$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft File: Qi58ldh96a7rISoMTMsBdOZcpdA.mft (raw, json) Hash identifier: P5fftceUovtQw3Wg/bZQK6nzcyBfC+4eUWBsvqjaBDY= Subject key identifier: BD:78:EC:D8:CE:A1:D0:EC:64:85:14:D1:BB:92:8A:0C:C1:55:0E:11 Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 0587 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft Manifest number: 0575 Signing time: Wed 05 Nov 2025 08:25:43 +0000 Manifest this update: Wed 05 Nov 2025 08:25:43 +0000 Manifest next update: Fri 07 Nov 2025 08:25:43 +0000 Files and hashes: 1: Iae4dMfDrfixhoVkKyWkgArhfX8.roa (hash: W9NVg3lBCf+opGF14C6jkXmBn/zjvnn8g7JT0A4HQGQ=) 2: Ke6CgNRg0pMHFjP_mSSyAY6Z41U.roa (hash: YqwlOGEcaAp5DCS0ajlmexYG+bj1rstuhn0f7Nk/oSY=) 3: Qi58ldh96a7rISoMTMsBdOZcpdA.crl (hash: RnDcq4ogUSZHFP2wT3pKiqfoLd/jMJ69890WcyOAkcc=) 4: YQC29HfWE-aGDqVADjU2a3t15k4.roa (hash: 0Lch1heOBUZb3GWRcx+BzAkOQC5taYNtXAuOtTm7rYk=) 5: fqbH7UyMHQixCehc5FDezdRwvx0.roa (hash: u6AyZfGAeWSRk/Qw5OiynYlLBC33KbkbDJ+uDHw1Y8Y=) 6: qzPi6PMbzMqc1fg1ERlNAG4e19M.roa (hash: PnheDiQ6rF/u+0g0H8DopfJXpFVlYVmdjKWPFOiwSLg=) 7: zQ0rr8tgtODW2163ed1zEuwZd88.roa (hash: b1D1k4Y36e9xypzya2dDvoPUavL2UezXMxngXE7dFLo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Nov 5 08:25:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BD78ECD8CEA1D0EC648514D1BB928A0CC1550E11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:42:47:0b:5a:68:6c:8c:27:93:dd:ed:dd: 4a:b2:d4:eb:00:26:24:26:e1:97:7a:87:90:16:95: 09:25:d1:5b:3b:4b:4c:0e:37:62:75:a7:65:30:94: c8:80:57:e7:12:55:ce:dc:c9:44:d4:79:46:7b:7a: 12:d1:7a:14:69:19:58:78:db:0c:b4:48:38:d2:64: 0a:9b:aa:75:58:4b:83:62:91:a6:02:f2:b1:00:00: 70:8c:0a:74:e4:d6:b9:be:f4:1e:ce:35:4a:f6:ac: c6:19:da:e8:8a:72:6a:6c:b9:d8:0e:de:ed:96:8b: 26:97:7b:6b:b3:5a:c5:d5:d7:39:83:52:75:6b:c1: 12:f8:88:c1:0a:69:b1:7c:77:a4:e6:56:a6:ca:45: d0:69:c7:86:0f:d3:b2:f7:75:d4:62:06:fb:da:e0: 08:40:a3:a5:dc:6a:08:f7:73:4f:2a:f0:72:02:bc: 5a:ab:99:fa:b1:9e:94:38:de:6e:5d:00:c7:13:ab: 1a:5b:d0:2c:7b:fd:15:d6:ed:43:37:5c:74:5c:58: de:68:a7:3f:32:f8:f6:5e:78:e2:69:fb:46:0f:91: bf:53:f8:a8:5e:91:d7:aa:93:ca:c9:fc:2d:63:67: c9:72:51:28:5d:ba:bd:f8:95:9b:87:83:49:ea:7c: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:EC:D8:CE:A1:D0:EC:64:85:14:D1:BB:92:8A:0C:C1:55:0E:11 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2b:8f:71:91:5c:79:5f:b9:bd:ea:21:3d:4c:7d:df:91:3d: e8:ee:5e:22:d1:9f:b9:11:c0:4a:1e:17:19:a3:83:cf:d1:da: 12:a5:ff:25:72:e6:4b:c3:db:19:e3:85:e2:77:c3:84:9d:c3: b7:f8:f9:29:0b:b4:ad:2c:7f:2c:c0:43:b6:3b:88:39:2e:96: b4:98:36:7f:1e:e6:35:ac:6f:0b:7e:56:67:ed:35:7b:fd:cb: 8d:cc:e7:d6:1b:ad:a1:b9:be:4e:43:62:03:d0:6f:8a:4e:db: 4f:5a:12:ed:5b:a8:b6:60:9b:2f:cb:38:95:74:ef:7a:aa:7d: bc:04:ce:b5:f5:9a:9b:21:ae:64:67:04:5d:a9:3e:38:98:f6: 58:6f:2a:89:9f:e4:bb:86:2f:ec:81:e4:4f:01:f3:3c:ec:1d: 67:7d:cd:38:bf:cd:cd:c1:4d:03:5c:5d:fd:c4:1c:48:9f:93: 18:13:14:12:10:57:ab:58:58:61:f6:c1:f6:38:b5:3f:87:4a: ff:9c:f5:50:47:01:0a:24:71:c0:72:f7:a4:03:18:23:9b:e7: ba:25:31:79:f2:76:7c:a7:a2:63:06:8a:79:34:c0:6a:48:40: aa:91:d9:05:b9:b0:86:ef:a4:ee:97:23:47:43:07:f3:fb:40: ab:66:25:44 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDIy RTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVEMDAeFw0yNTExMDUw ODI1NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJENzhFQ0Q4Q0VBMUQw RUM2NDg1MTREMUJCOTI4QTBDQzE1NTBFMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC110JHC1pobIwnk93t3Uqy1OsAJiQm4Zd6h5AWlQkl0Vs7S0wO N2J1p2UwlMiAV+cSVc7cyUTUeUZ7ehLRehRpGVh42wy0SDjSZAqbqnVYS4NikaYC 8rEAAHCMCnTk1rm+9B7ONUr2rMYZ2uiKcmpsudgO3u2WiyaXe2uzWsXV1zmDUnVr wRL4iMEKabF8d6TmVqbKRdBpx4YP07L3ddRiBvva4AhAo6Xcagj3c08q8HICvFqr mfqxnpQ43m5dAMcTqxpb0Cx7/RXW7UM3XHRcWN5opz8y+PZeeOJp+0YPkb9T+Khe kdeqk8rJ/C1jZ8lyUShdur34lZuHg0nqfPLHAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUvXjs2M6h0OxkhRTRu5KKDMFVDhEwHwYDVR0jBBgwFoAUQi58ldh96a7rISoM TMsBdOZcpdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC9RaTU4bGRoOTZhN3JJ U29NVE1zQmRPWmNwZEEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyuPcZFceV+5veohPUx935E96O5eItGfuRHASh4XGaODz9HaEqX/JXLmS8Pb GeOF4nfDhJ3Dt/j5KQu0rSx/LMBDtjuIOS6WtJg2fx7mNaxvC35WZ+01e/3Ljczn 1hutobm+TkNiA9Bvik7bT1oS7VuotmCbL8s4lXTveqp9vATOtfWamyGuZGcEXak+ OJj2WG8qiZ/ku4Yv7IHkTwHzPOwdZ33NOL/NzcFNA1xd/cQcSJ+TGBMUEhBXq1hY YfbB9ji1P4dK/5z1UEcBCiRxwHL3pAMYI5vnuiUxefJ2fKeiYwaKeTTAakhAqpHZ Bbmwhu+k7pcjR0MH8/tAq2YlRA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:26:43 2025 by rpki-client