$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft File: OQoEEvi17E8_n9uzphJw29Dqnms.mft (raw, json) Hash identifier: 7jX0xM1lJGD9JFuwkhYl+WPVbCVZEUrhnF25vg5sKLE= Subject key identifier: E8:82:CB:FA:C5:95:D0:C6:54:88:04:C8:0B:D8:D4:3D:95:94:E5:6E Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0E06 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft Manifest number: 0DC3 Signing time: Wed 05 Nov 2025 09:59:07 +0000 Manifest this update: Wed 05 Nov 2025 09:59:07 +0000 Manifest next update: Fri 07 Nov 2025 09:59:07 +0000 Files and hashes: 1: 29wvWPnUVSh5aJ8xqHC-cIiK14I.roa (hash: ActVpSBG346Wa9oQ1k60dDUQMnFzNjpQLGWC+dgFwSY=) 2: 9K2AXwA-b1rf06y-9EBGK0EROrM.roa (hash: /oyBmSlgpTiw5KMSwYbUPejHQRqmwdyXb+7RS4Sc3tY=) 3: Nfg7IxE6Hfzm1cs2N82W3xSU5GA.roa (hash: DpK0iD6ljzQNotaou2N6FvAYEk3Ol/8me+IIoHLgy+o=) 4: OQoEEvi17E8_n9uzphJw29Dqnms.crl (hash: +1T6F0n+JZWA43QD/thE9A5a0dYzCgAaq3nX2IUUSHA=) 5: QX1r1hIZa-LktnQW6_yvMO0AzE4.roa (hash: U8hOPndbGYmxSOCEY2qn7aV1dEC8ESkaBUfYTk8Sq4Y=) 6: aYWMSqmBB6ik2GyP0b0tZZVkHT0.roa (hash: u/+EJCjirKhwltPebNClCNGDdR/3KvninTPQeVJChdk=) 7: dapMTUOnNldbr7jB7eR4773cJxE.roa (hash: 5HTWlrc3rN3jS0ulXQJCcfOBIBFDw1+/MQMXZfOpSA8=) 8: ezrKeg87kI0x3qV_bNSmSMSqVGw.roa (hash: aWarHz2O2/DjnGjvzJTbLhIQTOb5iWn8BwnrlsYQte0=) 9: gO78xs4E4gVRqFQZBjqXATvh9Es.roa (hash: F11igoR3wateWjzCe2ikYITfRmtJDi4TZ9l86N/6guc=) 10: kdtOQsTN-ACfhhx1WvzMtu0S99c.roa (hash: 4Ehk++twp7fMnpJbLGW+mB6P6nFKkFjr4owRfBqMczI=) 11: lRinVz-FGZvx1OFiCxV2wODya2s.roa (hash: 5T1r6BR8VV729CmVl8n5/KDJdnNVxBeabn4hBIap4tI=) 12: mAICm_NhhF8DHhGUqkO2H5WFmDI.roa (hash: h1adO+Y8fNzV9A16o5Euzc0Dvu3lLKXkTwllXDRw4J8=) 13: ntyqW4VbuhFf6O39HI9Ntnc23qc.roa (hash: rXdyYES5bHFseQUY/nnH4hPunTr/LxmE6f86aBiHn9E=) 14: pFLQasXwIgU-nas-3BnQdc1SIbg.roa (hash: nFbeWV8fdcoJv1J9uPSeQWpyxmP/TTxxkUr3tSptnfw=) 15: pdrUj1A-CDOqHuVnRqxtH8OzLxI.roa (hash: mbYGhYTJsB+nRVD8pXpXcemEwWONDQ2VSikc6Mp7Ioc=) 16: qjjaA7Kim5xbaYpSwhM9kvA9sGs.roa (hash: vuoLMq0AQgEE5kEB2qsd6E/WNx9pIokbjCDd7Y1Fv1c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3590 (0xe06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Nov 5 09:59:07 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E882CBFAC595D0C6548804C80BD8D43D9594E56E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:39:8a:06:ae:33:70:b2:40:80:37:bb:6b: d2:49:bd:b6:25:00:1d:8f:e6:91:e0:32:44:89:07: e5:25:b0:25:2b:81:a1:c9:09:e9:21:f5:c9:46:c9: e5:c3:06:01:99:4f:34:d5:a9:a6:27:95:d6:56:43: bd:99:f2:31:67:06:d1:e1:80:75:dc:93:6b:c4:36: 26:d4:ab:98:56:af:35:8c:e8:9f:ed:be:4e:5f:1e: f8:68:c4:31:23:e7:54:83:31:29:7c:34:8a:f7:94: cb:1f:cf:20:5e:c7:bf:59:1c:1e:5b:d0:0f:76:77: a5:3b:1a:d9:17:ef:e4:69:35:31:97:f5:20:d3:8a: 71:3a:80:4a:d3:f1:14:8f:80:5c:a1:78:86:4c:e3: 98:95:ad:58:13:d1:72:bf:75:47:3a:6d:f4:ff:c4: 12:3f:c5:30:6b:6e:d8:54:11:b8:2c:2c:a1:a5:cf: dd:48:39:28:52:dc:e3:20:c7:91:0a:b1:31:a3:11: f5:39:ae:4b:3e:59:17:3e:d1:05:0e:bd:b4:ba:7f: 8f:ab:8f:b2:90:ff:4d:4c:a9:db:de:ef:ed:48:47: b6:c1:57:b7:f2:ac:02:10:8e:20:e2:18:e5:b3:5b: ff:12:8a:85:25:5f:c6:30:38:77:56:55:2b:f0:e6: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:82:CB:FA:C5:95:D0:C6:54:88:04:C8:0B:D8:D4:3D:95:94:E5:6E X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:04:e7:1b:5b:86:44:d9:ff:74:f7:71:f2:e7:a2:5c:62:0b: 4a:37:bc:64:23:21:ba:2a:49:10:78:63:eb:74:b3:2a:2f:53: f1:b8:42:9e:3d:36:f0:48:b6:19:2e:1d:9d:1f:72:fc:7c:b3: c6:4f:66:0d:a7:cf:28:7c:01:e1:35:15:a0:53:dd:37:b2:c1: 0d:f3:a8:9d:f7:c4:8c:3d:ae:29:98:3e:1c:d1:7d:1d:10:c4: 5b:5a:01:0d:b7:c3:87:57:b1:6e:28:e2:48:d6:7b:70:52:d9: ad:e1:23:97:59:98:d8:94:c5:55:55:54:7b:1b:2a:6e:10:f9: 08:e6:8f:77:21:c0:77:fd:ea:08:04:90:38:8c:2c:f9:2b:a0: 67:12:ca:53:7b:17:4b:4c:7c:97:78:37:c5:ce:d6:58:f9:27: 50:b1:2f:0c:d1:ca:c7:06:b3:8f:da:a4:4c:75:74:f2:d9:e2: ff:db:b4:5f:db:b8:8a:e0:58:ae:9c:7b:d3:be:94:40:dc:e1: bc:01:0b:19:cf:8d:56:c2:d3:21:f4:17:e6:55:5d:e6:d5:27: aa:8f:11:39:25:3a:6f:7f:b8:0e:5e:62:89:02:c1:14:1b:38: 08:c5:98:1f:ea:7b:88:a4:08:5b:09:42:09:d1:bc:31:04:dd: 1f:e5:56:c5 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTExMDUw OTU5MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU4ODJDQkZBQzU5NUQw QzY1NDg4MDRDODBCRDhENDNEOTU5NEU1NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI3zmKBq4zcLJAgDe7a9JJvbYlAB2P5pHgMkSJB+UlsCUrgaHJ Cekh9clGyeXDBgGZTzTVqaYnldZWQ72Z8jFnBtHhgHXck2vENibUq5hWrzWM6J/t vk5fHvhoxDEj51SDMSl8NIr3lMsfzyBex79ZHB5b0A92d6U7GtkX7+RpNTGX9SDT inE6gErT8RSPgFyheIZM45iVrVgT0XK/dUc6bfT/xBI/xTBrbthUEbgsLKGlz91I OShS3OMgx5EKsTGjEfU5rks+WRc+0QUOvbS6f4+rj7KQ/01Mqdve7+1IR7bBV7fy rAIQjiDiGOWzW/8SioUlX8YwOHdWVSvw5ja/AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU6ILL+sWV0MZUiATIC9jUPZWU5W4wHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvT1FvRUV2aTE3RThfbjl1 enBoSncyOURxbm1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AAAE5xtbhkTZ/3T3cfLnolxiC0o3vGQjIboqSRB4Y+t0syovU/G4Qp49NvBIthku HZ0fcvx8s8ZPZg2nzyh8AeE1FaBT3TeywQ3zqJ33xIw9rimYPhzRfR0QxFtaAQ23 w4dXsW4o4kjWe3BS2a3hI5dZmNiUxVVVVHsbKm4Q+Qjmj3chwHf96ggEkDiMLPkr oGcSylN7F0tMfJd4N8XO1lj5J1CxLwzRyscGs4/apEx1dPLZ4v/btF/buIrgWK6c e9O+lEDc4bwBCxnPjVbC0yH0F+ZVXebVJ6qPETklOm9/uA5eYokCwRQbOAjFmB/q e4ikCFsJQgnRvDEE3R/lVsU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:55 2025 by rpki-client