$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft File: V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft (raw, json) Hash identifier: 79FOrGWvJeJRumGkS+uNGg3nvJKXYNcuY6acjTGGbe4= Subject key identifier: 8E:61:F9:BD:73:B4:7E:E6:DC:34:02:24:64:43:3E:03:E1:A9:71:F6 Authority key identifier: 57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C Certificate issuer: /CN=574D5FD459D0D01C338EF0236122C762EC83283C Certificate serial: 0284 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft Manifest number: 0282 Signing time: Mon 21 Jul 2025 11:06:07 +0000 Manifest this update: Mon 21 Jul 2025 11:06:07 +0000 Manifest next update: Wed 23 Jul 2025 11:06:07 +0000 Files and hashes: 1: GOQABUtCO_JalyBCm2JecyCOhC0.roa (hash: m5On71NAFLAaXbkjbhGSUeJTBsJ96FgZNr3eXDVHZ2w=) 2: V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl (hash: ikuRMGbLsRCxXiIhfZAV1BcHNEM185QFa2KCeZ87Lcc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 20:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574D5FD459D0D01C338EF0236122C762EC83283C Validity Not Before: Jul 21 11:06:07 2025 GMT Not After : Oct 8 15:30:19 2025 GMT Subject: CN=8E61F9BD73B47EE6DC34022464433E03E1A971F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:b2:ed:58:0f:40:34:2d:f5:a4:c9:d1:2d: 78:91:5a:c7:b1:ad:26:60:c6:0e:2e:0f:f7:e1:c9: c0:d5:57:13:5f:a2:0b:d7:58:55:55:e1:b7:7a:56: cc:e0:ea:d2:45:a7:81:61:4e:5d:44:31:39:0b:0b: 6c:ed:6f:09:a9:77:a5:d5:9f:07:e5:9c:1b:1a:08: 52:c1:71:5c:79:6e:39:a4:4a:9b:f9:b7:e3:34:be: 57:6d:af:db:c2:da:07:d6:0f:14:60:9c:1e:41:fb: ad:75:0a:78:7f:73:f5:5b:9b:20:3e:59:2e:1a:cb: 43:c1:20:e7:db:85:f5:5c:4d:b4:5b:c9:e4:c5:34: 65:54:69:4e:49:c8:e2:58:74:b1:a4:d1:e1:83:67: a8:a3:0e:70:35:68:ba:3f:54:8b:6f:82:f0:98:da: 0a:e1:9a:04:ab:30:80:ce:fb:f0:73:93:62:14:8f: ab:90:c4:95:4e:9b:6b:87:4d:09:99:0b:d9:49:16: c3:4a:fc:13:a1:44:ac:ce:70:7f:b6:a7:aa:f9:a1: 92:a3:06:9a:66:54:fc:61:49:b3:bf:79:5b:c5:33: e9:51:4a:57:7c:19:ce:a3:5a:2f:1a:cd:c3:7f:ed: a6:b9:fb:aa:fb:16:ce:ca:9d:14:47:54:0c:99:55: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:61:F9:BD:73:B4:7E:E6:DC:34:02:24:64:43:3E:03:E1:A9:71:F6 X509v3 Authority Key Identifier: keyid:57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4f:b6:06:45:bc:cc:75:78:b0:d5:b2:46:e6:bb:36:95:81: a5:28:98:e9:14:51:2d:dc:18:fc:36:22:20:00:a0:f1:a9:cd: 0a:b6:3d:f7:6d:d1:ef:5a:19:b6:c1:b3:93:92:ad:ea:11:a9: 3e:fd:7a:b9:01:04:d2:8d:85:8c:8e:c4:cd:91:e0:b3:c2:85: 47:e5:6e:fb:7e:f8:56:77:df:a1:5c:31:31:86:49:c7:b1:8f: 1d:d6:2f:49:19:cd:46:cd:7c:f5:e6:12:95:8b:d6:6a:34:72: ff:e9:cb:d3:e0:9b:3c:9f:c9:da:3d:e8:69:e4:89:46:6c:97: e0:e7:0c:59:d6:c2:42:4b:8f:84:58:af:ff:56:5d:00:65:74: 1f:f6:9f:8a:2c:e3:7a:db:0c:4a:9f:0f:ac:db:03:97:63:d4: 16:08:19:13:52:b1:f8:77:0f:d9:9a:b2:2b:84:1c:d2:71:b1: 3d:77:4e:de:70:d9:98:2a:77:5e:2e:e1:5a:e4:01:16:c3:ff: b9:e5:a6:fb:c1:15:0d:bb:80:67:1c:b3:f0:9b:15:56:39:d2: 7e:4d:34:f8:7e:86:f7:a5:a4:e5:d6:02:25:b8:ea:32:c8:a6: 15:9b:aa:e2:b1:cb:79:03:c5:f4:46:89:78:23:6e:3f:39:75: 47:12:80:f3 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTc0 RDVGRDQ1OUQwRDAxQzMzOEVGMDIzNjEyMkM3NjJFQzgzMjgzQzAeFw0yNTA3MjEx MTA2MDdaFw0yNTEwMDgxNTMwMTlaMDMxMTAvBgNVBAMTKDhFNjFGOUJENzNCNDdF RTZEQzM0MDIyNDY0NDMzRTAzRTFBOTcxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo3LLtWA9ANC31pMnRLXiRWsexrSZgxg4uD/fhycDVVxNfogvX WFVV4bd6Vszg6tJFp4FhTl1EMTkLC2ztbwmpd6XVnwflnBsaCFLBcVx5bjmkSpv5 t+M0vldtr9vC2gfWDxRgnB5B+611Cnh/c/VbmyA+WS4ay0PBIOfbhfVcTbRbyeTF NGVUaU5JyOJYdLGk0eGDZ6ijDnA1aLo/VItvgvCY2grhmgSrMIDO+/Bzk2IUj6uQ xJVOm2uHTQmZC9lJFsNK/BOhRKzOcH+2p6r5oZKjBppmVPxhSbO/eVvFM+lRSld8 Gc6jWi8azcN/7aa5+6r7Fs7KnRRHVAyZVdhdAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUjmH5vXO0fubcNAIkZEM+A+GpcfYwHwYDVR0jBBgwFoAUV01f1FnQ0BwzjvAj YSLHYuyDKDwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVTU1Z VEVDSC9WMDFmMUZuUTBCd3pqdkFqWVNMSFl1eURLRHcuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1YwMWYxRm5RMEJ3emp2QWpZU0xIWXV5REtEdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVU1NWVRFQ0gvVjAxZjFGblEw Qnd6anZBallTTEhZdXlES0R3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJPtgZFvMx1eLDVskbmuzaVgaUomOkUUS3cGPw2IiAAoPGpzQq2Pfdt 0e9aGbbBs5OSreoRqT79erkBBNKNhYyOxM2R4LPChUflbvt++FZ336FcMTGGScex jx3WL0kZzUbNfPXmEpWL1mo0cv/py9Pgmzyfydo96GnkiUZsl+DnDFnWwkJLj4RY r/9WXQBldB/2n4os43rbDEqfD6zbA5dj1BYIGRNSsfh3D9masiuEHNJxsT13Tt5w 2Zgqd14u4VrkARbD/7nlpvvBFQ27gGccs/CbFVY50n5NNPh+hvelpOXWAiW46jLI phWbquKxy3kDxfRGiXgjbj85dUcSgPM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:47:31 2025 by rpki-client