$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft File: gycg6wvqAFw-3ldOMcCrdWP6DMc.mft (raw, json) Hash identifier: YXhUiwt9osPBSJsbqfSYnZfu4PJ8whyEvKihUFFZDrE= Subject key identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft Manifest number: 0D6A Signing time: Tue 24 Jun 2025 10:01:47 +0000 Manifest this update: Tue 24 Jun 2025 10:01:47 +0000 Manifest next update: Thu 26 Jun 2025 10:01:47 +0000 Files and hashes: 1: 0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa (hash: b/wXCHIYDDlWv9EFqk1bQUIbOb17PE4pGzX95Atyjek=) 2: 1aYcfAcNLwgui-N2n8M3DSBTVc8.roa (hash: VDm+H/fJyntt5kDa1r6/bPB/8ivGjrUVug56cxBqe/o=) 3: 2hSF_tSTX6o_hA2GZa69uSr7aYw.roa (hash: 0xknZb1nBEpcxkczaNUmnA6PAHuKCYYJg2j36YRP5+Q=) 4: 3S_Wg0Wwe4wOBPgIyxz_matljRo.roa (hash: RwoqadB7SccFCKH4W664FNOOvNBYL50kkTDujjQfEz8=) 5: 3aLbZG2Y1RSVO7u0W0hr4S9qUY8.roa (hash: jRyl4WeeeWP98fPFMqRBdVRyuKcIkaU8RhSWHO1TefI=) 6: 5P8Iu6qzJrhSwHbjLxz10nouHIU.roa (hash: 2dfrqoOnOnCT2TIwoNpFKqeUidXHK9N7jnYiTE80oNg=) 7: 8BknVL_JZq9EMf0SPwoNjMwXPc4.roa (hash: NAHVsiphkdN3glcsiwhrQ+mW3MMwmiXrrDapeqWRE8g=) 8: 9LNbBTGKkWhZIAFZefop1k8xGYc.roa (hash: Lc2NSLg9tzioJQhrpinsLwIfYjJ0aG1uR7NsG8oBzYI=) 9: Dd0pmsWqtDA6TmIglHrQEIWOXwM.roa (hash: z/SOYGL3Io5NxgC2bwd1hJ4jVXcPUjv+sRshbeMYoZE=) 10: GdMiKceMFJcEGsOX7v8JvvfeuK0.roa (hash: PeIUMFRwKo99vQiyahzZ3lcGyUanjj4p1KLRs8OizcU=) 11: HLxDLhmdHKkZg38vs4lKIUO1uGw.roa (hash: ba0TYIxxAqvWYpSyUzPahMyOJjYKRcLdw/7fcGVerLk=) 12: KFWXAlZ3CqJzTnK7DGSYBBdfdT8.roa (hash: y1TeEWAuGDo2ULut3IisdkE4pt3kC1CDTOV5ullTfm0=) 13: LRFAtIgSxA2dhA3JozBenD8Ae-Q.roa (hash: xnCRZHvlNMCo4zw8mTD4wMlBhDLk3wLbKjjo3VEk4Lo=) 14: N4zTMLr_TdZu5ErHrChE76sUc5E.roa (hash: 01gsXsqHIpNaP0Xi8ecTMIElifmFbVuPD4B4RSJYtbk=) 15: RYKudM5ng4YAEw8SOt5VIttRPFM.roa (hash: IIEniaW1uCybS3xEGSMWNy3xeKQxrLL2dKDvFkgmHj8=) 16: SodZISI9CTwnIRrBalQcBC1d6Xo.roa (hash: kHabac7o2JdKCfK8gTJpMMwwp0oczA3U2wKk1ADHWNk=) 17: V20FQeMvJK1-T0La1dmmNHJ0-Zs.roa (hash: 2JjeoZtgoRaY8PKoqjC4QEQfG62pfk0NhfUwAP7HkNQ=) 18: VE9LWoK3JP5BV-xnNCMwXruNJf0.roa (hash: MqGU7zCdDPc9gUcakaqgTfhtv5T5BXRfkTkOV3YKz2k=) 19: ZwVr2caNFUw7KbzkNKqxxcvKiuo.roa (hash: GRw7IoQYyQsB+bQUgyj9ZZhSx7qtaIv00dZ62o1wf/E=) 20: _a5_rsTZQmTRFEQX8zb9fFZL-HE.roa (hash: lkleLGg/Pwlvcxxncw2jks3Mp2GuaCsZ2LE4yKQf5Ws=) 21: cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa (hash: Dj1i/1AdRA13RqX/WNcmJpj3+Me1MKHAw1Uy9nuNGQc=) 22: ciru1rpoutQlXOtJdiM27oK93fs.roa (hash: WMIxprQ2XFLPzgvC22DVbXoBQnCPjO96rJoPA3pdlPk=) 23: g5lqS9gh2jdNy4-gBlkXqkNlb20.roa (hash: 64WxhEbotKoRJOtgxVyQWdTtLid8/n3q0EeTEMYuEnA=) 24: gycg6wvqAFw-3ldOMcCrdWP6DMc.crl (hash: x49r1xcWAyHeCRKXnlVjsmo/V+/fweDIpNNcyUG6SlE=) 25: hYyepMDIpBY-JHorYEhIMB-ANW4.roa (hash: 3WB6jlJPGMPg7wIcwtP7oU3R9Bwxw/9ND8vEnS2H624=) 26: icJfYpIQH2DbBMM4UrAQ9cGoOhA.roa (hash: CDsd8sCsUoopPDwo6FQuvBqfiV3V9errSwsfa30pSyw=) 27: ixbMn-cB0RySdpn3AhNWw7OrVS8.roa (hash: Dy3msUluRFSYGGOa551tQkuUTUvvjpMzPyxHAwx/Z6E=) 28: mSTL50iIgvS692ofhwIVFRbv-14.roa (hash: 8ZOkULwx6k2NokqJ+pQE3L5fiuF1dtpuPmtAVBatI5I=) 29: q9tQ-jxNkGfoVAFwFVLi41xkgvM.roa (hash: 9yLHoxIPXahVXXJ8Fq+h0Ykk4ONrpDHU2IV4s9jMl+g=) 30: sIB1YfG9KJwlSa7L_HKqR1uKapg.roa (hash: j2w2tl9RXyWKvCyO0ipDhK9OPLKNEPRR6gP+rOlQ8Fc=) 31: tqbxU1vAja7QeseNFY_9hEUO4q8.roa (hash: 2QOrwYiBWBafR6qXAnc1EhdLVO9vSwce00JY4UHzNb0=) 32: uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa (hash: dxLIcgK0A7a9fn+Aob8yBRSXqWBU9XFVGD28LWsncXk=) 33: urrFJWzReN7Zl4rTxMF9DwnMTr0.roa (hash: 9r7smf2QkYfXGKNv5qNfEAWEojBQkT1wsP34ypO7oYA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 02:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Jun 24 10:01:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D50E33A0753C45A73A48403E61BB5977C890FC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:3d:04:37:8d:ae:2d:d7:c8:3d:8f:38:55: 81:4a:b6:1e:0a:48:99:01:e3:57:1a:a3:4e:9d:40: 82:73:f5:9b:53:e9:9e:d1:d5:e3:34:d8:75:e5:68: 66:7c:ec:00:f7:73:57:64:af:61:23:74:2f:41:1f: 8e:84:bc:6d:2b:a3:22:a4:a3:3d:a5:e0:35:f0:84: 0b:41:32:05:09:41:2e:17:30:38:69:17:15:84:46: 08:cd:52:bb:49:a4:2a:0f:82:03:47:c0:8a:a4:63: 17:d1:da:b7:01:8d:cf:62:c3:f5:70:83:68:5c:00: 71:25:60:a9:3c:60:50:76:65:a2:1e:b0:33:38:b1: 67:06:3d:aa:3e:ce:dd:8b:cf:ed:57:92:cb:1e:f7: 25:69:ee:e2:e5:97:36:ac:74:77:4f:7b:22:3e:ba: 99:38:e9:bf:82:b6:d4:2c:da:8a:6e:27:d4:5c:f2: 1a:e4:3d:bd:5c:f0:a6:53:f1:b7:19:3f:66:25:94: ab:4b:80:d0:a6:09:31:64:2b:5c:55:09:2f:c6:3a: 15:bf:14:91:20:a5:97:dc:91:34:9d:1f:6d:df:a6: 7c:ed:e2:a9:4c:b5:dd:3b:ab:e8:6f:3f:a8:54:53: d8:04:39:cc:c8:cf:ff:04:0e:57:e8:af:d6:04:e6: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:82:30:2a:7d:b6:5c:83:48:62:5b:d2:d6:49:36:7c:ec:17: 89:6f:6a:71:bd:df:04:6d:53:25:00:a5:a9:c8:d9:23:55:eb: be:da:b3:c0:19:3c:86:1c:0a:26:bb:41:b0:7f:f3:d4:eb:59: a6:26:95:b1:7d:f3:e1:49:75:2a:88:16:9a:e9:4e:4f:4b:83: 18:5e:df:ca:22:b5:77:d4:d1:b6:3c:fa:c5:9d:d0:65:82:b6: 90:36:98:9a:35:55:b1:99:8e:d0:59:2b:32:c1:0b:ae:ca:d2: 39:cf:11:10:cd:b8:53:23:5a:1a:a1:1f:14:77:d3:d0:ee:b6: da:03:7a:5f:1b:48:a5:b6:96:27:6e:a4:27:8a:2d:96:0d:d6: 19:84:b0:2e:c9:59:35:33:98:79:5b:90:22:b4:02:d1:e5:01: c2:e0:76:77:ff:e5:aa:1e:2a:2c:db:28:04:fd:ac:1e:05:70: 5f:39:03:74:e9:c6:ee:54:e2:b1:c8:42:65:77:e6:32:14:59: d9:a4:e6:9f:4d:55:b4:ec:18:8e:0b:0c:54:75:c3:6c:cf:72: 58:be:37:f7:e0:6e:94:e9:07:ae:20:98:d0:b8:23:bc:1e:fb: a4:86:37:04:eb:a8:a4:6b:23:a9:8f:be:a1:d8:c2:16:ad:75: 7a:3c:13:87 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA2MjQx MDAxNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1MEUzM0EwNzUzQzQ1 QTczQTQ4NDAzRTYxQkI1OTc3Qzg5MEZDNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs8j0EN42uLdfIPY84VYFKth4KSJkB41cao06dQIJz9ZtT6Z7R 1eM02HXlaGZ87AD3c1dkr2EjdC9BH46EvG0royKkoz2l4DXwhAtBMgUJQS4XMDhp FxWERgjNUrtJpCoPggNHwIqkYxfR2rcBjc9iw/Vwg2hcAHElYKk8YFB2ZaIesDM4 sWcGPao+zt2Lz+1Xksse9yVp7uLllzasdHdPeyI+upk46b+CttQs2opuJ9Rc8hrk Pb1c8KZT8bcZP2YllKtLgNCmCTFkK1xVCS/GOhW/FJEgpZfckTSdH23fpnzt4qlM td07q+hvP6hUU9gEOczIz/8EDlfor9YE5on9AgMBAAGjggIFMIICATAdBgNVHQ4E FgQU1Q4zoHU8Rac6SEA+YbtZd8iQ/FwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9neWNnNnd2cUFGdy0zbGRPTWND cmRXUDZETWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYIw Kn22XINIYlvS1kk2fOwXiW9qcb3fBG1TJQClqcjZI1XrvtqzwBk8hhwKJrtBsH/z 1OtZpiaVsX3z4Ul1KogWmulOT0uDGF7fyiK1d9TRtjz6xZ3QZYK2kDaYmjVVsZmO 0FkrMsELrsrSOc8REM24UyNaGqEfFHfT0O622gN6XxtIpbaWJ26kJ4otlg3WGYSw LslZNTOYeVuQIrQC0eUBwuB2d//lqh4qLNsoBP2sHgVwXzkDdOnG7lTischCZXfm MhRZ2aTmn01VtOwYjgsMVHXDbM9yWL439+BulOkHriCY0LgjvB77pIY3BOuopGsj qY++odjCFq11ejwThw== -----END CERTIFICATE-----Generated at Tue Jun 24 22:18:42 2025 by rpki-client