$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.mft File: k460qwWoYWZ_0DVUrPuDaiz9yds.mft (raw, json) Hash identifier: LASyIisKcJwsOpd429BZWQ6QH4mls564EVm3YXHfM0k= Subject key identifier: 1C:18:46:14:AC:B2:2C:A0:B6:C5:B2:9C:D5:18:44:09:49:C7:48:B0 Authority key identifier: 93:8E:B4:AB:05:A8:61:66:7F:D0:35:54:AC:FB:83:6A:2C:FD:C9:DB Certificate issuer: /CN=938EB4AB05A861667FD03554ACFB836A2CFDC9DB Certificate serial: 7B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/k460qwWoYWZ_0DVUrPuDaiz9yds.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.mft Manifest number: 79 Signing time: Thu 30 May 2024 23:51:25 +0000 Manifest this update: Thu 30 May 2024 23:51:25 +0000 Manifest next update: Sat 01 Jun 2024 23:51:25 +0000 Files and hashes: 1: 1aqXuwJs3MTLb8I7A1jkteJhZE8.roa (hash: eq+sGvC2IMQmVu2f20iCULGx6HeaEXRopzWY+ju8/3E=) 2: K8ELkNiMlADKvslYuX7SpeeqaVE.roa (hash: OvNvdvf1XsrdGUgblZgpF6IN13ucJVX4tcND01InTyQ=) 3: k460qwWoYWZ_0DVUrPuDaiz9yds.crl (hash: rSiJ+8sotOS/N10FmUXZKnZGqgiMSbwKYievDGBCw2I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/k460qwWoYWZ_0DVUrPuDaiz9yds.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=938EB4AB05A861667FD03554ACFB836A2CFDC9DB Validity Not Before: May 30 23:51:25 2024 GMT Not After : Dec 5 15:30:20 2024 GMT Subject: CN=1C184614ACB22CA0B6C5B29CD518440949C748B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:99:cd:e8:d9:f1:7d:b3:04:16:8b:a6:99: da:7e:a1:61:c9:b3:b8:8f:92:d6:a8:39:78:f6:54: 3b:b8:61:cd:9f:62:12:68:5f:8e:04:e2:8b:a6:62: 0a:2c:6a:99:13:1e:b0:d0:bd:46:5e:21:6f:49:43: e7:7f:98:7b:ce:20:e8:4d:6b:6b:51:c0:7c:71:ed: d2:96:13:1a:9c:9c:43:c4:3d:31:c7:c0:0b:cd:db: e5:26:87:d2:c6:d3:a7:f6:7d:7f:35:41:4a:d4:a2: e0:9a:2c:1b:aa:e6:12:42:b8:ef:79:65:9a:0e:cd: 6d:e6:f8:56:0a:db:d7:f7:23:2a:7b:5d:87:6a:b9: 53:3d:1b:1b:27:b1:ac:d1:34:e5:2e:86:39:e1:4c: 59:eb:f6:77:4e:bd:c4:52:73:bb:e5:3f:06:5f:1e: 80:2a:1d:02:04:4b:3c:e6:30:7f:19:a8:64:0d:43: e8:d3:1a:2f:a5:b9:a5:ee:92:76:f9:6a:f2:21:f4: c6:49:fa:18:4b:87:d2:61:ce:56:1e:dd:c3:e1:cc: ae:4e:5e:dd:5b:85:03:38:00:0e:5a:e5:a4:08:d5: 90:86:8d:8c:4d:fa:c7:69:7e:aa:98:4b:e2:f3:cb: bc:9c:d5:1c:62:06:d3:87:35:a9:c6:08:f4:9d:62: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:46:14:AC:B2:2C:A0:B6:C5:B2:9C:D5:18:44:09:49:C7:48:B0 X509v3 Authority Key Identifier: keyid:93:8E:B4:AB:05:A8:61:66:7F:D0:35:54:AC:FB:83:6A:2C:FD:C9:DB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/k460qwWoYWZ_0DVUrPuDaiz9yds.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:7f:c0:b7:71:7a:e0:a5:cb:42:8d:1f:79:33:ac:07:5c: c2:ec:68:7a:2c:ee:8f:04:45:2c:0a:b7:0f:2f:f9:0e:3f:e5: bd:f7:07:17:e5:4e:44:4c:22:b5:26:9d:e9:17:59:d0:09:9c: 67:4f:8e:4a:85:30:d6:1b:87:f8:4b:0a:96:5e:ac:fe:28:3c: ee:78:cb:98:1e:f1:34:79:73:9f:c3:45:53:f5:0e:d4:93:ed: da:b5:d6:1e:d7:fd:c3:e0:2a:a5:a1:ef:97:a2:b0:6f:56:37: 4e:01:3c:54:b7:76:06:f7:d3:b4:06:de:cd:b5:84:47:ad:89: f2:dc:3f:70:0d:5f:ba:bb:15:ca:d2:08:11:22:bd:74:cb:4b: ce:5f:17:c0:dc:c4:af:f5:01:89:21:b8:b5:bd:db:7b:ce:44: 2f:5a:63:8b:ae:fc:dc:8f:2d:dc:69:fe:e1:30:7a:9e:98:8c: 32:e8:a2:d4:95:76:a9:33:65:c6:e4:dd:37:9c:c4:26:a7:31: 43:1f:cd:15:80:66:7e:9c:64:fa:40:46:1c:fb:b1:34:60:c6: 92:10:cb:60:65:f3:e7:f4:c7:1e:09:6d:75:b6:6e:71:53:27: 7a:d2:f3:0c:5f:f8:b2:c2:bf:35:2c:be:56:96:d2:fa:1d:c9: ca:62:3d:ba -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MzhF QjRBQjA1QTg2MTY2N0ZEMDM1NTRBQ0ZCODM2QTJDRkRDOURCMB4XDTI0MDUzMDIz NTEyNVoXDTI0MTIwNTE1MzAyMFowMzExMC8GA1UEAxMoMUMxODQ2MTRBQ0IyMkNB MEI2QzVCMjlDRDUxODQ0MDk0OUM3NDhCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMzWmc3o2fF9swQWi6aZ2n6hYcmzuI+S1qg5ePZUO7hhzZ9iEmhf jgTii6ZiCixqmRMesNC9Rl4hb0lD53+Ye84g6E1ra1HAfHHt0pYTGpycQ8Q9McfA C83b5SaH0sbTp/Z9fzVBStSi4JosG6rmEkK473llmg7Nbeb4Vgrb1/cjKntdh2q5 Uz0bGyexrNE05S6GOeFMWev2d069xFJzu+U/Bl8egCodAgRLPOYwfxmoZA1D6NMa L6W5pe6Sdvlq8iH0xkn6GEuH0mHOVh7dw+HMrk5e3VuFAzgADlrlpAjVkIaNjE36 x2l+qphL4vPLvJzVHGIG04c1qcYI9J1iObsCAwEAAaOCAg0wggIJMB0GA1UdDgQW BBQcGEYUrLIsoLbFspzVGEQJScdIsDAfBgNVHSMEGDAWgBSTjrSrBahhZn/QNVSs +4NqLP3J2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ORF9TRUNV UkUvazQ2MHF3V29ZV1pfMERWVXJQdURhaXo5eWRzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9rNDYwcXdXb1lXWl8wRFZVclB1RGFpejl5ZHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ORF9TRUNVUkUvazQ2MHF3V29ZV1pf MERWVXJQdURhaXo5eWRzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFWzf8C3cXrgpctCjR95M6wHXMLsaHos7o8ERSwKtw8v+Q4/5b33BxflTkRM IrUmnekXWdAJnGdPjkqFMNYbh/hLCpZerP4oPO54y5ge8TR5c5/DRVP1DtST7dq1 1h7X/cPgKqWh75eisG9WN04BPFS3dgb307QG3s21hEetifLcP3ANX7q7FcrSCBEi vXTLS85fF8DcxK/1AYkhuLW923vORC9aY4uu/NyPLdxp/uEwep6YjDLootSVdqkz Zcbk3TecxCanMUMfzRWAZn6cZPpARhz7sTRgxpIQy2Bl8+f0xx4JbXW2bnFTJ3rS 8wxf+LLCvzUsvlaW0vodycpiPbo= -----END CERTIFICATE-----Generated at Fri May 31 23:15:52 2024 by rpki-client on console-ams.rpki-client.org