$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json) Hash identifier: sCCY7ggnhEoa/q1wWha+v/Y8WhGlO9QgrB4+U1CNX3w= Subject key identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0D38 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft Manifest number: 0D2A Signing time: Thu 08 May 2025 21:20:30 +0000 Manifest this update: Thu 08 May 2025 21:20:30 +0000 Manifest next update: Sat 10 May 2025 21:20:30 +0000 Files and hashes: 1: BZmDRB0SwtLygRJZXcGRDCBZ9TI.roa (hash: TOVC67wGWMCHxA34kalCv6BiJsbBGfZGhW3mlttqkrs=) 2: EnyzktiY39z3Epb0tPoD1ZTiCjY.roa (hash: SO15mkm9YyWSgnocBEp5LuWva3Kae27XN0W+lDbvaBs=) 3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: kPndB+54lo6e13MrdQ4+UDgmo7G/8YT5bICTm+SZaEI=) 4: fvvYSjfKQUyyZHqdWriCXrk6G8Y.roa (hash: EJ65ceroC+DuPGQRQfr03tPEoUruws4ugmKsftG1avA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3384 (0xd38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: May 8 21:20:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac: c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4: f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96: d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9: fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82: 31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0: 64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c: 10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0: af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12: 1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2: f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6: 09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc: 72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b: da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b: ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15: 12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f: 15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1d:66:80:21:f1:50:73:1a:be:eb:5b:71:8f:e8:be:7f:82: a5:1e:e0:13:7f:ba:d9:2f:23:46:c1:79:16:73:aa:db:dd:7d: 3e:c7:cb:80:98:21:90:10:f9:b1:6d:63:d1:fa:81:8e:02:9f: cb:83:e0:8f:ef:32:37:32:cc:5e:5d:ab:5e:be:2a:3c:58:ed: 5a:fa:2b:1c:6c:09:94:0b:92:e0:37:61:dc:e0:34:79:ed:de: 26:e1:dd:61:48:10:d4:b2:a6:53:4a:3d:64:1d:61:19:21:49: bb:eb:9b:93:f1:ff:07:93:88:16:ea:02:b7:e9:1c:fa:12:7f: 7f:de:aa:de:93:d0:b2:1a:a4:b6:b7:b7:c3:19:72:a9:a4:5b: 37:b0:07:83:84:ee:63:1a:73:6d:ca:2d:2d:aa:ce:46:97:19: 1f:cc:9b:f7:18:e4:48:7f:cd:18:81:2a:17:c9:1f:91:57:b0: 13:42:97:00:c4:28:b3:66:28:6c:5a:d2:d0:c5:4a:4e:75:41: 83:49:02:4d:41:43:f5:c5:03:d0:92:c8:c1:f5:b8:9d:a9:9a: a4:62:2c:e2:42:1e:16:2f:6c:79:bd:88:75:ad:fa:cf:50:d5: 54:b0:71:35:2c:7e:ef:6d:db:6a:24:63:47:8f:9f:58:3a:5c: 6f:06:9d:0b -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNTA1MDgy MTIwMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREOTEyNkIxOTgzNjlB RTdEN0NERDhCMjMyNkIxMTFDQjQ1MEYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0rXJUYHrBtiY8r1h9rMeXnTdzfjg2WBZRoeEc9PEXWSm7vDR2 RJTmRjTlltBu0EdqPgEUUcz9fNm1+fxgvcewpaPL1+JlNJ+IgjFkiz2AkbaSUz9h ifmC8GStUwi5RUVp/KeOZt8qTBB3sLE7SqQkJtszAA0csK+nTUPwhGpIPOCRGVFA EhtDfa4o3zPgOiDqZslq8vWwwi8PJnyX4G3320CNpgn4t/Q4UYr1f8Y/pi+DzHI6 i8TrnZDfFvtxfBnve9r2py7/p2wZWckJeexti+82ydbeGWjBBU7+lE7HFRJY7LW2 XSt42/sjehfVDxUvRd90Ay53s8hFKrt5A7zxAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU3ZEmsZg2mufXzdiyMmsRHLRQ8yQwHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS9PMG00ZWpfemlXTk1mUWtOZHRy cXFXX3VfWkEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEASx1m gCHxUHMavutbcY/ovn+CpR7gE3+62S8jRsF5FnOq2919PsfLgJghkBD5sW1j0fqB jgKfy4Pgj+8yNzLMXl2rXr4qPFjtWvorHGwJlAuS4Ddh3OA0ee3eJuHdYUgQ1LKm U0o9ZB1hGSFJu+ubk/H/B5OIFuoCt+kc+hJ/f96q3pPQshqktre3wxlyqaRbN7AH g4TuYxpzbcotLarORpcZH8yb9xjkSH/NGIEqF8kfkVewE0KXAMQos2YobFrS0MVK TnVBg0kCTUFD9cUD0JLIwfW4namapGIs4kIeFi9seb2Ida36z1DVVLBxNSx+723b aiRjR4+fWDpcbwadCw== -----END CERTIFICATE-----Generated at Sat May 10 09:16:14 2025 by rpki-client