$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json) Hash identifier: HLPbe8TnnDoDPvvbcsnKEkXkolKHNlKs8OkiUvD+Noo= Subject key identifier: F2:0D:4E:1B:BE:71:F0:D3:17:E0:89:B3:90:22:48:58:59:73:2F:D8 Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787 Certificate serial: 7BE6C421A66BAE8CE6B099F40226732B15AE826F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft Manifest number: 0A Signing time: Wed 13 May 2026 07:47:41 +0000 Manifest this update: Wed 13 May 2026 07:42:41 +0000 Manifest next update: Thu 14 May 2026 07:58:41 +0000 Files and hashes: 1: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=) 2: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=) 3: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: 8ROBvGPZc116v9uNh525rrg72p0qYN+8HQrBiaNid/o=) 4: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=) 5: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=) 6: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=) 7: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=) 8: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e6:c4:21:a6:6b:ae:8c:e6:b0:99:f4:02:26:73:2b:15:ae:82:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787 Validity Not Before: May 13 07:42:41 2026 GMT Not After : May 14 07:58:41 2026 GMT Subject: CN=F20D4E1BBE71F0D317E089B39022485859732FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:eb:ce:17:2f:ff:05:87:9f:d0:f2:c9:89: 8e:5c:6d:62:78:ce:80:ff:15:a1:d5:4b:d8:b8:4b: fb:b9:0b:29:85:06:a4:60:b6:ae:d7:1f:17:92:dd: 2c:dc:64:25:49:2c:d8:85:de:44:70:6d:7e:c9:7c: 41:8e:da:90:c9:2f:f6:b6:d0:6e:9a:d4:19:41:84: e5:7c:13:b1:c7:20:04:b6:9a:02:e0:a9:8f:bb:7b: 62:b4:80:a7:23:61:44:84:ce:f0:07:d9:55:28:d8: 0e:62:86:b1:d1:32:9a:e6:b0:d4:f6:ae:c1:6c:0b: e3:35:e2:e2:1f:bf:2e:98:8d:76:8f:ff:a3:9d:71: 09:e6:3f:04:a4:9f:93:c2:df:0c:34:a1:9b:c1:43: 1e:c1:52:2f:7d:ec:f2:93:84:10:2e:60:b2:26:6a: 6c:89:95:99:0e:70:b9:ed:f8:5f:f4:fb:da:4f:81: f7:8f:54:41:19:a4:91:ba:9d:df:04:9b:cb:2a:6a: fb:07:de:0f:92:78:c0:d2:ba:d9:6b:12:66:0f:45: 97:90:51:82:a2:24:eb:24:a2:f6:a4:08:73:68:e2: f6:f8:cb:9c:07:4d:e5:1c:a3:48:4d:40:70:7f:16: b1:3b:82:a7:d1:4e:c3:9f:35:f2:7b:46:e9:b1:a5: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0D:4E:1B:BE:71:F0:D3:17:E0:89:B3:90:22:48:58:59:73:2F:D8 X509v3 Authority Key Identifier: keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:22:03:da:8a:78:be:27:aa:4c:c9:92:f0:f9:11:f9:73:af: 31:1d:d1:de:3f:8c:89:6c:02:2d:26:b2:d1:40:ba:fb:1b:f3: 57:c4:ba:5f:eb:73:c3:f8:67:7c:4c:15:17:ce:a1:d4:15:8d: 14:86:d1:9d:88:2d:ee:a6:38:40:fb:5f:d8:89:fc:ce:68:71: 75:a7:7d:44:2e:a7:59:60:31:a9:70:86:54:7f:e3:c4:46:3b: c0:00:95:55:ac:f3:4d:b5:26:64:07:75:6f:f3:4b:7f:80:01: d2:8b:3b:39:3e:1f:ea:f9:6c:9d:8b:54:1c:cb:2b:32:e7:61: 4f:10:06:93:1f:40:e0:22:05:d1:d5:19:d8:de:2e:f6:dc:9a: 34:65:78:74:9c:96:be:93:3a:18:0d:2e:87:72:5a:b9:bb:4e: b0:64:48:f5:a5:ce:20:0d:f0:77:b2:52:21:05:18:b7:92:7e: 31:a7:6f:d4:c3:94:ad:c7:3b:f4:cb:86:db:4e:e5:a2:2c:5e: 4e:77:a1:5a:b4:66:cd:1a:77:f2:e3:ea:08:17:07:0e:75:af: bd:44:0d:8d:4e:57:97:c7:1d:d9:18:b5:fd:03:e9:82:a4:5f: 82:b4:61:d1:71:bb:9e:dc:9b:40:d4:b1:f0:42:1b:21:3c:26: 64:78:4c:72 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUe+bEIaZrrozmsJn0AiZzKxWugm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI2NTc4Q0ZGQTI1NjQzNzBDOTQ3NjMzQjQyMjJCMzhG QkUwNDc4NzAeFw0yNjA1MTMwNzQyNDFaFw0yNjA1MTQwNzU4NDFaMDMxMTAvBgNV BAMTKEYyMEQ0RTFCQkU3MUYwRDMxN0UwODlCMzkwMjI0ODU4NTk3MzJGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxOvOFy//BYef0PLJiY5cbWJ4 zoD/FaHVS9i4S/u5CymFBqRgtq7XHxeS3SzcZCVJLNiF3kRwbX7JfEGO2pDJL/a2 0G6a1BlBhOV8E7HHIAS2mgLgqY+7e2K0gKcjYUSEzvAH2VUo2A5ihrHRMprmsNT2 rsFsC+M14uIfvy6YjXaP/6OdcQnmPwSkn5PC3ww0oZvBQx7BUi997PKThBAuYLIm amyJlZkOcLnt+F/0+9pPgfePVEEZpJG6nd8Em8sqavsH3g+SeMDSutlrEmYPRZeQ UYKiJOskovakCHNo4vb4y5wHTeUco0hNQHB/FrE7gqfRTsOfNfJ7RumxpQO3AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU8g1OG75x8NMX4ImzkCJIWFlzL9gwHwYDVR0j BBgwFoAUi2V4z/olZDcMlHYztCIrOPvgR4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJP SUQvMC84QjY1NzhDRkZBMjU2NDM3MEM5NDc2MzNCNDIyMkIzOEZCRTA0Nzg3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzhCNjU3OENGRkEyNTY0MzcwQzk0NzYzM0I0 MjIyQjM4RkJFMDQ3ODcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DRU5UUk9JRC8wLzhCNjU3OENG RkEyNTY0MzcwQzk0NzYzM0I0MjIyQjM4RkJFMDQ3ODcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcIgPa ini+J6pMyZLw+RH5c68xHdHeP4yJbAItJrLRQLr7G/NXxLpf63PD+Gd8TBUXzqHU FY0UhtGdiC3upjhA+1/YifzOaHF1p31ELqdZYDGpcIZUf+PERjvAAJVVrPNNtSZk B3Vv80t/gAHSizs5Ph/q+Wydi1Qcyysy52FPEAaTH0DgIgXR1RnY3i723Jo0ZXh0 nJa+kzoYDS6Hclq5u06wZEj1pc4gDfB3slIhBRi3kn4xp2/Uw5Stxzv0y4bbTuWi LF5Od6FatGbNGnfy4+oIFwcOda+9RA2NTleXxx3ZGLX9A+mCpF+CtGHRcbue3JtA 1LHwQhshPCZkeExy -----END CERTIFICATE-----Generated at Wed May 13 20:36:10 2026 by rpki-client