$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft File: P04GOIatNR_4IoBa-NVplEuN5Rc.mft (raw, json) Hash identifier: W78+XzEXb1gOjSZoUbVdGPi+Pkrf8fVcjhJPsP8TlgA= Subject key identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 0277 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft Manifest number: 0270 Signing time: Tue 22 Jul 2025 22:08:08 +0000 Manifest this update: Tue 22 Jul 2025 22:08:08 +0000 Manifest next update: Thu 24 Jul 2025 22:08:08 +0000 Files and hashes: 1: P04GOIatNR_4IoBa-NVplEuN5Rc.crl (hash: DM7CZHE6oRq6ic+0Fu9iL3hjKtR7jEwhGeFXBXZ9MYw=) 2: SxzQu2JcLCF_wo2o8Km5MoiyslU.roa (hash: vztj9hgO/acG0cD2AVDITUYys2TyVA9IF2IDeMQaDNs=) 3: X66ROOvcU3Tt17lyAN_Xbuwpfk4.roa (hash: fUTJRlvKCNq/1cka42QFBc8Vvj3ayCJQBcWw412diEk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: Jul 22 22:08:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DDE10A410D30FDFE36576E1F8CA356BD6923E1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:93:d0:10:8a:73:44:e5:2d:d9:04:d8:ee: f5:2c:b7:28:7d:1a:3b:13:d4:11:6c:d0:32:40:48: c7:14:56:f8:4e:c6:27:9c:6f:70:33:1c:52:69:df: 65:b6:7c:f8:9c:22:c4:ca:56:16:d5:c3:76:89:ec: b7:04:39:0e:93:44:51:00:b9:8b:81:bf:be:6d:2b: 81:03:dc:99:35:99:85:c7:62:06:01:d2:3f:81:76: 0c:c3:fb:f0:c2:9f:f6:a2:0d:13:b3:a6:d9:8a:56: cb:45:6e:c1:8f:95:64:1d:ac:bb:be:dd:55:40:04: 95:7d:74:b3:76:cc:73:18:dc:06:e7:8e:dd:f1:bc: 25:fc:eb:73:85:bf:0b:80:7a:49:24:d3:a1:d8:37: ad:56:77:d0:bf:5f:1c:cb:f1:3b:b9:36:31:b6:d5: b8:0e:c1:79:ac:4b:49:53:5f:76:33:65:33:e1:9c: f5:89:0d:76:2b:24:f4:72:15:93:3c:6b:f5:56:2c: 34:05:93:d5:d4:e8:bc:57:b6:51:fe:3a:02:87:c0: 07:7b:ce:9b:17:36:30:46:57:95:22:13:ff:90:2b: 75:1e:f1:d9:3c:60:4c:f2:12:00:34:71:5e:17:cd: a6:e9:74:6f:85:84:c1:6d:35:2e:05:73:de:82:2e: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:18:e1:03:14:34:f3:6f:b3:87:c2:92:e8:ac:df:3b:be:23: 97:e0:50:c2:33:5c:dc:f8:aa:99:d7:21:49:b2:4c:1b:e7:f8: 0f:a5:03:01:2d:04:36:5e:2b:d3:ce:f2:2c:84:db:31:08:b3: 55:20:9d:04:45:0a:68:f8:f2:ed:b7:89:2d:c2:7b:c0:53:69: a5:22:90:9e:13:f9:52:8e:61:e7:0f:6a:23:78:5a:63:5e:43: 0c:b2:f2:50:d6:a4:52:3d:43:b1:2d:fa:dd:3b:2c:b4:af:06: 49:ef:5f:46:af:7a:ce:14:4b:3f:a0:78:7d:40:c2:9c:f0:12: fd:3c:b6:36:f6:a8:90:1e:93:e5:9b:82:70:e6:31:ad:0d:f5: 63:e4:ed:75:ca:b9:b0:25:09:4d:f0:92:4f:ff:85:2b:1e:7b: a6:63:4c:41:de:d8:a2:bb:bf:a9:4f:07:c3:2b:b6:95:0e:9c: 8e:6c:8b:3d:1a:fc:30:25:77:b8:25:de:2c:e4:f6:9d:b6:ff: 5d:e0:15:2f:c3:4d:b0:67:60:57:2f:f1:e7:2d:f0:ca:f2:71: 20:36:72:2e:d7:2d:0d:c5:a8:64:49:c5:8f:34:5d:c2:a9:70: 26:bd:b1:21:16:a1:21:a1:57:02:a1:e8:d8:d5:05:22:89:e9: 39:1c:c2:8c -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNTA3MjIy MjA4MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERERTEwQTQxMEQzMEZE RkUzNjU3NkUxRjhDQTM1NkJENjkyM0UxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2fpPQEIpzROUt2QTY7vUstyh9GjsT1BFs0DJASMcUVvhOxiec b3AzHFJp32W2fPicIsTKVhbVw3aJ7LcEOQ6TRFEAuYuBv75tK4ED3Jk1mYXHYgYB 0j+BdgzD+/DCn/aiDROzptmKVstFbsGPlWQdrLu+3VVABJV9dLN2zHMY3Abnjt3x vCX863OFvwuAekkk06HYN61Wd9C/XxzL8Tu5NjG21bgOwXmsS0lTX3YzZTPhnPWJ DXYrJPRyFZM8a/VWLDQFk9XU6LxXtlH+OgKHwAd7zpsXNjBGV5UiE/+QK3Ue8dk8 YEzyEgA0cV4XzabpdG+FhMFtNS4Fc96CLguRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU3eEKQQ0w/f42V24fjKNWvWkj4fMwHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvUDA0R09JYXROUl80SW9C YS1OVnBsRXVONVJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AEoY4QMUNPNvs4fCkuis3zu+I5fgUMIzXNz4qpnXIUmyTBvn+A+lAwEtBDZeK9PO 8iyE2zEIs1UgnQRFCmj48u23iS3Ce8BTaaUikJ4T+VKOYecPaiN4WmNeQwyy8lDW pFI9Q7Et+t07LLSvBknvX0aves4USz+geH1AwpzwEv08tjb2qJAek+WbgnDmMa0N 9WPk7XXKubAlCU3wkk//hSsee6ZjTEHe2KK7v6lPB8MrtpUOnI5siz0a/DAld7gl 3izk9p22/13gFS/DTbBnYFcv8ect8MrycSA2ci7XLQ3FqGRJxY80XcKpcCa9sSEW oSGhVwKh6NjVBSKJ6Tkcwow= -----END CERTIFICATE-----Generated at Wed Jul 23 11:30:05 2025 by rpki-client