$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft File: ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft (raw, json) Hash identifier: hmMKUik4xWZmBbYvSnAdVfNPm0IdbOeR/m2usX7m6Q0= Subject key identifier: C4:93:19:11:3B:6E:1A:87:D5:87:DA:0E:05:0F:FB:ED:E7:F0:E1:0B Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Certificate serial: 09BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft Manifest number: 09A2 Signing time: Sat 19 Jul 2025 07:35:26 +0000 Manifest this update: Sat 19 Jul 2025 07:35:26 +0000 Manifest next update: Mon 21 Jul 2025 07:35:26 +0000 Files and hashes: 1: 50R5RMsMZFUvkqNthpiaBxuJkcc.roa (hash: Zpw5zWTlhuhrqpfyR8Vojt0B0WeVZmuM3TImlNDHd4I=) 2: Mr2C4yEpOwDPOmb5A8zSCNYoTng.roa (hash: N8bNc4zYOp2HDREzTj4yRlfzJ1dJrLHpg2tTyOdfzss=) 3: d6--kc_-LPc7njgWpOllWG1RVNI.roa (hash: pI7ZTp5Oouh19/M1FkjdCyoxYWUD2tDFtNeV/TnCfjI=) 4: e9i0JWFnQsx6KJXwFTaWN9yJMY4.roa (hash: q9O5wyceLR2RtxXgJNqnmFlEYYRBbqI5GAHrL23cm9s=) 5: vWJk29iB88xS9BUi1LyTLWPdIQs.roa (hash: VE7jz9xYZQZ2FqTkgYDwsHaZa3BFAE8IUdBwf8s9QzQ=) 6: wFVWoEsSmUWoc73tUJHsfwP7T70.roa (hash: p/awpAqsschNOvHVnXMYlD3GiReNRdlYEOadOAl0IB4=) 7: ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl (hash: Mg5Pn83L30Ihf5OjUxWTQ7z899lYzRehnWpBFBfN1A4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Jul 2025 20:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2495 (0x9bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Validity Not Before: Jul 19 07:35:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C49319113B6E1A87D587DA0E050FFBEDE7F0E10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:26:23:7e:72:ac:59:ab:82:b7:b4:48:3c: db:45:de:b1:97:2b:5f:e8:58:b2:e2:90:6a:30:a3: ef:8a:13:46:5d:5e:4d:56:b3:ce:28:a1:1f:c5:1f: d6:5d:d7:4f:1d:db:f0:e5:f5:f3:f6:a9:3f:bb:30: a7:e0:32:0b:19:59:60:c8:c2:57:53:fc:04:4d:72: 0d:3f:22:a1:25:7d:e4:51:f9:f2:b2:36:93:c1:44: 5d:80:97:5d:48:e3:6f:4a:28:b5:d3:26:74:a0:2e: 92:92:15:9d:a6:90:41:21:1c:e3:b6:ce:15:8a:40: 40:a8:70:64:f0:d7:d5:f7:80:93:d3:73:05:af:2a: 84:22:d6:7c:60:65:1a:e5:2a:9c:95:ac:bc:55:9b: dc:5f:c6:9a:f2:bc:bf:04:d3:f3:35:38:3e:9f:ba: 02:bc:7c:dd:83:63:9a:c5:c0:28:26:b5:9e:76:56: 07:bf:8f:8e:fd:c5:8b:99:2a:99:d9:dc:ef:68:45: 35:e8:4a:87:1c:11:5d:27:27:f3:f5:9b:1c:e0:91: a8:80:42:51:17:c9:d6:85:d3:e1:13:d5:fe:8f:9b: d7:2b:ce:31:ff:02:b4:0b:be:8d:dc:39:5c:f8:c7: 3d:62:b2:4b:41:fc:76:62:a0:cf:03:18:90:29:54: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:93:19:11:3B:6E:1A:87:D5:87:DA:0E:05:0F:FB:ED:E7:F0:E1:0B X509v3 Authority Key Identifier: keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:db:71:9d:04:bc:c6:3d:fe:70:d7:71:13:1f:b8:62:6e:54: 34:9a:91:97:6b:0e:d5:e0:61:df:d1:7b:11:a3:bb:c0:5f:1b: e6:e9:8c:70:8a:a4:88:db:0a:23:c6:23:57:b4:c9:1e:26:54: ce:98:31:ad:c2:0c:b5:bd:a4:27:94:d9:fe:09:a7:d3:94:cf: d6:f2:67:3a:58:2f:ce:8a:94:be:92:e6:7b:97:6b:28:21:4f: 08:e7:6d:4a:d9:2a:f4:cf:17:82:e3:e2:2f:4a:c3:04:37:45: f3:e2:35:17:42:6e:8e:01:91:9c:b0:8f:3d:0c:ad:ea:bc:34: 46:b8:6d:df:2d:87:71:b2:16:4e:5f:8c:ac:9d:1c:1b:30:37: 15:6e:24:11:2d:74:8b:71:70:28:f0:9f:ca:31:49:8d:b5:b1: 90:65:23:5e:6f:41:4a:0c:65:96:11:dc:b5:28:53:c0:a4:76: 4e:17:50:b5:86:4a:17:fd:21:b8:d9:f9:c9:5f:2a:90:a7:d8: 74:0d:a8:95:f1:57:67:cb:c5:43:0d:62:10:aa:c7:d5:21:b8: 21:a6:5f:7a:37:b5:7c:51:20:f6:95:64:32:6d:69:6e:5d:31: d4:b1:e3:49:d9:3f:d7:63:7a:c4:89:5f:4e:47:55:68:85:ad: b4:36:4a:5e -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNTA3MTkw NzM1MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0OTMxOTExM0I2RTFB ODdENTg3REEwRTA1MEZGQkVERTdGMEUxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSEiYjfnKsWauCt7RIPNtF3rGXK1/oWLLikGowo++KE0ZdXk1W s84ooR/FH9Zd108d2/Dl9fP2qT+7MKfgMgsZWWDIwldT/ARNcg0/IqElfeRR+fKy NpPBRF2Al11I429KKLXTJnSgLpKSFZ2mkEEhHOO2zhWKQECocGTw19X3gJPTcwWv KoQi1nxgZRrlKpyVrLxVm9xfxpryvL8E0/M1OD6fugK8fN2DY5rFwCgmtZ52Vge/ j479xYuZKpnZ3O9oRTXoSoccEV0nJ/P1mxzgkaiAQlEXydaF0+ET1f6Pm9crzjH/ ArQLvo3cOVz4xz1isktB/HZioM8DGJApVLI9AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUxJMZETtuGofVh9oOBQ/77efw4QswHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUveXRVbkFpeU0w SFZvN0pfSUtoemczZVd5eEt3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE/bcZ0EvMY9/nDXcRMfuGJuVDSakZdrDtXgYd/RexGju8BfG+bpjHCK pIjbCiPGI1e0yR4mVM6YMa3CDLW9pCeU2f4Jp9OUz9byZzpYL86KlL6S5nuXaygh TwjnbUrZKvTPF4Lj4i9KwwQ3RfPiNRdCbo4BkZywjz0Mreq8NEa4bd8th3GyFk5f jKydHBswNxVuJBEtdItxcCjwn8oxSY21sZBlI15vQUoMZZYR3LUoU8Ckdk4XULWG Shf9IbjZ+clfKpCn2HQNqJXxV2fLxUMNYhCqx9UhuCGmX3o3tXxRIPaVZDJtaW5d MdSx40nZP9djesSJX05HVWiFrbQ2Sl4= -----END CERTIFICATE-----Generated at Sun Jul 20 19:19:34 2025 by rpki-client