$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft File: S0bOj4AxurdTZNpb2YHoiFBPtBE.mft (raw, json) Hash identifier: LW6TvzNCLwrvYCRacH78QCCdftdP7kea2DM6LGx7a2o= Subject key identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 Authority key identifier: 4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 Certificate issuer: /CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Certificate serial: 03B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft Manifest number: 03B2 Signing time: Tue 04 Nov 2025 03:58:11 +0000 Manifest this update: Tue 04 Nov 2025 03:58:11 +0000 Manifest next update: Thu 06 Nov 2025 03:58:11 +0000 Files and hashes: 1: S0bOj4AxurdTZNpb2YHoiFBPtBE.crl (hash: gV3JOctEZh1r5QYK+699kFmycMCIgo3tWVwZ/5JzlDI=) 2: kY3dPOVnkxbfZxvdqBh_L7OUHh8.roa (hash: YzMXOnObmmXZZ7p0IM/yNYUju0gO3164QXTVeCaWMsQ=) 3: v812ACC3WzUI5gHVOf4k8ZsUkoI.roa (hash: ZPGnlGw+obPgg2Of2BpBXNhwAVN1VMSg75MMsnML/0o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Validity Not Before: Nov 4 03:58:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7D808F522FB8E9CA40671093E5880F17BE181866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:a1:14:ae:2d:4e:58:84:39:95:79:9b:95: dd:c8:e6:2b:a8:6d:4d:b1:42:88:6c:e1:4e:6b:c2: 68:b1:25:df:5b:e1:db:49:5b:42:0c:9c:3c:d7:34: 1d:2f:ba:2a:be:b1:c7:96:56:8d:45:3e:07:11:e4: 14:89:2f:d8:7e:c4:80:dd:4a:d3:c5:43:25:e1:cb: 5f:37:1c:61:b3:02:36:0f:3f:d8:81:0d:34:6d:e1: e1:c3:70:cc:6e:b8:57:7b:53:7f:d9:6a:0b:ee:19: ac:c2:81:b8:9f:e2:a9:85:9d:ad:ff:9d:9d:9b:4f: ab:8b:34:23:34:a1:8e:0a:ed:2a:ac:c0:0f:7b:58: e8:a2:02:b1:ed:01:81:ce:16:dc:ac:7e:fd:b6:90: ca:d8:b3:b0:8a:e5:07:b0:f2:23:15:9c:c0:2b:b4: a8:67:15:18:b4:d7:8c:86:6d:0d:b9:75:54:b0:99: 39:d2:83:c3:85:b2:a2:6b:f7:ef:71:42:b0:05:61: 11:b8:42:b1:7a:78:48:20:64:82:26:7d:bb:c4:3a: 91:62:54:1a:eb:c5:43:50:ba:cb:48:59:8c:0b:60: 54:3c:03:e4:d4:0d:4c:2a:27:29:ce:7c:06:6f:1e: e7:00:c6:ff:e3:34:fa:b8:81:f5:b3:20:50:e8:49: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 X509v3 Authority Key Identifier: keyid:4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f5:e6:98:4a:37:dc:e1:68:94:b1:9a:95:c1:9e:5a:95:d1: 3e:bf:8e:51:24:c9:fb:d9:4e:b9:65:84:f5:5e:e7:30:d2:a2: b1:be:b6:de:a1:ea:c5:e3:c9:c7:e3:53:50:9c:fd:fd:b0:74: 6e:7c:e5:19:e8:b2:c0:f9:24:8b:c8:b7:8b:55:f0:a9:ee:ec: 6f:35:3c:ed:fe:e6:37:d8:2d:d3:e7:5d:1a:dc:fa:2c:0f:36: 25:cf:1a:1e:ae:44:49:1a:f6:29:5d:a0:ef:02:3d:b5:ae:b5: 69:4d:b1:67:cf:6b:91:c4:ee:ed:04:4b:46:c0:ff:90:3f:4f: 97:ff:5d:17:05:31:a7:6b:10:8d:5a:2d:e6:28:14:55:7c:50: be:82:c9:f5:a2:fe:ca:b7:c3:64:49:4b:65:13:40:b3:a4:4b: 7b:61:8f:df:21:86:03:9f:2b:d7:27:e1:85:8b:08:b0:07:34: 86:30:15:b0:dc:c5:4f:c4:4f:00:28:8e:ed:75:e4:3e:ed:eb: 54:22:40:36:e3:6a:3e:19:f4:fa:5f:e3:c9:34:d2:74:71:2e: 88:c1:7d:59:50:2c:f7:f0:f1:cb:61:b0:78:d4:c2:12:67:63: b5:ff:79:cc:0e:86:a8:f0:16:59:ac:dc:f9:6b:88:06:91:c1: a1:bb:f3:28 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI0 NkNFOEY4MDMxQkFCNzUzNjREQTVCRDk4MUU4ODg1MDRGQjQxMTAeFw0yNTExMDQw MzU4MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdEODA4RjUyMkZCOEU5 Q0E0MDY3MTA5M0U1ODgwRjE3QkUxODE4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3aEUri1OWIQ5lXmbld3I5iuobU2xQohs4U5rwmixJd9b4dtJ W0IMnDzXNB0vuiq+sceWVo1FPgcR5BSJL9h+xIDdStPFQyXhy183HGGzAjYPP9iB DTRt4eHDcMxuuFd7U3/ZagvuGazCgbif4qmFna3/nZ2bT6uLNCM0oY4K7SqswA97 WOiiArHtAYHOFtysfv22kMrYs7CK5Qew8iMVnMArtKhnFRi014yGbQ25dVSwmTnS g8OFsqJr9+9xQrAFYRG4QrF6eEggZIImfbvEOpFiVBrrxUNQustIWYwLYFQ8A+TU DUwqJynOfAZvHucAxv/jNPq4gfWzIFDoSVDDAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUfYCPUi+46cpAZxCT5YgPF74YGGYwHwYDVR0jBBgwFoAUS0bOj4AxurdTZNpb 2YHoiFBPtBEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO X05PMS9TMGJPajRBeHVyZFRaTnBiMllIb2lGQlB0QkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1MwYk9qNEF4dXJkVFpOcGIyWUhvaUZCUHRCRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RBSVdBTl9OTzEvUzBiT2o0QXh1 cmRUWk5wYjJZSG9pRkJQdEJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEX15phKN9zhaJSxmpXBnlqV0T6/jlEkyfvZTrllhPVe5zDSorG+tt6h 6sXjycfjU1Cc/f2wdG585RnossD5JIvIt4tV8Knu7G81PO3+5jfYLdPnXRrc+iwP NiXPGh6uREka9ildoO8CPbWutWlNsWfPa5HE7u0ES0bA/5A/T5f/XRcFMadrEI1a LeYoFFV8UL6CyfWi/sq3w2RJS2UTQLOkS3thj98hhgOfK9cn4YWLCLAHNIYwFbDc xU/ETwAoju115D7t61QiQDbjaj4Z9Ppf48k00nRxLojBfVlQLPfw8cthsHjUwhJn Y7X/ecwOhqjwFlms3PlriAaRwaG78yg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:01 2025 by rpki-client