$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft File: dg6p94M-3GNm_V4jpCa89iuwHmw.mft (raw, json) Hash identifier: 3HNfQr1JYcFqBqRy/q6iYqwZjzLmNuOKxT2pC5bKsW8= Subject key identifier: 33:13:DD:35:E8:40:B8:7C:23:8F:C6:9B:9E:E7:F4:77:9B:DB:81:78 Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C Certificate serial: 0BEC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft Manifest number: 0BCB Signing time: Fri 31 May 2024 14:31:55 +0000 Manifest this update: Fri 31 May 2024 14:31:55 +0000 Manifest next update: Sun 02 Jun 2024 14:31:55 +0000 Files and hashes: 1: EQpEWN4_mvtx8pvTicpq0ifNBjQ.roa (hash: dZZyokcm34RWa/ELK5RM9HlJPRrVne+HHj2dHDC6R1M=) 2: TxN01kusPDZqYe0LIJXvLt36exM.roa (hash: +oif+14H4egQ88vkV1SgrX1y0FPdzYX8BmJF5euftzU=) 3: WHFalQoJMoZUBR8XRrNJbFmzAds.roa (hash: RD6uz5jZ0qtev49cCl4vRx2+2aty0Oev6SZJ7LdUajE=) 4: b2tITyfmGIm2Z4fuCBoXoMx3mI0.roa (hash: KI1N3DTSz0n1ndz1HAgr7Fr5Ax3Noq+8M759IoUuglM=) 5: dg6p94M-3GNm_V4jpCa89iuwHmw.crl (hash: H+Uoj8hApaX1MX0aJWB8R8c1Sjjr/FZpspJtc4YU6W0=) 6: kXX703E79nItsk6CKzG_g7fpWs4.roa (hash: kR2HJmj3WKPwUv3UC1s0kVF/T8wPXEk8ZMaNQHLfB6E=) 7: qTkobEsGSHTeUIkMh-Blm_Wwen4.roa (hash: XsdXpQtKL8zXNSyCS1h39KvJeaURevE1szV5vTrsWWQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C Validity Not Before: May 31 14:31:55 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3313DD35E840B87C238FC69B9EE7F4779BDB8178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:87:f3:aa:0e:08:b9:84:40:ae:8a:95:20: 97:ef:2d:5d:4b:8f:3c:a1:e4:c5:b1:15:5c:da:d8: e6:40:6a:71:3a:73:6f:4a:61:0c:e7:88:53:17:70: f4:b1:d3:39:79:7c:22:ed:d3:2e:d9:33:e4:b4:09: 5b:cc:39:88:07:69:7e:b5:2d:e8:8c:a4:cd:7f:e4: 9b:c7:ff:a2:8a:92:b3:ff:29:a6:7f:7c:b0:2c:86: 4f:af:f9:93:90:fd:b8:cc:66:22:72:24:24:4b:b1: ae:75:c3:27:6c:f0:71:7b:32:4a:d9:fb:fb:40:51: 0a:bf:b7:bf:30:17:35:07:87:bd:fc:03:91:6f:23: 9b:de:88:c3:01:69:bf:63:7c:d3:4e:67:dd:dd:ef: 86:77:38:21:d6:2a:5e:bf:a6:69:21:5e:8b:42:08: af:32:33:fc:08:4b:38:26:ee:ff:38:04:aa:26:9e: b1:da:0e:2b:8a:63:9e:fe:4e:18:0c:67:78:5d:7f: 46:d6:8d:20:f5:75:d3:53:51:c6:5c:2f:89:66:2f: f5:a0:64:67:4f:4e:c1:8c:e6:cb:d2:19:b2:99:b7: 4d:a7:12:93:fc:e5:01:4f:c2:ab:1c:db:f7:71:32: 49:23:97:12:87:79:17:d1:19:68:fc:9b:d8:20:6b: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:13:DD:35:E8:40:B8:7C:23:8F:C6:9B:9E:E7:F4:77:9B:DB:81:78 X509v3 Authority Key Identifier: keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:51:db:94:1f:11:85:58:e5:c3:d5:a4:69:3f:5a:f6:21:28: cf:77:eb:f6:58:58:8d:4f:17:78:7f:a2:3b:83:cf:70:2d:da: 91:38:12:bc:c8:43:36:0d:3d:8f:df:01:9d:a0:4e:c8:f4:a6: 03:5f:68:7c:10:63:46:db:79:ff:ae:bd:20:19:83:8d:37:12: 0e:fc:fb:30:28:8c:11:ca:99:ba:a6:9b:13:9e:01:99:7c:94: 4f:ed:51:e7:c2:52:42:d7:42:e2:47:fc:d1:79:dc:e8:04:c8: 65:8f:32:f2:da:cc:db:e3:e8:ac:62:30:4c:36:d1:35:3a:63: 9a:17:d2:f0:2a:42:ce:18:29:ec:1e:ea:12:61:b2:ca:fa:35: 90:e1:d9:83:74:d2:40:6b:6a:e8:89:96:48:9e:59:9e:cd:1a: c8:74:3e:da:09:c0:ab:61:d7:88:53:dc:df:8d:63:3a:88:79: 27:bc:2c:01:9c:5b:d0:12:a1:26:84:01:3f:57:b7:ab:72:b9: df:8e:72:12:9d:6f:c2:b0:e3:ef:f1:f7:a5:5e:04:3f:12:79: 4a:49:38:fa:f3:43:ef:7b:37:fd:41:f3:ee:51:2b:81:ae:1f: 54:3d:8b:0f:c2:a4:18:f0:ea:f2:bc:ec:d6:24:da:2a:98:c9: a5:2a:d8:a9 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzYw RUE5Rjc4MzNFREM2MzY2RkQ1RTIzQTQyNkJDRjYyQkIwMUU2QzAeFw0yNDA1MzEx NDMxNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMzMTNERDM1RTg0MEI4 N0MyMzhGQzY5QjlFRTdGNDc3OUJEQjgxNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCSIfzqg4IuYRAroqVIJfvLV1Ljzyh5MWxFVza2OZAanE6c29K YQzniFMXcPSx0zl5fCLt0y7ZM+S0CVvMOYgHaX61LeiMpM1/5JvH/6KKkrP/KaZ/ fLAshk+v+ZOQ/bjMZiJyJCRLsa51wyds8HF7MkrZ+/tAUQq/t78wFzUHh738A5Fv I5veiMMBab9jfNNOZ93d74Z3OCHWKl6/pmkhXotCCK8yM/wISzgm7v84BKomnrHa DiuKY57+ThgMZ3hdf0bWjSD1ddNTUcZcL4lmL/WgZGdPTsGM5svSGbKZt02nEpP8 5QFPwqsc2/dxMkkjlxKHeRfRGWj8m9gga9CBAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUMxPdNehAuHwjj8abnuf0d5vbgXgwHwYDVR0jBBgwFoAUdg6p94M+3GNm/V4j pCa89iuwHmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNHQy9k ZzZwOTRNLTNHTm1fVjRqcENhODlpdXdIbXcuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2RnNnA5NE0tM0dObV9WNGpwQ2E4OWl1d0htdy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0FTR0MvZGc2cDk0TS0zR05tX1Y0anBDYTg5 aXV3SG13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAJpR25Qf EYVY5cPVpGk/WvYhKM936/ZYWI1PF3h/ojuDz3At2pE4ErzIQzYNPY/fAZ2gTsj0 pgNfaHwQY0bbef+uvSAZg403Eg78+zAojBHKmbqmmxOeAZl8lE/tUefCUkLXQuJH /NF53OgEyGWPMvLazNvj6KxiMEw20TU6Y5oX0vAqQs4YKewe6hJhssr6NZDh2YN0 0kBrauiJlkieWZ7NGsh0PtoJwKth14hT3N+NYzqIeSe8LAGcW9ASoSaEAT9Xt6ty ud+OchKdb8Kw4+/x96VeBD8SeUpJOPrzQ+97N/1B8+5RK4GuH1Q9iw/CpBjw6vK8 7NYk2iqYyaUq2Kk= -----END CERTIFICATE-----Generated at Sat Jun 1 15:04:56 2024 by rpki-client on console-fra.rpki-client.org