$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json) Hash identifier: v0flaT8Dv+LoQacVihp1Gky6E1IBfDyDwvvYIHnqEAQ= Subject key identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Certificate serial: 01AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft Manifest number: 01AB Signing time: Wed 13 Aug 2025 20:10:39 +0000 Manifest this update: Wed 13 Aug 2025 20:10:39 +0000 Manifest next update: Thu 14 Aug 2025 02:10:39 +0000 Files and hashes: 1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: 8H/zERVDhdJ94hEqNEr2qV0dwp5LnimcUWquhjEstaw=) 2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Validity Not Before: Aug 13 20:10:39 2025 GMT Not After : May 23 15:30:20 2026 GMT Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69: 98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81: 2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d: d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7: 8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63: 3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58: ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43: 86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71: 32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69: 71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10: 3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82: e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c: 8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b: 6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa: 6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef: bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7: 04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B X509v3 Authority Key Identifier: keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:86:3e:46:35:d9:93:13:20:b1:44:42:6f:8a:80:6c:2f: fe:5f:2b:12:47:bc:43:db:65:fa:97:15:62:9c:59:e7:cc:08: ab:39:b6:81:8e:2c:71:be:c5:6e:66:ef:43:f5:3b:dc:0f:33: 34:c0:c2:7b:a6:99:bb:db:78:d7:62:43:dc:07:bc:ee:15:1a: 21:a5:3a:a2:d5:4e:22:e5:80:d9:d4:7d:15:6f:44:e5:8e:1a: 99:f2:11:6f:28:b5:24:ee:aa:62:85:58:24:ba:f7:1e:21:08: 5d:de:82:7d:00:d5:ae:26:f0:b7:06:7b:d8:05:14:0b:ea:ee: e8:d5:c4:c1:54:26:2d:8b:37:87:d9:06:de:b9:79:a6:32:46: 67:34:27:89:f6:23:bf:f5:87:5b:69:2c:12:fe:e2:1e:65:02: 75:60:84:bd:c6:b8:23:5d:c3:71:ea:a5:d2:4b:a1:14:09:52: c9:de:e2:20:f9:05:aa:cf:41:6c:7a:d8:a4:dc:95:c9:ca:6a: 88:bc:df:2c:3d:85:57:4d:63:c7:81:62:2a:36:4d:78:8b:d5: 1b:e8:4c:69:86:eb:30:75:4b:07:b3:2a:28:f8:88:4e:8b:52: bd:82:67:0a:79:6d:71:03:f0:30:dd:92:40:e2:c1:79:8e:bb: 20:69:5d:ad -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNTA4MTMy MDEwMzlaFw0yNjA1MjMxNTMwMjBaMDMxMTAvBgNVBAMTKDhFOEQzMzk5RjE3RUND NEZCMEVGRDM5MjlGNjQ4MjJGNUVERkVFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFiG23+XRP3zdTPfOfaZjHCpOnOr8ee7OINs6ogSufav9ju2yZ xNnMerx7jdkNbMOYicA78aRbT/NY946x11U5Z2SiB9vgs+ToYzsXizsz4u6W/fbW 6WGGWMqCuRh8IfjwEvf7VZu+Q4ZLEHNBKyFqUYBUTmt9cTIj3LY/NLldBlrcd/gw aXHZqR4qresWb6I4CqUlED8kJw8Jc4aLMdzUFtYtguakhH9U/pAM1OBVe1FNDI8W 5rwCrTHTRaygL1DLm25aatKl9wbB8U0U7kHIqmxd32E+n6AdkifhkMlO77tVgbmI NYwnuomzFISi9wR1L7BccJxAQWc4XbdP7rj5AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUjo0zmfF+zE+w79OSn2SCL17f7jswHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLy1jWXR3V295V1VGV1pCUXNr bmpGM2NUWUtaMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc cIY+RjXZkxMgsURCb4qAbC/+XysSR7xD22X6lxVinFnnzAirObaBjixxvsVuZu9D 9TvcDzM0wMJ7ppm723jXYkPcB7zuFRohpTqi1U4i5YDZ1H0Vb0TljhqZ8hFvKLUk 7qpihVgkuvceIQhd3oJ9ANWuJvC3BnvYBRQL6u7o1cTBVCYtizeH2QbeuXmmMkZn NCeJ9iO/9YdbaSwS/uIeZQJ1YIS9xrgjXcNx6qXSS6EUCVLJ3uIg+QWqz0Fsetik 3JXJymqIvN8sPYVXTWPHgWIqNk14i9Ub6ExphuswdUsHsyoo+IhOi1K9gmcKeW1x A/Aw3ZJA4sF5jrsgaV2t -----END CERTIFICATE-----Generated at Wed Aug 13 23:15:19 2025 by rpki-client