$ rpki-client -vvvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft File: 0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json) Hash identifier: dgBmdJd2UaSxbn2FTct7vPAjdClEvZVd4iRGChK+1eA= Subject key identifier: 0C:C1:12:90:E2:57:B6:89:D4:CE:2D:AE:05:E0:B0:D4:AB:9D:AD:4D Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 Certificate issuer: /CN=0CA9C32F7806470F750EC53431D4F322F0851573 Certificate serial: 69B8C2F1498E683BE4A7A02989E376671FCBE4B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft Manifest number: C6 Signing time: Sat 03 Oct 2026 18:31:32 +0000 Manifest this update: Sat 03 Oct 2026 18:26:32 +0000 Manifest next update: Sun 04 Oct 2026 20:08:32 +0000 Files and hashes: 1: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=) 2: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: 7gS30Tmqu09Q921CL/SXCqBAOjcg9xrVEfWowh5T/gs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 20:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b8:c2:f1:49:8e:68:3b:e4:a7:a0:29:89:e3:76:67:1f:cb:e4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573 Validity Not Before: Oct 3 18:26:32 2026 GMT Not After : Oct 4 20:08:32 2026 GMT Subject: CN=0CC11290E257B689D4CE2DAE05E0B0D4AB9DAD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:2b:98:d2:07:51:9d:3e:77:2a:54:9b:f6: 1b:4b:f8:24:27:f1:95:55:ac:b9:87:3a:a8:fd:4d: 3d:de:04:ef:ce:cd:0b:6e:6f:d0:49:3d:d1:e0:9f: 83:3f:19:5e:af:2d:7d:3f:cf:a5:a2:2f:6c:9e:e1: 79:b4:ff:3e:5d:03:09:53:48:d5:32:2b:ca:db:9a: d8:91:8b:5f:a2:98:6b:b5:ac:41:79:0d:6a:85:25: 52:aa:19:4a:97:3d:ac:ba:00:46:40:89:e1:36:f3: ca:8c:97:89:e1:80:8d:67:52:60:35:83:db:16:d6: 0d:3e:9b:b2:c4:b4:6d:30:c6:eb:b7:be:8f:a1:b1: 23:c3:79:e3:8e:aa:25:f8:40:b2:9b:0a:ee:59:b6: a9:2a:49:34:81:d7:18:2c:ff:37:b1:96:2a:46:aa: 78:18:47:24:df:04:ca:7a:bb:b2:2d:24:01:73:f5: 3f:27:c9:12:d7:a9:d9:a0:1a:47:21:ff:14:3e:5a: d9:fa:97:20:d9:4a:fa:8d:4f:19:b1:28:c9:42:97: b1:ed:01:05:5c:03:88:fc:b2:66:4f:74:45:32:c7: d7:51:e5:b4:13:bf:87:52:b3:76:24:bd:a6:79:59: a4:24:09:67:85:54:92:c9:de:01:bf:bb:5e:b5:6c: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C1:12:90:E2:57:B6:89:D4:CE:2D:AE:05:E0:B0:D4:AB:9D:AD:4D X509v3 Authority Key Identifier: keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:89:ce:8a:cc:a2:cf:a3:47:1c:db:86:35:49:78:07:c8:4f: d5:d1:58:65:f0:e5:7a:fa:49:d5:6e:9f:4a:fb:01:48:f5:0d: 57:db:38:68:96:71:17:e4:ad:8d:a6:a2:42:d5:d3:34:40:c3: b2:fe:07:9c:99:93:1c:ea:3b:01:39:68:41:c7:64:72:2b:d2: a9:7d:37:72:16:e7:0f:da:00:9e:b5:6c:89:3a:43:92:eb:86: be:8f:aa:74:32:40:23:ad:af:42:20:2d:50:9a:df:36:b0:96: 3a:87:57:e7:65:08:2f:0f:7d:75:35:11:80:02:f6:77:9e:ec: 8e:b0:2d:ad:64:f8:a9:c4:4e:94:70:44:db:e7:fb:d2:49:08: f5:a1:ab:22:9c:6d:b6:18:37:1f:bd:0e:d7:12:4a:de:cf:d7: 84:fa:6b:4b:a1:0a:23:09:76:63:c4:35:4f:49:17:a0:55:64: 6e:b6:3d:30:80:f2:75:c0:a5:5c:c5:a6:dd:a2:d7:81:b0:8f: e0:31:da:32:e3:57:35:3c:28:36:54:65:29:42:dd:b7:8b:ad: c8:45:07:bf:95:dd:a3:c6:e8:31:2b:e4:87:65:3e:fb:15:3f: e3:16:ce:46:89:b6:8d:25:6f:f9:8f:08:5d:ad:c9:ba:80:8a: 05:af:de:03 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUabjC8UmOaDvkp6ApieN2Zx/L5LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBOUMzMkY3ODA2NDcwRjc1MEVDNTM0MzFENEYzMjJG MDg1MTU3MzAeFw0yNjEwMDMxODI2MzJaFw0yNjEwMDQyMDA4MzJaMDMxMTAvBgNV BAMTKDBDQzExMjkwRTI1N0I2ODlENENFMkRBRTA1RTBCMEQ0QUI5REFENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeyuY0gdRnT53KlSb9htL+CQn 8ZVVrLmHOqj9TT3eBO/OzQtub9BJPdHgn4M/GV6vLX0/z6WiL2ye4Xm0/z5dAwlT SNUyK8rbmtiRi1+imGu1rEF5DWqFJVKqGUqXPay6AEZAieE288qMl4nhgI1nUmA1 g9sW1g0+m7LEtG0wxuu3vo+hsSPDeeOOqiX4QLKbCu5ZtqkqSTSB1xgs/zexlipG qngYRyTfBMp6u7ItJAFz9T8nyRLXqdmgGkch/xQ+Wtn6lyDZSvqNTxmxKMlCl7Ht AQVcA4j8smZPdEUyx9dR5bQTv4dSs3YkvaZ5WaQkCWeFVJLJ3gG/u161bBEJAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUDMESkOJXtonUzi2uBeCw1KudrU0wHwYDVR0j BBgwFoAUDKnDL3gGRw91DsU0MdTzIvCFFXMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQk9PS1Mv MC8wQ0E5QzMyRjc4MDY0NzBGNzUwRUM1MzQzMUQ0RjMyMkYwODUxNTczLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzBDQTlDMzJGNzgwNjQ3MEY3NTBFQzUzNDMxRDRG MzIyRjA4NTE1NzMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CT09LUy8wLzBDQTlDMzJGNzgwNjQ3 MEY3NTBFQzUzNDMxRDRGMzIyRjA4NTE1NzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCric6KzKLPo0cc 24Y1SXgHyE/V0Vhl8OV6+knVbp9K+wFI9Q1X2zholnEX5K2NpqJC1dM0QMOy/gec mZMc6jsBOWhBx2RyK9KpfTdyFucP2gCetWyJOkOS64a+j6p0MkAjra9CIC1Qmt82 sJY6h1fnZQgvD311NRGAAvZ3nuyOsC2tZPipxE6UcETb5/vSSQj1oasinG22GDcf vQ7XEkrez9eE+mtLoQojCXZjxDVPSRegVWRutj0wgPJ1wKVcxabdoteBsI/gMdoy 41c1PCg2VGUpQt23i63IRQe/ld2jxugxK+SHZT77FT/jFs5GibaNJW/5jwhdrcm6 gIoFr94D -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:09 2026 by rpki-client