$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft File: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json) Hash identifier: +oydiKqnwH3jnY1xrWZrSKEfo0ppNk05SpBDzjD13c0= Subject key identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 01AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft Manifest number: 01AB Signing time: Wed 05 Nov 2025 07:28:38 +0000 Manifest this update: Wed 05 Nov 2025 07:28:38 +0000 Manifest next update: Wed 05 Nov 2025 13:28:38 +0000 Files and hashes: 1: 2bTqYrZys3Fogts7Fv5vjncOvIc.roa (hash: qnYX1Y1VBdTSxMV61i74UZEIUai9LUqwtA41ObRO5LM=) 2: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: NmWmzziLLKV75mdV+DMeTzTvlILPBO1+u67IZTJlC6M=) 3: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Nov 5 07:28:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a: 99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9: fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8: 54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5: d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4: a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3: f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03: 3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d: f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc: 0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e: 51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50: 25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78: 4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85: b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8: b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21: 91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2: bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:93:01:11:8e:a9:77:46:ed:1c:af:18:80:68:15:b2:91:fa: 7b:9d:0e:36:41:03:c0:54:14:36:2e:f6:8f:4d:ec:b2:da:67: 2f:96:f4:0e:78:1c:36:c0:da:f4:a4:e2:65:1b:a3:6b:be:ee: 5b:8f:a9:01:80:a7:bf:1d:15:71:bd:d0:f7:7f:f4:40:63:0a: de:ae:ab:f5:8d:39:0a:e5:a3:e0:11:63:21:0c:db:d9:d9:c8: b0:04:2e:0f:d3:43:9e:f9:c4:eb:51:54:3b:f1:f3:3d:62:66: 83:b2:06:db:e3:9a:57:dd:25:a6:0d:38:5d:6b:e4:87:57:f7: a9:bc:27:3c:97:85:3c:c3:39:c2:0d:aa:30:c9:83:3c:f7:d4: ab:79:4e:35:19:8f:66:e1:ee:2b:47:6b:99:da:b6:ee:03:7e: cb:eb:04:2a:66:7e:29:22:c1:fa:8f:00:06:4e:31:cf:5d:7e: 26:1d:68:50:7d:aa:d3:f6:31:80:35:bb:7f:47:80:85:a2:35: be:90:57:0c:a6:14:71:81:1f:10:bc:0c:e4:15:e3:5f:41:62: 19:34:0c:00:c0:f5:8f:e8:0e:31:c4:7d:e6:25:38:8c:f6:8e: df:9b:f3:93:f8:ee:1e:61:6a:53:82:a8:2f:1f:46:d8:64:99: 8f:0b:24:99 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjAy MEVBRjZEMjRCNzRFRUE1NEE4NDRGNzAyMzREQ0EyNTVBNkJDMTAeFw0yNTExMDUw NzI4MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4M0E1QTIyQzlGQUNB RDYxODQzMDgyNjNBNUQzNDRBOTZDRERGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9imOVgdoQ9jhHHDtwipkL4U71W/on19Xs29ss+f1ZXikBvrrs YLSzvfNgqFSgbxAeRvwrUJfQg4WZ5dhp32X8IK+hqsBZx4pB1Kji0Q5OIzKsp3dY 8DCQ4/QumQ2L6CSuOshfHRNyAz4wWPT6y5AZpKII37X1XfmdnpH9W4T+1GV9EvID vA0qfhtuQOuIKwZ59Y+rTlH0zTglycAiMyov7s+3UCWvrd38CMVJlUd6VkpEeEtr 33zj07E20/BsYYGuhbRNWXPeSRpJVsVZ/p5/6LNG65FRqw8N1rv/n6HzIZHV7MUh vadjVxcY7XDs0r9aeFsb+mJd/RqEPeorBIjjAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUWDpaIsn6ytYYQwgmOl00SpbN32YwHwYDVR0jBBgwFoAU8CDq9tJLdO6lSoRP cCNNyiVaa8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNI LzhDRHE5dEpMZE82bFNvUlBjQ05OeWlWYWE4RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvOENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNILzhDRHE5dEpMZE82bFNvUlBj Q05OeWlWYWE4RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBT kwERjql3Ru0crxiAaBWykfp7nQ42QQPAVBQ2LvaPTeyy2mcvlvQOeBw2wNr0pOJl G6Nrvu5bj6kBgKe/HRVxvdD3f/RAYwrerqv1jTkK5aPgEWMhDNvZ2ciwBC4P00Oe +cTrUVQ78fM9YmaDsgbb45pX3SWmDThda+SHV/epvCc8l4U8wznCDaowyYM899Sr eU41GY9m4e4rR2uZ2rbuA37L6wQqZn4pIsH6jwAGTjHPXX4mHWhQfarT9jGANbt/ R4CFojW+kFcMphRxgR8QvAzkFeNfQWIZNAwAwPWP6A4xxH3mJTiM9o7fm/OT+O4e YWpTgqgvH0bYZJmPCySZ -----END CERTIFICATE-----Generated at Wed Nov 5 12:40:53 2025 by rpki-client