$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft File: e4JX_9x80ctBlhKc1ASTNSvIO7k.mft (raw, json) Hash identifier: kZYLSVXHC6SzT8dqLAu6ysnxlSIPQDnLs4rokJD6rNo= Subject key identifier: BF:F9:66:CC:34:DB:9F:8E:2C:AE:59:69:35:E3:1A:9A:DD:5D:70:87 Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 Certificate issuer: /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Certificate serial: 041D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft Manifest number: 040F Signing time: Thu 17 Apr 2025 21:39:03 +0000 Manifest this update: Thu 17 Apr 2025 21:39:03 +0000 Manifest next update: Sat 19 Apr 2025 21:39:03 +0000 Files and hashes: 1: CeMkpZ8HxNQGFu4bP1lsOxUY-_Q.roa (hash: jRkWDxakz+suU8WzElFrv1eo1YG7jwJCXNrbU8SO0zQ=) 2: Dh1Q-mCi6rVOEQacifIZfxW3g0w.roa (hash: gTD6usTiIP8l1Xlw+iXZdWMh/Dvh0Vy0TRM60Yq3MIU=) 3: e4JX_9x80ctBlhKc1ASTNSvIO7k.crl (hash: 4I5nONYabh9ge40M238YL6aIA9g6dWCtvvaKF6xITuM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Validity Not Before: Apr 17 21:39:03 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BFF966CC34DB9F8E2CAE596935E31A9ADD5D7087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:80:b7:5b:78:9c:3e:48:9e:3c:ca:f7:cf: 66:5b:63:f0:47:3d:88:8b:c4:77:32:5d:70:85:b9: 9e:83:35:83:60:17:cb:96:8e:d5:ec:bb:dc:67:50: 42:9d:86:bf:b5:e1:10:0d:fe:1d:0e:12:ed:77:3d: d3:34:01:68:d0:fc:2a:0e:73:b6:d6:a1:80:72:2d: 89:a7:46:58:93:21:a8:dc:8d:8e:23:db:e2:cb:6c: 29:fe:f2:e5:22:a2:f6:f3:24:41:71:0b:51:34:28: 7f:08:8f:7b:02:7a:21:01:0d:ad:fa:01:3a:1d:5c: 74:1a:4f:9a:7b:63:07:20:a9:32:d7:4f:28:f5:fd: 10:80:80:62:d0:3a:85:66:2a:32:0d:22:f2:a2:64: 12:3b:10:52:d8:32:f8:18:8d:54:9f:1c:db:b3:39: 0d:0d:ae:7c:1f:06:06:4a:9c:d4:de:c5:12:74:0d: ed:01:2a:0f:49:a1:8d:10:5e:77:4f:8c:42:c8:83: db:5b:bb:86:09:ec:9a:72:6e:e0:49:c6:cd:30:1a: 9c:42:f0:3a:a3:d1:d1:cb:c9:53:3b:a4:39:3d:ba: 22:eb:b2:7f:ea:54:6b:08:51:d3:11:a3:3f:1e:1c: 28:f5:24:84:60:0a:55:7e:db:67:d3:01:6e:c1:37: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:66:CC:34:DB:9F:8E:2C:AE:59:69:35:E3:1A:9A:DD:5D:70:87 X509v3 Authority Key Identifier: keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:21:16:5b:35:f7:72:36:83:c5:6c:50:b8:f6:df:01:aa: 3d:42:dd:c3:17:2e:b5:c0:c5:6f:76:4f:ae:4d:c7:bb:f7:96: c7:ea:86:90:93:56:a2:df:6c:ae:cf:ad:7c:74:ab:9e:9c:5f: 2b:0f:54:04:83:1c:10:26:af:16:73:0f:83:f8:ca:18:77:45: 79:9f:c0:96:95:c1:b1:7f:19:a7:41:41:8c:fe:1e:d0:af:92: dc:e8:7e:43:8c:a7:96:f4:63:be:1b:16:68:5e:1a:04:4f:1b: af:7e:b4:d6:e4:36:dd:1f:71:dd:62:13:c9:98:02:aa:64:6a: 22:8f:d6:64:7c:9b:e8:6c:06:d1:fb:0a:31:2b:92:ae:a2:6f: a3:e9:d1:ca:cd:97:62:ed:51:35:17:84:6f:7f:dd:4f:43:bb: 17:47:ef:7d:14:10:96:81:da:d8:0a:d1:56:70:4d:28:d4:5c: a0:ef:54:ef:bf:98:e2:66:73:3a:7c:ae:10:39:b5:cc:e3:1a: 55:81:2b:4e:98:13:61:cb:b4:c6:39:e4:22:43:31:b1:76:eb: 3c:3f:70:6e:f8:62:44:f8:9d:ca:02:44:cb:1f:f4:63:42:df: 60:07:86:b1:a9:9a:09:cf:34:54:43:5e:f0:5e:02:29:e9:f7: aa:fc:f5:00 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I4 MjU3RkZEQzdDRDFDQjQxOTYxMjlDRDQwNDkzMzUyQkM4M0JCOTAeFw0yNTA0MTcy MTM5MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGRjk2NkNDMzREQjlG OEUyQ0FFNTk2OTM1RTMxQTlBREQ1RDcwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyF4C3W3icPkiePMr3z2ZbY/BHPYiLxHcyXXCFuZ6DNYNgF8uW jtXsu9xnUEKdhr+14RAN/h0OEu13PdM0AWjQ/CoOc7bWoYByLYmnRliTIajcjY4j 2+LLbCn+8uUiovbzJEFxC1E0KH8Ij3sCeiEBDa36ATodXHQaT5p7YwcgqTLXTyj1 /RCAgGLQOoVmKjINIvKiZBI7EFLYMvgYjVSfHNuzOQ0NrnwfBgZKnNTexRJ0De0B Kg9JoY0QXndPjELIg9tbu4YJ7JpybuBJxs0wGpxC8Dqj0dHLyVM7pDk9uiLrsn/q VGsIUdMRoz8eHCj1JIRgClV+22fTAW7BNx+PAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUv/lmzDTbn44srllpNeMamt1dcIcwHwYDVR0jBBgwFoAUe4JX/9x80ctBlhKc 1ASTNSvIO7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFSQU1J VEEvZTRKWF85eDgwY3RCbGhLYzFBU1ROU3ZJTzdrLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lNEpYXzl4ODBjdEJsaEtjMUFTVE5TdklPN2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQVJBTUlUQS9lNEpYXzl4ODBjdEJs aEtjMUFTVE5TdklPN2subWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK0ohFls193I2g8VsULj23wGqPULdwxcutcDFb3ZPrk3Hu/eWx+qGkJNWot9s rs+tfHSrnpxfKw9UBIMcECavFnMPg/jKGHdFeZ/AlpXBsX8Zp0FBjP4e0K+S3Oh+ Q4ynlvRjvhsWaF4aBE8br3601uQ23R9x3WITyZgCqmRqIo/WZHyb6GwG0fsKMSuS rqJvo+nRys2XYu1RNReEb3/dT0O7F0fvfRQQloHa2ArRVnBNKNRcoO9U77+Y4mZz OnyuEDm1zOMaVYErTpgTYcu0xjnkIkMxsXbrPD9wbvhiRPidygJEyx/0Y0LfYAeG samaCc80VENe8F4CKen3qvz1AA== -----END CERTIFICATE-----Generated at Fri Apr 18 22:36:52 2025 by rpki-client