$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft File: y6ZO6ni6NlZLwgRW4BonQEwJolo.mft (raw, json) Hash identifier: SC4hm4xP8J4q6h+8XbCgoSMn2vK8Gw9WfpYUrJuEyIg= Subject key identifier: 68:92:09:AF:1A:37:90:BB:55:B4:AB:95:46:6E:1B:85:67:67:FB:79 Authority key identifier: CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A Certificate issuer: /CN=CBA64EEA78BA36564BC20456E01A27404C09A25A Certificate serial: 72 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft Manifest number: 72 Signing time: Thu 16 Apr 2026 09:03:57 +0000 Manifest this update: Thu 16 Apr 2026 09:03:57 +0000 Manifest next update: Sat 18 Apr 2026 09:03:57 +0000 Files and hashes: 1: y6ZO6ni6NlZLwgRW4BonQEwJolo.crl (hash: eNsiPyk1t5M0qDpA2dD19rwqEv6D9V/+koEJ11gn2Vw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 15:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA64EEA78BA36564BC20456E01A27404C09A25A Validity Not Before: Apr 16 09:03:57 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=689209AF1A3790BB55B4AB95466E1B856767FB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:93:ef:c8:58:ed:da:ea:7b:dc:75:de:5b: bf:e4:0c:ab:7c:37:43:1c:c5:df:01:cf:c1:db:77: 89:2f:78:84:48:41:e2:6e:30:2e:ad:e3:e0:b9:68: 15:43:c9:6a:aa:83:cf:28:4e:9e:e6:de:d7:bc:21: dc:a3:4a:f7:7b:b1:19:ea:50:3e:95:68:6d:b8:fa: e1:8a:1d:4e:f2:f0:43:c2:f5:c4:1f:64:55:47:93: a8:3e:a6:fb:9f:6d:d9:c4:03:01:15:31:69:d9:f4: 37:ae:4f:25:60:ea:bc:08:d9:b3:8b:d1:ce:cc:f6: d7:10:ab:90:59:4e:9e:f1:80:cb:10:f5:d9:ca:ac: a9:23:3f:60:59:0e:d6:11:4e:85:01:e0:64:83:f5: a8:1d:f4:18:69:bd:28:4d:8a:eb:66:26:bd:9a:8c: 78:63:00:43:87:f5:5b:e8:b1:9f:6b:63:8c:4f:c9: 21:34:bb:4e:ce:c9:5b:71:24:e0:8d:52:f0:f2:f7: 44:01:d8:78:b0:cc:b6:a6:30:53:a5:40:d4:26:3d: a4:bb:84:6c:6a:17:e0:3f:77:87:97:2b:5e:45:73: 5b:16:c7:d5:f6:2d:49:8d:9a:39:dd:87:be:fc:7b: 10:a8:a4:1b:a2:92:95:2a:2d:8e:74:d8:5d:b6:81: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:09:AF:1A:37:90:BB:55:B4:AB:95:46:6E:1B:85:67:67:FB:79 X509v3 Authority Key Identifier: keyid:CB:A6:4E:EA:78:BA:36:56:4B:C2:04:56:E0:1A:27:40:4C:09:A2:5A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/y6ZO6ni6NlZLwgRW4BonQEwJolo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAICOM/y6ZO6ni6NlZLwgRW4BonQEwJolo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:69:60:45:fd:b6:df:d1:10:e0:1d:80:99:5d:37:50:9c:d8: c7:33:4e:68:c0:e4:54:0f:40:70:d3:36:81:30:d7:1f:ff:3c: 04:4d:2e:47:7e:b5:36:bb:45:2a:e4:01:f8:98:06:b9:11:3a: cd:3b:ac:07:4a:80:49:9c:fb:93:54:a2:ac:cf:fd:52:9f:11: f8:7f:d4:95:15:18:1e:48:64:e5:dc:60:08:50:6b:8a:16:7e: 83:2e:f4:9c:f6:9a:fc:a0:ed:93:bd:03:db:c7:51:b5:86:8e: 41:45:c6:52:43:67:4a:ea:3b:07:a3:4d:33:ec:53:3f:a2:03: 3b:4c:f4:9b:7f:85:23:5f:f9:01:f1:60:61:b4:d4:90:8d:7d: e9:cf:25:9b:f6:1b:89:14:89:1a:15:7d:3f:a9:cb:21:4c:61: bc:38:49:20:a1:75:53:3f:6d:e5:c8:3f:36:4f:f8:41:d8:45: 31:68:dc:35:f4:8c:61:ba:7a:dd:46:1d:b9:55:db:94:2a:90: d8:08:51:5f:92:66:a5:78:f1:a5:6c:e1:40:3a:2a:5a:a4:90: 72:33:f8:36:62:36:15:e5:22:20:53:ca:0a:f2:a9:29:c1:9d: 80:c1:85:09:7c:59:73:6a:25:4a:79:3f:6a:29:cd:8b:ac:15: f7:3f:6d:ac -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQkE2 NEVFQTc4QkEzNjU2NEJDMjA0NTZFMDFBMjc0MDRDMDlBMjVBMB4XDTI2MDQxNjA5 MDM1N1oXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoNjg5MjA5QUYxQTM3OTBC QjU1QjRBQjk1NDY2RTFCODU2NzY3RkI3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO9Tk+/IWO3a6nvcdd5bv+QMq3w3QxzF3wHPwdt3iS94hEhB4m4w Lq3j4LloFUPJaqqDzyhOnube17wh3KNK93uxGepQPpVobbj64YodTvLwQ8L1xB9k VUeTqD6m+59t2cQDARUxadn0N65PJWDqvAjZs4vRzsz21xCrkFlOnvGAyxD12cqs qSM/YFkO1hFOhQHgZIP1qB30GGm9KE2K62YmvZqMeGMAQ4f1W+ixn2tjjE/JITS7 Ts7JW3Ek4I1S8PL3RAHYeLDMtqYwU6VA1CY9pLuEbGoX4D93h5crXkVzWxbH1fYt SY2aOd2Hvvx7EKikG6KSlSotjnTYXbaBzC8CAwEAAaOCAgcwggIDMB0GA1UdDgQW BBRokgmvGjeQu1W0q5VGbhuFZ2f7eTAfBgNVHSMEGDAWgBTLpk7qeLo2VkvCBFbg GidATAmiWjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQUlDT00v eTZaTzZuaTZObFpMd2dSVzRCb25RRXdKb2xvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS95NlpPNm5pNk5sWkx3Z1JXNEJvblFFd0pvbG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQUlDT00veTZaTzZuaTZObFpMd2dSVzRC b25RRXdKb2xvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAFRp YEX9tt/REOAdgJldN1Cc2MczTmjA5FQPQHDTNoEw1x//PARNLkd+tTa7RSrkAfiY BrkROs07rAdKgEmc+5NUoqzP/VKfEfh/1JUVGB5IZOXcYAhQa4oWfoMu9Jz2mvyg 7ZO9A9vHUbWGjkFFxlJDZ0rqOwejTTPsUz+iAztM9Jt/hSNf+QHxYGG01JCNfenP JZv2G4kUiRoVfT+pyyFMYbw4SSChdVM/beXIPzZP+EHYRTFo3DX0jGG6et1GHblV 25QqkNgIUV+SZqV48aVs4UA6KlqkkHIz+DZiNhXlIiBTygryqSnBnYDBhQl8WXNq JUp5P2opzYusFfc/baw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:26 2026 by rpki-client