$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft File: d4GSKMQp9oiOthhlrFUxRgfpH2I.mft (raw, json) Hash identifier: nKsBrtvljT29E+RDESDRiY1bAZ3uv97q1pNlSewu3/Q= Subject key identifier: 32:F5:13:20:D6:CB:95:AE:25:28:B9:5C:B6:0F:4B:90:10:39:78:D6 Authority key identifier: 77:81:92:28:C4:29:F6:88:8E:B6:18:65:AC:55:31:46:07:E9:1F:62 Certificate issuer: /CN=77819228C429F6888EB61865AC55314607E91F62 Certificate serial: 0433 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft Manifest number: 0433 Signing time: Thu 06 Nov 2025 21:29:31 +0000 Manifest this update: Thu 06 Nov 2025 21:29:31 +0000 Manifest next update: Sat 08 Nov 2025 21:29:31 +0000 Files and hashes: 1: d4GSKMQp9oiOthhlrFUxRgfpH2I.crl (hash: /1MQqk1Dp05FXYOuZvdPpp3/wHWbbVfLGV8UozntiLc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77819228C429F6888EB61865AC55314607E91F62 Validity Not Before: Nov 6 21:29:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=32F51320D6CB95AE2528B95CB60F4B90103978D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:8a:04:00:63:b3:f9:88:d6:9a:3f:f4:d2: 2b:aa:0b:f6:c5:89:9c:ae:eb:0e:dc:a8:88:06:ec: 69:7d:ac:63:ff:b2:54:94:d4:b5:3b:28:83:f6:37: e4:ee:b7:47:de:03:1a:dd:6d:93:e6:6e:90:56:b8: d9:e4:0b:0d:5d:43:66:1e:3e:bf:11:48:69:32:bc: ef:1a:3e:2c:a5:c6:25:dc:82:ef:90:aa:60:3e:59: 67:bb:fe:70:1b:d7:d8:dc:1b:8a:aa:9d:fa:40:e2: 24:f4:68:e9:d7:48:f4:f0:b0:74:05:c3:80:bc:e9: 2d:64:07:3a:b6:54:85:4a:ce:88:a1:a9:80:1f:3a: be:28:11:96:6e:0b:ec:58:fa:1d:92:29:af:51:6e: 8d:8d:9e:86:4a:2e:d1:d1:fa:bb:d8:69:2d:93:04: 86:e2:66:ed:fa:8b:77:ea:09:2b:ed:96:05:e3:73: a2:ad:db:4c:0f:8b:29:16:21:10:ca:d3:e0:0d:9b: 58:95:49:c9:c8:b1:58:a6:d6:a1:23:c7:59:2b:b4: 27:c8:27:80:67:4c:c7:ec:af:0d:02:a7:49:7e:c9: b7:84:ae:ca:c8:a3:3b:eb:2c:90:4e:02:f6:e1:c4: 49:8e:47:d7:6d:ac:c8:c7:f6:a1:21:7f:cf:26:7b: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F5:13:20:D6:CB:95:AE:25:28:B9:5C:B6:0F:4B:90:10:39:78:D6 X509v3 Authority Key Identifier: keyid:77:81:92:28:C4:29:F6:88:8E:B6:18:65:AC:55:31:46:07:E9:1F:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:38:2f:79:96:73:2b:cd:f2:3c:ae:6a:8e:4e:92:34:0f:41: 2e:47:de:d8:e6:36:6b:c4:fa:d9:30:c8:08:07:2a:7a:f7:ad: 11:4c:01:24:b2:fc:41:f2:0c:ed:f7:be:3f:b6:c5:03:97:e1: c1:ed:93:da:d8:ac:ad:fa:cb:65:0e:bc:d6:33:e3:77:71:25: 22:00:fd:bc:ba:9c:01:b9:bb:33:8f:0f:a4:a4:70:6d:8b:1e: 09:d5:4e:e2:84:88:53:7a:02:fd:3d:31:71:03:66:91:04:47: f6:13:25:7d:7f:d1:b6:88:0c:20:94:b0:a7:68:bf:c5:b3:c0: f6:fa:4b:bf:df:cc:06:72:be:ce:90:4f:a8:2f:96:96:73:39: c0:45:fe:06:40:31:46:8f:e6:f7:3b:5c:f6:01:c9:bc:88:7f: ed:56:e6:8c:19:db:62:c5:05:8c:fc:90:8f:35:fa:66:cd:c4: 41:49:b0:4a:1f:81:66:76:78:08:7d:be:92:9a:bf:05:7c:22: 74:f9:72:1b:9a:07:e5:2f:39:ab:bf:05:99:25:50:a1:7b:1c: 1e:e2:e6:9c:49:ea:47:a1:48:f5:f9:b8:f4:c2:e0:be:55:e6: 9b:7c:ba:3d:ec:69:83:f9:9a:de:2a:b9:4d:80:06:d7:aa:f1: 43:bc:f7:62 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc4 MTkyMjhDNDI5RjY4ODhFQjYxODY1QUM1NTMxNDYwN0U5MUY2MjAeFw0yNTExMDYy MTI5MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDMyRjUxMzIwRDZDQjk1 QUUyNTI4Qjk1Q0I2MEY0QjkwMTAzOTc4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnooEAGOz+YjWmj/00iuqC/bFiZyu6w7cqIgG7Gl9rGP/slSU 1LU7KIP2N+Tut0feAxrdbZPmbpBWuNnkCw1dQ2YePr8RSGkyvO8aPiylxiXcgu+Q qmA+WWe7/nAb19jcG4qqnfpA4iT0aOnXSPTwsHQFw4C86S1kBzq2VIVKzoihqYAf Or4oEZZuC+xY+h2SKa9Rbo2NnoZKLtHR+rvYaS2TBIbiZu36i3fqCSvtlgXjc6Kt 20wPiykWIRDK0+ANm1iVScnIsVim1qEjx1krtCfIJ4BnTMfsrw0Cp0l+ybeErsrI ozvrLJBOAvbhxEmOR9dtrMjH9qEhf88mewqzAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUMvUTINbLla4lKLlctg9LkBA5eNYwHwYDVR0jBBgwFoAUd4GSKMQp9oiOthhl rFUxRgfpH2IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTFVPU0kv ZDRHU0tNUXA5b2lPdGhobHJGVXhSZ2ZwSDJJLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kNEdTS01RcDlvaU90aGhsckZVeFJnZnBIMkkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MVU9TSS9kNEdTS01RcDlvaU90aGhsckZV eFJnZnBIMkkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjgv eZZzK83yPK5qjk6SNA9BLkfe2OY2a8T62TDICAcqevetEUwBJLL8QfIM7fe+P7bF A5fhwe2T2tisrfrLZQ681jPjd3ElIgD9vLqcAbm7M48PpKRwbYseCdVO4oSIU3oC /T0xcQNmkQRH9hMlfX/RtogMIJSwp2i/xbPA9vpLv9/MBnK+zpBPqC+WlnM5wEX+ BkAxRo/m9ztc9gHJvIh/7VbmjBnbYsUFjPyQjzX6Zs3EQUmwSh+BZnZ4CH2+kpq/ BXwidPlyG5oH5S85q78FmSVQoXscHuLmnEnqR6FI9fm49MLgvlXmm3y6Pexpg/ma 3iq5TYAG16rxQ7z3Yg== -----END CERTIFICATE-----Generated at Fri Nov 7 11:26:59 2025 by rpki-client