$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft File: BA2WgwOzZPdyp1NXgiDTU34WFm4.mft (raw, json) Hash identifier: hqbbNBPGQ8loGgmrUdXkKENW7ousgRSo6Yg0qa8zMO0= Subject key identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E Certificate serial: 043F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft Manifest number: 0438 Signing time: Wed 05 Nov 2025 07:28:21 +0000 Manifest this update: Wed 05 Nov 2025 07:28:21 +0000 Manifest next update: Fri 07 Nov 2025 07:28:21 +0000 Files and hashes: 1: BA2WgwOzZPdyp1NXgiDTU34WFm4.crl (hash: NExHoym8cKn4BywO51hNk0nRG7qyYTtlWpDRpotBqKM=) 2: E6hohibFbdDUjHnadQJZw9TfblU.roa (hash: ajbecMlrNpQdFDlOHJamg/SuYNjOcUN0BJLwmtlG6ac=) 3: QnYeiP_6Ur5ogI3r_rzBxb28UDk.roa (hash: 7BrFWHe6Carm6PT3HzcyCBEifHA+N+dP+9moo3lr3m4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040D968303B364F772A753578220D3537E16166E Validity Not Before: Nov 5 07:28:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5F1D5BB810C5131FFBE9D13696A504880E5C0D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:bf:0e:2f:37:e4:94:08:df:59:ec:1a:78: 26:eb:b8:cd:99:22:f3:b4:66:9d:37:ad:0d:48:08: a3:9d:09:5e:a5:13:ea:85:78:a5:d7:30:75:8d:0a: 99:ef:fb:8a:54:8b:0f:fc:0e:e7:ed:cc:05:5f:2a: c3:76:4f:9e:33:53:57:62:41:eb:1e:05:0e:c9:28: 04:e6:3a:37:8d:51:26:88:b9:81:07:8e:b7:04:39: 6b:08:26:25:6f:e8:76:cd:f9:2b:44:24:9b:35:16: 0c:ae:fe:57:89:24:ab:2d:5c:eb:27:18:db:b9:ad: 2a:0f:70:c0:ce:f9:b3:49:1f:d0:72:28:55:ea:58: 93:95:ba:6b:7e:ad:39:67:7a:0c:20:f1:46:89:83: 5a:22:a8:37:db:45:26:9a:d7:95:a0:6f:2c:95:a6: 76:58:54:4a:e1:51:02:e4:f8:ba:d8:1f:fb:10:c7: f1:8f:8b:fe:10:b7:6c:8e:c4:b0:f4:d0:f2:c5:91: 74:1d:65:c2:f8:59:08:0a:bc:bf:95:80:e9:84:82: 04:36:a9:c6:cc:aa:03:0f:ac:76:6a:bf:a0:28:35: 95:b9:5f:43:91:88:f1:28:a2:2e:a8:f8:cb:ce:d8: 14:21:98:d0:5d:49:60:e0:ff:5d:ea:b1:cb:bc:96: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 X509v3 Authority Key Identifier: keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:35:2e:1c:a0:f4:7e:ed:28:33:31:11:27:e1:df:64:a9:62: bd:d7:b3:fe:39:3b:17:fd:1e:ab:4a:8b:a8:76:8b:e9:16:bf: 49:32:b2:7d:da:39:39:44:6d:a3:40:f6:4b:4e:1b:c8:bf:e3: 91:5c:a4:6f:fe:44:84:ae:d3:c7:51:ec:1b:e6:66:23:d7:e5: c0:49:65:2a:f7:66:36:11:34:5f:61:89:97:da:32:01:4b:2b: cf:dc:57:33:1a:08:e3:8e:e8:d4:06:d7:e0:d1:5e:66:b9:a4: bc:6e:03:d3:5e:06:a0:43:99:c2:47:1b:fd:5f:ba:7e:b0:4c: 0c:f6:52:fa:8d:9d:d8:02:e3:0b:26:7a:eb:2f:ee:4d:a9:52: 41:c8:0f:bf:63:1d:c5:f0:a2:1c:08:05:e3:30:ea:2e:00:1c: 69:08:eb:07:36:4a:cc:a7:73:58:6f:88:71:86:97:dd:a9:3d: 42:62:19:71:2c:8d:38:d7:5c:27:db:57:fd:3f:0f:90:f2:c9: fb:fe:73:0d:cc:43:1e:d9:74:61:0d:50:ec:1f:7d:42:07:cb: 97:1d:e5:2d:cc:bc:10:82:90:32:ab:83:d1:2a:93:6c:75:8f: cf:fa:0a:73:51:e6:db:c5:77:40:e4:7a:7a:4e:c8:9a:37:e9: 12:61:e9:aa -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQw RDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2RTAeFw0yNTExMDUw NzI4MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGMUQ1QkI4MTBDNTEz MUZGQkU5RDEzNjk2QTUwNDg4MEU1QzBEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1o78OLzfklAjfWewaeCbruM2ZIvO0Zp03rQ1ICKOdCV6lE+qF eKXXMHWNCpnv+4pUiw/8DuftzAVfKsN2T54zU1diQeseBQ7JKATmOjeNUSaIuYEH jrcEOWsIJiVv6HbN+StEJJs1Fgyu/leJJKstXOsnGNu5rSoPcMDO+bNJH9ByKFXq WJOVumt+rTlnegwg8UaJg1oiqDfbRSaa15WgbyyVpnZYVErhUQLk+LrYH/sQx/GP i/4Qt2yOxLD00PLFkXQdZcL4WQgKvL+VgOmEggQ2qcbMqgMPrHZqv6AoNZW5X0OR iPEooi6o+MvO2BQhmNBdSWDg/13qscu8lrxnAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUXx1buBDFEx/76dE2lqUEiA5cDSAwHwYDVR0jBBgwFoAUBA2WgwOzZPdyp1NX giDTU34WFm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ VS9CQTJXZ3dPelpQZHlwMU5YZ2lEVFUzNFdGbTQuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJQU5HWVUvQkEyV2d3T3paUGR5cDFO WGdpRFRVMzRXRm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ANs1Lhyg9H7tKDMxESfh32SpYr3Xs/45Oxf9HqtKi6h2i+kWv0kysn3aOTlEbaNA 9ktOG8i/45FcpG/+RISu08dR7BvmZiPX5cBJZSr3ZjYRNF9hiZfaMgFLK8/cVzMa COOO6NQG1+DRXma5pLxuA9NeBqBDmcJHG/1fun6wTAz2UvqNndgC4wsmeusv7k2p UkHID79jHcXwohwIBeMw6i4AHGkI6wc2Ssync1hviHGGl92pPUJiGXEsjTjXXCfb V/0/D5Dyyfv+cw3MQx7ZdGENUOwffUIHy5cd5S3MvBCCkDKrg9Eqk2x1j8/6CnNR 5tvFd0DkenpOyJo36RJh6ao= -----END CERTIFICATE-----Generated at Wed Nov 5 20:23:42 2025 by rpki-client