$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft File: UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft (raw, json) Hash identifier: DZmG79nDKM5rWuoDv09C6+vd9uHDifHisaEP0R2P9wI= Subject key identifier: EF:E6:B7:BE:95:BF:C8:8D:48:DE:06:3C:6F:83:94:6B:4D:16:3A:22 Authority key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 Certificate issuer: /CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Certificate serial: 0308 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft Manifest number: 02FF Signing time: Wed 07 May 2025 09:50:24 +0000 Manifest this update: Wed 07 May 2025 09:50:24 +0000 Manifest next update: Fri 09 May 2025 09:50:24 +0000 Files and hashes: 1: 2E_1DhdgHhK60wsJ76yqfKxAzyE.roa (hash: PwAsDZMMHxBexgsoulbx2oPmiHPkrjz5HWZGix+rMb4=) 2: Le5Nsz9BGcOUJgtf2irGzpKAuC8.roa (hash: R9mLT+81nuJ4kxeqsIAavXgR87wIPfWUTb98vhKuVME=) 3: R8gaY7de0XFBlkhAgnTGvLRkrgc.roa (hash: C6kKNBP8wOaAz4rcHQqPY/GsyJs4qtwvAKcgGEjPCFE=) 4: UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl (hash: cK9X1s4tWyD2OSnqPXs6as79GnaElcVCr5RojnvQ5WU=) 5: kmHUxkMGXApzr5n-GYFL4wOfbUc.roa (hash: BB3L0SZQR2g5bpxLdOCsB/NPCLJ880QrSWw3P96XgKM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 22:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990 Validity Not Before: May 7 09:50:24 2025 GMT Not After : Oct 14 15:30:32 2025 GMT Subject: CN=EFE6B7BE95BFC88D48DE063C6F83946B4D163A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:6b:48:27:a0:e7:c3:2c:f4:20:42:d2:80: 22:4d:f5:e2:27:60:d2:01:69:2e:88:69:9a:d9:4d: 15:64:fc:58:04:6e:69:c3:24:e9:24:d0:dc:e6:c2: 6e:97:1d:2a:69:a7:bd:ff:55:1a:d1:da:97:11:35: d6:2f:7c:69:82:63:e3:54:be:c1:39:8a:40:cd:39: ae:66:61:d5:6c:65:26:d9:e1:9c:00:ab:cd:a0:e0: be:a9:2c:c5:13:31:83:a8:0b:30:4a:73:66:34:80: 68:7b:7d:f3:6f:8f:79:db:44:5a:38:6f:1c:a9:23: 75:f5:e2:19:2c:70:16:b1:22:c1:e9:56:a2:b8:ad: ac:3c:94:a7:b0:15:32:13:f8:af:07:c1:ed:5e:0e: d2:ee:ed:a6:e5:3a:6c:34:ef:b3:68:d0:ae:7a:ea: 81:f9:1a:ef:fe:93:29:b6:f6:1d:e3:94:da:8c:92: 9e:fd:cc:8b:da:dc:37:11:e1:8a:06:48:26:b2:f1: 5a:7b:12:bc:d2:37:bd:72:b8:26:ac:ac:7f:c3:26: 88:d5:15:f4:50:42:31:86:af:e8:6f:d2:33:85:23: 40:43:5d:d6:4d:a8:d3:80:bb:c3:45:6b:39:f1:c3: 5f:50:5a:9b:8a:67:63:cc:a6:58:db:0e:4d:43:d7: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E6:B7:BE:95:BF:C8:8D:48:DE:06:3C:6F:83:94:6B:4D:16:3A:22 X509v3 Authority Key Identifier: keyid:53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c7:99:bb:14:a3:f3:58:6a:d1:55:af:ef:2c:0c:4d:6d:b3: 7d:5c:d8:ac:de:0f:65:3b:a0:e0:de:31:c7:39:2f:7c:60:f6: 72:7c:cc:cf:e0:79:fc:59:db:06:15:7d:91:b3:30:2d:f6:9b: df:f6:1f:9d:38:1a:86:ac:92:7e:6e:cc:91:60:b0:19:b0:0c: 0b:32:92:d5:46:af:57:af:84:1e:4d:7e:f5:84:2f:a5:8e:68: 75:8a:5e:fb:39:76:6c:c3:78:b2:aa:82:66:40:1e:1e:3c:a1: 63:4c:ab:8d:92:32:19:4e:8e:9c:ff:e9:a2:5f:f1:3b:ea:d8: 1a:15:99:89:34:5e:d4:96:40:7e:5c:17:c8:a5:52:1e:6b:53: e5:6a:17:12:a1:aa:12:09:be:79:6f:60:cf:f5:c6:a6:2f:83: 0f:77:88:69:6a:2d:b9:d2:b7:79:79:3b:04:1e:84:1e:a5:4b: fa:16:a4:b8:3c:70:af:bb:0f:24:95:b9:83:a2:9e:08:5c:41: 6c:44:7f:44:96:a8:e7:80:1e:01:8e:d1:cb:07:f1:1d:98:d9: 8a:45:ee:af:63:fb:d5:91:48:78:d5:47:1a:03:dd:28:b2:ad: 9f:80:e0:96:1d:2f:9c:b7:28:4d:95:8e:b3:d7:86:b0:96:25: 50:25:7c:8e -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTMy MkU2MUFFOEM4REQ4OTUzRTFFNkJEQzk2QUU0ODI3QUZDRjk5MDAeFw0yNTA1MDcw OTUwMjRaFw0yNTEwMTQxNTMwMzJaMDMxMTAvBgNVBAMTKEVGRTZCN0JFOTVCRkM4 OEQ0OERFMDYzQzZGODM5NDZCNEQxNjNBMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqkWtIJ6Dnwyz0IELSgCJN9eInYNIBaS6IaZrZTRVk/FgEbmnD JOkk0Nzmwm6XHSppp73/VRrR2pcRNdYvfGmCY+NUvsE5ikDNOa5mYdVsZSbZ4ZwA q82g4L6pLMUTMYOoCzBKc2Y0gGh7ffNvj3nbRFo4bxypI3X14hkscBaxIsHpVqK4 raw8lKewFTIT+K8Hwe1eDtLu7ablOmw077No0K566oH5Gu/+kym29h3jlNqMkp79 zIva3DcR4YoGSCay8Vp7ErzSN71yuCasrH/DJojVFfRQQjGGr+hv0jOFI0BDXdZN qNOAu8NFaznxw19QWpuKZ2PMpljbDk1D13+hAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU7+a3vpW/yI1I3gY8b4OUa00WOiIwHwYDVR0jBBgwFoAUUyLmGujI3YlT4ea9 yWrkgnr8+ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVZVU4v VXlMbUd1akkzWWxUNGVhOXlXcmtnbnI4LVpBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VeUxtR3VqSTNZbFQ0ZWE5eVdya2ducjgtWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MRVlVTi9VeUxtR3VqSTNZbFQ0ZWE5eVdy a2ducjgtWkEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUceZ uxSj81hq0VWv7ywMTW2zfVzYrN4PZTug4N4xxzkvfGD2cnzMz+B5/FnbBhV9kbMw Lfab3/YfnTgahqySfm7MkWCwGbAMCzKS1UavV6+EHk1+9YQvpY5odYpe+zl2bMN4 sqqCZkAeHjyhY0yrjZIyGU6OnP/pol/xO+rYGhWZiTRe1JZAflwXyKVSHmtT5WoX EqGqEgm+eW9gz/XGpi+DD3eIaWotudK3eXk7BB6EHqVL+hakuDxwr7sPJJW5g6Ke CFxBbER/RJao54AeAY7RywfxHZjZikXur2P71ZFIeNVHGgPdKLKtn4Dglh0vnLco TZWOs9eGsJYlUCV8jg== -----END CERTIFICATE-----Generated at Thu May 8 21:14:03 2025 by rpki-client