$ rpki-client -vvvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json) Hash identifier: JYesHiiJtP9VAhFy+YcNyZWKSTrP9VB6yeQJB2GANyE= Subject key identifier: 1E:CD:A5:20:0B:A8:58:3F:42:51:C6:3D:3D:F0:DE:98:6F:DD:52:F7 Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787 Certificate serial: 64A5ED8771A2CB0D40607F49A2EA6AC76FBA4348 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft Manifest number: CB Signing time: Sun 04 Oct 2026 14:25:45 +0000 Manifest this update: Sun 04 Oct 2026 14:20:45 +0000 Manifest next update: Mon 05 Oct 2026 14:30:45 +0000 Files and hashes: 1: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=) 2: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=) 3: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=) 4: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=) 5: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: zjoZpnTb9ZIlZxvY8RhALHwzQkAT3m0BZZlGvKjw75I=) 6: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=) 7: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=) 8: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 14:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a5:ed:87:71:a2:cb:0d:40:60:7f:49:a2:ea:6a:c7:6f:ba:43:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787 Validity Not Before: Oct 4 14:20:45 2026 GMT Not After : Oct 5 14:30:45 2026 GMT Subject: CN=1ECDA5200BA8583F4251C63D3DF0DE986FDD52F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:5f:2a:84:79:c9:2d:69:8e:ce:dc:f0:5b: 63:9c:b4:29:2b:06:17:d8:21:66:c0:63:4e:0e:cc: e1:cc:89:e6:53:6a:d1:78:66:f4:51:cc:33:96:db: 46:27:88:50:9f:a6:3b:3b:7b:ae:a9:1f:3d:44:85: 09:59:9c:5c:fe:50:b9:28:62:f2:16:8b:73:15:cb: 04:74:05:b5:aa:05:fa:ae:73:09:5f:45:9f:92:dd: f2:0f:da:16:b4:7c:dd:88:c4:f0:9a:72:28:01:d4: d6:02:37:b4:61:fc:fd:dc:89:b3:2a:10:b7:db:7b: ff:d3:0a:81:58:49:1e:e9:16:2e:be:8c:e2:ec:d2: 4a:6a:99:38:e8:26:5c:c5:54:d8:46:7c:36:38:dc: 09:dc:7f:16:80:02:0b:e5:97:6b:04:36:4d:c4:7e: 5b:8a:13:e6:a4:5e:de:ee:f4:e4:a2:7a:da:f8:fb: 93:d6:3a:a9:c8:06:ac:13:e6:e8:e9:92:3e:5b:68: 88:81:be:be:3c:0a:74:3b:b6:e8:0f:bb:0c:41:fd: 79:13:40:0e:a6:d5:43:04:43:22:2c:ee:33:d2:6d: fe:d5:2b:9b:14:bb:b1:78:04:65:03:9e:3b:32:78: 35:00:a4:99:a2:b6:a8:6f:c9:ce:40:75:b5:ec:bf: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:A5:20:0B:A8:58:3F:42:51:C6:3D:3D:F0:DE:98:6F:DD:52:F7 X509v3 Authority Key Identifier: keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:46:87:b1:85:bf:5e:6e:30:8c:3a:7d:70:a8:3a:b7:31:2c: b2:7b:8c:64:53:fe:19:a7:5b:ba:4a:e0:a1:36:f3:ff:61:ac: 03:ac:01:9b:4a:d2:67:92:70:92:85:aa:ac:0c:f9:a4:aa:b3: 2e:f2:70:d9:18:d5:ca:05:e6:2f:aa:0e:9f:25:83:04:54:3d: af:c2:6b:a6:e8:22:83:14:65:fb:af:da:c9:7e:63:dc:9f:74: 0f:84:30:1f:c1:f0:2f:57:7f:f6:7d:96:8f:9d:ff:d9:11:aa: 4a:da:93:1d:1d:dc:1c:00:23:f7:d5:c2:55:63:c0:b8:04:55: 8f:5f:94:bd:99:f8:15:56:88:d8:19:b1:06:c9:5e:92:04:e5: cb:3d:3f:64:d6:70:92:8a:37:1c:0a:de:b0:90:5d:80:b4:d8: a4:73:6f:d3:85:1b:e5:77:a8:21:0f:28:a7:79:1d:b1:14:5a: 1d:ea:ca:7d:f3:f6:b9:f0:01:7a:f2:ea:80:e8:42:5b:8c:80: 5a:2e:b9:5c:f6:82:b5:cc:0d:82:33:64:57:52:4c:9c:27:02: 6c:ec:31:ca:5b:e0:27:52:20:98:dc:cf:12:e9:55:2f:56:69: 91:35:d1:66:e9:a2:cd:80:33:02:a3:49:9e:59:9f:ed:c3:dd: 5d:2d:86:92 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUZKXth3Giyw1AYH9Joupqx2+6Q0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI2NTc4Q0ZGQTI1NjQzNzBDOTQ3NjMzQjQyMjJCMzhG QkUwNDc4NzAeFw0yNjEwMDQxNDIwNDVaFw0yNjEwMDUxNDMwNDVaMDMxMTAvBgNV BAMTKDFFQ0RBNTIwMEJBODU4M0Y0MjUxQzYzRDNERjBERTk4NkZERDUyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpF18qhHnJLWmOztzwW2OctCkr BhfYIWbAY04OzOHMieZTatF4ZvRRzDOW20YniFCfpjs7e66pHz1EhQlZnFz+ULko YvIWi3MVywR0BbWqBfqucwlfRZ+S3fIP2ha0fN2IxPCacigB1NYCN7Rh/P3cibMq ELfbe//TCoFYSR7pFi6+jOLs0kpqmTjoJlzFVNhGfDY43AncfxaAAgvll2sENk3E fluKE+akXt7u9OSietr4+5PWOqnIBqwT5ujpkj5baIiBvr48CnQ7tugPuwxB/XkT QA6m1UMEQyIs7jPSbf7VK5sUu7F4BGUDnjsyeDUApJmitqhvyc5AdbXsv+vTAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUHs2lIAuoWD9CUcY9PfDemG/dUvcwHwYDVR0j BBgwFoAUi2V4z/olZDcMlHYztCIrOPvgR4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJP SUQvMC84QjY1NzhDRkZBMjU2NDM3MEM5NDc2MzNCNDIyMkIzOEZCRTA0Nzg3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzhCNjU3OENGRkEyNTY0MzcwQzk0NzYzM0I0 MjIyQjM4RkJFMDQ3ODcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DRU5UUk9JRC8wLzhCNjU3OENG RkEyNTY0MzcwQzk0NzYzM0I0MjIyQjM4RkJFMDQ3ODcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrRoex hb9ebjCMOn1wqDq3MSyye4xkU/4Zp1u6SuChNvP/YawDrAGbStJnknCShaqsDPmk qrMu8nDZGNXKBeYvqg6fJYMEVD2vwmum6CKDFGX7r9rJfmPcn3QPhDAfwfAvV3/2 fZaPnf/ZEapK2pMdHdwcACP31cJVY8C4BFWPX5S9mfgVVojYGbEGyV6SBOXLPT9k 1nCSijccCt6wkF2AtNikc2/ThRvld6ghDyineR2xFFod6sp98/a58AF68uqA6EJb jIBaLrlc9oK1zA2CM2RXUkycJwJs7DHKW+AnUiCY3M8S6VUvVmmRNdFm6aLNgDMC o0meWZ/tw91dLYaS -----END CERTIFICATE-----Generated at Sun Oct 4 21:12:32 2026 by rpki-client