$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft File: Uptgbbhig71KCK9-sz7ziiVmMbs.mft (raw, json) Hash identifier: IdZQ2Nm3Obd+2mGSudJiUBiWMbVPCaJqO+hvYK02gpE= Subject key identifier: FE:AD:35:29:A5:99:ED:7B:16:CF:C4:44:3C:03:E1:43:93:77:56:1F Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0BF9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft Manifest number: 0BAB Signing time: Sat 08 Jun 2024 04:08:10 +0000 Manifest this update: Sat 08 Jun 2024 04:08:10 +0000 Manifest next update: Mon 10 Jun 2024 04:08:10 +0000 Files and hashes: 1: 2ya9t8E0BNSBoGlzldJH_hS7tm8.roa (hash: Wj98USLftwjzWKkiXgzspoovaCZZ3iirQcEO2nEuGRo=) 2: 8-RSoZ_YXsEhSRiVKg25CtoYiIY.roa (hash: KgbEYi2C72e0zw8eQR0XTfi1LXA97kW2S03qtCSBE7I=) 3: EPDS-7Z-s5kU24bfSCQzHUXlZMg.roa (hash: hfBkruD/ouvjVLQoVRNeLHOKGbAw2b2jNKmonvhWHoA=) 4: K_fwbmz6QwqzyNTMaHP1V9439F8.roa (hash: eCXXG1pmOoVjs6U1EKGMuiRZj+Efnnk/Mv1ingMVwk4=) 5: Mi5oUcflamlXGwx068hVu-9Wt2g.roa (hash: DJ4UaX/sFd6SbZz7nueJVyOe+GPriu3uJ6DzT7jcKTw=) 6: PsnhUpeCGr7mAoHo68ra5kW-oG8.roa (hash: eifIAECIw8qSIZ8nqU51gRKxBQlcLw60digyyen0/mU=) 7: SKpLzMgtPgbRTb8ZMi3hQhRN9DA.roa (hash: ZtuDukz5U68HpOxVzpcz7Rnnj17m3iXpo9sUuQ6e3/c=) 8: SeNQbXVyYNNLT2aXm8BDg0Bcxkk.roa (hash: pTkfeZfNhkGjkbE6BG+BTR5yKnrvH3T2jJOV45ehnFA=) 9: Uptgbbhig71KCK9-sz7ziiVmMbs.crl (hash: N85EdRyCCkD8c2sPAvEBUC/BUZMECaDEqsv9sw3vLPY=) 10: i-6yeaRsPGOIWQa1ewQddROdpdA.roa (hash: ehC0d2h7omhaf1TedrbremHiL4NSh+JV5kNTeLbbqD0=) 11: i4KUENoEbFD8c3tDMNYOEAReq3w.roa (hash: eIc5cVDCAMLXGZWSfGBuAjuwUTOmwJ4E52LAhLL5Z/o=) 12: ju5XuVTy7pDhYOtHXt0RqI-VpT8.roa (hash: iEeAo6LGVXvn67Wb7TVwnszAC1lyT4kXqi2pY+1tRxQ=) 13: mXgHq40CYwOA1W67Zz96hjbG1MA.roa (hash: 0YCn5ZKuV0elSXYatY+SDLTai6ePcFYlaG+iaIFS6yU=) 14: n7GZW0WS3ohBl7k7i1Yuf29FiZk.roa (hash: AW9Mz4J0K9coCDignZBxVDdLqBRpI1gxqPGyWJiiP+o=) 15: w5GmwTZzG9ojS9JmFd2RBcyW9gI.roa (hash: /jFvAtjQfCYadGcfUxD8QcsDc9VInXdqVnetmZbgGr0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 13:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Jun 8 04:08:10 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FEAD3529A599ED7B16CFC4443C03E1439377561F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:72:70:3c:c0:6e:bb:a7:f6:b9:c6:30:2e: 3c:ba:79:5c:0b:c2:60:e1:c4:21:51:16:88:8c:50: 6d:d1:e3:11:b6:cf:d1:3a:e7:ff:7a:6e:56:d2:65: cb:9c:f0:15:33:83:a3:e9:7f:b5:13:33:43:f8:8b: 54:92:3c:8d:b8:0f:a9:47:01:39:7e:3e:10:92:1a: 88:5e:72:c4:fd:ab:8a:3d:1e:7c:07:44:fc:bd:f9: 8a:b3:45:12:2f:57:a4:6b:ca:e4:f9:f6:30:a2:ce: ec:2b:42:ed:11:77:53:1c:f0:e0:5e:1e:0c:2c:b2: 6c:d7:01:87:3b:69:08:02:bb:f2:8b:88:e3:19:a3: 4e:6c:ab:b9:33:85:5d:e7:9a:98:d4:08:95:5b:35: d2:30:37:30:f7:9b:ab:46:1a:e1:4f:2f:2d:1a:b9: 5e:ef:18:b1:61:2f:43:91:1d:0e:7a:ac:a6:38:4f: 42:ff:be:65:de:bd:fc:91:c7:6c:a0:32:ea:d9:6f: ec:7b:b9:8c:a3:25:b5:0d:a8:04:a4:ba:ba:35:30: d8:be:99:20:d2:89:9f:24:69:23:7f:f3:de:77:71: 72:15:e8:97:a5:3b:3a:69:84:00:92:28:08:ed:ad: b4:cb:ef:3c:fe:1a:4a:90:99:6b:2a:1f:97:59:c0: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:35:29:A5:99:ED:7B:16:CF:C4:44:3C:03:E1:43:93:77:56:1F X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:8c:a8:88:a6:be:9e:d9:63:e6:d0:93:57:0a:f0:ea:ec: a5:83:5e:85:3e:03:76:36:09:9d:16:2c:fd:6d:19:64:69:17: d9:05:30:02:48:2c:0e:57:bc:a9:31:e1:b0:b5:cb:21:64:c3: be:d1:be:e2:c0:fe:e3:7d:fd:18:45:f1:6c:5c:4a:54:9e:30: 8a:23:af:b0:77:8c:6f:e4:50:4c:40:4d:f2:64:72:55:07:6b: 48:e0:cb:0b:dc:a8:b5:48:60:b1:ea:df:cb:91:9e:63:f8:09: 6f:cf:ba:65:43:fe:dc:1a:48:7c:bb:18:b1:92:f0:ce:46:18: 39:f8:ed:41:11:54:4f:54:cb:7d:b3:e3:bd:4f:66:1c:25:11: 40:bc:a9:0f:eb:51:e0:30:6f:ab:3c:15:79:59:38:f4:82:3b: fe:1f:a0:6c:17:41:d4:5d:24:ac:84:06:23:d4:8c:14:40:cb: f7:b6:60:16:0a:5c:32:d3:1a:7b:ee:83:b4:1c:fc:dc:d9:fc: ea:38:f8:54:47:e3:8b:75:19:16:46:2e:ea:9a:57:08:6e:21: 80:8a:a6:86:0a:86:23:9b:6a:39:86:f1:53:64:c8:62:8f:ba: fe:93:95:50:c9:fc:c9:83:b3:68:8e:21:18:9f:2e:1c:c5:52: 18:bb:06:83 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNDA2MDgw NDA4MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFQUQzNTI5QTU5OUVE N0IxNkNGQzQ0NDNDMDNFMTQzOTM3NzU2MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/qXJwPMBuu6f2ucYwLjy6eVwLwmDhxCFRFoiMUG3R4xG2z9E6 5/96blbSZcuc8BUzg6Ppf7UTM0P4i1SSPI24D6lHATl+PhCSGohecsT9q4o9HnwH RPy9+YqzRRIvV6RryuT59jCizuwrQu0Rd1Mc8OBeHgwssmzXAYc7aQgCu/KLiOMZ o05sq7kzhV3nmpjUCJVbNdIwNzD3m6tGGuFPLy0auV7vGLFhL0ORHQ56rKY4T0L/ vmXevfyRx2ygMurZb+x7uYyjJbUNqASkuro1MNi+mSDSiZ8kaSN/8953cXIV6Jel OzpphACSKAjtrbTL7zz+GkqQmWsqH5dZwCpPAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU/q01KaWZ7XsWz8REPAPhQ5N3Vh8wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9VcHRnYmJoaWc3MUtDSzktc3o3 emlpVm1NYnMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDeM qIimvp7ZY+bQk1cK8OrspYNehT4DdjYJnRYs/W0ZZGkX2QUwAkgsDle8qTHhsLXL IWTDvtG+4sD+4339GEXxbFxKVJ4wiiOvsHeMb+RQTEBN8mRyVQdrSODLC9yotUhg serfy5GeY/gJb8+6ZUP+3BpIfLsYsZLwzkYYOfjtQRFUT1TLfbPjvU9mHCURQLyp D+tR4DBvqzwVeVk49II7/h+gbBdB1F0krIQGI9SMFEDL97ZgFgpcMtMae+6DtBz8 3Nn86jj4VEfji3UZFkYu6ppXCG4hgIqmhgqGI5tqOYbxU2TIYo+6/pOVUMn8yYOz aI4hGJ8uHMVSGLsGgw== -----END CERTIFICATE-----Generated at Sat Jun 8 07:13:32 2024 by rpki-client on console-fra.rpki-client.org