$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json) Hash identifier: qR+jYsh+b58Y+X7IuIUx5tnDItz3V6+NaJxJcUiQh7k= Subject key identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Certificate serial: 0130 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft Manifest number: 012F Signing time: Mon 21 Jul 2025 14:05:44 +0000 Manifest this update: Mon 21 Jul 2025 14:05:44 +0000 Manifest next update: Mon 21 Jul 2025 20:05:44 +0000 Files and hashes: 1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: Oi3GOMur25KNBHlYz0R96MLtCtbE1lVYhwKz0AFzOIY=) 2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 20:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Validity Not Before: Jul 21 14:05:44 2025 GMT Not After : May 23 15:30:20 2026 GMT Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69: 98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81: 2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d: d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7: 8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63: 3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58: ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43: 86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71: 32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69: 71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10: 3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82: e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c: 8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b: 6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa: 6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef: bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7: 04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B X509v3 Authority Key Identifier: keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:fa:99:ad:1c:ea:31:81:ac:fa:ee:19:44:15:1b:6c:fb: 90:af:bd:37:41:c3:41:43:47:58:2f:a6:f4:80:76:5d:5b:19: b7:99:21:95:ca:e5:d8:fb:a0:1a:71:80:21:b9:17:45:c0:87: 55:13:fd:fb:0c:dd:70:e8:09:b3:70:f6:5d:34:c6:f7:b1:1e: a5:03:c1:f8:1f:05:3f:ba:09:8b:a5:b9:12:2f:cc:a0:ea:a6: f2:45:10:d4:6f:6e:4a:de:e1:9b:7f:fb:92:59:3f:1b:62:08: 85:fc:55:eb:fc:88:8c:a2:a4:99:2f:8d:17:22:c9:92:19:ff: a0:29:b8:20:15:da:a8:1a:44:73:c5:08:4d:1d:64:3b:39:6b: 4c:85:8e:9b:62:7c:89:b2:84:e8:fa:43:23:0f:6c:f0:ad:4b: c0:ed:15:59:08:c4:4a:11:0f:5a:19:04:68:27:6f:ee:cf:d1: a5:8b:46:39:27:9b:7e:3e:b3:02:4b:01:96:c4:8c:00:37:20: 19:cc:86:73:14:bf:42:42:eb:f5:b2:39:38:b1:31:0f:34:44: a9:5d:0c:34:ac:c3:7a:7c:3f:3d:ca:7f:bc:b0:f3:cd:94:ba: d2:c8:ef:86:d6:b2:df:8c:8f:9b:0d:be:87:4b:05:6f:9f:e5: 81:95:b6:7a -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICATAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNTA3MjEx NDA1NDRaFw0yNjA1MjMxNTMwMjBaMDMxMTAvBgNVBAMTKDhFOEQzMzk5RjE3RUND NEZCMEVGRDM5MjlGNjQ4MjJGNUVERkVFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFiG23+XRP3zdTPfOfaZjHCpOnOr8ee7OINs6ogSufav9ju2yZ xNnMerx7jdkNbMOYicA78aRbT/NY946x11U5Z2SiB9vgs+ToYzsXizsz4u6W/fbW 6WGGWMqCuRh8IfjwEvf7VZu+Q4ZLEHNBKyFqUYBUTmt9cTIj3LY/NLldBlrcd/gw aXHZqR4qresWb6I4CqUlED8kJw8Jc4aLMdzUFtYtguakhH9U/pAM1OBVe1FNDI8W 5rwCrTHTRaygL1DLm25aatKl9wbB8U0U7kHIqmxd32E+n6AdkifhkMlO77tVgbmI NYwnuomzFISi9wR1L7BccJxAQWc4XbdP7rj5AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUjo0zmfF+zE+w79OSn2SCL17f7jswHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLy1jWXR3V295V1VGV1pCUXNr bmpGM2NUWUtaMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz wfqZrRzqMYGs+u4ZRBUbbPuQr703QcNBQ0dYL6b0gHZdWxm3mSGVyuXY+6AacYAh uRdFwIdVE/37DN1w6AmzcPZdNMb3sR6lA8H4HwU/ugmLpbkSL8yg6qbyRRDUb25K 3uGbf/uSWT8bYgiF/FXr/IiMoqSZL40XIsmSGf+gKbggFdqoGkRzxQhNHWQ7OWtM hY6bYnyJsoTo+kMjD2zwrUvA7RVZCMRKEQ9aGQRoJ2/uz9Gli0Y5J5t+PrMCSwGW xIwANyAZzIZzFL9CQuv1sjk4sTEPNESpXQw0rMN6fD89yn+8sPPNlLrSyO+G1rLf jI+bDb6HSwVvn+WBlbZ6 -----END CERTIFICATE-----Generated at Mon Jul 21 18:52:27 2025 by rpki-client