$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft File: JXv5FL8lh5JagPp7xZDoEi8YXjc.mft (raw, json) Hash identifier: Uw+yhX8PZM++M43hVQzboKDh01E9Nx7iFS/VQG9GNEQ= Subject key identifier: 73:89:28:7D:DE:C6:36:10:F4:B0:76:B8:ED:B5:DC:17:93:9C:71:0E Authority key identifier: 25:7B:F9:14:BF:25:87:92:5A:80:FA:7B:C5:90:E8:12:2F:18:5E:37 Certificate issuer: /CN=257BF914BF2587925A80FA7BC590E8122F185E37 Certificate serial: 1364 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JXv5FL8lh5JagPp7xZDoEi8YXjc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft Manifest number: 1364 Signing time: Thu 08 May 2025 21:52:09 +0000 Manifest this update: Thu 08 May 2025 21:52:09 +0000 Manifest next update: Sat 10 May 2025 21:52:09 +0000 Files and hashes: 1: JXv5FL8lh5JagPp7xZDoEi8YXjc.crl (hash: uGoYVcb4TkBhMrXCSr2LRu/4Rmhg4O+qRlfUg23dvG0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JXv5FL8lh5JagPp7xZDoEi8YXjc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4964 (0x1364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257BF914BF2587925A80FA7BC590E8122F185E37 Validity Not Before: May 8 21:52:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7389287DDEC63610F4B076B8EDB5DC17939C710E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:a5:7e:02:33:98:6a:9c:cf:c7:da:0d:75: 1e:1f:74:53:dd:b0:e8:6a:da:0a:3b:08:21:86:ed: 1a:66:32:5e:6e:ee:22:15:99:83:a6:0c:5b:5b:1a: e1:09:16:9c:7b:0e:2f:91:a1:0d:d1:cb:15:14:42: 60:d1:be:a8:b2:c7:32:a6:c3:1c:46:5e:62:03:6c: dd:d9:ac:07:21:6d:ad:82:5b:83:0c:19:2a:d6:c3: 2c:70:af:34:f3:be:5b:4c:ae:74:ec:15:4e:ee:2d: 8f:89:26:ab:e0:0a:a7:e5:9b:27:28:80:e3:e4:6d: 54:2b:4d:26:f8:2b:6d:a5:74:6b:e1:2d:b6:bf:0a: 07:6f:2e:bf:c3:86:46:79:66:b0:ee:58:ed:fe:46: ce:9e:19:b0:de:a8:f6:70:94:7f:ed:2d:a7:0d:83: 73:5a:d1:58:89:5f:b3:97:b8:46:5c:ea:8b:0c:26: 11:8c:03:ec:cd:e5:69:b7:d6:c6:d1:02:72:01:17: 0b:5a:c6:04:13:5b:8b:fa:3c:52:b6:bf:fb:06:8d: 46:3a:1d:f6:c6:1e:0c:d8:77:cc:5c:10:3e:56:bc: a1:68:39:34:93:7f:0e:b9:44:61:af:e3:5a:db:83: 39:06:ed:41:88:8d:d5:81:ef:56:91:64:ea:78:df: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:89:28:7D:DE:C6:36:10:F4:B0:76:B8:ED:B5:DC:17:93:9C:71:0E X509v3 Authority Key Identifier: keyid:25:7B:F9:14:BF:25:87:92:5A:80:FA:7B:C5:90:E8:12:2F:18:5E:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JXv5FL8lh5JagPp7xZDoEi8YXjc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MPOWER/JXv5FL8lh5JagPp7xZDoEi8YXjc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c3:6c:b2:bb:69:eb:5a:8a:95:d5:fc:c9:50:17:af:a0:d4: c4:2f:21:c5:3a:b7:87:63:47:82:30:8e:50:3b:b8:23:a8:84: c3:ce:53:01:78:cb:c8:74:7d:74:cc:9e:0e:de:4e:ee:02:01: c2:c1:11:15:bd:57:77:5d:62:b2:3f:4f:3b:5a:74:8a:1d:db: 37:5d:f1:d3:a7:1f:e5:f7:7a:a7:7c:62:1f:9d:d3:52:94:66: fe:2d:15:54:1c:01:bc:e6:6e:67:d5:99:79:90:6c:4e:98:9f: 79:6c:75:3f:44:2b:41:01:75:18:02:d9:ea:71:df:32:88:9a: c1:cc:a7:22:42:8a:ee:3e:90:40:6f:13:cd:ad:5c:ca:fc:d9: 48:27:73:48:29:d8:5b:c9:16:78:ec:90:cc:7f:c3:08:d6:eb: 68:a0:1f:b9:9c:48:c8:b5:d2:af:94:c9:bb:1e:8a:d5:09:42: 2f:30:77:ec:3f:97:a7:2e:ff:f0:b7:22:a2:cb:43:42:a8:a6: fc:e1:f8:25:df:c4:0b:eb:e8:62:eb:ab:ce:26:ea:74:b0:6c: ae:cd:f0:64:ce:72:d6:5b:b7:b1:4e:fd:01:a0:ec:e0:04:ff: 93:c0:68:84:b1:c2:33:40:c0:7a:22:41:98:49:59:c3:f2:8e: 74:2a:01:7e -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICE2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 QkY5MTRCRjI1ODc5MjVBODBGQTdCQzU5MEU4MTIyRjE4NUUzNzAeFw0yNTA1MDgy MTUyMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczODkyODdEREVDNjM2 MTBGNEIwNzZCOEVEQjVEQzE3OTM5QzcxMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUTKV+AjOYapzPx9oNdR4fdFPdsOhq2go7CCGG7RpmMl5u7iIV mYOmDFtbGuEJFpx7Di+RoQ3RyxUUQmDRvqiyxzKmwxxGXmIDbN3ZrAchba2CW4MM GSrWwyxwrzTzvltMrnTsFU7uLY+JJqvgCqflmycogOPkbVQrTSb4K22ldGvhLba/ CgdvLr/DhkZ5ZrDuWO3+Rs6eGbDeqPZwlH/tLacNg3Na0ViJX7OXuEZc6osMJhGM A+zN5Wm31sbRAnIBFwtaxgQTW4v6PFK2v/sGjUY6HfbGHgzYd8xcED5WvKFoOTST fw65RGGv41rbgzkG7UGIjdWB71aRZOp43xtFAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUc4kofd7GNhD0sHa47bXcF5OccQ4wHwYDVR0jBBgwFoAUJXv5FL8lh5JagPp7 xZDoEi8YXjcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVBPV0VS L0pYdjVGTDhsaDVKYWdQcDd4WkRvRWk4WVhqYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlh2NUZMOGxoNUphZ1BwN3haRG9FaThZWGpjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVBPV0VSL0pYdjVGTDhsaDVKYWdQcDd4 WkRvRWk4WVhqYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCh w2yyu2nrWoqV1fzJUBevoNTELyHFOreHY0eCMI5QO7gjqITDzlMBeMvIdH10zJ4O 3k7uAgHCwREVvVd3XWKyP087WnSKHds3XfHTpx/l93qnfGIfndNSlGb+LRVUHAG8 5m5n1Zl5kGxOmJ95bHU/RCtBAXUYAtnqcd8yiJrBzKciQoruPpBAbxPNrVzK/NlI J3NIKdhbyRZ47JDMf8MI1utooB+5nEjItdKvlMm7HorVCUIvMHfsP5enLv/wtyKi y0NCqKb84fgl38QL6+hi66vOJup0sGyuzfBkznLWW7exTv0BoOzgBP+TwGiEscIz QMB6IkGYSVnD8o50KgF+ -----END CERTIFICATE-----Generated at Sat May 10 09:28:25 2025 by rpki-client