$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json) Hash identifier: ZydIVXzbIjq3LX5pi1T+tS1Cypl/2XX5hvbSp8y7yJQ= Subject key identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Certificate serial: 93 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft Manifest number: 92 Signing time: Sat 21 Jun 2025 22:30:05 +0000 Manifest this update: Sat 21 Jun 2025 22:30:05 +0000 Manifest next update: Sun 22 Jun 2025 04:30:05 +0000 Files and hashes: 1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: wenG3q71b95aviIISXCRdtltm24smy769fII/F/QV94=) 2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Validity Not Before: Jun 21 22:30:05 2025 GMT Not After : May 23 15:30:20 2026 GMT Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69: 98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81: 2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d: d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7: 8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63: 3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58: ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43: 86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71: 32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69: 71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10: 3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82: e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c: 8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b: 6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa: 6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef: bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7: 04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B X509v3 Authority Key Identifier: keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:19:39:3c:ab:aa:51:4b:cf:cf:bf:8c:a2:f4:d3:4a:29:d9: 5d:24:11:ba:12:2b:f2:17:89:a4:97:31:55:d7:ba:8d:4f:df: c7:d5:a8:bf:30:25:8a:dc:2a:34:d6:c4:da:e1:e2:ec:58:48: f7:6d:05:7e:06:1e:56:6d:ba:22:d0:98:52:ac:f4:3a:f6:e0: 05:1b:d5:71:38:a1:78:db:10:ed:86:5b:c1:07:d9:8f:eb:c1: 49:e4:8a:c7:b8:ef:d4:d2:57:e3:07:af:a9:65:57:1e:91:e2: aa:09:0c:d3:07:7e:70:8c:5e:f4:fb:ef:6a:d1:c7:4f:21:f4: a3:1d:c5:7b:2f:f9:10:ae:c0:f1:f7:67:03:96:a7:5c:c9:5f: cf:52:bd:2b:1f:b4:5c:fd:73:25:b6:3d:45:69:15:cf:3a:89: d3:7b:eb:20:e4:b5:57:87:99:a7:a7:aa:5f:86:2e:5c:21:de: 89:93:bb:38:35:eb:59:9c:8b:f5:a3:02:60:bb:46:8c:44:cc: e9:a7:9d:12:59:ff:c5:a5:d9:fc:4c:66:84:23:59:00:07:15: e9:ea:51:83:01:b8:95:b6:cf:b2:57:a4:43:d7:62:da:ec:db: 09:c4:7a:69:ca:69:b2:80:1f:5c:d7:e1:35:11:00:6a:21:0a: 07:fe:91:1c -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNTA2MjEy MjMwMDVaFw0yNjA1MjMxNTMwMjBaMDMxMTAvBgNVBAMTKDhFOEQzMzk5RjE3RUND NEZCMEVGRDM5MjlGNjQ4MjJGNUVERkVFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFiG23+XRP3zdTPfOfaZjHCpOnOr8ee7OINs6ogSufav9ju2yZ xNnMerx7jdkNbMOYicA78aRbT/NY946x11U5Z2SiB9vgs+ToYzsXizsz4u6W/fbW 6WGGWMqCuRh8IfjwEvf7VZu+Q4ZLEHNBKyFqUYBUTmt9cTIj3LY/NLldBlrcd/gw aXHZqR4qresWb6I4CqUlED8kJw8Jc4aLMdzUFtYtguakhH9U/pAM1OBVe1FNDI8W 5rwCrTHTRaygL1DLm25aatKl9wbB8U0U7kHIqmxd32E+n6AdkifhkMlO77tVgbmI NYwnuomzFISi9wR1L7BccJxAQWc4XbdP7rj5AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUjo0zmfF+zE+w79OSn2SCL17f7jswHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLy1jWXR3V295V1VGV1pCUXNr bmpGM2NUWUtaMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAR GTk8q6pRS8/Pv4yi9NNKKdldJBG6EivyF4mklzFV17qNT9/H1ai/MCWK3Co01sTa 4eLsWEj3bQV+Bh5Wbboi0JhSrPQ69uAFG9VxOKF42xDthlvBB9mP68FJ5IrHuO/U 0lfjB6+pZVcekeKqCQzTB35wjF70++9q0cdPIfSjHcV7L/kQrsDx92cDlqdcyV/P Ur0rH7Rc/XMltj1FaRXPOonTe+sg5LVXh5mnp6pfhi5cId6Jk7s4NetZnIv1owJg u0aMRMzpp50SWf/Fpdn8TGaEI1kABxXp6lGDAbiVts+yV6RD12La7NsJxHppymmy gB9c1+E1EQBqIQoH/pEc -----END CERTIFICATE-----Generated at Sun Jun 22 02:09:14 2025 by rpki-client