$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json) Hash identifier: orazWWTQbOTg1nFw9U2moQ+qpgj0sR/C0asm8v7ZDu0= Subject key identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0D77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft Manifest number: 0D69 Signing time: Mon 11 Aug 2025 10:10:04 +0000 Manifest this update: Mon 11 Aug 2025 10:10:04 +0000 Manifest next update: Wed 13 Aug 2025 10:10:04 +0000 Files and hashes: 1: BZmDRB0SwtLygRJZXcGRDCBZ9TI.roa (hash: TOVC67wGWMCHxA34kalCv6BiJsbBGfZGhW3mlttqkrs=) 2: EnyzktiY39z3Epb0tPoD1ZTiCjY.roa (hash: SO15mkm9YyWSgnocBEp5LuWva3Kae27XN0W+lDbvaBs=) 3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: ajava4r+BaYK/aYMStoFPepQZDDNWWaCzroT4MU970o=) 4: fvvYSjfKQUyyZHqdWriCXrk6G8Y.roa (hash: EJ65ceroC+DuPGQRQfr03tPEoUruws4ugmKsftG1avA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3447 (0xd77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: Aug 11 10:10:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac: c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4: f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96: d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9: fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82: 31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0: 64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c: 10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0: af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12: 1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2: f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6: 09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc: 72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b: da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b: ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15: 12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f: 15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e4:fb:28:16:2c:fa:17:b5:ad:71:e3:75:55:97:19:f8:da: 5e:37:03:a2:94:45:9b:37:bb:ba:56:ef:cf:d7:d6:5e:97:7e: 2c:b2:91:b8:11:b8:7c:bb:83:d7:9c:3e:fe:d6:dd:8b:12:b1: 66:16:37:dd:86:45:9e:52:73:b9:7c:b4:0d:38:dc:cc:9b:ce: ea:04:c0:09:2f:01:c8:e4:64:c4:2b:fa:8c:b8:44:c1:16:7a: 40:ed:b8:0a:54:57:df:67:85:a9:cf:fd:6c:06:54:36:20:a5: 0e:99:78:31:55:c9:64:9f:60:f4:b9:a6:36:a8:ef:5d:9e:12: 0c:eb:0d:9f:7e:61:3f:58:12:f5:2f:f3:7d:c4:94:a5:cf:ac: b9:6e:a9:33:fa:5c:0e:79:5c:f2:a0:55:54:7d:10:83:55:fd: ad:02:1d:56:a4:e2:a4:a2:9f:9e:df:ff:a2:b4:8a:d4:fd:65: 5a:3f:fe:1f:5e:84:fa:96:15:0b:ec:bb:98:37:d7:2b:72:7e: 5a:5e:34:29:a9:c8:f3:fc:66:b0:51:65:80:6e:82:3a:ce:0b: 49:16:16:d7:16:b9:c9:9c:61:c4:3a:6e:41:23:27:68:78:33: b7:c8:d1:08:38:d4:8b:e3:46:ab:59:74:65:94:c3:96:50:58: 10:86:b1:d7 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNTA4MTEx MDEwMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREOTEyNkIxOTgzNjlB RTdEN0NERDhCMjMyNkIxMTFDQjQ1MEYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0rXJUYHrBtiY8r1h9rMeXnTdzfjg2WBZRoeEc9PEXWSm7vDR2 RJTmRjTlltBu0EdqPgEUUcz9fNm1+fxgvcewpaPL1+JlNJ+IgjFkiz2AkbaSUz9h ifmC8GStUwi5RUVp/KeOZt8qTBB3sLE7SqQkJtszAA0csK+nTUPwhGpIPOCRGVFA EhtDfa4o3zPgOiDqZslq8vWwwi8PJnyX4G3320CNpgn4t/Q4UYr1f8Y/pi+DzHI6 i8TrnZDfFvtxfBnve9r2py7/p2wZWckJeexti+82ydbeGWjBBU7+lE7HFRJY7LW2 XSt42/sjehfVDxUvRd90Ay53s8hFKrt5A7zxAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU3ZEmsZg2mufXzdiyMmsRHLRQ8yQwHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS9PMG00ZWpfemlXTk1mUWtOZHRy cXFXX3VfWkEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOT7 KBYs+he1rXHjdVWXGfjaXjcDopRFmze7ulbvz9fWXpd+LLKRuBG4fLuD15w+/tbd ixKxZhY33YZFnlJzuXy0DTjczJvO6gTACS8ByORkxCv6jLhEwRZ6QO24ClRX32eF qc/9bAZUNiClDpl4MVXJZJ9g9LmmNqjvXZ4SDOsNn35hP1gS9S/zfcSUpc+suW6p M/pcDnlc8qBVVH0Qg1X9rQIdVqTipKKfnt//orSK1P1lWj/+H16E+pYVC+y7mDfX K3J+Wl40KanI8/xmsFFlgG6COs4LSRYW1xa5yZxhxDpuQSMnaHgzt8jRCDjUi+NG q1l0ZZTDllBYEIax1w== -----END CERTIFICATE-----Generated at Mon Aug 11 13:01:18 2025 by rpki-client