$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KTCFE/SHh8U_9pfxbO6eYlLacwGD3V1wE.mft File: SHh8U_9pfxbO6eYlLacwGD3V1wE.mft (raw, json) Hash identifier: bEnXzK2//K9fdUReYmxVdqTYsCY9AobumC19KrAecQQ= Subject key identifier: 01:F6:5D:07:27:0B:C1:43:A8:D4:56:D4:91:9D:AD:EB:C3:89:42:5B Authority key identifier: 48:78:7C:53:FF:69:7F:16:CE:E9:E6:25:2D:A7:30:18:3D:D5:D7:01 Certificate issuer: /CN=48787C53FF697F16CEE9E6252DA730183DD5D701 Certificate serial: 0D58 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHh8U_9pfxbO6eYlLacwGD3V1wE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KTCFE/SHh8U_9pfxbO6eYlLacwGD3V1wE.mft Manifest number: 0D58 Signing time: Wed 05 Nov 2025 10:29:19 +0000 Manifest this update: Wed 05 Nov 2025 10:29:19 +0000 Manifest next update: Fri 07 Nov 2025 10:29:19 +0000 Files and hashes: 1: SHh8U_9pfxbO6eYlLacwGD3V1wE.crl (hash: 1z+yeWuzL1Dxlw9bEIxFbfzDeiLb4xv2/sOJVvJ4qqQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KTCFE/SHh8U_9pfxbO6eYlLacwGD3V1wE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KTCFE/SHh8U_9pfxbO6eYlLacwGD3V1wE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/SHh8U_9pfxbO6eYlLacwGD3V1wE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3416 (0xd58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48787C53FF697F16CEE9E6252DA730183DD5D701 Validity Not Before: Nov 5 10:29:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=01F65D07270BC143A8D456D4919DADEBC389425B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:74:25:1e:27:84:fe:9e:30:1d:34:fc:ae:d9: dd:ae:9a:da:06:7b:e2:72:61:ef:24:7c:cd:b9:7d: a9:a5:19:a3:c8:8c:99:a5:33:34:be:bb:ea:72:7b: bb:e5:c0:14:a5:46:65:75:2d:9d:29:7b:d7:83:32: ae:85:6f:ba:2d:62:c4:42:b4:07:0a:fa:9a:f3:58: 16:57:e2:68:f3:08:64:5a:f4:29:62:81:0c:47:29: b0:f2:92:74:17:07:08:6e:64:42:85:39:4e:63:58: a0:b3:f3:3c:dd:dc:9f:0d:8b:be:6b:0c:e6:24:0e: 18:10:d7:91:bd:43:5b:ad:46:4f:ed:e0:97:2a:6d: 5f:32:6d:f8:eb:86:ce:7b:99:9c:68:44:1a:02:30: af:0b:5e:9a:ff:cd:00:aa:b2:ed:ee:1e:ab:d9:7e: c9:07:f8:c9:8f:01:8e:d8:db:5f:9c:ad:10:40:f6: bd:15:e9:37:81:29:04:26:67:04:39:e9:a1:57:ba: ff:4c:c5:6a:a0:14:4f:51:45:c6:38:28:18:c6:07: d3:50:02:e4:58:5d:f9:8a:c2:0f:49:23:29:e6:78: 3b:ab:f6:6f:a9:9f:6f:25:8f:63:e7:5a:f2:e5:7f: 36:4d:0e:7d:24:75:b3:64:6b:fc:3c:3a:b6:e5:fd: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:5D:07:27:0B:C1:43:A8:D4:56:D4:91:9D:AD:EB:C3:89:42:5B X509v3 Authority Key Identifier: keyid:48:78:7C:53:FF:69:7F:16:CE:E9:E6:25:2D:A7:30:18:3D:D5:D7:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KTCFE/SHh8U_9pfxbO6eYlLacwGD3V1wE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHh8U_9pfxbO6eYlLacwGD3V1wE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KTCFE/SHh8U_9pfxbO6eYlLacwGD3V1wE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:bc:58:09:2b:66:90:b3:6d:dd:28:1d:6e:d2:ae:a4:be:bf: 7c:a9:37:82:ed:43:7d:da:67:3c:46:69:5d:bd:12:9a:b0:87: d1:0a:21:e4:2c:c3:de:83:1b:11:e3:b8:6e:54:6b:a0:fd:31: 67:80:5f:0e:5b:bd:c4:78:82:6c:d7:bf:19:9c:7c:11:89:12: 21:e6:3f:1c:d8:e3:e3:97:9b:07:73:91:31:e2:1a:22:db:41: a4:69:b2:08:ae:d2:94:a8:9a:8e:0b:29:c0:ec:84:6e:1a:27: f1:f4:8e:10:45:51:c9:51:c6:25:c3:96:16:f1:32:1c:7f:51: 40:a3:76:f0:db:f7:cb:77:67:aa:fd:6c:d3:2d:91:12:14:6d: 26:8f:e6:96:85:d2:33:86:4a:83:f9:90:44:e2:3b:21:07:b0: c4:a0:4d:42:a4:bb:f8:9c:61:a5:bc:e6:77:09:7f:c0:50:5c: ed:d7:bf:bd:66:01:3a:63:da:5a:f9:09:95:24:b7:40:1e:19: 17:67:dd:ee:45:7d:31:af:8b:64:1e:0d:e4:1d:fc:96:f5:29: 6c:67:b4:cd:2f:68:20:6b:7b:9e:97:a3:15:a8:59:ff:f8:b7: fc:68:4b:8a:a4:f2:20:06:d7:49:b1:35:44:cf:8d:1e:12:ab: 0b:7f:83:8a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDg3 ODdDNTNGRjY5N0YxNkNFRTlFNjI1MkRBNzMwMTgzREQ1RDcwMTAeFw0yNTExMDUx MDI5MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAxRjY1RDA3MjcwQkMx NDNBOEQ0NTZENDkxOURBREVCQzM4OTQyNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmdCUeJ4T+njAdNPyu2d2umtoGe+JyYe8kfM25famlGaPIjJml MzS+u+pye7vlwBSlRmV1LZ0pe9eDMq6Fb7otYsRCtAcK+przWBZX4mjzCGRa9Cli gQxHKbDyknQXBwhuZEKFOU5jWKCz8zzd3J8Ni75rDOYkDhgQ15G9Q1utRk/t4Jcq bV8ybfjrhs57mZxoRBoCMK8LXpr/zQCqsu3uHqvZfskH+MmPAY7Y21+crRBA9r0V 6TeBKQQmZwQ56aFXuv9MxWqgFE9RRcY4KBjGB9NQAuRYXfmKwg9JIynmeDur9m+p n28lj2PnWvLlfzZNDn0kdbNka/w8Orbl/cp1AgMBAAGjggIFMIICATAdBgNVHQ4E FgQUAfZdBycLwUOo1FbUkZ2t68OJQlswHwYDVR0jBBgwFoAUSHh8U/9pfxbO6eYl LacwGD3V1wEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1RDRkUv U0hoOFVfOXBmeGJPNmVZbExhY3dHRDNWMXdFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9TSGg4VV85cGZ4Yk82ZVlsTGFjd0dEM1Yxd0UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LVENGRS9TSGg4VV85cGZ4Yk82ZVlsTGFj d0dEM1Yxd0UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7xY CStmkLNt3SgdbtKupL6/fKk3gu1DfdpnPEZpXb0SmrCH0Qoh5CzD3oMbEeO4blRr oP0xZ4BfDlu9xHiCbNe/GZx8EYkSIeY/HNjj45ebB3ORMeIaIttBpGmyCK7SlKia jgspwOyEbhon8fSOEEVRyVHGJcOWFvEyHH9RQKN28Nv3y3dnqv1s0y2REhRtJo/m loXSM4ZKg/mQROI7IQewxKBNQqS7+Jxhpbzmdwl/wFBc7de/vWYBOmPaWvkJlSS3 QB4ZF2fd7kV9Ma+LZB4N5B38lvUpbGe0zS9oIGt7npejFahZ//i3/GhLiqTyIAbX SbE1RM+NHhKrC3+Dig== -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:23 2025 by rpki-client