$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft File: OQoEEvi17E8_n9uzphJw29Dqnms.mft (raw, json) Hash identifier: w8NvMrGFab6E8Lm/VQ4P5UGk7Yp0X5/ErkDyOnnSxIg= Subject key identifier: E8:82:CB:FA:C5:95:D0:C6:54:88:04:C8:0B:D8:D4:3D:95:94:E5:6E Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0D9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft Manifest number: 0D67 Signing time: Sun 22 Jun 2025 20:00:22 +0000 Manifest this update: Sun 22 Jun 2025 20:00:22 +0000 Manifest next update: Tue 24 Jun 2025 20:00:22 +0000 Files and hashes: 1: -gPeU2ZoFCV-6bwfbZYYsT5w674.roa (hash: F9hViTjrqS0Sc3QtpOtOWfTMxzApE94xuegdx7iKi2M=) 2: 5LjmM8TjDjX8m4EZ_CNlRlWBwiY.roa (hash: Q8q949YYS+KpAgl625K113PmScihYROdwJN8stdwFbc=) 3: 6w7d8AS19dmgruUt9UhQxmQiCqc.roa (hash: csyFFaFy/OertWCkjsi2je9bkMXDz2qaQUagJPVaz34=) 4: CCYYZgJUwOxcN6hx-tDn516FlZw.roa (hash: z9D6nFjrqdRQJeeuG0aOh5Nk/MSX0sdNNwoZ3WRM5Mg=) 5: EAPlvMic0zXLK1mX3pNkDWJ5GEw.roa (hash: 55Q8idL5MM01u6c2RUYbijvLKL8qgj1S3OKOYHMBXh0=) 6: I9fiyIHlLcPHhazEyrgxKcpDf88.roa (hash: nL9urdw5HHU3Sgdk6gW2cVQzHLXOct93sFs/E2G6oJg=) 7: OQoEEvi17E8_n9uzphJw29Dqnms.crl (hash: NJtXPwpcIEwUztIV7pTWtwacJh26h5y/xA7Dfb8UYG8=) 8: SiItwHSVzuANsCtoevfOgxOldkg.roa (hash: K/R3CGLNTPoScMLVSARZxnH2d7Q9B5XjiWZndpVgIUA=) 9: Tj-EeX0PpLzW5GlR1yVr1mLiumE.roa (hash: 2LvbliOGGhOchLZPPYGDJA7pa/qoe65nr8f93/lcuAY=) 10: k2kQhae3kAk06Ib1J2Xv-Q68Kbg.roa (hash: hOipAoU4YXvgFzruMtVHLauNvbMdlgW3PKrvnVt0TH4=) 11: m7uD-ekrFDuhjXbjGLopd9AxjEw.roa (hash: tOR0LLDu2UWUjMJb4VOyN5sUo+ksEMt19Ath/fgnPOE=) 12: mv9h1Sak_3olm8EAo4voNnEdN9o.roa (hash: akfN9BeGCj0HAFejtwIxjbYANBsk4Pa0Mh2cAhAiznw=) 13: osM3kfqpqLkJrtr7BJ5Kw1Lx9Eg.roa (hash: U82csg3YNzGyA5YiFJAXKlcDQhv8oa79lEhKGUw9aqM=) 14: pCTO3EjclBT2DM6fu9iLR7rgoB4.roa (hash: w0mOEer+jN+04OJpab8fyAXgRxDk7GlFHLPzTgAPuC0=) 15: vFp4sbw7T9IY3gysWg0tJel6Wzg.roa (hash: fg+Q8pJA/g36GCwImN68qchnEu8oFT/XK7/iB4LNp5g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Jun 22 20:00:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E882CBFAC595D0C6548804C80BD8D43D9594E56E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:39:8a:06:ae:33:70:b2:40:80:37:bb:6b: d2:49:bd:b6:25:00:1d:8f:e6:91:e0:32:44:89:07: e5:25:b0:25:2b:81:a1:c9:09:e9:21:f5:c9:46:c9: e5:c3:06:01:99:4f:34:d5:a9:a6:27:95:d6:56:43: bd:99:f2:31:67:06:d1:e1:80:75:dc:93:6b:c4:36: 26:d4:ab:98:56:af:35:8c:e8:9f:ed:be:4e:5f:1e: f8:68:c4:31:23:e7:54:83:31:29:7c:34:8a:f7:94: cb:1f:cf:20:5e:c7:bf:59:1c:1e:5b:d0:0f:76:77: a5:3b:1a:d9:17:ef:e4:69:35:31:97:f5:20:d3:8a: 71:3a:80:4a:d3:f1:14:8f:80:5c:a1:78:86:4c:e3: 98:95:ad:58:13:d1:72:bf:75:47:3a:6d:f4:ff:c4: 12:3f:c5:30:6b:6e:d8:54:11:b8:2c:2c:a1:a5:cf: dd:48:39:28:52:dc:e3:20:c7:91:0a:b1:31:a3:11: f5:39:ae:4b:3e:59:17:3e:d1:05:0e:bd:b4:ba:7f: 8f:ab:8f:b2:90:ff:4d:4c:a9:db:de:ef:ed:48:47: b6:c1:57:b7:f2:ac:02:10:8e:20:e2:18:e5:b3:5b: ff:12:8a:85:25:5f:c6:30:38:77:56:55:2b:f0:e6: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:82:CB:FA:C5:95:D0:C6:54:88:04:C8:0B:D8:D4:3D:95:94:E5:6E X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f8:62:c3:13:a1:60:cc:c3:54:a7:ba:02:84:01:2b:e1:90: 03:65:74:c7:70:4e:2a:aa:6f:8b:e2:16:9f:29:d0:a4:52:0a: 6a:79:e1:3a:9b:d4:90:7c:93:d8:4c:81:bf:ba:5a:a3:47:d9: ef:2c:c0:b6:9f:67:ba:89:48:34:54:0c:ae:d9:0c:04:de:87: 43:84:4e:98:7d:53:9d:a5:e9:e2:56:84:18:8f:ca:78:01:ba: d4:55:0f:a3:a0:5e:e6:65:b9:a9:51:f5:be:fb:a1:83:95:93: 2b:d2:1c:b8:05:77:e4:10:16:23:7f:1c:af:cc:c4:10:1b:13: 55:8a:be:bd:4c:47:5c:fc:3e:0c:9a:36:eb:14:39:12:42:f6: fa:3e:54:ee:4e:2a:f4:08:ad:f3:81:e8:86:2c:51:e9:2e:2b: d3:d4:b3:04:df:81:17:bb:c3:ec:e3:51:45:84:4c:d7:24:dc: 29:98:75:3d:c8:4f:cc:ee:44:28:6f:25:72:49:77:00:e1:73: fe:80:ae:7b:b1:e9:3b:e0:ea:47:1c:66:1f:7a:f7:3f:9e:da: 70:47:22:6a:fb:7e:b3:e6:3e:4c:5a:ca:c4:9f:cd:ca:b7:97: c0:1b:6e:f7:8d:43:49:4e:ef:6f:c7:30:46:f6:14:f8:b7:c0: 58:39:6b:fb -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNTA2MjIy MDAwMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4ODJDQkZBQzU5NUQw QzY1NDg4MDRDODBCRDhENDNEOTU5NEU1NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI3zmKBq4zcLJAgDe7a9JJvbYlAB2P5pHgMkSJB+UlsCUrgaHJ Cekh9clGyeXDBgGZTzTVqaYnldZWQ72Z8jFnBtHhgHXck2vENibUq5hWrzWM6J/t vk5fHvhoxDEj51SDMSl8NIr3lMsfzyBex79ZHB5b0A92d6U7GtkX7+RpNTGX9SDT inE6gErT8RSPgFyheIZM45iVrVgT0XK/dUc6bfT/xBI/xTBrbthUEbgsLKGlz91I OShS3OMgx5EKsTGjEfU5rks+WRc+0QUOvbS6f4+rj7KQ/01Mqdve7+1IR7bBV7fy rAIQjiDiGOWzW/8SioUlX8YwOHdWVSvw5ja/AgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU6ILL+sWV0MZUiATIC9jUPZWU5W4wHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvT1FvRUV2aTE3RThfbjl1 enBoSncyOURxbm1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ALT4YsMToWDMw1SnugKEASvhkANldMdwTiqqb4viFp8p0KRSCmp54Tqb1JB8k9hM gb+6WqNH2e8swLafZ7qJSDRUDK7ZDATeh0OETph9U52l6eJWhBiPyngButRVD6Og XuZlualR9b77oYOVkyvSHLgFd+QQFiN/HK/MxBAbE1WKvr1MR1z8PgyaNusUORJC 9vo+VO5OKvQIrfOB6IYsUekuK9PUswTfgRe7w+zjUUWETNck3CmYdT3IT8zuRChv JXJJdwDhc/6Arnux6Tvg6kccZh969z+e2nBHImr7frPmPkxaysSfzcq3l8AbbveN Q0lO72/HMEb2FPi3wFg5a/s= -----END CERTIFICATE-----Generated at Tue Jun 24 05:58:19 2025 by rpki-client