$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft File: S0bOj4AxurdTZNpb2YHoiFBPtBE.mft (raw, json) Hash identifier: hhs5Qt79rHw4qYuLAu+ZcZMRqjkSm4RH+f4AutFI1uA= Subject key identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 Authority key identifier: 4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 Certificate issuer: /CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Certificate serial: 033C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft Manifest number: 0336 Signing time: Sun 04 May 2025 09:49:44 +0000 Manifest this update: Sun 04 May 2025 09:49:44 +0000 Manifest next update: Tue 06 May 2025 09:49:44 +0000 Files and hashes: 1: 0RiPsY5FYj3RHk7B_mS9wZ09mqE.roa (hash: ea8m34CBH0ZOqRWPKR7+MF7SGmP1lQ8LqYox08FFlfA=) 2: S0bOj4AxurdTZNpb2YHoiFBPtBE.crl (hash: ZfnB4OYtOkdqYWprklSmVpBnsCPaxYzsvGOgvZw3pos=) 3: gvuqU97BQh8iwwrzBihAHZnbh0w.roa (hash: zjQUcdJH2EqejRdU27C+2gZzas7q3Yci19ATSpT17y8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 12:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Validity Not Before: May 4 09:49:44 2025 GMT Not After : Oct 8 15:30:28 2025 GMT Subject: CN=7D808F522FB8E9CA40671093E5880F17BE181866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:a1:14:ae:2d:4e:58:84:39:95:79:9b:95: dd:c8:e6:2b:a8:6d:4d:b1:42:88:6c:e1:4e:6b:c2: 68:b1:25:df:5b:e1:db:49:5b:42:0c:9c:3c:d7:34: 1d:2f:ba:2a:be:b1:c7:96:56:8d:45:3e:07:11:e4: 14:89:2f:d8:7e:c4:80:dd:4a:d3:c5:43:25:e1:cb: 5f:37:1c:61:b3:02:36:0f:3f:d8:81:0d:34:6d:e1: e1:c3:70:cc:6e:b8:57:7b:53:7f:d9:6a:0b:ee:19: ac:c2:81:b8:9f:e2:a9:85:9d:ad:ff:9d:9d:9b:4f: ab:8b:34:23:34:a1:8e:0a:ed:2a:ac:c0:0f:7b:58: e8:a2:02:b1:ed:01:81:ce:16:dc:ac:7e:fd:b6:90: ca:d8:b3:b0:8a:e5:07:b0:f2:23:15:9c:c0:2b:b4: a8:67:15:18:b4:d7:8c:86:6d:0d:b9:75:54:b0:99: 39:d2:83:c3:85:b2:a2:6b:f7:ef:71:42:b0:05:61: 11:b8:42:b1:7a:78:48:20:64:82:26:7d:bb:c4:3a: 91:62:54:1a:eb:c5:43:50:ba:cb:48:59:8c:0b:60: 54:3c:03:e4:d4:0d:4c:2a:27:29:ce:7c:06:6f:1e: e7:00:c6:ff:e3:34:fa:b8:81:f5:b3:20:50:e8:49: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 X509v3 Authority Key Identifier: keyid:4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:da:e2:eb:cd:22:21:2c:2d:0b:cc:c6:eb:ac:61:c1:fd:b1: 0d:17:84:30:b8:9a:49:31:68:0d:3b:f3:8c:ba:af:35:93:09: 42:8c:18:72:a2:21:4a:6d:f0:1a:ae:96:ff:bf:0b:03:87:9b: 01:65:cf:e8:bf:b9:77:d3:83:10:d0:b0:b0:be:7c:75:e7:df: 12:7e:ea:0c:14:90:51:7a:fd:51:4c:df:32:5b:6e:c6:c3:ff: 6e:92:d6:87:d4:0a:67:a7:6f:a5:10:77:ff:2c:00:bb:91:4d: 0b:e3:81:8e:36:ff:ac:a9:21:b4:39:d0:ff:f5:15:12:29:1a: 28:4d:4c:83:55:53:12:3a:9c:ab:3f:4b:12:e3:e5:31:35:10: 16:cf:8a:d2:9f:28:f4:8d:5b:4f:ca:24:d9:bf:4a:18:65:bc: 1e:da:db:11:53:ec:7f:c4:84:ee:d1:c9:9b:bc:50:17:7c:72: 82:10:2e:ca:81:04:03:db:fe:b4:1b:2d:71:ba:d7:08:60:fe: 8b:5d:6e:24:df:24:d6:ad:89:26:68:ff:72:5d:37:b9:1f:9a: 3f:7c:fd:d9:c1:2f:6c:13:a2:4f:2e:83:66:bd:65:01:b2:93: 49:b6:22:3b:17:27:7e:e1:a8:ff:2d:2f:a8:30:43:21:c7:9c: 20:40:df:b5 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI0 NkNFOEY4MDMxQkFCNzUzNjREQTVCRDk4MUU4ODg1MDRGQjQxMTAeFw0yNTA1MDQw OTQ5NDRaFw0yNTEwMDgxNTMwMjhaMDMxMTAvBgNVBAMTKDdEODA4RjUyMkZCOEU5 Q0E0MDY3MTA5M0U1ODgwRjE3QkUxODE4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3aEUri1OWIQ5lXmbld3I5iuobU2xQohs4U5rwmixJd9b4dtJ W0IMnDzXNB0vuiq+sceWVo1FPgcR5BSJL9h+xIDdStPFQyXhy183HGGzAjYPP9iB DTRt4eHDcMxuuFd7U3/ZagvuGazCgbif4qmFna3/nZ2bT6uLNCM0oY4K7SqswA97 WOiiArHtAYHOFtysfv22kMrYs7CK5Qew8iMVnMArtKhnFRi014yGbQ25dVSwmTnS g8OFsqJr9+9xQrAFYRG4QrF6eEggZIImfbvEOpFiVBrrxUNQustIWYwLYFQ8A+TU DUwqJynOfAZvHucAxv/jNPq4gfWzIFDoSVDDAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUfYCPUi+46cpAZxCT5YgPF74YGGYwHwYDVR0jBBgwFoAUS0bOj4AxurdTZNpb 2YHoiFBPtBEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO X05PMS9TMGJPajRBeHVyZFRaTnBiMllIb2lGQlB0QkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1MwYk9qNEF4dXJkVFpOcGIyWUhvaUZCUHRCRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RBSVdBTl9OTzEvUzBiT2o0QXh1 cmRUWk5wYjJZSG9pRkJQdEJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPa4uvNIiEsLQvMxuusYcH9sQ0XhDC4mkkxaA0784y6rzWTCUKMGHKi IUpt8Bqulv+/CwOHmwFlz+i/uXfTgxDQsLC+fHXn3xJ+6gwUkFF6/VFM3zJbbsbD /26S1ofUCmenb6UQd/8sALuRTQvjgY42/6ypIbQ50P/1FRIpGihNTINVUxI6nKs/ SxLj5TE1EBbPitKfKPSNW0/KJNm/ShhlvB7a2xFT7H/EhO7RyZu8UBd8coIQLsqB BAPb/rQbLXG61whg/otdbiTfJNatiSZo/3JdN7kfmj98/dnBL2wTok8ug2a9ZQGy k0m2IjsXJ37hqP8tL6gwQyHHnCBA37U= -----END CERTIFICATE-----Generated at Sun May 4 11:44:25 2025 by rpki-client