$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft File: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft (raw, json) Hash identifier: v6EcBYdC/ex+iA/dll/me2crw4zaqH5gl6nubDfRx7g= Subject key identifier: C7:C8:1D:89:80:3F:45:E5:8C:16:8D:BD:B0:63:ED:04:BF:69:FA:F3 Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 29C0E5B0B136B604B9464BABEF4C9A9620940C66 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft Manifest number: 01F2 Signing time: Tue 28 Jul 2026 11:28:24 +0000 Manifest this update: Tue 28 Jul 2026 11:23:24 +0000 Manifest next update: Wed 29 Jul 2026 13:47:24 +0000 Files and hashes: 1: AS24163.roa (hash: OWbvhoRY5zy3ESQoCDYHmvYMcD23zu2mtSNG2tJQho4=) 2: AS9924.roa (hash: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ=) 3: AS24614.roa (hash: G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=) 4: AS24613.roa (hash: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q=) 5: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl (hash: jI2jiX8ew75pqKi1ELgCVI+9D/xgiEjoJEweEpTLywM=) 6: AS24164.roa (hash: sIOeJGoPYIpl+PqRCZgUzjJTeH0hyt6alVKPdi1KsqA=) 7: AS24165.roa (hash: 3FIiwNofmm4C5uRAP2kjrOtgHA40Oi5IQqIQn0zG3ZU=) 8: AS4662.roa (hash: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c0:e5:b0:b1:36:b6:04:b9:46:4b:ab:ef:4c:9a:96:20:94:0c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: Jul 28 11:23:24 2026 GMT Not After : Jul 29 13:47:24 2026 GMT Subject: CN=C7C81D89803F45E58C168DBDB063ED04BF69FAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:ef:94:44:60:0a:ae:1f:55:3e:03:2a:17: b3:fc:2f:23:cd:19:3f:04:6b:97:95:13:ce:97:43: 2b:20:24:5a:0d:c8:dd:42:96:f2:01:9e:4b:61:45: 45:e0:c8:dd:d5:ed:75:f6:47:1f:84:2d:d6:d9:84: d9:3e:23:23:35:ef:a9:ab:73:e1:f7:ff:ab:eb:71: 28:76:3d:6f:d9:0c:28:eb:82:ed:25:21:74:47:5d: da:f4:65:5d:61:22:22:01:78:2e:2f:e5:e1:15:22: b4:10:f6:19:77:c1:76:30:b2:79:07:aa:c1:13:95: 16:fe:49:a5:ce:6d:0d:27:8e:d6:b0:64:c3:1c:02: aa:49:95:70:b0:f1:c9:a3:45:7d:14:c5:7b:d1:be: b2:88:72:60:10:13:c6:10:a2:c4:6d:21:c4:f0:a3: 02:f7:5c:ed:d5:55:e9:08:7a:93:3d:08:40:00:63: e1:13:f6:8b:60:e7:a5:e1:9b:f6:c0:19:bf:ef:86: 05:59:74:24:6e:43:27:b7:cb:e1:39:2d:6c:55:ff: dc:8e:80:33:28:c0:be:5a:70:9b:44:55:50:07:61: 7d:3a:27:12:85:c9:10:25:b0:e9:10:87:0a:87:a0: a1:64:c7:51:7f:19:51:26:83:e4:2b:1f:83:e8:11: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:1D:89:80:3F:45:E5:8C:16:8D:BD:B0:63:ED:04:BF:69:FA:F3 X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:92:05:4c:10:7f:cd:96:ca:a5:42:37:8d:84:52:7b:06:19: 02:36:11:d7:e9:6b:2f:14:fb:dc:40:d8:83:7d:0a:91:a9:31: b5:85:1c:e2:d8:2a:8c:52:2a:ec:2c:da:d9:7c:fc:6a:cf:ea: 6c:ed:7c:9b:9b:3e:c3:1d:9f:57:15:9a:12:df:7e:6f:8c:d0: 8e:ac:70:b8:ae:ee:55:2c:65:57:8f:26:e8:fa:5f:af:01:6b: fa:47:cf:1b:35:90:14:1a:9b:14:d7:45:82:55:c7:48:61:eb: b8:cd:f8:1c:be:b3:57:bc:04:21:f1:98:0d:1d:d6:47:39:6a: 94:94:c8:5f:44:5a:f8:3c:28:29:84:f8:a0:16:22:31:b1:2c: da:b2:1d:b1:a7:94:7f:d9:9f:2d:86:9e:8c:db:54:92:9b:be: 59:00:19:d9:f1:59:84:ae:52:ba:d3:a2:10:8d:b1:b9:33:c2: 81:8d:16:bf:4c:37:a4:99:60:6a:8c:40:df:a7:33:2b:0f:62: 9a:6e:62:2e:8f:4a:5f:3f:ab:fb:9c:a1:28:58:48:28:5f:30: 58:ad:de:41:73:49:43:06:f0:73:55:b5:f1:06:c4:2c:ce:26: 23:f4:f2:8f:b7:e0:01:bc:3f:7c:b6:d2:43:09:ee:f4:c4:ec: f0:92:14:b5 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUKcDlsLE2tgS5Rkur70yaliCUDGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjA3MjgxMTIzMjRaFw0yNjA3MjkxMzQ3MjRaMDMxMTAvBgNV BAMTKEM3QzgxRDg5ODAzRjQ1RTU4QzE2OERCREIwNjNFRDA0QkY2OUZBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVVO+URGAKrh9VPgMqF7P8LyPN GT8Ea5eVE86XQysgJFoNyN1ClvIBnkthRUXgyN3V7XX2Rx+ELdbZhNk+IyM176mr c+H3/6vrcSh2PW/ZDCjrgu0lIXRHXdr0ZV1hIiIBeC4v5eEVIrQQ9hl3wXYwsnkH qsETlRb+SaXObQ0njtawZMMcAqpJlXCw8cmjRX0UxXvRvrKIcmAQE8YQosRtIcTw owL3XO3VVekIepM9CEAAY+ET9otg56Xhm/bAGb/vhgVZdCRuQye3y+E5LWxV/9yO gDMowL5acJtEVVAHYX06JxKFyRAlsOkQhwqHoKFkx1F/GVEmg+QrH4PoEX/TAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUx8gdiYA/ReWMFo29sGPtBL9p+vMwHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvNzA0NDA0MjAxREZF MkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFeSBUwQf82W yqVCN42EUnsGGQI2Edfpay8U+9xA2IN9CpGpMbWFHOLYKoxSKuws2tl8/GrP6mzt fJubPsMdn1cVmhLffm+M0I6scLiu7lUsZVePJuj6X68Ba/pHzxs1kBQamxTXRYJV x0hh67jN+By+s1e8BCHxmA0d1kc5apSUyF9EWvg8KCmE+KAWIjGxLNqyHbGnlH/Z ny2GnozbVJKbvlkAGdnxWYSuUrrTohCNsbkzwoGNFr9MN6SZYGqMQN+nMysPYppu Yi6PSl8/q/ucoShYSChfMFit3kFzSUMG8HNVtfEGxCzOJiP08o+34AG8P3y20kMJ 7vTE7PCSFLU= -----END CERTIFICATE-----Generated at Tue Jul 28 20:31:10 2026 by rpki-client