$ rpki-client -vvf rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft File: 7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft (raw, json) Hash identifier: 77FYb8EviULG2EGQuIFeDc/VyAdkCpPe8Galp44P3Kw= Subject key identifier: C1:24:01:49:56:13:C9:06:DC:B4:BE:CD:E1:1D:E0:D5:BE:09:62:71 Authority key identifier: 76:67:D2:C6:58:7B:AA:9D:DE:CB:A8:7F:63:00:31:64:1D:B1:CA:0C Certificate issuer: /CN=7667D2C6587BAA9DDECBA87F630031641DB1CA0C Certificate serial: 20128526F9DD40555D756CE2A82080DAC1B15E5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft Manifest number: 42 Signing time: Tue 30 Jun 2026 01:02:45 +0000 Manifest this update: Tue 30 Jun 2026 00:57:45 +0000 Manifest next update: Wed 01 Jul 2026 03:38:45 +0000 Files and hashes: 1: 3130332e31302e342e302f32322d3234203d3e20313331313434.roa (hash: IGtZPl0fRH7s0+p+leZ94R332KaEagWZuujznCFMAYM=) 2: 7667D2C6587BAA9DDECBA87F630031641DB1CA0C.crl (hash: K2FAJvGOQSZide/X69DANdpHKZ2eJBPTI2QD/M+9g7s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.crl rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 03:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:12:85:26:f9:dd:40:55:5d:75:6c:e2:a8:20:80:da:c1:b1:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7667D2C6587BAA9DDECBA87F630031641DB1CA0C Validity Not Before: Jun 30 00:57:45 2026 GMT Not After : Jul 1 03:38:45 2026 GMT Subject: CN=C12401495613C906DCB4BECDE11DE0D5BE096271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:08:e5:35:e3:cc:b6:77:d3:dc:db:15:37: fc:8c:e2:58:76:4e:01:e5:6c:12:fe:e1:7a:36:57: ab:46:fd:26:8a:99:95:91:33:92:08:c2:b2:64:fa: 68:ba:a3:7b:80:fe:76:23:54:a4:01:1e:e2:34:3a: d4:6e:fd:1f:a5:d1:80:c1:9a:c5:98:e2:43:52:12: d6:36:13:54:67:68:0c:89:e6:5e:05:ef:51:e1:46: 71:8e:95:fa:d2:6c:f3:0b:7b:a9:0a:97:88:70:c9: b3:96:fd:34:e4:41:e3:ff:0d:e9:d9:41:cd:c9:15: 78:f8:18:13:92:58:aa:68:d0:ce:1b:16:8f:e0:06: f1:e1:f8:c7:a8:4e:16:d0:07:2a:75:aa:3c:b3:06: c7:cf:04:6e:2e:7d:9d:8e:ea:22:9e:91:45:4f:2c: a5:28:2b:f9:4f:42:b6:7f:9b:53:1f:22:ed:e6:06: 7a:a8:5f:d5:d8:3f:64:38:be:ca:ef:15:5a:3c:89: 44:dc:ff:15:5f:46:d7:0f:2c:9d:7f:b6:27:13:fb: 63:5f:a3:4c:e2:79:22:c3:bc:17:bb:c7:66:43:62: 45:c8:70:cf:2b:ab:e0:d2:2e:0f:a0:92:26:cd:7e: 54:36:d4:09:36:87:78:c6:c7:61:06:28:f1:c9:eb: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:01:49:56:13:C9:06:DC:B4:BE:CD:E1:1D:E0:D5:BE:09:62:71 X509v3 Authority Key Identifier: keyid:76:67:D2:C6:58:7B:AA:9D:DE:CB:A8:7F:63:00:31:64:1D:B1:CA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASUS/0/7667D2C6587BAA9DDECBA87F630031641DB1CA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:74:dc:41:04:36:79:19:f0:c2:fe:c8:8d:dc:eb:d4:bb:c3: 7e:ed:28:96:3c:57:99:bb:50:f0:49:14:54:bf:d8:73:8a:25: ca:9a:59:f5:fb:8f:07:20:c3:e3:0e:0a:78:ff:a6:6d:04:4f: f5:e7:ac:ac:94:d0:0e:37:cb:0a:19:97:7f:6e:c8:67:e6:48: cc:b1:f6:93:e5:20:0d:90:0c:fa:40:49:2c:a1:62:4a:83:19: fa:86:7e:0d:dd:0f:6c:79:43:ae:4b:fc:93:38:57:be:d4:a9: 62:12:99:47:45:76:b2:8e:1d:34:04:9e:a1:3c:f2:7d:78:da: 40:27:c7:a4:48:65:f5:cd:cc:9d:c3:fa:fb:1d:f8:2f:75:f2: 3e:ca:52:44:1f:dc:a4:4a:ca:dc:48:ad:6b:c6:b0:d2:6e:71: 9e:bb:1a:3b:4a:b4:cc:d0:f7:c2:af:cd:0c:5f:8c:f0:0c:fa: 72:74:fe:d7:32:12:7e:a9:41:9a:2b:ea:aa:63:fb:98:0a:29: 56:53:31:f8:f3:e4:96:58:50:f9:94:92:28:c7:26:b0:80:c1: 44:c5:a0:41:f2:30:7a:87:2f:6a:b6:eb:0b:27:a6:33:e9:3e: d3:e9:04:3a:82:2b:7a:3a:18:19:37:95:54:6e:02:45:e3:ce: 05:0c:4e:17 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUIBKFJvndQFVddWziqCCA2sGxXlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY2N0QyQzY1ODdCQUE5RERFQ0JBODdGNjMwMDMxNjQx REIxQ0EwQzAeFw0yNjA2MzAwMDU3NDVaFw0yNjA3MDEwMzM4NDVaMDMxMTAvBgNV BAMTKEMxMjQwMTQ5NTYxM0M5MDZEQ0I0QkVDREUxMURFMEQ1QkUwOTYyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2wjlNePMtnfT3NsVN/yM4lh2 TgHlbBL+4Xo2V6tG/SaKmZWRM5IIwrJk+mi6o3uA/nYjVKQBHuI0OtRu/R+l0YDB msWY4kNSEtY2E1RnaAyJ5l4F71HhRnGOlfrSbPMLe6kKl4hwybOW/TTkQeP/DenZ Qc3JFXj4GBOSWKpo0M4bFo/gBvHh+MeoThbQByp1qjyzBsfPBG4ufZ2O6iKekUVP LKUoK/lPQrZ/m1MfIu3mBnqoX9XYP2Q4vsrvFVo8iUTc/xVfRtcPLJ1/ticT+2Nf o0zieSLDvBe7x2ZDYkXIcM8rq+DSLg+gkibNflQ21Ak2h3jGx2EGKPHJ6yk7AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUwSQBSVYTyQbctL7N4R3g1b4JYnEwHwYDVR0j BBgwFoAUdmfSxlh7qp3ey6h/YwAxZB2xygwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNVUy8w Lzc2NjdEMkM2NTg3QkFBOURERUNCQTg3RjYzMDAzMTY0MURCMUNBMEMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNzY2N0QyQzY1ODdCQUE5RERFQ0JBODdGNjMwMDMx NjQxREIxQ0EwQy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0FTVVMvMC83NjY3RDJDNjU4N0JBQTlE REVDQkE4N0Y2MzAwMzE2NDFEQjFDQTBDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHTcQQQ2eRnwwv7I jdzr1LvDfu0oljxXmbtQ8EkUVL/Yc4olyppZ9fuPByDD4w4KeP+mbQRP9eesrJTQ DjfLChmXf27IZ+ZIzLH2k+UgDZAM+kBJLKFiSoMZ+oZ+Dd0PbHlDrkv8kzhXvtSp YhKZR0V2so4dNASeoTzyfXjaQCfHpEhl9c3MncP6+x34L3XyPspSRB/cpErK3Eit a8aw0m5xnrsaO0q0zND3wq/NDF+M8Az6cnT+1zISfqlBmivqqmP7mAopVlMx+PPk llhQ+ZSSKMcmsIDBRMWgQfIweocvarbrCyemM+k+0+kEOoIrejoYGTeVVG4CRePO BQxOFw== -----END CERTIFICATE-----Generated at Tue Jun 30 19:07:16 2026 by rpki-client