$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json) Hash identifier: kQ6eKUEyjVp25SUfONQ1EUIztnak8NTVyXemXoba1KY= Subject key identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Certificate serial: 0D57 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft Manifest number: 0D49 Signing time: Tue 24 Jun 2025 09:30:36 +0000 Manifest this update: Tue 24 Jun 2025 09:30:36 +0000 Manifest next update: Thu 26 Jun 2025 09:30:36 +0000 Files and hashes: 1: BZmDRB0SwtLygRJZXcGRDCBZ9TI.roa (hash: TOVC67wGWMCHxA34kalCv6BiJsbBGfZGhW3mlttqkrs=) 2: EnyzktiY39z3Epb0tPoD1ZTiCjY.roa (hash: SO15mkm9YyWSgnocBEp5LuWva3Kae27XN0W+lDbvaBs=) 3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: wIsAQ3vktuskYAZXGOZoJO/VOavkwaDwOistnHZpaZY=) 4: fvvYSjfKQUyyZHqdWriCXrk6G8Y.roa (hash: EJ65ceroC+DuPGQRQfr03tPEoUruws4ugmKsftG1avA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 02:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90 Validity Not Before: Jun 24 09:30:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac: c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4: f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96: d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9: fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82: 31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0: 64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c: 10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0: af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12: 1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2: f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6: 09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc: 72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b: da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b: ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15: 12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f: 15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24 X509v3 Authority Key Identifier: keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f2:4c:52:f1:6e:5c:ce:5b:ee:2d:f4:95:73:79:dd:e9:3a: d5:34:3b:69:22:6c:50:b2:4a:39:a8:a8:29:c4:9e:3a:56:b5: 63:56:62:c8:94:ae:f1:63:fc:5e:1a:6c:81:ee:49:ee:3c:4e: 16:74:02:68:50:e2:17:a5:21:18:bd:e4:af:94:85:d9:ac:80: 2c:15:c0:37:e0:d9:36:30:e9:3d:ff:ff:db:5d:2c:0c:c6:48: 5f:0d:fe:ae:b5:99:2d:0c:af:4b:8e:b6:6e:0c:6b:56:9f:df: a7:64:57:26:d2:fb:be:db:03:a5:59:f4:4e:44:54:7b:b2:0c: 4e:29:3f:01:a7:9c:db:a9:b1:99:ef:af:e0:bb:fd:20:57:46: 14:84:11:93:51:6d:d2:85:77:40:12:f0:19:04:82:2d:46:5d: cd:b2:83:21:d7:31:4d:c4:2f:33:88:3c:a6:03:4a:76:5c:4b: 69:ed:72:e5:58:fa:3d:bc:58:38:85:b7:6f:fe:c5:e2:93:39: 35:d5:d3:05:8e:40:6e:7f:c3:b2:b1:9d:d7:89:ea:84:18:ed: fb:e6:97:9a:15:f8:3a:2d:25:6a:5c:1b:67:d7:92:2d:7e:27: db:a6:15:ca:a1:34:c0:53:46:60:e1:ba:39:b1:c1:6e:b1:cf: 68:1e:d2:b0 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I0 OUI4N0EzRkYzODk2MzRDN0QwOTBENzZEQUVBQTk2RkVFRkQ5MDAeFw0yNTA2MjQw OTMwMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEREOTEyNkIxOTgzNjlB RTdEN0NERDhCMjMyNkIxMTFDQjQ1MEYzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0rXJUYHrBtiY8r1h9rMeXnTdzfjg2WBZRoeEc9PEXWSm7vDR2 RJTmRjTlltBu0EdqPgEUUcz9fNm1+fxgvcewpaPL1+JlNJ+IgjFkiz2AkbaSUz9h ifmC8GStUwi5RUVp/KeOZt8qTBB3sLE7SqQkJtszAA0csK+nTUPwhGpIPOCRGVFA EhtDfa4o3zPgOiDqZslq8vWwwi8PJnyX4G3320CNpgn4t/Q4UYr1f8Y/pi+DzHI6 i8TrnZDfFvtxfBnve9r2py7/p2wZWckJeexti+82ydbeGWjBBU7+lE7HFRJY7LW2 XSt42/sjehfVDxUvRd90Ay53s8hFKrt5A7zxAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU3ZEmsZg2mufXzdiyMmsRHLRQ8yQwHwYDVR0jBBgwFoAUO0m4ej/ziWNMfQkN dtrqqW/u/ZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNSRUUv TzBtNGVqX3ppV05NZlFrTmR0cnFxV191X1pBLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PMG00ZWpfemlXTk1mUWtOZHRycXFXX3VfWkEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1JFRS9PMG00ZWpfemlXTk1mUWtOZHRy cXFXX3VfWkEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/JM UvFuXM5b7i30lXN53ek61TQ7aSJsULJKOaioKcSeOla1Y1ZiyJSu8WP8Xhpsge5J 7jxOFnQCaFDiF6UhGL3kr5SF2ayALBXAN+DZNjDpPf//210sDMZIXw3+rrWZLQyv S462bgxrVp/fp2RXJtL7vtsDpVn0TkRUe7IMTik/Aaec26mxme+v4Lv9IFdGFIQR k1Ft0oV3QBLwGQSCLUZdzbKDIdcxTcQvM4g8pgNKdlxLae1y5Vj6PbxYOIW3b/7F 4pM5NdXTBY5Abn/DsrGd14nqhBjt++aXmhX4Oi0lalwbZ9eSLX4n26YVyqE0wFNG YOG6ObHBbrHPaB7SsA== -----END CERTIFICATE-----Generated at Tue Jun 24 22:25:20 2025 by rpki-client