$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft File: gycg6wvqAFw-3ldOMcCrdWP6DMc.mft (raw, json) Hash identifier: DBGc5gg3BA8/L34c+XrQ1Q7XFvkj6yOQKck9QLulOps= Subject key identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0C46 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft Manifest number: 0BEC Signing time: Sun 02 Jun 2024 04:24:30 +0000 Manifest this update: Sun 02 Jun 2024 04:24:30 +0000 Manifest next update: Tue 04 Jun 2024 04:24:30 +0000 Files and hashes: 1: 2okolRqRP44ExPqOHutnKW0g8oU.roa (hash: z8P9HCO4MuAySKyqlm/ZCWPKoLONo1t1RMyviXPFn4M=) 2: 47ZS-Iy8TktIMmDoMrpA-T_5TeY.roa (hash: 0De5/xASThY/3mpBCkSgsf2ev+1dzHhFH8J49GI0F10=) 3: 6OU03p9z-VnKAD9NiNQLNUx_rvw.roa (hash: 4b9BVYsZlPS8/AWOqnuTy3iPYoH6zZ5uvuEFIwwze24=) 4: 7v73ALTKkJSjE8KKiPGCniYZobg.roa (hash: DUkkN2sAYK7eIuU/Mtxsgr2ok/QHcnJl4X2p/Ltd7nw=) 5: HzXh8JBUUPyImlOeBgwdfmuLlrY.roa (hash: tQiO6hnL/BEx0SLyIfFsIQxo1PwY7uS/SKQphW9qcHQ=) 6: KtJpunK8SgWn6ya_8Q2XTHsLvYw.roa (hash: bIsxSo4BTg97hwh6el+LIKL3NH/vW5vzaNRMBtiHTqc=) 7: L7VhIx4Rmr01YOhQiNK4U1f8RY0.roa (hash: BODOM+K3DC+AgLKOzXHmQR8u8j2vUBbWn3oEKGK4jfg=) 8: WP1hJDCBhVVjsPPyZGQCtNTrbhc.roa (hash: fYQGiCXzZDVHNA8TPKehuaoqghEmPDK3jmnU9wSZThc=) 9: cEOaZaAsp8owATkrnHNjaB05xI4.roa (hash: zS27O251jHnujNDPm6AgBGkw0Gqux9HBZHklx1lMHVQ=) 10: eShWxZJVSKjqazr_VKef8mLWmCU.roa (hash: W6QH3sRHIPiOC+QP+8KExdyivbMRvAgdlMYZ5kLn8qc=) 11: fb6L__zaM5WhyLw3Tt8KkQ9vnRQ.roa (hash: WMw9KuwJjG9Vb7xOmooU9hm2+2hgVFriNPDulfde8lw=) 12: fhPx71A6VP8zfbGaTwZtIgE3b68.roa (hash: wS00DDbtf7WG/pL6PWzIrvEOiV4nh1AlHTAfsro1AGo=) 13: fn9cve2TzSP4ZkUAA_FpjSIa6nc.roa (hash: 8G720RH9K0EmxoWe8lTHHN6gYZCa1UKDDFedlrxZesc=) 14: gycg6wvqAFw-3ldOMcCrdWP6DMc.crl (hash: JTui5nNkz677ETVNsu6zXTSsDFl0q8cZI2BJMU7pQi4=) 15: i72W5xJesZewcKJ9DA9SJC-4vN8.roa (hash: eYhR7kTfzpTOOwUn2WCnCv/xpDY5+CO1eguHx60+Xo4=) 16: sjwxTPS-_05ShxAgHspLnzpHwAo.roa (hash: Iegk+y74ZEmeZID4dZYOvTWvcOWO6LCtHR9CojTvrug=) 17: zl0Wg7ctUmGue5ziKSobyyRj9VU.roa (hash: 5FYbgRJDCAUMuk3+ABeELTv+Z1dIBq44QWmS3B+jmd0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Jun 2 04:24:30 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D50E33A0753C45A73A48403E61BB5977C890FC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:3d:04:37:8d:ae:2d:d7:c8:3d:8f:38:55: 81:4a:b6:1e:0a:48:99:01:e3:57:1a:a3:4e:9d:40: 82:73:f5:9b:53:e9:9e:d1:d5:e3:34:d8:75:e5:68: 66:7c:ec:00:f7:73:57:64:af:61:23:74:2f:41:1f: 8e:84:bc:6d:2b:a3:22:a4:a3:3d:a5:e0:35:f0:84: 0b:41:32:05:09:41:2e:17:30:38:69:17:15:84:46: 08:cd:52:bb:49:a4:2a:0f:82:03:47:c0:8a:a4:63: 17:d1:da:b7:01:8d:cf:62:c3:f5:70:83:68:5c:00: 71:25:60:a9:3c:60:50:76:65:a2:1e:b0:33:38:b1: 67:06:3d:aa:3e:ce:dd:8b:cf:ed:57:92:cb:1e:f7: 25:69:ee:e2:e5:97:36:ac:74:77:4f:7b:22:3e:ba: 99:38:e9:bf:82:b6:d4:2c:da:8a:6e:27:d4:5c:f2: 1a:e4:3d:bd:5c:f0:a6:53:f1:b7:19:3f:66:25:94: ab:4b:80:d0:a6:09:31:64:2b:5c:55:09:2f:c6:3a: 15:bf:14:91:20:a5:97:dc:91:34:9d:1f:6d:df:a6: 7c:ed:e2:a9:4c:b5:dd:3b:ab:e8:6f:3f:a8:54:53: d8:04:39:cc:c8:cf:ff:04:0e:57:e8:af:d6:04:e6: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ba:d4:6c:5c:cf:88:d7:98:77:cd:6d:ce:cd:76:c7:d3:a8: b5:4a:88:a7:42:87:84:c9:c0:dd:2d:c9:b5:10:2b:86:bf:ab: 79:16:bf:84:8d:bc:17:ca:37:d7:b8:72:a6:6b:f0:f3:d6:a7: 65:05:d0:3a:46:40:70:12:64:83:1b:47:de:1a:8e:a9:09:d0: 15:10:b2:27:fe:b2:5b:50:69:ec:f4:93:ae:2b:bb:44:0c:f5: e4:10:d0:71:94:0c:63:fe:ad:ba:89:ab:f1:19:33:d8:e7:fa: c1:f4:b6:5b:2e:b7:2b:eb:c5:94:54:8e:4e:34:ee:96:3d:8a: c1:56:6d:09:8b:a1:e0:c6:9b:31:82:9e:59:b3:78:4e:3d:aa: e9:c8:42:4c:31:6e:9e:10:ae:8f:55:c6:e3:ba:2d:c2:0f:b7: bd:a6:be:1e:32:d1:87:ce:ea:44:73:f2:40:85:32:39:88:a8: ed:4e:15:b7:cd:22:fd:e4:6a:93:45:e0:21:8e:69:61:8a:11: 34:67:51:8f:a8:8f:af:de:88:12:3a:49:d6:4b:12:65:28:aa: 7d:38:cc:ec:d5:4e:5d:62:de:70:4f:e7:5e:51:d1:ed:a4:95: 7a:85:31:9a:4f:5e:9d:c6:f9:ce:93:cc:3c:e9:9d:f2:9f:b1: c7:58:ab:a1 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA2MDIw NDI0MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ1MEUzM0EwNzUzQzQ1 QTczQTQ4NDAzRTYxQkI1OTc3Qzg5MEZDNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs8j0EN42uLdfIPY84VYFKth4KSJkB41cao06dQIJz9ZtT6Z7R 1eM02HXlaGZ87AD3c1dkr2EjdC9BH46EvG0royKkoz2l4DXwhAtBMgUJQS4XMDhp FxWERgjNUrtJpCoPggNHwIqkYxfR2rcBjc9iw/Vwg2hcAHElYKk8YFB2ZaIesDM4 sWcGPao+zt2Lz+1Xksse9yVp7uLllzasdHdPeyI+upk46b+CttQs2opuJ9Rc8hrk Pb1c8KZT8bcZP2YllKtLgNCmCTFkK1xVCS/GOhW/FJEgpZfckTSdH23fpnzt4qlM td07q+hvP6hUU9gEOczIz/8EDlfor9YE5on9AgMBAAGjggIFMIICATAdBgNVHQ4E FgQU1Q4zoHU8Rac6SEA+YbtZd8iQ/FwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9neWNnNnd2cUFGdy0zbGRPTWND cmRXUDZETWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7rU bFzPiNeYd81tzs12x9OotUqIp0KHhMnA3S3JtRArhr+reRa/hI28F8o317hypmvw 89anZQXQOkZAcBJkgxtH3hqOqQnQFRCyJ/6yW1Bp7PSTriu7RAz15BDQcZQMY/6t uomr8Rkz2Of6wfS2Wy63K+vFlFSOTjTulj2KwVZtCYuh4MabMYKeWbN4Tj2q6chC TDFunhCuj1XG47otwg+3vaa+HjLRh87qRHPyQIUyOYio7U4Vt80i/eRqk0XgIY5p YYoRNGdRj6iPr96IEjpJ1ksSZSiqfTjM7NVOXWLecE/nXlHR7aSVeoUxmk9encb5 zpPMPOmd8p+xx1iroQ== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:43 2024 by rpki-client on console-fra.rpki-client.org