$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft File: 203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft (raw, json) Hash identifier: O7O7no1YN8b2IZs03/OPuz7QahMK6tWLF+SjfW4yodI= Subject key identifier: 43:4C:D0:13:FC:B6:EB:22:FF:0E:37:71:BC:BB:1C:82:60:35:6C:0E Authority key identifier: 20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52 Certificate issuer: /CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252 Certificate serial: 3CDF2C9555B4BEC999D1E1E7DDCBAC0D8757443D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft Manifest number: 09 Signing time: Sat 16 May 2026 01:27:53 +0000 Manifest this update: Sat 16 May 2026 01:22:53 +0000 Manifest next update: Sun 17 May 2026 02:52:53 +0000 Files and hashes: 1: 3135372e31352e33322e302f32332d3234203d3e203138303431.roa (hash: NbJQ5exevbZjAb1JTjXmsBF9cRuA1KI0zVWB1TfI//E=) 2: 203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl (hash: wWyYzViwWrkSwOvPUjEIofL4ADNUX2NZ6dwKB1jY9iA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 21:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:df:2c:95:55:b4:be:c9:99:d1:e1:e7:dd:cb:ac:0d:87:57:44:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203A90FB4F5E8AC12A1C8F72215AD26095C49252 Validity Not Before: May 16 01:22:53 2026 GMT Not After : May 17 02:52:53 2026 GMT Subject: CN=434CD013FCB6EB22FF0E3771BCBB1C8260356C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:42:32:3f:2f:a0:b0:12:89:76:33:3e:9c: 5e:6e:6f:1f:ac:4f:ea:c4:07:80:cc:0a:e8:48:f1: e7:3a:d3:96:06:5f:95:64:0b:e8:12:de:1d:1a:e1: b9:0d:9b:93:04:67:fd:0f:e1:b0:1d:e4:98:4b:43: 0d:ff:0f:27:48:11:a3:cd:0e:3b:a5:a3:7c:4f:8a: cb:60:01:28:c4:9d:85:a9:0b:34:8a:05:8f:bd:7e: 7a:e5:8a:3e:6f:41:15:14:f3:f3:68:2d:94:6b:f0: c8:25:b8:1b:33:a3:7c:a5:08:96:82:70:f1:e6:8c: ae:7f:66:1c:38:23:93:fd:21:32:25:57:83:86:51: cc:e9:05:53:2e:77:b7:94:20:47:96:4b:8e:ad:23: 30:17:59:74:3d:f8:fb:ae:71:02:e1:25:6b:4b:67: 32:55:be:a8:f5:7f:e9:5b:e2:69:eb:4a:17:08:45: 3e:1c:56:39:42:df:44:06:13:f5:df:2a:06:f8:0c: 53:42:d1:fc:28:e9:aa:56:5d:7d:82:f4:5d:11:09: ec:c1:d4:39:3d:95:a6:57:8a:0e:54:99:55:a9:2e: 48:28:b8:6a:3f:dd:78:66:05:a0:a3:aa:87:f8:e2: 3f:bb:44:f9:9a:18:69:f1:3b:1e:98:84:f3:be:40: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4C:D0:13:FC:B6:EB:22:FF:0E:37:71:BC:BB:1C:82:60:35:6C:0E X509v3 Authority Key Identifier: keyid:20:3A:90:FB:4F:5E:8A:C1:2A:1C:8F:72:21:5A:D2:60:95:C4:92:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/203A90FB4F5E8AC12A1C8F72215AD26095C49252.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/1/203A90FB4F5E8AC12A1C8F72215AD26095C49252.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:b1:4c:61:b5:94:e5:cc:98:91:16:e7:55:da:c6:0c:5d: 82:6e:29:34:67:2b:0e:40:17:df:1d:fa:8e:bd:2a:2f:94:fd: b0:68:cf:fd:fd:3f:1b:c0:c9:31:71:0a:51:c3:20:41:74:3f: 02:d1:89:67:e2:62:b6:86:56:00:70:da:f7:9b:0c:fb:b2:70: c9:23:c8:9f:91:20:b2:9e:9d:1d:03:48:67:10:dd:3f:71:09: 13:4a:c9:c2:cb:e9:c4:ef:ae:a3:8c:a4:28:5f:29:2b:47:20: 9f:8b:46:ba:f2:e0:7e:c8:b5:d0:ee:a0:dd:6e:2f:79:19:65: f0:34:4c:e6:8d:76:13:7b:36:81:63:73:a9:05:8e:4f:ae:2e: 64:8a:db:56:b9:a5:12:de:04:cb:c1:47:99:d8:0d:13:bb:c3: b7:f1:52:9b:a8:96:5a:87:f7:77:a6:b8:3f:1f:06:ad:d0:d4: 3e:0e:fe:de:79:f7:d9:75:4a:fd:4d:b0:a0:c8:80:49:5f:b8: ac:6c:50:7f:89:24:81:b5:c9:07:14:3e:38:c8:14:ca:00:2c: 42:4a:a4:16:61:45:89:f0:fa:23:fa:85:07:e2:68:cc:a6:46: a8:9c:41:cb:36:80:09:86:91:dc:32:de:92:5e:4c:4f:38:c9: 37:2e:e8:28 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUPN8slVW0vsmZ0eHn3cusDYdXRD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzQTkwRkI0RjVFOEFDMTJBMUM4RjcyMjE1QUQyNjA5 NUM0OTI1MjAeFw0yNjA1MTYwMTIyNTNaFw0yNjA1MTcwMjUyNTNaMDMxMTAvBgNV BAMTKDQzNENEMDEzRkNCNkVCMjJGRjBFMzc3MUJDQkIxQzgyNjAzNTZDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCU0IyPy+gsBKJdjM+nF5ubx+s T+rEB4DMCuhI8ec605YGX5VkC+gS3h0a4bkNm5MEZ/0P4bAd5JhLQw3/DydIEaPN Djulo3xPistgASjEnYWpCzSKBY+9fnrlij5vQRUU8/NoLZRr8MgluBszo3ylCJaC cPHmjK5/Zhw4I5P9ITIlV4OGUczpBVMud7eUIEeWS46tIzAXWXQ9+PuucQLhJWtL ZzJVvqj1f+lb4mnrShcIRT4cVjlC30QGE/XfKgb4DFNC0fwo6apWXX2C9F0RCezB 1Dk9laZXig5UmVWpLkgouGo/3XhmBaCjqof44j+7RPmaGGnxOx6YhPO+QCI3AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUQ0zQE/y26yL/DjdxvLscgmA1bA4wHwYDVR0j BBgwFoAUIDqQ+09eisEqHI9yIVrSYJXEklIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVJDSEUv MS8yMDNBOTBGQjRGNUU4QUMxMkExQzhGNzIyMTVBRDI2MDk1QzQ5MjUyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzIwM0E5MEZCNEY1RThBQzEyQTFDOEY3MjIxNUFE MjYwOTVDNDkyNTIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUkNIRS8xLzIwM0E5MEZCNEY1RThB QzEyQTFDOEY3MjIxNUFEMjYwOTVDNDkyNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCt/rFMYbWU5cyY kRbnVdrGDF2Cbik0ZysOQBffHfqOvSovlP2waM/9/T8bwMkxcQpRwyBBdD8C0Yln 4mK2hlYAcNr3mwz7snDJI8ifkSCynp0dA0hnEN0/cQkTSsnCy+nE766jjKQoXykr RyCfi0a68uB+yLXQ7qDdbi95GWXwNEzmjXYTezaBY3OpBY5Pri5kittWuaUS3gTL wUeZ2A0Tu8O38VKbqJZah/d3prg/Hwat0NQ+Dv7eeffZdUr9TbCgyIBJX7isbFB/ iSSBtckHFD44yBTKACxCSqQWYUWJ8Poj+oUH4mjMpkaonEHLNoAJhpHcMt6SXkxP OMk3Lugo -----END CERTIFICATE-----Generated at Sat May 16 04:53:18 2026 by rpki-client