$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft File: tjCfg3WsbYZ88UyV8np05NLfGb0.mft (raw, json) Hash identifier: X+erlI012tHMtczOARWOg1YjWKNGxq6tDWVa5l94sYY= Subject key identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Certificate serial: 0530 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft Manifest number: 0530 Signing time: Sat 09 Aug 2025 22:39:58 +0000 Manifest this update: Sat 09 Aug 2025 22:39:58 +0000 Manifest next update: Mon 11 Aug 2025 22:39:58 +0000 Files and hashes: 1: tjCfg3WsbYZ88UyV8np05NLfGb0.crl (hash: fknfOxypJ+nLlMEPZcP2YEvnjBFBHk7hew6sTdNunq8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Validity Not Before: Aug 9 22:39:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5EF9C725E95C29704CCAED7A098FD4BB2EFDF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:eb:3a:02:86:9d:8f:41:ff:1b:a5:e0:12: c7:85:90:52:6d:29:d7:2c:2e:9e:0b:8d:ad:ad:8c: 3e:4c:4d:eb:42:76:ec:4d:c9:c5:71:cd:5e:f6:8c: 38:fd:1e:84:5b:58:78:1e:e0:a0:fb:dd:c4:7b:71: 02:ba:8b:f3:97:5d:ad:0b:d5:6e:fa:3d:6e:de:dc: 6e:ba:e8:a5:c1:31:f5:cf:5c:cb:67:8b:bf:ba:c7: b2:d9:26:31:14:d7:2d:dd:c7:0f:c3:90:1e:d5:18: ab:97:12:b7:fa:62:50:10:91:5a:a7:c0:7f:c8:36: 94:4e:58:95:ae:da:af:22:26:8e:35:fe:e5:2b:1a: 02:eb:17:78:ac:7e:3f:75:98:11:bd:3e:63:c7:e5: dc:ca:7d:c2:65:06:0c:d2:0d:c0:55:ec:dc:5a:3d: 64:17:52:eb:63:ba:66:c9:40:0e:f5:4b:48:39:b3: 05:fa:93:10:a0:77:65:bd:bf:8a:49:41:92:0e:6b: 9a:71:43:5e:04:59:cd:f6:b7:60:cd:7c:88:88:72: 71:36:bf:7d:c8:aa:83:fb:ce:57:24:03:85:70:54: d2:b0:26:34:66:db:47:c7:80:68:e2:c1:f5:98:5d: 3e:9f:af:a3:ee:e2:10:45:ad:65:e7:43:ef:05:be: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 X509v3 Authority Key Identifier: keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2a:57:aa:23:b6:6f:6a:20:e1:a1:97:d3:92:97:3b:62:e9: 92:84:c1:6e:c1:5a:bd:51:84:a2:71:ab:38:63:cc:cc:00:59: 40:a7:3f:81:7b:ed:a9:86:20:75:6b:f9:3b:64:90:84:af:88: fd:6d:cc:90:41:ba:89:3a:ee:cf:af:49:90:93:00:98:26:2b: 45:f1:87:e9:4f:d6:96:23:9a:09:54:00:a1:1f:85:d6:44:eb: 44:f1:8e:cc:fb:ca:aa:36:36:35:56:ab:71:20:6e:6f:38:4c: ba:88:5b:8f:75:8b:04:99:a7:e1:46:d5:40:a4:2c:b9:7d:23: 88:f6:22:8c:b3:6d:89:07:ef:16:56:e4:3d:de:c9:fe:bc:ec: b7:da:47:6a:40:7a:c8:39:63:84:7f:ad:de:96:ee:40:d9:1b: 23:2f:1f:29:12:6a:b6:d8:d9:2f:67:55:d8:66:b4:ee:85:c7: 57:8a:75:62:b9:6f:d8:e0:83:fd:e3:c5:6e:60:f2:d1:c0:15: 3c:5a:d9:7b:b8:ef:99:1c:f7:b7:4b:f6:d1:ed:57:6e:fc:8a: ec:48:d9:f1:34:4b:d5:61:2c:37:c3:b5:a9:ae:75:9b:cb:25: 7d:5f:26:57:74:0c:52:a0:d3:17:7f:76:da:1a:4c:61:6d:cc: da:f6:a5:f2 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTA4MDky MjM5NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1RUY5QzcyNUU5NUMy OTcwNENDQUVEN0EwOThGRDRCQjJFRkRGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxYus6Aoadj0H/G6XgEseFkFJtKdcsLp4Lja2tjD5MTetCduxN ycVxzV72jDj9HoRbWHge4KD73cR7cQK6i/OXXa0L1W76PW7e3G666KXBMfXPXMtn i7+6x7LZJjEU1y3dxw/DkB7VGKuXErf6YlAQkVqnwH/INpROWJWu2q8iJo41/uUr GgLrF3isfj91mBG9PmPH5dzKfcJlBgzSDcBV7NxaPWQXUutjumbJQA71S0g5swX6 kxCgd2W9v4pJQZIOa5pxQ14EWc32t2DNfIiIcnE2v33IqoP7zlckA4VwVNKwJjRm 20fHgGjiwfWYXT6fr6Pu4hBFrWXnQ+8Fvh3ZAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUxe+ccl6VwpcEzK7XoJj9S7Lv3xYwHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV 8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC90akNmZzNXc2JZWjg4 VXlWOG5wMDVOTGZHYjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASipXqiO2b2og4aGX05KXO2LpkoTBbsFavVGEonGrOGPMzABZQKc/gXvtqYYg dWv5O2SQhK+I/W3MkEG6iTruz69JkJMAmCYrRfGH6U/WliOaCVQAoR+F1kTrRPGO zPvKqjY2NVarcSBubzhMuohbj3WLBJmn4UbVQKQsuX0jiPYijLNtiQfvFlbkPd7J /rzst9pHakB6yDljhH+t3pbuQNkbIy8fKRJqttjZL2dV2Ga07oXHV4p1Yrlv2OCD /ePFbmDy0cAVPFrZe7jvmRz3t0v20e1XbvyK7EjZ8TRL1WEsN8O1qa51m8slfV8m V3QMUqDTF3922hpMYW3M2val8g== -----END CERTIFICATE-----Generated at Mon Aug 11 10:41:59 2025 by rpki-client