$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft File: d4GSKMQp9oiOthhlrFUxRgfpH2I.mft (raw, json) Hash identifier: Rvea4v2ww6F6tzdGe/fDAXhWjdFoiLWjrzKIXJvXOsE= Subject key identifier: 32:F5:13:20:D6:CB:95:AE:25:28:B9:5C:B6:0F:4B:90:10:39:78:D6 Authority key identifier: 77:81:92:28:C4:29:F6:88:8E:B6:18:65:AC:55:31:46:07:E9:1F:62 Certificate issuer: /CN=77819228C429F6888EB61865AC55314607E91F62 Certificate serial: 03D8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft Manifest number: 03D8 Signing time: Tue 24 Jun 2025 11:00:07 +0000 Manifest this update: Tue 24 Jun 2025 11:00:07 +0000 Manifest next update: Thu 26 Jun 2025 11:00:07 +0000 Files and hashes: 1: d4GSKMQp9oiOthhlrFUxRgfpH2I.crl (hash: r5Fc8XfBUwvICxhCfoqf7kv8fkVjS6bztalie2CFHns=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77819228C429F6888EB61865AC55314607E91F62 Validity Not Before: Jun 24 11:00:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=32F51320D6CB95AE2528B95CB60F4B90103978D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:8a:04:00:63:b3:f9:88:d6:9a:3f:f4:d2: 2b:aa:0b:f6:c5:89:9c:ae:eb:0e:dc:a8:88:06:ec: 69:7d:ac:63:ff:b2:54:94:d4:b5:3b:28:83:f6:37: e4:ee:b7:47:de:03:1a:dd:6d:93:e6:6e:90:56:b8: d9:e4:0b:0d:5d:43:66:1e:3e:bf:11:48:69:32:bc: ef:1a:3e:2c:a5:c6:25:dc:82:ef:90:aa:60:3e:59: 67:bb:fe:70:1b:d7:d8:dc:1b:8a:aa:9d:fa:40:e2: 24:f4:68:e9:d7:48:f4:f0:b0:74:05:c3:80:bc:e9: 2d:64:07:3a:b6:54:85:4a:ce:88:a1:a9:80:1f:3a: be:28:11:96:6e:0b:ec:58:fa:1d:92:29:af:51:6e: 8d:8d:9e:86:4a:2e:d1:d1:fa:bb:d8:69:2d:93:04: 86:e2:66:ed:fa:8b:77:ea:09:2b:ed:96:05:e3:73: a2:ad:db:4c:0f:8b:29:16:21:10:ca:d3:e0:0d:9b: 58:95:49:c9:c8:b1:58:a6:d6:a1:23:c7:59:2b:b4: 27:c8:27:80:67:4c:c7:ec:af:0d:02:a7:49:7e:c9: b7:84:ae:ca:c8:a3:3b:eb:2c:90:4e:02:f6:e1:c4: 49:8e:47:d7:6d:ac:c8:c7:f6:a1:21:7f:cf:26:7b: 0a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F5:13:20:D6:CB:95:AE:25:28:B9:5C:B6:0F:4B:90:10:39:78:D6 X509v3 Authority Key Identifier: keyid:77:81:92:28:C4:29:F6:88:8E:B6:18:65:AC:55:31:46:07:E9:1F:62 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/d4GSKMQp9oiOthhlrFUxRgfpH2I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUOSI/d4GSKMQp9oiOthhlrFUxRgfpH2I.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:86:a8:4f:24:6b:54:a8:08:76:e1:4a:81:3f:f8:34:79:22: 73:43:c9:63:11:ea:77:c6:8f:d6:6d:ec:a3:a0:33:2d:53:20: 02:53:49:39:0f:c6:d7:da:d7:3c:ff:f5:24:fa:a5:19:24:10: 2f:bc:23:55:db:90:ac:ae:9e:0f:a9:2b:38:eb:68:52:1e:1f: a6:3a:02:c5:11:2f:ea:1b:06:ab:4f:af:5f:67:d9:f0:5f:56: 87:a4:06:39:24:15:2a:f6:2a:df:06:c4:97:b5:fd:51:3b:e6: aa:42:2d:32:d8:41:b7:ed:7a:b1:6d:f5:10:5d:21:44:04:3f: 91:f0:a2:0a:d8:0b:45:0c:b2:c2:79:cc:83:78:5f:f4:74:be: 35:a0:ac:1a:85:e1:74:ee:bc:e6:2c:ad:98:f9:ba:d7:7f:a8: 9f:18:d8:53:cc:29:0c:90:5b:dc:91:e1:5f:dc:2a:ac:3e:40: 23:cb:20:dc:e0:a8:14:19:25:32:af:46:3d:fc:c7:9d:2d:bf: a1:58:ef:bb:18:03:5f:d6:b9:37:3e:0e:93:79:84:fb:a8:f7: 6c:31:64:ce:fc:53:db:b4:02:ac:75:fd:98:b3:13:f9:66:91: ce:9d:2d:80:ea:fa:23:0e:63:be:94:1a:b3:ae:cf:95:cc:e9: 0a:88:80:a8 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc4 MTkyMjhDNDI5RjY4ODhFQjYxODY1QUM1NTMxNDYwN0U5MUY2MjAeFw0yNTA2MjQx MTAwMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyRjUxMzIwRDZDQjk1 QUUyNTI4Qjk1Q0I2MEY0QjkwMTAzOTc4RDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnooEAGOz+YjWmj/00iuqC/bFiZyu6w7cqIgG7Gl9rGP/slSU 1LU7KIP2N+Tut0feAxrdbZPmbpBWuNnkCw1dQ2YePr8RSGkyvO8aPiylxiXcgu+Q qmA+WWe7/nAb19jcG4qqnfpA4iT0aOnXSPTwsHQFw4C86S1kBzq2VIVKzoihqYAf Or4oEZZuC+xY+h2SKa9Rbo2NnoZKLtHR+rvYaS2TBIbiZu36i3fqCSvtlgXjc6Kt 20wPiykWIRDK0+ANm1iVScnIsVim1qEjx1krtCfIJ4BnTMfsrw0Cp0l+ybeErsrI ozvrLJBOAvbhxEmOR9dtrMjH9qEhf88mewqzAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUMvUTINbLla4lKLlctg9LkBA5eNYwHwYDVR0jBBgwFoAUd4GSKMQp9oiOthhl rFUxRgfpH2IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTFVPU0kv ZDRHU0tNUXA5b2lPdGhobHJGVXhSZ2ZwSDJJLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kNEdTS01RcDlvaU90aGhsckZVeFJnZnBIMkkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MVU9TSS9kNEdTS01RcDlvaU90aGhsckZV eFJnZnBIMkkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoao TyRrVKgIduFKgT/4NHkic0PJYxHqd8aP1m3so6AzLVMgAlNJOQ/G19rXPP/1JPql GSQQL7wjVduQrK6eD6krOOtoUh4fpjoCxREv6hsGq0+vX2fZ8F9Wh6QGOSQVKvYq 3wbEl7X9UTvmqkItMthBt+16sW31EF0hRAQ/kfCiCtgLRQyywnnMg3hf9HS+NaCs GoXhdO685iytmPm613+onxjYU8wpDJBb3JHhX9wqrD5AI8sg3OCoFBklMq9GPfzH nS2/oVjvuxgDX9a5Nz4Ok3mE+6j3bDFkzvxT27QCrHX9mLMT+WaRzp0tgOr6Iw5j vpQas67PlczpCoiAqA== -----END CERTIFICATE-----Generated at Tue Jun 24 20:41:23 2025 by rpki-client