$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft File: fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json) Hash identifier: 4hsgDxaPHil3sl/au1jvT07SGUPPJwKlay7lVGWVkGo= Subject key identifier: 9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 0559 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft Manifest number: 0553 Signing time: Mon 21 Jul 2025 10:35:49 +0000 Manifest this update: Mon 21 Jul 2025 10:35:49 +0000 Manifest next update: Wed 23 Jul 2025 10:35:49 +0000 Files and hashes: 1: VRx72pdtTHFMiqN9RD6G7x7eSYo.roa (hash: nWRuke5cNs4w9hWijKV4rkTrE3Ajcy5FghoTH7TFyis=) 2: ccfBSmWYHLx8ju0a14YXyamObYE.roa (hash: nMx4N12WJ5f89/ZKOCn2BWDB/IPiWRbtDQzPE191OPQ=) 3: dqEvc27_bBvGC_DLFqiTu7nrWI8.roa (hash: gxOH4BAt3zIg+Cldbx42+J51xa/Hfx3WhRoDsmfBTyo=) 4: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: f9cV0gUpC7rbbVTn8/bc8Uw5TbPJZcflc0l2yDOgsho=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 20:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1369 (0x559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Jul 21 10:35:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4: d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1: d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2: cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af: f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa: 35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c: cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3: 98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60: d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f: 4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc: 23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1: b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4: d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9: 44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46: 2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47: a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69: 78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:eb:ca:34:0c:cb:5f:b8:e1:bf:cb:5f:e6:82:d9:2d:60:b9: 5b:7d:fa:74:5e:f8:54:64:81:d8:32:cb:3e:6c:57:cb:74:5a: 9f:4b:4f:53:44:2c:a6:38:69:92:d6:33:0a:96:d9:9b:f3:74: 5b:de:d3:3b:da:4a:1c:68:e6:42:e6:a6:38:93:d2:8f:b6:3b: cd:2b:af:a6:aa:0a:b1:9a:00:f7:7f:6c:fb:a5:70:12:f5:27: 8c:77:e3:b6:a6:4c:15:ca:ca:62:8a:aa:0b:ad:7e:8d:86:5e: 81:81:ab:aa:dc:ae:53:35:78:24:e4:0e:38:38:09:79:86:15: 3e:09:ac:67:2f:f9:de:b1:c3:a2:89:c9:82:61:06:85:41:58: b2:ee:06:e2:5e:e6:e4:eb:b9:20:d3:80:7e:d4:b0:06:ab:48: 99:20:b4:5d:06:9a:61:98:9b:8a:1e:c3:1f:f3:53:a1:60:ef: 61:d2:50:c7:10:87:a9:aa:ea:6e:d4:47:33:a6:3b:d0:bf:71: 69:3c:a8:cd:f0:84:05:a1:e9:cc:15:22:49:fe:c4:55:ff:51: d8:5d:5c:8a:57:f3:d2:3f:c3:a0:92:9d:34:80:27:ca:09:08: f3:40:5c:f6:83:6c:52:97:d6:b3:3c:bc:62:7a:83:9a:3a:0e: d4:dc:a3:f0 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTA3MjEx MDM1NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBRTAwODg0OThBNzM2 NDEzMkRDRTE2ODIyQjY5RjQ3OTU3NEUzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4VomApCeu+cwVqQnktNf/RGiQ7cRcg6OE6jlH8dGDcviWYroF haE3XJMZos1QHSsIEA5271OXIZqXr/BSAWCJMPWS42io1MZu+jWOyXwOrme+K14k ww8PbMuldxafXI4k86oU1uah45g8bSPtFKZje+O6s4r8YNQy+eezU3J2hQUwaq+9 D04VvDqNbkZRUj8cC1R43COF1tEQY7B5UFwb180S4bK3QL0SdEHr/SbzAQg15NEg 9WZ1MPHyhxp6owl9uUSlQ6Kc+Us61W348Pc8RiyTi8Cah7nBJ2DKTgZVR6jzS+Ii o/83lgWo0XEYaXjIiIu7BeeiBVI9r21yCkUXAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmuAIhJinNkEy3OFoIrafR5V04/wwHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvZnB6dko4amUwVFVHc3pt ZG1TN1A5aWExZVZFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AKbryjQMy1+44b/LX+aC2S1guVt9+nRe+FRkgdgyyz5sV8t0Wp9LT1NELKY4aZLW MwqW2ZvzdFve0zvaShxo5kLmpjiT0o+2O80rr6aqCrGaAPd/bPulcBL1J4x347am TBXKymKKqgutfo2GXoGBq6rcrlM1eCTkDjg4CXmGFT4JrGcv+d6xw6KJyYJhBoVB WLLuBuJe5uTruSDTgH7UsAarSJkgtF0GmmGYm4oewx/zU6Fg72HSUMcQh6mq6m7U RzOmO9C/cWk8qM3whAWh6cwVIkn+xFX/UdhdXIpX89I/w6CSnTSAJ8oJCPNAXPaD bFKX1rM8vGJ6g5o6DtTco/A= -----END CERTIFICATE-----Generated at Mon Jul 21 18:49:54 2025 by rpki-client