$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft File: _u9qfUSgfrkJ7anFbFkwXloFXbc.mft (raw, json) Hash identifier: +Xs0I9rMG5QPGWkJruPwzdfUBwCwFxL69McI+e31go8= Subject key identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 Authority key identifier: FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 Certificate issuer: /CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Certificate serial: 0957 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft Manifest number: 0957 Signing time: Sat 09 Aug 2025 22:10:09 +0000 Manifest this update: Sat 09 Aug 2025 22:10:09 +0000 Manifest next update: Mon 11 Aug 2025 22:10:09 +0000 Files and hashes: 1: _u9qfUSgfrkJ7anFbFkwXloFXbc.crl (hash: HU8WECa0Eu7/TjXnE6SCOxNopM71FIzQ95YyUxRpmEM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Validity Not Before: Aug 9 22:10:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EA5271DC95DDD2AE4AFF4D1A0608941753481B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:05:6f:74:a8:6c:8d:d0:25:96:c0:db:dc: f2:d5:a0:4c:28:0f:8d:87:e7:cb:3b:d7:4e:ed:24: 92:9a:e4:f4:e4:e9:bf:fd:3e:cd:58:73:8e:d2:68: 54:6d:ff:e6:18:bc:fe:e6:7e:3e:50:77:fe:04:8d: ab:d6:5d:0f:78:c1:ae:78:6d:2a:8e:5e:b3:1f:ce: 74:bb:1d:ef:08:33:e4:c1:86:bd:cb:c9:0b:de:66: 16:3e:93:23:63:8a:f5:db:7b:63:88:d0:e7:19:81: c7:d6:be:29:1e:a5:70:36:e9:bc:38:22:ee:c9:96: 53:d1:d5:45:92:6c:d3:6b:ee:bc:81:fb:e4:ad:c5: aa:db:ba:73:69:16:6d:72:c9:63:b5:48:2e:6d:f8: 30:ee:de:7e:2e:cc:09:2e:bd:7b:7c:4a:ee:f5:91: d1:4b:6c:e4:2e:d7:9f:06:ab:59:7f:9e:5d:fe:2e: 82:f6:8e:a7:4a:2d:ae:ff:1f:f3:08:f3:5f:7a:b3: af:4a:78:2b:a2:73:1f:e4:13:07:f9:29:64:d4:22: 1e:75:2c:65:95:37:08:55:16:46:48:75:fe:dc:fe: 02:10:d0:80:92:68:00:46:c8:f4:b0:0f:7e:52:af: ee:5c:79:de:fe:04:7d:c1:63:92:d2:45:8f:d7:22: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 X509v3 Authority Key Identifier: keyid:FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4d:d2:57:46:12:4a:0b:ca:73:e0:31:37:dc:ef:b7:5b:2e: 9e:2f:f8:81:da:b6:dd:a4:40:5d:47:6b:3e:1c:1f:dd:e5:23: 8f:40:81:74:7d:7e:6f:57:77:df:c1:1b:05:de:08:4d:6e:10: 1a:b9:5e:39:7b:6b:ce:cf:75:d3:1a:76:40:10:07:00:c4:1c: 9d:f5:e9:d0:7a:a9:b7:43:d2:99:a6:7a:a2:3f:a5:25:33:7a: ee:43:43:5e:78:9f:de:40:6c:28:c9:9e:a6:d2:56:e1:db:94: 2f:91:ce:6c:7d:ad:06:d2:f0:b6:6a:e2:d4:c1:e5:40:66:dd: 37:de:d8:01:0e:03:10:12:20:69:45:fe:ce:42:1b:b6:94:a6: e4:96:9d:cb:91:6a:75:5b:81:57:f8:4b:a4:42:eb:45:30:ab: 5a:a8:e1:5b:cd:c6:cb:1d:cf:be:81:ab:80:12:70:83:54:64: dd:13:a6:56:ba:30:ae:57:af:55:99:7f:6e:01:f2:ca:10:77: 37:d9:e7:9d:a6:6d:2b:0b:33:a6:51:8a:ea:de:36:a4:7d:68: 48:19:73:28:0e:2a:a9:23:4d:9b:b0:2d:20:8b:80:ea:45:2d: d6:de:00:c2:f5:0c:d0:72:86:df:bf:37:e1:f5:a4:4b:5c:44: 3d:92:6c:36 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF RjZBN0Q0NEEwN0VCOTA5RURBOUM1NkM1OTMwNUU1QTA1NURCNzAeFw0yNTA4MDky MjEwMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBNTI3MURDOTVEREQy QUU0QUZGNEQxQTA2MDg5NDE3NTM0ODFCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbQVvdKhsjdAllsDb3PLVoEwoD42H58s7107tJJKa5PTk6b/9 Ps1Yc47SaFRt/+YYvP7mfj5Qd/4EjavWXQ94wa54bSqOXrMfznS7He8IM+TBhr3L yQveZhY+kyNjivXbe2OI0OcZgcfWvikepXA26bw4Iu7JllPR1UWSbNNr7ryB++St xarbunNpFm1yyWO1SC5t+DDu3n4uzAkuvXt8Su71kdFLbOQu158Gq1l/nl3+LoL2 jqdKLa7/H/MI8196s69KeCuicx/kEwf5KWTUIh51LGWVNwhVFkZIdf7c/gIQ0ICS aABGyPSwD35Sr+5ced7+BH3BY5LSRY/XIiMbAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU6lJx3JXd0q5K/00aBgiUF1NIG4QwHwYDVR0jBBgwFoAU/u9qfUSgfrkJ7anF bFkwXloFXbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1VBTlRJ TkcvX3U5cWZVU2dmcmtKN2FuRmJGa3dYbG9GWGJjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fdTlxZlVTZ2Zya0o3YW5GYkZrd1hsb0ZYYmMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HVUFOVElORy9fdTlxZlVTZ2Zya0o3 YW5GYkZrd1hsb0ZYYmMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi03SV0YSSgvKc+AxN9zvt1suni/4gdq23aRAXUdrPhwf3eUjj0CBdH1+b1d3 38EbBd4ITW4QGrleOXtrzs910xp2QBAHAMQcnfXp0Hqpt0PSmaZ6oj+lJTN67kND Xnif3kBsKMmeptJW4duUL5HObH2tBtLwtmri1MHlQGbdN97YAQ4DEBIgaUX+zkIb tpSm5Jady5FqdVuBV/hLpELrRTCrWqjhW83Gyx3PvoGrgBJwg1Rk3ROmVrowrlev VZl/bgHyyhB3N9nnnaZtKwszplGK6t42pH1oSBlzKA4qqSNNm7AtIIuA6kUt1t4A wvUM0HKG37834fWkS1xEPZJsNg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:42:10 2025 by rpki-client