$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft File: JXv5FL8lh5JagPp7xZDoEi8YXjc.mft (raw, json) Hash identifier: ZCbOEz4xYU67PU9LOj90Y1W2SuJzJ2IyaM9v9zlrElA= Subject key identifier: 73:89:28:7D:DE:C6:36:10:F4:B0:76:B8:ED:B5:DC:17:93:9C:71:0E Authority key identifier: 25:7B:F9:14:BF:25:87:92:5A:80:FA:7B:C5:90:E8:12:2F:18:5E:37 Certificate issuer: /CN=257BF914BF2587925A80FA7BC590E8122F185E37 Certificate serial: 13DE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JXv5FL8lh5JagPp7xZDoEi8YXjc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft Manifest number: 13DD Signing time: Tue 04 Nov 2025 17:58:53 +0000 Manifest this update: Tue 04 Nov 2025 17:58:53 +0000 Manifest next update: Thu 06 Nov 2025 17:58:53 +0000 Files and hashes: 1: JXv5FL8lh5JagPp7xZDoEi8YXjc.crl (hash: XaOQqf7IMX+Uq15mschvv0qF/oSaBCZMsHql+mJIDT0=) 2: iUZbTBFTOl8FYM0mszoGxcboVDw.roa (hash: +ooV5uGQPY7AlNLzkWtIfYkQdhm4Q+pFQgA+vDFNM6E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JXv5FL8lh5JagPp7xZDoEi8YXjc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5086 (0x13de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257BF914BF2587925A80FA7BC590E8122F185E37 Validity Not Before: Nov 4 17:58:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7389287DDEC63610F4B076B8EDB5DC17939C710E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:a5:7e:02:33:98:6a:9c:cf:c7:da:0d:75: 1e:1f:74:53:dd:b0:e8:6a:da:0a:3b:08:21:86:ed: 1a:66:32:5e:6e:ee:22:15:99:83:a6:0c:5b:5b:1a: e1:09:16:9c:7b:0e:2f:91:a1:0d:d1:cb:15:14:42: 60:d1:be:a8:b2:c7:32:a6:c3:1c:46:5e:62:03:6c: dd:d9:ac:07:21:6d:ad:82:5b:83:0c:19:2a:d6:c3: 2c:70:af:34:f3:be:5b:4c:ae:74:ec:15:4e:ee:2d: 8f:89:26:ab:e0:0a:a7:e5:9b:27:28:80:e3:e4:6d: 54:2b:4d:26:f8:2b:6d:a5:74:6b:e1:2d:b6:bf:0a: 07:6f:2e:bf:c3:86:46:79:66:b0:ee:58:ed:fe:46: ce:9e:19:b0:de:a8:f6:70:94:7f:ed:2d:a7:0d:83: 73:5a:d1:58:89:5f:b3:97:b8:46:5c:ea:8b:0c:26: 11:8c:03:ec:cd:e5:69:b7:d6:c6:d1:02:72:01:17: 0b:5a:c6:04:13:5b:8b:fa:3c:52:b6:bf:fb:06:8d: 46:3a:1d:f6:c6:1e:0c:d8:77:cc:5c:10:3e:56:bc: a1:68:39:34:93:7f:0e:b9:44:61:af:e3:5a:db:83: 39:06:ed:41:88:8d:d5:81:ef:56:91:64:ea:78:df: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:89:28:7D:DE:C6:36:10:F4:B0:76:B8:ED:B5:DC:17:93:9C:71:0E X509v3 Authority Key Identifier: keyid:25:7B:F9:14:BF:25:87:92:5A:80:FA:7B:C5:90:E8:12:2F:18:5E:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JXv5FL8lh5JagPp7xZDoEi8YXjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:76:4a:87:e0:e5:f1:69:79:33:b9:98:31:a7:73:b0:72:d1: 09:a1:94:4a:04:86:d2:1f:b0:8f:f7:3b:0a:ff:47:3f:dc:f6: 6e:ef:8d:22:6f:55:a4:9f:9f:01:90:62:8b:47:c4:2c:ed:a8: 2e:a7:21:6f:66:3a:1c:de:23:77:5e:db:d0:24:e6:a4:e1:8d: 08:ae:5e:56:97:48:ed:d4:a0:a2:0e:1d:af:6f:0b:25:98:b4: 24:4c:72:a6:38:cb:63:fc:a9:ea:55:e2:62:19:f1:eb:f1:38: 1e:ae:83:79:19:59:fa:81:8d:3e:45:e7:27:8c:9b:69:65:24: 65:ae:59:8c:20:40:cb:c1:1e:1a:13:a0:bf:ee:c7:ac:0d:aa: 94:df:ca:ba:e2:75:4a:87:6e:80:e9:a8:35:bd:f8:00:a3:0e: 9b:65:4a:1d:1d:da:e8:99:5e:f5:ea:80:43:ba:86:cf:06:d0: 01:01:09:2a:0d:72:5a:0c:64:48:c2:27:8c:14:55:28:4e:a2: 92:70:3f:a7:b9:b4:a1:f6:3c:65:61:d4:45:ea:b8:06:82:d4: 8e:a0:04:46:51:97:d1:81:84:63:a3:ed:3e:96:74:6f:4b:8c: 68:c2:0d:56:c2:f5:ce:63:4f:ef:a5:c6:32:c7:b5:06:c8:93: 6a:dd:43:72 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICE94wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 QkY5MTRCRjI1ODc5MjVBODBGQTdCQzU5MEU4MTIyRjE4NUUzNzAeFw0yNTExMDQx NzU4NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDczODkyODdEREVDNjM2 MTBGNEIwNzZCOEVEQjVEQzE3OTM5QzcxMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUTKV+AjOYapzPx9oNdR4fdFPdsOhq2go7CCGG7RpmMl5u7iIV mYOmDFtbGuEJFpx7Di+RoQ3RyxUUQmDRvqiyxzKmwxxGXmIDbN3ZrAchba2CW4MM GSrWwyxwrzTzvltMrnTsFU7uLY+JJqvgCqflmycogOPkbVQrTSb4K22ldGvhLba/ CgdvLr/DhkZ5ZrDuWO3+Rs6eGbDeqPZwlH/tLacNg3Na0ViJX7OXuEZc6osMJhGM A+zN5Wm31sbRAnIBFwtaxgQTW4v6PFK2v/sGjUY6HfbGHgzYd8xcED5WvKFoOTST fw65RGGv41rbgzkG7UGIjdWB71aRZOp43xtFAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUc4kofd7GNhD0sHa47bXcF5OccQ4wHwYDVR0jBBgwFoAUJXv5FL8lh5JagPp7 xZDoEi8YXjcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVBPV0VS L0pYdjVGTDhsaDVKYWdQcDd4WkRvRWk4WVhqYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlh2NUZMOGxoNUphZ1BwN3haRG9FaThZWGpjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVBPV0VSL0pYdjVGTDhsaDVKYWdQcDd4 WkRvRWk4WVhqYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1 dkqH4OXxaXkzuZgxp3OwctEJoZRKBIbSH7CP9zsK/0c/3PZu740ib1Wkn58BkGKL R8Qs7agupyFvZjoc3iN3XtvQJOak4Y0Irl5Wl0jt1KCiDh2vbwslmLQkTHKmOMtj /KnqVeJiGfHr8TgeroN5GVn6gY0+RecnjJtpZSRlrlmMIEDLwR4aE6C/7sesDaqU 38q64nVKh26A6ag1vfgAow6bZUodHdromV716oBDuobPBtABAQkqDXJaDGRIwieM FFUoTqKScD+nubSh9jxlYdRF6rgGgtSOoARGUZfRgYRjo+0+lnRvS4xowg1WwvXO Y0/vpcYyx7UGyJNq3UNy -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:43 2025 by rpki-client