$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft File: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft (raw, json) Hash identifier: EK5YBXBmNYdrwRFHcmNEtAdyQZuMQgSo5+fKbMiOfWk= Subject key identifier: 97:C3:27:01:23:A9:DE:70:2A:D7:EB:69:6E:0F:CD:AA:8A:9E:59:15 Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F Certificate issuer: /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F Certificate serial: 4BF32C494663495B02129DA8C0A039B5490CE0F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft Manifest number: B7 Signing time: Mon 21 Sep 2026 07:56:35 +0000 Manifest this update: Mon 21 Sep 2026 07:51:35 +0000 Manifest next update: Tue 22 Sep 2026 10:55:35 +0000 Files and hashes: 1: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl (hash: rGNkrwA4OCDb4G5LNsPh/1tr0jNo1IyJkbC/a6TOe0E=) 2: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (hash: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=) 3: 34332e3235302e34342e302f32332d3233203d3e203338383531.roa (hash: MJw5fyYTrafx81rPsZJsc1XaHBGLvizET5hyMMB4EiM=) 4: 34332e3235302e34362e302f32332d3233203d3e203338383531.roa (hash: zDLGCzxdPFG/4CsCmQW1j4D7LK25mUZpat6DEbpgaZY=) 5: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (hash: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=) 6: 34332e3235302e34342e302f32322d3232203d3e203338383531.roa (hash: Wow23AEcmPQDHAfbsYDrdq/Ze5tAj8uj4WfgyeReqLU=) 7: 3130332e3232392e3130302e302f32332d3233203d3e203338383531.roa (hash: LLKqTVeKrjc2C1jKfd0XhQ5DwV55DZrdbsX87bNg7Bg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f3:2c:49:46:63:49:5b:02:12:9d:a8:c0:a0:39:b5:49:0c:e0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F Validity Not Before: Sep 21 07:51:35 2026 GMT Not After : Sep 22 10:55:35 2026 GMT Subject: CN=97C3270123A9DE702AD7EB696E0FCDAA8A9E5915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:17:57:29:6f:8d:9a:41:aa:b2:5c:c4:44: 9b:ca:8c:df:dd:6d:8f:f5:01:10:c6:60:ee:e4:08: e5:b0:58:ba:8e:65:0d:c0:ea:b7:6a:2f:e5:26:53: 6e:da:cf:ae:93:00:8b:d5:33:ac:a6:f7:54:bc:16: d4:b1:00:6f:5c:78:8d:6a:ff:fb:21:d8:fb:47:2d: cb:61:2f:b7:4e:c2:a9:f6:6b:82:a7:98:29:51:1a: e5:e0:9c:92:d0:62:2a:28:3f:90:38:6e:78:c2:d6: 3e:2d:6a:6d:f9:a7:a6:29:cd:76:c0:76:d7:32:43: 10:67:ae:6a:8b:83:00:5f:37:12:e3:b8:0e:9d:93: 44:8a:ed:e6:c4:2e:75:cc:e0:02:47:d2:c0:03:7d: a7:27:cf:21:9b:6f:c6:5b:2e:bb:bf:b8:de:67:58: e2:2d:28:17:1e:fd:7c:c8:89:91:21:54:61:0c:4e: 1e:0e:80:e4:af:ce:d4:29:3c:dd:65:95:54:b2:5f: d0:af:3b:88:e0:bb:f1:21:e3:28:e5:a6:b0:75:70: d5:56:e4:3a:c2:01:e8:63:71:46:95:8d:f5:6f:e3: 73:e2:4f:06:3f:8e:b9:5f:fc:09:31:cd:cd:61:c6: 13:94:dd:50:15:76:ba:06:2f:3a:ce:ab:33:2a:92: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C3:27:01:23:A9:DE:70:2A:D7:EB:69:6E:0F:CD:AA:8A:9E:59:15 X509v3 Authority Key Identifier: keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0b:0a:4d:db:c9:b7:eb:8e:82:b0:0a:c9:03:fc:5b:7c:80: 67:d9:ee:b7:30:21:0b:ed:f1:3d:e5:33:61:f7:42:a8:04:9d: bc:9e:dc:6e:62:31:6e:e9:77:db:c1:e3:3f:c9:29:42:36:63: 97:a2:a8:e1:8d:b2:01:8a:fe:b6:65:18:a3:95:4d:e3:74:9a: e5:52:ca:d1:4a:b9:f7:62:25:8c:f8:02:ce:dc:e8:74:7b:0f: e3:09:43:fd:f5:fc:3a:62:b5:7b:3c:c0:b0:89:a9:09:a7:ed: 5b:9c:ab:b8:97:76:4c:04:06:8e:2c:8d:40:d1:a9:5d:47:a0: f3:ce:9e:01:9f:3e:b7:4a:12:78:5c:8e:6e:8e:da:fa:b4:a3: 14:4c:ad:da:51:fc:70:e5:56:6d:26:b0:20:81:4e:20:24:2d: be:ba:dc:10:13:07:dd:3f:6a:91:8a:40:df:5f:45:b4:5f:47: 60:e1:dc:40:b2:ed:fa:7c:36:30:eb:59:52:5c:0e:d7:f7:f3: bc:89:06:57:19:52:a3:e8:05:e4:b5:df:03:83:71:47:32:1a: 78:d8:00:91:dd:c6:9f:ca:9c:19:c2:5c:f3:db:15:7d:50:a6: e8:f0:da:54:0f:dc:01:5d:df:37:1f:83:64:37:f1:35:7c:4d: ad:b3:55:28 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUS/MsSUZjSVsCEp2owKA5tUkM4PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThCMzhGQUQxQkM5RDdFNDI2NjAzRjZDMjA0NTY2QzRB RjMwOTM4RjAeFw0yNjA5MjEwNzUxMzVaFw0yNjA5MjIxMDU1MzVaMDMxMTAvBgNV BAMTKDk3QzMyNzAxMjNBOURFNzAyQUQ3RUI2OTZFMEZDREFBOEE5RTU5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtixdXKW+NmkGqslzERJvKjN/d bY/1ARDGYO7kCOWwWLqOZQ3A6rdqL+UmU27az66TAIvVM6ym91S8FtSxAG9ceI1q //sh2PtHLcthL7dOwqn2a4KnmClRGuXgnJLQYiooP5A4bnjC1j4tam35p6YpzXbA dtcyQxBnrmqLgwBfNxLjuA6dk0SK7ebELnXM4AJH0sADfacnzyGbb8ZbLru/uN5n WOItKBce/XzIiZEhVGEMTh4OgOSvztQpPN1llVSyX9CvO4jgu/Eh4yjlprB1cNVW 5DrCAehjcUaVjfVv43PiTwY/jrlf/Akxzc1hxhOU3VAVdroGLzrOqzMqkle/AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUl8MnASOp3nAq1+tpbg/NqoqeWRUwHwYDVR0j BBgwFoAU6LOPrRvJ1+QmYD9sIEVmxK8wk48wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdULzAv RThCMzhGQUQxQkM5RDdFNDI2NjAzRjZDMjA0NTY2QzRBRjMwOTM4Ri5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9FOEIzOEZBRDFCQzlEN0U0MjY2MDNGNkMyMDQ1NjZD NEFGMzA5MzhGLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdULzAvRThCMzhGQUQxQkM5RDdFNDI2 NjAzRjZDMjA0NTY2QzRBRjMwOTM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIsLCk3bybfrjoKwCskD /Ft8gGfZ7rcwIQvt8T3lM2H3QqgEnbye3G5iMW7pd9vB4z/JKUI2Y5eiqOGNsgGK /rZlGKOVTeN0muVSytFKufdiJYz4As7c6HR7D+MJQ/31/DpitXs8wLCJqQmn7Vuc q7iXdkwEBo4sjUDRqV1HoPPOngGfPrdKEnhcjm6O2vq0oxRMrdpR/HDlVm0msCCB TiAkLb663BATB90/apGKQN9fRbRfR2Dh3ECy7fp8NjDrWVJcDtf387yJBlcZUqPo BeS13wODcUcyGnjYAJHdxp/KnBnCXPPbFX1Qpujw2lQP3AFd3zcfg2Q38TV8Ta2z VSg= -----END CERTIFICATE-----Generated at Mon Sep 21 12:25:49 2026 by rpki-client