$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft File: 36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json) Hash identifier: 3Twhrhu3XNHWnDzrJurUv89RV2cQEyG2ClQUzuCjHoU= Subject key identifier: E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 126A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft Manifest number: 1009 Signing time: Fri 17 May 2024 11:50:48 +0000 Manifest this update: Fri 17 May 2024 11:50:48 +0000 Manifest next update: Sun 19 May 2024 11:50:48 +0000 Files and hashes: 1: -_3z9YneTh9_VPXotPLwiW8Tnio.roa (hash: wt63Jl83G2N3TQXeLK9GPFOpcPPTqr87zoZl1TT7Vs4=) 2: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: XPOnbs7Rim6ezEXwzhIlciWQ9x7hw1ktoLngnN9msyk=) 3: Aqo46VYZ2ya5g5iuDzZeP5cY_cU.roa (hash: OSOOs3+NLBUVRPFlg0k1PVaAcdHh09k/LlURgKB36hU=) 4: IfydskpK4D-mYauvBpRNEEsgVqQ.roa (hash: fogPRD0bhXJ6Un6XHYo7V9gqJss54c6rZEvL+lC1D58=) 5: KMHgg4R6govtme_q7NYfC-RytJI.roa (hash: kEYZMo5m88U2uMhfPoxFh1yWIv1g84jTshANowTEPFI=) 6: RYbibPGce7MqcrdeYg2srOSusQM.roa (hash: ///Lw+0iSBuRw1gG1JLxvEenEZlVg2oU9BRzkNYgHks=) 7: SEHK8gyIw14id1261JYPcPzqSko.roa (hash: m8XuEHZu4bYbuKaBFnrymsalKZL1OpJdv974yEazidU=) 8: UGwiUtsxMD98w7VaxyefXJw-uxw.roa (hash: 0PYqmnIdHOJ5yJYLkZ7PWOaB5gSvS5+bZudC28tKlLs=) 9: Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa (hash: G6LAvVVeemPfca9YNhEWfwcNZ0YMCCvdm+3msIWgQgk=) 10: XDA7aWo6QcCCw_Lg_qAE8rUDk18.roa (hash: QO3oJjY0poRjF5+b4oURsbEJNVscKwyOGeRAPqb3oFo=) 11: Y05D41Y7OLRALfjti54rQ6k1Pm8.roa (hash: F+oVL81Y8HrLrM6vtlnoNVrCjv2I1Tc3j+Lk22pm1ys=) 12: Ye1JRRrrcMGd0uYAhE-A9et-zAs.roa (hash: t7Y22yrovi7pEgF+pA4wnsdF5XhlcUjZ3DReGBF7/Gg=) 13: _yQIV9_-eRWeYvfag4gv2rH7rZQ.roa (hash: BeiB9pX6qQ0X5FdYg0kZbVdpjMpa0S9RfMrXDzgQ/5M=) 14: aQJuLVVz_A7ZzhH_EPn2oW2Ze5c.roa (hash: oJHkgosxQIPJvdpeT+y33M6yfRPBlaTj6AiRUee1PGY=) 15: dTE6wk1Hcdtace_pA_3Z_aI8d-Y.roa (hash: ySrvrw7h5TsfVUZ3ZiC3UilQFTKqJllBncHSKrx8y3g=) 16: f2AeDS6u6mxZ1R2vgmIw2SW29A8.roa (hash: nrz0cVZPTzHIIpe6f8XU0J7WEVu7KPftw92//y09e6o=) 17: fr7IJw5kzNk7Ge8Y3dk9N9o0e3k.roa (hash: 1Di2k9Gbr5SE5vjw6i7lsGhpm4jbIxh++CgQXruz92g=) 18: jd9G8ScyY_YgOaDZGs4jMC3_Oco.roa (hash: 6/IUnm1z2RXBBDoxUH/u87d0A7qwfIMiGYz6tFhwGB8=) 19: rax1yDHN29XVjocMqxj_MH9zoU0.roa (hash: kKMg+MTP+2eAVTZ7xJi3gTpjSxqmBXw/IA+BWtl5sqw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 11:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4714 (0x126a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: May 17 11:50:48 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9: 37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af: 53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e: 06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2: 28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46: 43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a: 65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7: bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1: 79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f: b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8: c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d: 7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69: eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b: 60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03: 56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0: 91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae: 21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e7:06:c8:c8:03:fd:25:49:52:e1:e7:64:d7:ae:3e:67:aa: 3a:95:fc:0e:c7:14:4f:78:d0:3f:7a:6d:53:eb:ec:9e:5d:20: d4:42:aa:9d:46:7a:8c:72:ec:0c:c6:f7:d2:a8:4d:0c:31:e7: 9c:19:4a:d4:f9:50:01:86:13:46:71:e3:43:a9:b3:81:3f:bc: ac:99:a5:39:e0:eb:b2:e0:7d:d4:8b:40:1a:e3:76:31:e7:da: 19:a1:bc:2f:12:5c:06:0e:04:c9:8a:d5:d4:99:01:af:b9:e7: 52:17:15:eb:68:dd:c6:00:03:af:69:2d:55:e7:9b:f9:0d:b1: 06:89:05:4b:06:c7:ca:4b:ef:c3:4e:f8:32:48:ca:f7:d4:a8: 5a:89:4d:8e:3f:45:2a:24:9b:bc:f3:69:1a:a7:b1:b2:4b:6e: 80:6a:1b:64:64:73:6d:69:0e:6f:2e:ff:c9:98:d9:1f:68:25: 68:c7:4d:8a:18:59:f3:fb:1c:4d:1a:e3:89:ff:3b:aa:53:18: 4d:3d:e0:22:18:90:bc:16:30:ab:2c:bf:da:8a:ae:6f:59:fc: c3:36:a5:c2:ca:1d:43:ce:01:8d:53:14:be:ce:34:fd:3b:b2: 83:f9:63:6c:63:09:35:f1:e1:b2:12:f6:17:6f:85:4f:d0:e0: 12:dc:9a:f6 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICEmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNDA1MTcx MTUwNDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUzRDhBMEZCQ0ZGQjMw MzlFOUE4MUFGNjA2QTY3MDczRTExNTg1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4bUyWnZBWHhc6fa3RyTdM6Ll0Ob5d4pxGCgamr1NXuMkYYGeb oVYryyRNDgb9pV73TqvELXfRVYwywihQlSWjUceo7PJmaRsvRkOzZC5vM3bPRSMs VRvbSmWR+PDRHBagVXMlugf+97t9vmeQPdW/TpXGs2SN0XkzOrQFBF/s37rFEgob P7W/7fqA1xdyLyXhAs846MRT8rcgCXosQ9/gsflAfXrQta2Hco0/Gx0WmiKHaevm KKCKEn/PacCD71wQi2BSi5qnL4xq8hHvn2YVA1bB5zBuzEFC9hs/spVnsJFpu8P2 qy9jr7JfIw83riF0oHaqt70TnZVitpDX5c2RAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU49ig+8/7MDnpqBr2BqZwc+EVhV8wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy8zNmpFVklGY01CZEZicU8wcDlB Q0U3dUZ5V1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+cG yMgD/SVJUuHnZNeuPmeqOpX8DscUT3jQP3ptU+vsnl0g1EKqnUZ6jHLsDMb30qhN DDHnnBlK1PlQAYYTRnHjQ6mzgT+8rJmlOeDrsuB91ItAGuN2MefaGaG8LxJcBg4E yYrV1JkBr7nnUhcV62jdxgADr2ktVeeb+Q2xBokFSwbHykvvw074MkjK99SoWolN jj9FKiSbvPNpGqexsktugGobZGRzbWkOby7/yZjZH2glaMdNihhZ8/scTRrjif87 qlMYTT3gIhiQvBYwqyy/2oqub1n8wzalwsodQ84BjVMUvs40/Tuyg/ljbGMJNfHh shL2F2+FT9DgEtya9g== -----END CERTIFICATE-----Generated at Sat May 18 20:36:30 2024 by rpki-client on console-ams.rpki-client.org