$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft File: OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft (raw, json) Hash identifier: a5/LRWxuUYo87N44+USrTK/AXVZSgzIFH7gndVPMsCI= Subject key identifier: 47:3B:B5:F3:F7:69:A0:EA:0C:96:E3:67:3D:14:3F:8C:37:D9:68:D0 Authority key identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 Certificate issuer: /CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Certificate serial: 026C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft Manifest number: 026A Signing time: Mon 02 Mar 2026 03:22:59 +0000 Manifest this update: Mon 02 Mar 2026 03:22:59 +0000 Manifest next update: Mon 02 Mar 2026 09:22:59 +0000 Files and hashes: 1: OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl (hash: LhLbXR9ocreu4TKT69UB3ShDoZWUGUsgTOZaIyhqvMU=) 2: SLabTJZUnd9dxEvzHYFFrWea9UU.roa (hash: c8h/LrBIXQYnRPMFpRWKge88DSjxLRkfZbFW0lzmsog=) 3: y0It2rSVIUtpZCaFm-g0FOIFWKE.roa (hash: hT1m3KE7RGg7+zcFGlXdugL1MYYVOxzwx6SEZ/67da0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 09:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Validity Not Before: Mar 2 03:22:59 2026 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=473BB5F3F769A0EA0C96E3673D143F8C37D968D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:14:a1:8c:fc:46:61:77:08:c2:73:d3:3f: 9e:39:53:fe:5a:dc:d5:ca:28:e9:9a:e1:46:63:da: 4d:43:d7:dc:6c:66:f1:7c:c5:4b:b5:e8:3c:a8:49: 66:3f:8e:13:9c:dd:99:dd:8e:ca:00:74:c4:03:91: ba:6a:66:19:6e:8b:42:93:77:b5:08:d6:0c:bc:73: a8:21:02:98:ed:1b:9a:db:3a:3f:66:cb:a5:2c:9d: 46:ce:a2:9d:0c:38:e3:a2:2c:80:91:e0:92:9a:5e: b6:39:08:08:aa:a9:b4:ca:bf:88:01:e8:65:42:95: df:cb:e3:94:02:23:d9:eb:0f:f8:96:b7:29:4a:58: 94:ba:18:86:77:30:4d:31:d6:90:49:d6:e3:d7:3b: bb:1f:68:84:3b:69:9c:fe:ea:36:59:0f:f0:02:6c: 33:1f:9c:97:f5:16:18:fb:90:12:e6:05:4d:31:6c: 41:1b:7f:35:4f:75:e5:b9:29:97:c5:ea:1f:65:12: 4b:31:39:a6:6d:b2:4e:9a:ed:34:7e:d2:06:2d:df: 79:a7:d8:ee:97:d2:46:3d:38:f8:a8:a9:bf:f1:b2: 5b:2a:71:48:b2:82:01:4b:69:0e:1b:49:b2:22:53: dd:7a:ec:83:63:26:1e:ea:c9:86:5c:6f:96:47:41: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:B5:F3:F7:69:A0:EA:0C:96:E3:67:3D:14:3F:8C:37:D9:68:D0 X509v3 Authority Key Identifier: keyid:38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:84:17:c5:08:3b:e7:fa:5b:71:b4:20:32:71:ff:e8:aa:8b: 36:14:aa:7a:54:ab:6d:83:a1:11:09:da:45:aa:9c:5b:0b:83: 16:b7:99:e1:1d:35:58:f8:6a:60:67:f4:2a:28:72:08:03:20: cc:0a:be:73:a3:10:eb:53:37:00:6a:42:24:fd:99:98:54:9d: f1:63:67:e9:de:58:0c:7c:34:ce:f7:95:8c:86:a7:1e:f0:b9: f9:e2:04:e1:6b:50:13:8a:55:f2:bb:57:35:79:f3:67:29:65: 38:5a:ae:71:83:6b:c4:7f:59:08:7a:56:29:66:ab:fc:ae:a9: 18:16:9d:02:5d:39:64:ce:b5:4a:9e:ff:9e:13:6c:20:d8:44: cc:c1:20:ec:7b:84:f9:2b:98:6a:c9:95:99:d6:4d:18:79:43: 9c:98:ff:72:65:10:16:8a:7b:93:34:8e:2b:05:5d:0a:64:4e: 0d:a9:90:25:15:68:ee:d0:0f:91:4b:43:aa:e7:2b:fd:0a:ad: 30:e8:c1:3c:3a:66:07:6c:68:79:54:80:ae:df:3e:94:db:8a: ee:89:97:61:d9:83:31:f4:ba:c3:4f:e9:6e:86:29:ef:e1:c0: 04:4c:b8:e8:61:73:25:bb:88:70:67:a5:bb:27:dc:f4:3b:d8: 7f:aa:d2:6a -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzhC RkIzMEM3MkNBOTU0OEY3OTZDQzNENEZCNjAwNkI4ODNFMjcwMTAeFw0yNjAzMDIw MzIyNTlaFw0yNjEwMzAxNTMwMTlaMDMxMTAvBgNVBAMTKDQ3M0JCNUYzRjc2OUEw RUEwQzk2RTM2NzNEMTQzRjhDMzdEOTY4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVgBShjPxGYXcIwnPTP545U/5a3NXKKOma4UZj2k1D19xsZvF8 xUu16DyoSWY/jhOc3ZndjsoAdMQDkbpqZhlui0KTd7UI1gy8c6ghApjtG5rbOj9m y6UsnUbOop0MOOOiLICR4JKaXrY5CAiqqbTKv4gB6GVCld/L45QCI9nrD/iWtylK WJS6GIZ3ME0x1pBJ1uPXO7sfaIQ7aZz+6jZZD/ACbDMfnJf1Fhj7kBLmBU0xbEEb fzVPdeW5KZfF6h9lEksxOaZtsk6a7TR+0gYt33mn2O6X0kY9OPioqb/xslsqcUiy ggFLaQ4bSbIiU9167INjJh7qyYZcb5ZHQSQ7AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQURzu18/dpoOoMluNnPRQ/jDfZaNAwHwYDVR0jBBgwFoAUOL+zDHLKlUj3lsw9 T7YAa4g+JwEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJ L09MLXpESExLbFVqM2xzdzlUN1lBYTRnLUp3RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvT0wtekRITEtsVWozbHN3OVQ3WUFhNGctSndFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJL09MLXpESExLbFVqM2xzdzlU N1lBYTRnLUp3RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAg hBfFCDvn+ltxtCAycf/oqos2FKp6VKttg6ERCdpFqpxbC4MWt5nhHTVY+GpgZ/Qq KHIIAyDMCr5zoxDrUzcAakIk/ZmYVJ3xY2fp3lgMfDTO95WMhqce8Ln54gTha1AT ilXyu1c1efNnKWU4Wq5xg2vEf1kIelYpZqv8rqkYFp0CXTlkzrVKnv+eE2wg2ETM wSDse4T5K5hqyZWZ1k0YeUOcmP9yZRAWinuTNI4rBV0KZE4NqZAlFWju0A+RS0Oq 5yv9Cq0w6ME8OmYHbGh5VICu3z6U24ruiZdh2YMx9LrDT+luhinv4cAETLjoYXMl u4hwZ6W7J9z0O9h/qtJq -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:39 2026 by rpki-client