$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft File: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json) Hash identifier: iTBdj+VPqxsu1v5iYZIzxqn1qEmSZuOaoKTWZBa28zA= Subject key identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Certificate serial: 10CC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft Manifest number: 10C2 Signing time: Wed 05 Nov 2025 09:28:04 +0000 Manifest this update: Wed 05 Nov 2025 09:28:04 +0000 Manifest next update: Fri 07 Nov 2025 09:28:04 +0000 Files and hashes: 1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: 7Oqb6mtxX6loGljmWbNZCPozf2LXn8DQQtBPu5WGOvk=) 2: ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa (hash: LKn7uI6AgBpHG4K40L0bjJxIVTlLba08ez5ruWOAl7Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4300 (0x10cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Validity Not Before: Nov 5 09:28:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87: 39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec: c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b: ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f: fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92: 13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74: 15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1: 9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55: ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a: 92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68: 82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0: 99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e: 39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3: c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf: 02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29: 08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f: 80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A X509v3 Authority Key Identifier: keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b4:fb:a1:89:2d:ae:14:79:25:64:fb:69:f3:fe:86:85:70: 2b:2a:98:53:f4:26:dd:16:04:fe:3e:0a:ae:3f:3c:87:df:16: 96:99:2b:6e:ad:a1:fc:34:97:07:8c:aa:f3:44:21:68:ea:3c: 9b:b6:b9:52:1e:66:bb:2e:13:19:1a:48:36:92:aa:c4:82:8b: f4:a1:1e:12:c6:48:2e:8f:73:4e:7d:f0:82:bf:42:b6:1c:1a: 7e:3d:29:0c:eb:af:c4:74:75:26:8d:c9:37:22:fc:40:01:60: be:09:fe:99:6b:be:b7:37:dc:29:a4:56:4e:3a:b8:71:93:d5: 82:32:40:26:5a:5b:43:11:82:e1:6d:88:c4:21:db:5e:79:02: 2a:5e:40:60:ce:4a:a3:d0:2c:a1:65:a8:8d:5c:17:29:32:ee: cf:70:5f:25:c0:99:b2:1e:5b:4f:b5:36:91:4e:14:72:47:d7: 7b:89:bf:cc:09:45:24:b5:0e:04:7e:66:2e:32:eb:56:97:ad: 5b:35:a5:4d:b5:e7:05:ce:02:a6:93:bd:d8:c1:23:9b:c9:e5: 90:fb:7d:84:48:ce:07:a6:71:ac:0b:b4:ad:a1:37:6d:c6:9e: e9:02:46:ad:bb:d5:04:88:99:06:f9:4a:5a:7d:a5:19:15:24: 00:36:13:18 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICEMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2 MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNTExMDUw OTI4MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJERjVFNzRDMzI1RDRF NTM3MjA1NkNBMEVBNzMyMzhFRjQ3NDFEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4JDoSqHKDOkFjFRFShzl4xs1euKJTsxXHe8xp7MhoYGoin6uj G2blLdNdS8oRnlEN53vPCSefel3WT/2VO3QvzHg9hjYdn45nkhPURgNWAFMqUVkB p+XJdBXMOT/qvij/4qLDtsgEoZvsHwFxmSMraa+BrbWhVaz7K+Dk/cIxgG4cBBt6 epKBurnYY71fGhofgXQMaIJINkWlx4BGjnxsCGGcwJm47cLBIiz2Ox9kyDDVbjna tWXyrZ/6Ke+9b1xR88XmIAb0EiZH+PmIb6VmvwKP9Sxw5KlKz11wDpLNKQiQNUoA IYELidhTa6slf4CXxVcv7LiGLJQX7wqEbhDfAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUvfXnTDJdTlNyBWyg6nMjjvR0HRowHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWjJMZ0NrX3Z6 ZGZ3VW5Qa0ZRSVl3Nm4tRXVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAG0+6GJLa4UeSVk+2nz/oaFcCsqmFP0Jt0WBP4+Cq4/PIffFpaZK26t ofw0lweMqvNEIWjqPJu2uVIeZrsuExkaSDaSqsSCi/ShHhLGSC6Pc0598IK/QrYc Gn49KQzrr8R0dSaNyTci/EABYL4J/plrvrc33CmkVk46uHGT1YIyQCZaW0MRguFt iMQh2155AipeQGDOSqPQLKFlqI1cFyky7s9wXyXAmbIeW0+1NpFOFHJH13uJv8wJ RSS1DgR+Zi4y61aXrVs1pU215wXOAqaTvdjBI5vJ5ZD7fYRIzgemcawLtK2hN23G nukCRq271QSImQb5Slp9pRkVJAA2Exg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:10 2025 by rpki-client