$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft File: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft (raw, json) Hash identifier: KN/YgtbuVDnJHeyt02ehCzKWtxE11KACU2QU69DZgJM= Subject key identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 Certificate issuer: /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Certificate serial: 128B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft Manifest number: 127F Signing time: Tue 22 Jul 2025 22:07:22 +0000 Manifest this update: Tue 22 Jul 2025 22:07:22 +0000 Manifest next update: Thu 24 Jul 2025 22:07:22 +0000 Files and hashes: 1: TMV9x2lBBjY0kChgOnqJcZT6xh8.roa (hash: kHmGblb6P50M24xMqOY00BBP+CcZGGiUSVrhIQt1BCc=) 2: oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl (hash: PqbbptDRUwUM1ADjZk49KIqnHXCOU60YCm7DSILBvLc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4747 (0x128b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158 Validity Not Before: Jul 22 22:07:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EC8C18107FFB4A61656D4AECDB2BBC90D51F427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:e8:95:e6:7b:44:fb:80:37:b4:eb:cd:8c: a8:2e:cf:1f:c4:2d:b4:e9:08:58:7f:c7:b2:33:e7: 24:ff:70:01:26:64:f0:ca:02:7e:f9:0e:78:5e:e1: 31:f3:0f:c2:f3:50:a6:b8:c6:df:1f:35:60:6a:5e: 36:12:38:3e:0b:7b:02:10:53:c8:85:dc:18:b4:be: 53:13:00:75:a6:b8:b2:6b:85:54:cd:a1:b3:bb:97: b5:72:7b:45:d5:e8:3b:15:bc:5e:c3:32:87:0c:c0: 46:f7:a7:9c:74:47:5e:c6:33:c0:69:fc:1a:8d:c0: 06:02:09:c0:8b:4a:2b:f3:76:19:fa:23:93:f6:56: 00:28:5b:e5:a3:5b:d2:2a:1e:6e:96:98:9f:aa:f3: 10:d8:00:ae:c2:6a:f2:9a:d6:a6:f8:a1:04:98:f4: ad:a5:e3:5b:00:12:21:51:40:c9:47:12:97:da:4c: bf:78:44:cb:73:2d:ad:40:7d:44:74:0d:52:13:73: b1:00:cb:0e:f5:0f:b1:57:2c:09:10:01:3e:b5:ef: 63:f6:54:07:a3:aa:30:7a:ca:e6:19:fa:55:a0:58: e9:da:9b:51:9f:3d:e0:82:c4:46:d6:67:1d:3f:dd: 85:c4:b4:43:30:6f:b0:95:80:e7:99:bb:45:89:af: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8C:18:10:7F:FB:4A:61:65:6D:4A:EC:DB:2B:BC:90:D5:1F:42:7B X509v3 Authority Key Identifier: keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:53:52:51:d5:c5:80:fa:e4:84:48:ca:91:7c:1c:b8:14:99: 06:ae:db:1c:b6:b2:e9:91:51:b5:74:8e:99:13:df:8c:c0:f5: cb:66:05:cc:6a:6d:bf:ef:52:ff:0e:d1:a2:69:95:3e:2e:e5: d3:2b:88:fe:2e:fd:4e:2d:1c:2e:65:3f:99:5c:b8:83:59:66: 70:3b:6d:09:98:96:50:36:9b:fc:47:4f:1e:f0:37:a7:bd:90: ba:87:03:cb:d9:66:cf:13:f8:af:b5:7f:48:00:90:1d:77:9b: d8:8f:32:93:5e:83:d7:1c:e5:fb:af:bc:c1:8f:c5:1b:3c:8d: 86:cc:12:3a:bb:20:d8:ab:43:11:0f:ab:b5:aa:26:14:0c:26: 5c:4b:1b:d1:6d:e7:e2:45:42:d1:7a:73:22:08:99:af:0e:2e: a2:67:c9:1a:4c:38:04:f1:3e:ec:24:6c:7e:be:59:49:1b:e3: 12:8e:04:ea:7f:e3:8a:00:d6:d3:a7:ca:c5:22:cc:27:52:b1: f3:12:4e:3e:59:f3:93:b9:10:d7:26:ab:ff:84:56:a5:58:2e: 2f:08:f0:8a:bf:f8:9c:b0:b8:48:59:a8:e3:c2:02:48:f7:cc: d9:92:e8:37:fd:ac:ca:fb:ff:4c:97:26:00:c0:88:bc:24:a5: bb:c3:d9:b1 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICEoswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA1 RTY2Q0ZBNkY4QzBEQUFCRkIxQUY2RkEzMjE4NDI2MDQ0RjE1ODAeFw0yNTA3MjIy MjA3MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDOEMxODEwN0ZGQjRB NjE2NTZENEFFQ0RCMkJCQzkwRDUxRjQyN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuC+iV5ntE+4A3tOvNjKguzx/ELbTpCFh/x7Iz5yT/cAEmZPDK An75Dnhe4THzD8LzUKa4xt8fNWBqXjYSOD4LewIQU8iF3Bi0vlMTAHWmuLJrhVTN obO7l7Vye0XV6DsVvF7DMocMwEb3p5x0R17GM8Bp/BqNwAYCCcCLSivzdhn6I5P2 VgAoW+WjW9IqHm6WmJ+q8xDYAK7CavKa1qb4oQSY9K2l41sAEiFRQMlHEpfaTL94 RMtzLa1AfUR0DVITc7EAyw71D7FXLAkQAT6172P2VAejqjB6yuYZ+lWgWOnam1Gf PeCCxEbWZx0/3YXEtEMwb7CVgOeZu0WJrw0vAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU7IwYEH/7SmFlbUrs2yu8kNUfQnswHwYDVR0jBBgwFoAUoF5mz6b4wNqr+xr2 +jIYQmBE8VgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRX L29GNW16NmI0d05xci14cjItaklZUW1CRThWZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0Y1bXo2YjR3TnFyLXhyMi1qSVlRbUJFOFZnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9CQVRXL29GNW16NmI0d05xci14cjIt aklZUW1CRThWZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP U1JR1cWA+uSESMqRfBy4FJkGrtsctrLpkVG1dI6ZE9+MwPXLZgXMam2/71L/DtGi aZU+LuXTK4j+Lv1OLRwuZT+ZXLiDWWZwO20JmJZQNpv8R08e8DenvZC6hwPL2WbP E/ivtX9IAJAdd5vYjzKTXoPXHOX7r7zBj8UbPI2GzBI6uyDYq0MRD6u1qiYUDCZc SxvRbefiRULRenMiCJmvDi6iZ8kaTDgE8T7sJGx+vllJG+MSjgTqf+OKANbTp8rF IswnUrHzEk4+WfOTuRDXJqv/hFalWC4vCPCKv/icsLhIWajjwgJI98zZkug3/azK +/9MlyYAwIi8JKW7w9mx -----END CERTIFICATE-----Generated at Wed Jul 23 02:59:46 2025 by rpki-client