D:4A:77:F4:C2:B8:41:AD:4D:E1:88:48:97:5B:3C:30:55:FF Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62 Certificate issuer: /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762 Certificate serial: 04FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft Manifest number: 04DB Signing time: Sun 01 Mar 2026 04:53:42 +0000 Manifest this update: Sun 01 Mar 2026 04:53:42 +0000 Manifest next update: Tue 03 Mar 2026 04:53:42 +0000 Files and hashes: 1: 1qSVSzIRpsHgGSmA5SeAv7ggJ5k.roa (hash: eNMVAIgJ6UqvGDHNfA60L+lqNF/U1PTYURc4bPZjgfM=) 2: 5Hqz7PYDHos_6bUOtKRQGA1jYw4.roa (hash: BRuVIBWU9Fbucmmx5YBGxUvFzTjm/Jkufh2YPu35zaI=) 3: CmaGQ5SMZn8nQAcknXJyHMy9BhM.roa (hash: CWm/rX08j0OB5iYdzfgpLagJm9TVD0g55Ez5w9dVb2c=) 4: HkQfsCGrGJkMgY8lnGyer5VbPj8.roa (hash: TohYsvUUmwcAUrl9Sipdq4DiItqhZJg093EkelfFo+s=) 5: ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl (hash: sjnHCsugOTxNXlsNsLTXogxeDXX31ltUxT4Der5PjXo=) 6: e1hImNDAVV-SmCi3N2aWd79WW_I.roa (hash: +bcylUvIKX8mb8um7WvKxC8xtE0Ogxk1KNA0o4toGlY=) 7: r3aqeWLXNk6D3kqdUORJSUrDYUo.roa (hash: /vO/CwqROCD92eW8a2kL4qHXAWLT09RRxl8I6bCg81M=) 8: wYxaUSpGvvt8tsohr44jG1oOc-Y.roa (hash: LwRe7T2NX12pYI+3kX+7+VF/LaPazEaicoXgm5LSh40=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 07:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762 Validity Not Before: Mar 1 04:53:42 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A37C8D4A77F4C2B841AD4DE18848975B3C3055FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:05:b3:f4:a0:db:7a:7b:a7:45:fa:a7:56: 13:f9:e2:2e:52:dd:9b:a1:11:65:8a:61:5a:ea:65: 1f:75:e6:ee:86:e2:73:a3:5c:b8:5a:c0:be:e4:27: 60:71:da:e1:9c:ea:65:84:26:e6:86:f1:19:9b:ee: 43:3d:a2:fd:c1:11:f1:99:d5:6a:a7:00:d2:55:f6: 5f:7e:ed:06:8b:6e:10:7b:dc:dd:98:fe:3b:03:cb: 62:68:ad:81:59:24:5e:8e:4c:f0:4b:01:5b:63:a5: 7b:06:1a:dd:67:39:aa:49:d2:74:be:b7:c0:8b:9e: 0b:6c:05:40:32:b1:08:bc:81:ce:d1:e4:65:77:d0: 3b:09:d4:6a:d5:79:8d:0a:71:2c:1b:8e:67:5c:f3: 1e:93:e8:30:d6:b9:3c:5f:6a:d8:9f:3a:25:0e:99: 36:22:fa:d6:c1:f2:b4:24:c4:67:50:e7:8e:44:88: 53:39:36:b6:5f:1f:7f:00:b3:cd:e7:72:d8:34:5f: 77:d6:43:94:46:23:93:49:79:7d:cd:d8:e4:f9:ca: 17:87:30:12:d5:41:77:8e:c5:12:a0:1f:6b:68:59: 45:a6:86:6b:f8:ee:47:d5:d9:4e:37:34:64:0a:38: fc:b7:a5:df:72:9f:dd:14:40:f1:c5:8b:42:95:b3: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7C:8D:4A:77:F4:C2:B8:41:AD:4D:E1:88:48:97:5B:3C:30:55:FF X509v3 Authority Key Identifier: keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a9:8b:52:f6:88:15:87:12:a7:5d:94:8b:9b:6c:8c:9b:ba: 0f:b3:23:a4:fb:44:d2:b8:0f:55:96:f3:ff:3a:34:d3:e6:92: 8e:41:22:cf:93:c5:c0:88:c5:b5:01:b1:8b:23:91:b6:b4:38: 3a:24:17:1d:91:56:9f:df:73:c0:1a:4b:59:4e:0d:ba:52:85: f6:48:b4:1d:5f:08:83:19:42:01:33:d3:92:d3:e0:ba:3d:8b: 28:58:da:99:79:3f:86:21:20:d9:7e:c3:c0:cd:31:4f:3b:c8: 2c:49:f3:cc:04:2a:56:e8:0c:b7:c5:4c:e8:9e:92:e3:1f:7c: 31:8e:50:32:1e:24:b6:4b:00:d3:55:6c:02:86:04:ff:54:0d: 3e:2f:56:84:c0:52:d7:2c:e6:fa:c2:e2:01:8e:21:93:d0:51: 04:0b:b3:8f:44:d6:9c:6a:98:2b:bf:7b:47:9c:ca:a1:4a:37: 43:34:de:12:6f:94:6f:4f:b0:be:1d:f0:35:00:31:a4:f6:27: e9:27:68:6a:1e:b5:a9:34:50:aa:5d:3d:1d:16:f9:66:b1:0b: ef:db:31:ca:fc:d6:2a:0b:df:37:81:35:ec:35:e7:99:6c:9f: 05:ef:1d:0d:2a:a4:f3:65:c1:ed:56:4e:ed:f4:b5:5b:a8:48: 8c:d3:05:f1 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICBPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjZC NjlFNUIxNzhCOEM5NDQ0QzRENjRBNjk2M0IwQkM5RkEzNTc2MjAeFw0yNjAzMDEw NDUzNDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEzN0M4RDRBNzdGNEMy Qjg0MUFENERFMTg4NDg5NzVCM0MzMDU1RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyFAWz9KDbenunRfqnVhP54i5S3ZuhEWWKYVrqZR915u6G4nOj XLhawL7kJ2Bx2uGc6mWEJuaG8Rmb7kM9ov3BEfGZ1WqnANJV9l9+7QaLbhB73N2Y /jsDy2JorYFZJF6OTPBLAVtjpXsGGt1nOapJ0nS+t8CLngtsBUAysQi8gc7R5GV3 0DsJ1GrVeY0KcSwbjmdc8x6T6DDWuTxfatifOiUOmTYi+tbB8rQkxGdQ545EiFM5 NrZfH38As83nctg0X3fWQ5RGI5NJeX3N2OT5yheHMBLVQXeOxRKgH2toWUWmhmv4 7kfV2U43NGQKOPy3pd9yn90UQPHFi0KVswUlAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUo3yNSnf0wrhBrU3hiEiXWzwwVf8wHwYDVR0jBBgwFoAUZraeWxeLjJRExNZK aWOwvJ+jV2IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09FQVNZ L1pyYWVXeGVMakpSRXhOWkthV093dkotalYySS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvWnJhZVd4ZUxqSlJFeE5aS2FXT3d2Si1qVjJJLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09FQVNZL1pyYWVXeGVMakpSRXhOWkth V093dkotalYySS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8 qYtS9ogVhxKnXZSLm2yMm7oPsyOk+0TSuA9VlvP/OjTT5pKOQSLPk8XAiMW1AbGL I5G2tDg6JBcdkVaf33PAGktZTg26UoX2SLQdXwiDGUIBM9OS0+C6PYsoWNqZeT+G ISDZfsPAzTFPO8gsSfPMBCpW6Ay3xUzonpLjH3wxjlAyHiS2SwDTVWwChgT/VA0+ L1aEwFLXLOb6wuIBjiGT0FEEC7OPRNacapgrv3tHnMqhSjdDNN4Sb5RvT7C+HfA1 ADGk9ifpJ2hqHrWpNFCqXT0dFvlmsQvv2zHK/NYqC983gTXsNeeZbJ8F7x0NKqTz ZcHtVk7t9LVbqEiM0wXx -----END CERTIFICATE-----Generated at Mon Mar 2 05:37:52 2026 by rpki-client