$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft File: FZ1fiXJ28N7IV-fi3t1kmHbopII.mft (raw, json) Hash identifier: kQ3u2UyqtB9SiAlX7JloRdqO2G5uASBuCGYGg/+oWPM= Subject key identifier: EC:ED:EF:DA:3A:35:A5:E8:26:6A:8B:49:47:B1:72:84:A2:57:03:1B Authority key identifier: 15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82 Certificate issuer: /CN=159D5F897276F0DEC857E7E2DEDD649876E8A482 Certificate serial: 0F10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft Manifest number: 0F01 Signing time: Tue 22 Jul 2025 21:36:37 +0000 Manifest this update: Tue 22 Jul 2025 21:36:37 +0000 Manifest next update: Thu 24 Jul 2025 21:36:37 +0000 Files and hashes: 1: 1wHRAQnQEW_7tIaKg7pUVLN-CF0.roa (hash: MEWzf3O5JdXCpxBr/p7o4PLpUI4nsRKrUvbLl6Hv6e8=) 2: FZ1fiXJ28N7IV-fi3t1kmHbopII.crl (hash: t2k8CiZ9NQP51ixsZxagKVSi5gSFSvKAcrZrp7BvsWQ=) 3: NXmCSBxMG5k0oNgtuj3mKPaTP08.roa (hash: vGaAFBszi6LTDW8XvxDTt0KMpL95OLFCgT8pR66oT8E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3856 (0xf10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159D5F897276F0DEC857E7E2DEDD649876E8A482 Validity Not Before: Jul 22 21:36:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ECEDEFDA3A35A5E8266A8B4947B17284A257031B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:4d:0f:f3:d7:59:03:e4:c9:59:01:5d:3d: cd:75:8e:8e:e3:31:40:83:d7:72:54:47:51:d0:ec: af:4b:cd:75:2e:f5:d0:5d:29:80:d5:62:ce:1b:a2: ed:ec:db:24:2f:1e:07:39:75:b3:fb:2e:c0:80:41: b2:cf:52:44:14:76:d7:6d:e7:30:f4:ce:85:4b:95: 29:43:bd:a1:28:84:49:6b:66:0a:5f:0b:71:29:7b: 2e:54:86:93:61:27:e1:ac:8b:97:73:27:65:8a:fc: 95:0c:fc:4f:e0:1f:31:ee:90:d2:e1:03:f2:3e:9d: ea:18:27:5e:61:cd:63:a0:e9:7d:17:71:2f:22:f9: 35:5d:36:ec:08:e1:aa:55:cb:64:13:4a:1e:de:e5: e0:d9:ed:78:b9:29:64:32:fc:a5:3a:60:65:83:5d: 25:7b:b5:61:42:dd:01:2c:57:8a:65:f1:1c:42:9d: ab:40:22:dd:72:1d:fb:99:f5:2e:75:a3:6a:b8:7e: cf:55:95:cf:f6:c2:6c:8c:58:6f:f4:77:f4:7e:bb: 20:b9:0e:98:ec:c5:27:da:43:ed:b1:bb:40:8d:01: ec:ca:98:f4:b0:a8:42:6c:46:92:7b:ea:86:3b:0b: e9:22:be:2e:64:d8:46:02:d4:69:30:7d:72:2f:20: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:ED:EF:DA:3A:35:A5:E8:26:6A:8B:49:47:B1:72:84:A2:57:03:1B X509v3 Authority Key Identifier: keyid:15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:31:f7:2a:b1:cb:c5:f4:0b:fa:f1:1b:57:31:41:29:3e:13: 09:4e:d4:1a:5a:5d:17:e4:f7:ce:cb:56:84:e8:54:76:50:57: 0d:43:8e:35:86:ee:ea:28:5c:88:73:f0:33:7c:0e:76:7a:42: 59:71:c1:7f:a5:66:75:69:6a:77:0b:fc:d1:91:7d:dc:11:3d: c8:52:5b:11:40:74:4c:23:de:c0:3b:f0:54:f5:e0:cc:27:7f: f0:2b:09:81:8d:8e:2d:8a:8f:11:5e:9e:dc:f2:59:1d:a9:71: 34:7a:22:fb:69:c6:05:39:2d:92:b2:bf:d1:ff:78:0b:3e:f6: 8b:c1:ba:11:8c:22:83:e1:c4:9d:be:76:c6:e0:ad:a1:fc:0e: 89:c6:73:51:8d:74:3b:a4:17:c1:bd:8d:06:fa:95:a8:92:b1: f0:01:aa:37:0c:82:aa:66:79:82:b3:a3:92:17:9d:94:f6:ac: 14:e3:44:7a:56:f8:b7:1c:c7:a7:d7:94:e4:ab:a1:1d:62:ef: 98:17:63:ca:d0:b6:b8:78:f6:1d:fd:36:e5:b9:f4:0a:23:e3: 99:9f:4e:62:54:da:19:e7:2e:84:ba:e8:30:31:1a:af:df:c7: 6b:4e:2a:e9:88:f2:98:01:48:e7:93:03:be:14:c9:f1:31:17: 84:e0:dc:10 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU5 RDVGODk3Mjc2RjBERUM4NTdFN0UyREVERDY0OTg3NkU4QTQ4MjAeFw0yNTA3MjIy MTM2MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDRURFRkRBM0EzNUE1 RTgyNjZBOEI0OTQ3QjE3Mjg0QTI1NzAzMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV/00P89dZA+TJWQFdPc11jo7jMUCD13JUR1HQ7K9LzXUu9dBd KYDVYs4bou3s2yQvHgc5dbP7LsCAQbLPUkQUdtdt5zD0zoVLlSlDvaEohElrZgpf C3Epey5UhpNhJ+Gsi5dzJ2WK/JUM/E/gHzHukNLhA/I+neoYJ15hzWOg6X0XcS8i +TVdNuwI4apVy2QTSh7e5eDZ7Xi5KWQy/KU6YGWDXSV7tWFC3QEsV4pl8RxCnatA It1yHfuZ9S51o2q4fs9Vlc/2wmyMWG/0d/R+uyC5DpjsxSfaQ+2xu0CNAezKmPSw qEJsRpJ76oY7C+kivi5k2EYC1GkwfXIvIOKlAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU7O3v2jo1pegmaotJR7FyhKJXAxswHwYDVR0jBBgwFoAUFZ1fiXJ28N7IV+fi 3t1kmHbopIIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9SREFU Vy9GWjFmaVhKMjhON0lWLWZpM3Qxa21IYm9wSUkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0ZaMWZpWEoyOE43SVYtZmkzdDFrbUhib3BJSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05PUkRBVFcvRloxZmlYSjI4TjdJVi1m aTN0MWttSGJvcElJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ADQx9yqxy8X0C/rxG1cxQSk+EwlO1BpaXRfk987LVoToVHZQVw1DjjWG7uooXIhz 8DN8DnZ6QllxwX+lZnVpancL/NGRfdwRPchSWxFAdEwj3sA78FT14Mwnf/ArCYGN ji2KjxFentzyWR2pcTR6IvtpxgU5LZKyv9H/eAs+9ovBuhGMIoPhxJ2+dsbgraH8 DonGc1GNdDukF8G9jQb6laiSsfABqjcMgqpmeYKzo5IXnZT2rBTjRHpW+Lccx6fX lOSroR1i75gXY8rQtrh49h39NuW59Aoj45mfTmJU2hnnLoS66DAxGq/fx2tOKumI 8pgBSOeTA74UyfExF4Tg3BA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:45:11 2025 by rpki-client