$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft File: C2fHjjXSNjKiVTKu_otKn8q-O00.mft (raw, json) Hash identifier: dICjXOX1CYsgJ3hueemb7LMmjECr5NbKIN65qgwbEyg= Subject key identifier: AA:EA:58:C1:BD:94:32:45:29:A7:6D:58:72:81:D4:E2:2E:73:11:1A Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Certificate issuer: /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Certificate serial: 043A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft Manifest number: 0436 Signing time: Mon 21 Jul 2025 08:05:50 +0000 Manifest this update: Mon 21 Jul 2025 08:05:50 +0000 Manifest next update: Wed 23 Jul 2025 08:05:50 +0000 Files and hashes: 1: C2fHjjXSNjKiVTKu_otKn8q-O00.crl (hash: NlUo1uyKnsjPMlbCOpmgXrmfjjlmoEXhFpzrJJZjZH8=) 2: DuBW_qJiBPrNW6IybNEiH42sqwc.roa (hash: 52DR1LpsHmQViQuvpCI4qjnKq/WUGHBov8c+O/FGgxE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 20:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Validity Not Before: Jul 21 08:05:50 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=AAEA58C1BD94324529A76D587281D4E22E73111A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:45:3d:27:11:6b:cd:3e:21:cf:f1:4e:2e: 27:5d:0c:40:82:01:81:e7:17:ba:67:83:a6:a7:56: cf:bf:64:86:1f:c7:69:0a:e1:14:9c:33:1c:fe:de: 76:de:c3:1a:ce:ff:93:b5:66:e1:24:85:91:c1:61: de:a0:82:d6:2f:2f:30:8a:84:4e:8f:3d:e5:c2:92: 73:18:0d:f2:65:fd:38:6e:c9:76:64:6f:1f:eb:3a: 00:45:6d:66:9d:55:c6:61:b1:49:9a:bb:bb:a3:c8: e9:a9:09:d5:27:d9:4e:a5:a2:0b:18:d0:12:81:05: 02:f3:85:df:34:c5:cc:7c:83:07:f9:d3:b8:2f:da: 0c:e4:f0:f9:36:a5:fb:17:2b:e7:ce:f3:1b:57:98: 11:e8:c6:99:bb:d5:37:40:53:66:72:59:86:07:b8: c9:7d:82:b5:ea:f6:e6:e7:87:ac:4f:51:ed:06:1d: b9:54:d5:0e:d6:86:bd:fb:09:6c:2b:86:41:f3:c7: 7b:45:20:32:4a:f7:a7:42:dc:6d:7a:8b:6e:ac:ad: 8a:23:51:e5:f1:46:6f:db:03:64:13:2c:ec:e8:58: 62:e7:7e:2e:3b:89:dc:bd:46:a5:71:00:ac:fe:9c: 13:34:7d:3e:b7:c1:b4:8c:72:16:c0:e0:4d:97:f7: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:58:C1:BD:94:32:45:29:A7:6D:58:72:81:D4:E2:2E:73:11:1A X509v3 Authority Key Identifier: keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:0a:ea:63:2b:59:00:36:21:56:76:4a:8f:65:f2:ae:0d: 8e:64:1e:f4:5a:50:79:7c:c1:5a:4e:01:f1:b6:9e:a5:30:13: ea:f4:09:e0:09:9c:52:1c:4b:c9:d0:a9:20:58:1e:ae:02:13: 9c:71:96:80:7d:bb:be:28:86:fe:91:41:87:19:0e:18:46:50: 57:e0:33:f4:93:84:1a:16:7a:ae:a5:76:6e:1b:a5:9f:39:5f: e2:e7:64:3c:0e:b4:9b:8d:7d:27:87:48:d5:05:ab:7a:29:20: 0d:55:68:c9:19:e7:5c:ba:8e:3d:42:6b:f5:13:4d:04:36:5a: 53:67:1f:3b:cd:1c:5d:2b:d9:ac:de:e9:91:d6:0a:b0:a9:dd: c7:0a:cf:87:aa:f8:0b:44:3f:a2:95:1d:e3:32:81:83:0e:29: 30:34:63:54:db:69:20:c6:8d:1e:9b:22:b9:e3:a8:df:62:f3: e8:cf:c8:53:fb:19:9f:b3:c8:41:06:45:24:49:bc:48:79:6d: 1c:1f:f9:61:6e:78:4d:be:63:fa:0f:c9:57:98:1e:f1:af:4b: c9:da:5c:82:f2:9b:e7:8b:2a:1d:e4:60:f6:b9:9b:24:47:b5: b4:d3:82:d3:20:ae:88:62:26:5e:52:4d:74:2e:e8:1b:04:ac: ce:4f:fd:02 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICBDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI2 N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0RDAeFw0yNTA3MjEw ODA1NTBaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKEFBRUE1OEMxQkQ5NDMy NDUyOUE3NkQ1ODcyODFENEUyMkU3MzExMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm50U9JxFrzT4hz/FOLiddDECCAYHnF7png6anVs+/ZIYfx2kK 4RScMxz+3nbewxrO/5O1ZuEkhZHBYd6ggtYvLzCKhE6PPeXCknMYDfJl/ThuyXZk bx/rOgBFbWadVcZhsUmau7ujyOmpCdUn2U6logsY0BKBBQLzhd80xcx8gwf507gv 2gzk8Pk2pfsXK+fO8xtXmBHoxpm71TdAU2ZyWYYHuMl9grXq9ubnh6xPUe0GHblU 1Q7Whr37CWwrhkHzx3tFIDJK96dC3G16i26srYojUeXxRm/bA2QTLOzoWGLnfi47 idy9RqVxAKz+nBM0fT63wbSMchbA4E2X975BAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUqupYwb2UMkUpp21YcoHU4i5zERowHwYDVR0jBBgwFoAUC2fHjjXSNjKiVTKu /otKn8q+O00wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9DMmZIampYU05qS2lWVEt1X290S244cS1PMDAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvQzJmSGpqWFNO aktpVlRLdV9vdEtuOHEtTzAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRoCupjK1kANiFWdkqPZfKuDY5kHvRaUHl8wVpOAfG2nqUwE+r0CeAJ nFIcS8nQqSBYHq4CE5xxloB9u74ohv6RQYcZDhhGUFfgM/SThBoWeq6ldm4bpZ85 X+LnZDwOtJuNfSeHSNUFq3opIA1VaMkZ51y6jj1Ca/UTTQQ2WlNnHzvNHF0r2aze 6ZHWCrCp3ccKz4eq+AtEP6KVHeMygYMOKTA0Y1TbaSDGjR6bIrnjqN9i8+jPyFP7 GZ+zyEEGRSRJvEh5bRwf+WFueE2+Y/oPyVeYHvGvS8naXILym+eLKh3kYPa5myRH tbTTgtMgrohiJl5STXQu6BsErM5P/QI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:44:27 2025 by rpki-client