$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft File: HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft (raw, json) Hash identifier: Y4binBeltah3XJGHZii4U3hPgOwZyHahUZF01nkHsG4= Subject key identifier: D2:8E:11:61:7B:4C:95:5F:B6:30:0F:D7:5A:8B:93:92:95:76:43:2B Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 Certificate issuer: /CN=1C7073A6066C765842FDF07169E43518A0BB0235 Certificate serial: 01E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft Manifest number: 01DA Signing time: Sat 10 May 2025 09:53:30 +0000 Manifest this update: Sat 10 May 2025 09:53:30 +0000 Manifest next update: Mon 12 May 2025 09:53:30 +0000 Files and hashes: 1: 8_ywIYQLxOvx1YEVqRWZw9kTwPA.roa (hash: g7JLEcvK42GFuRUq/WYsXFNxj5HwuAJMzc6Bf+2R/a8=) 2: 9cU-juTY6yPtJcZJx3x23sRcjl0.roa (hash: Ojp2nb+m9WddKosB6FNklwT5YTF78j3Abq/I4JWbpnU=) 3: HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl (hash: 6fGNN/82F0Chg9nv9m+wVtzc2RsmvPznFm+5P9A4vtM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 15:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235 Validity Not Before: May 10 09:53:30 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D28E11617B4C955FB6300FD75A8B93929576432B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:58:fc:78:d8:99:fc:9f:df:13:8d:d1:ac:64: da:07:f2:f1:c4:21:f9:7a:f4:bd:f6:3b:25:6e:26: e2:f8:e1:37:e7:0b:73:7c:51:45:6e:83:6b:94:69: 29:85:e8:12:e3:89:a1:3b:ff:12:31:1f:f4:e4:fb: f8:4e:22:07:56:35:88:cc:fd:a1:1e:27:aa:93:3f: 31:79:13:e1:d4:dc:9e:16:68:e9:b3:39:34:54:2a: 21:d4:7c:d7:04:1c:c1:a1:99:4c:e2:07:1d:fd:c9: dd:d7:87:63:3e:2f:a7:c2:e5:18:51:f2:83:dd:7c: 54:ae:59:e9:4a:bb:dd:48:eb:68:a3:1f:62:7f:3d: 34:68:86:29:19:08:e8:24:22:70:36:f6:76:52:a9: 48:51:72:21:8f:15:11:0e:ba:4a:09:3a:7d:ee:a3: 3e:35:29:df:83:3c:dc:25:9e:3b:e3:ef:eb:9a:ce: 26:45:04:4a:df:d5:6d:a3:44:67:c1:5d:4e:01:87: 5a:79:3f:9c:05:47:c8:99:23:69:cb:1e:af:81:ec: a1:1d:72:8e:3e:b0:07:0e:39:d6:68:f5:97:ad:dc: da:f4:c4:d9:02:59:46:59:ae:0a:c1:e1:0b:fb:44: 86:1f:19:33:d8:14:cc:45:f5:45:21:93:b9:01:54: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8E:11:61:7B:4C:95:5F:B6:30:0F:D7:5A:8B:93:92:95:76:43:2B X509v3 Authority Key Identifier: keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f5:89:99:eb:85:0c:b3:35:b5:c5:e2:8f:18:24:d1:14:8e: e8:83:5d:10:b0:16:66:2d:12:db:a4:2d:a7:e9:e7:fd:ad:2d: 56:3d:89:dc:9a:ff:e2:b3:20:50:31:d1:57:2f:e4:ed:be:e5: 32:9b:b4:8a:4c:13:a5:01:08:09:c0:fc:47:73:89:05:d1:cd: e9:5d:45:27:24:16:20:d4:9f:b0:ba:7b:bf:04:cf:1b:78:42: 02:47:d5:02:44:cb:28:7b:9a:50:70:c2:d9:fa:8f:58:c3:25: e4:4c:68:aa:c3:8d:64:97:b6:13:3f:0f:ba:9f:a0:57:4c:34: ac:66:db:69:99:64:8b:8b:ad:8e:40:83:86:f1:af:a7:59:a0: 8e:e1:56:f2:59:44:11:c9:33:be:2b:d9:17:d6:e1:9d:6f:f1: 14:e5:66:95:56:d4:a8:08:7a:27:2d:ed:bb:2c:d8:fe:fb:3e: 54:9d:b7:55:b4:03:6a:42:f4:7a:28:d7:14:58:a0:eb:25:78: 92:d5:c0:1a:68:c0:d8:c6:a8:8f:2b:8e:ab:54:88:1d:8e:a4: f1:7c:c0:ae:23:87:c3:37:db:eb:b8:92:b9:d6:7d:6f:59:20: a9:fa:64:b3:85:1a:87:35:00:d4:ae:21:53:94:56:ce:ee:c5: ed:27:31:0a -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUM3 MDczQTYwNjZDNzY1ODQyRkRGMDcxNjlFNDM1MThBMEJCMDIzNTAeFw0yNTA1MTAw OTUzMzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQyOEUxMTYxN0I0Qzk1 NUZCNjMwMEZENzVBOEI5MzkyOTU3NjQzMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUWPx42Jn8n98TjdGsZNoH8vHEIfl69L32OyVuJuL44TfnC3N8 UUVug2uUaSmF6BLjiaE7/xIxH/Tk+/hOIgdWNYjM/aEeJ6qTPzF5E+HU3J4WaOmz OTRUKiHUfNcEHMGhmUziBx39yd3Xh2M+L6fC5RhR8oPdfFSuWelKu91I62ijH2J/ PTRohikZCOgkInA29nZSqUhRciGPFREOukoJOn3uoz41Kd+DPNwlnjvj7+uaziZF BErf1W2jRGfBXU4Bh1p5P5wFR8iZI2nLHq+B7KEdco4+sAcOOdZo9Zet3Nr0xNkC WUZZrgrB4Qv7RIYfGTPYFMxF9UUhk7kBVActAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU0o4RYXtMlV+2MA/XWouTkpV2QyswHwYDVR0jBBgwFoAUHHBzpgZsdlhC/fBx aeQ1GKC7AjUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlVOTElO RS9ISEJ6cGdac2RsaENfZkJ4YWVRMUdLQzdBalUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0hIQnpwZ1pzZGxoQ19mQnhhZVExR0tDN0FqVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05VTkxJTkUvSEhCenBnWnNkbGhDX2ZC eGFlUTFHS0M3QWpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AGH1iZnrhQyzNbXF4o8YJNEUjuiDXRCwFmYtEtukLafp5/2tLVY9idya/+KzIFAx 0Vcv5O2+5TKbtIpME6UBCAnA/EdziQXRzeldRSckFiDUn7C6e78Ezxt4QgJH1QJE yyh7mlBwwtn6j1jDJeRMaKrDjWSXthM/D7qfoFdMNKxm22mZZIuLrY5Ag4bxr6dZ oI7hVvJZRBHJM74r2RfW4Z1v8RTlZpVW1KgIeict7bss2P77PlSdt1W0A2pC9Hoo 1xRYoOsleJLVwBpowNjGqI8rjqtUiB2OpPF8wK4jh8M32+u4krnWfW9ZIKn6ZLOF Goc1ANSuIVOUVs7uxe0nMQo= -----END CERTIFICATE-----Generated at Sat May 10 11:36:20 2025 by rpki-client