$ rpki-client -vvvf rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft File: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft (raw, json) Hash identifier: tUZadetBdJnNHc43/p0AkdwGGj2xE3n3X9etmDa0Ir0= Subject key identifier: 99:75:72:79:5F:6D:34:EF:82:C5:B3:57:C1:D0:18:4C:05:C4:1C:4A Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 7138D125027B93206E3588C4CBDF1B0862272AE0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft Manifest number: 023A Signing time: Sun 20 Sep 2026 18:29:01 +0000 Manifest this update: Sun 20 Sep 2026 18:24:01 +0000 Manifest next update: Mon 21 Sep 2026 20:18:01 +0000 Files and hashes: 1: AS24165.roa (hash: 3FIiwNofmm4C5uRAP2kjrOtgHA40Oi5IQqIQn0zG3ZU=) 2: AS24613.roa (hash: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q=) 3: AS24614.roa (hash: G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=) 4: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl (hash: OnIYLJQnMNQtK4LKXq/2ptyYdjOB+a4H12ltQecVMlA=) 5: AS4662.roa (hash: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=) 6: AS9924.roa (hash: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ=) 7: AS24164.roa (hash: sIOeJGoPYIpl+PqRCZgUzjJTeH0hyt6alVKPdi1KsqA=) 8: AS24163.roa (hash: OWbvhoRY5zy3ESQoCDYHmvYMcD23zu2mtSNG2tJQho4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:38:d1:25:02:7b:93:20:6e:35:88:c4:cb:df:1b:08:62:27:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: Sep 20 18:24:01 2026 GMT Not After : Sep 21 20:18:01 2026 GMT Subject: CN=997572795F6D34EF82C5B357C1D0184C05C41C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:41:b2:49:d9:37:45:bf:25:bd:c4:ec:a2: 5c:61:b5:df:b1:7e:b2:a1:c6:86:66:a5:4d:d2:68: b6:5b:9d:79:15:24:c9:08:ee:b2:69:f5:a9:75:58: 0e:b1:06:10:48:28:94:c9:10:df:80:d8:10:a8:0b: f1:94:6c:c8:f8:3c:56:70:f8:be:15:89:20:d9:4f: e6:60:1e:4a:33:3c:9b:9e:d9:05:d4:ef:6c:a7:c2: 56:4e:77:7f:2e:7b:60:5f:0d:11:e3:f0:8d:ef:31: f3:cb:26:62:d8:c8:41:41:13:66:55:da:2c:d1:9d: 77:4f:ef:91:a2:45:b1:1f:f9:fc:0f:fb:7d:42:c4: b9:80:90:81:a2:90:fe:44:6a:65:c6:1a:5a:a8:ec: 60:fe:e8:cd:67:a9:02:17:0f:ac:98:14:30:74:a2: 99:19:b2:04:f2:91:42:e7:d3:ca:af:1f:c3:e6:23: f7:b7:a4:52:3f:7d:52:37:3a:7d:b0:51:ae:53:c4: d1:a8:ec:29:31:e6:61:ca:cc:b8:d0:fb:16:0a:7e: 1d:e7:24:3e:29:65:e9:fd:73:37:71:a6:61:cb:26: 43:f3:b5:74:d4:02:ee:37:0a:fa:50:23:b7:c4:2e: 00:db:89:f3:e9:7a:c0:c4:d9:d3:f2:b7:aa:b6:2d: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:72:79:5F:6D:34:EF:82:C5:B3:57:C1:D0:18:4C:05:C4:1C:4A X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:94:ce:35:50:10:4d:64:78:38:38:a1:2a:30:00:8f:60:61: 3c:49:2f:d5:02:a2:35:e1:64:89:67:6f:93:93:a6:8b:93:7c: e2:04:6d:2c:98:f6:40:fc:b9:a8:d3:02:8d:a9:84:20:a6:24: c3:74:7a:aa:f9:4f:e6:ad:8a:72:b1:0e:c1:42:d9:7f:21:05: a7:02:b1:0c:8b:40:59:1c:95:96:5c:f8:fe:a8:86:9c:27:d9: 26:0d:06:76:64:16:3c:fe:b9:82:9d:f6:f5:64:53:6b:e0:26: f5:9d:7a:77:f1:ca:5e:e9:b7:66:f2:46:57:04:8b:30:32:4d: 00:4c:30:1f:71:d5:94:64:de:1c:fd:d5:0e:94:f8:cd:40:b5: 2d:13:cc:88:c1:a6:84:1a:20:d6:e7:bb:1e:c4:23:16:86:f2: fd:50:32:25:e6:8e:6e:d3:86:ff:4b:f9:88:45:bc:63:1e:58: 80:04:aa:fa:33:0e:63:9e:27:3c:3a:fc:f8:35:5c:ac:03:74: c6:72:98:32:85:90:0d:b0:69:0d:51:a4:09:08:56:45:5a:b8: 8a:11:25:5d:7c:a8:d0:e0:bf:0e:7f:a3:27:46:8f:ef:d9:03: 96:f2:7d:83:e5:11:cb:58:d0:7b:b1:ed:c2:94:04:75:f6:01: 0e:f0:b5:ea -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUcTjRJQJ7kyBuNYjEy98bCGInKuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjA5MjAxODI0MDFaFw0yNjA5MjEyMDE4MDFaMDMxMTAvBgNV BAMTKDk5NzU3Mjc5NUY2RDM0RUY4MkM1QjM1N0MxRDAxODRDMDVDNDFDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaEGySdk3Rb8lvcTsolxhtd+x frKhxoZmpU3SaLZbnXkVJMkI7rJp9al1WA6xBhBIKJTJEN+A2BCoC/GUbMj4PFZw +L4ViSDZT+ZgHkozPJue2QXU72ynwlZOd38ue2BfDRHj8I3vMfPLJmLYyEFBE2ZV 2izRnXdP75GiRbEf+fwP+31CxLmAkIGikP5EamXGGlqo7GD+6M1nqQIXD6yYFDB0 opkZsgTykULn08qvH8PmI/e3pFI/fVI3On2wUa5TxNGo7Ckx5mHKzLjQ+xYKfh3n JD4pZen9czdxpmHLJkPztXTUAu43CvpQI7fELgDbifPpesDE2dPyt6q2LeOdAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUmXVyeV9tNO+CxbNXwdAYTAXEHEowHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvNzA0NDA0MjAxREZF MkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK+UzjVQEE1k eDg4oSowAI9gYTxJL9UCojXhZIlnb5OTpouTfOIEbSyY9kD8uajTAo2phCCmJMN0 eqr5T+atinKxDsFC2X8hBacCsQyLQFkclZZc+P6ohpwn2SYNBnZkFjz+uYKd9vVk U2vgJvWdenfxyl7pt2byRlcEizAyTQBMMB9x1ZRk3hz91Q6U+M1AtS0TzIjBpoQa INbnux7EIxaG8v1QMiXmjm7Thv9L+YhFvGMeWIAEqvozDmOeJzw6/Pg1XKwDdMZy mDKFkA2waQ1RpAkIVkVauIoRJV18qNDgvw5/oydGj+/ZA5byfYPlEctY0Hux7cKU BHX2AQ7wteo= -----END CERTIFICATE-----Generated at Mon Sep 21 03:15:29 2026 by rpki-client