$ rpki-client -vvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json) Hash identifier: FKh/+SzG/xD3Omvbedna8WyGuIXMhbr8r5gmqyJHlQ0= Subject key identifier: AC:FB:CA:59:87:33:27:A1:E0:9E:88:FF:97:6E:AC:B7:31:42:78:A0 Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 Certificate issuer: /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Certificate serial: 4533AFC2FDFF4377D353C9EE9B546553CB7BFFA0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 15:29:12 +0000 Manifest this update: Tue 30 Jun 2026 15:24:12 +0000 Manifest next update: Wed 01 Jul 2026 18:21:12 +0000 Files and hashes: 1: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=) 2: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: Rtwn0qJ5Je4EOqYNoS84j10zgy8UoviW51P+/+qWkqA=) 3: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:33:af:c2:fd:ff:43:77:d3:53:c9:ee:9b:54:65:53:cb:7b:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Validity Not Before: Jun 30 15:24:12 2026 GMT Not After : Jul 1 18:21:12 2026 GMT Subject: CN=ACFBCA59873327A1E09E88FF976EACB7314278A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:c4:50:4a:2d:f6:ab:50:70:a9:c9:65:d9: c3:9a:a6:a9:25:6f:c8:5e:35:c0:01:30:7e:d2:21: a5:a1:5c:b9:fc:e9:5d:7c:20:a9:63:d9:c5:32:de: 6c:0e:ea:c7:24:72:58:52:fe:48:77:a2:17:99:91: 3e:50:51:8c:79:4d:0e:b6:bf:4e:2b:28:eb:c3:09: e5:ac:a6:f3:4c:da:5d:72:9a:4b:2c:14:3d:e9:7c: fc:5c:fa:69:36:19:59:39:71:6a:9b:e2:9f:80:25: 95:63:4e:9c:10:aa:9f:b2:ab:d9:9c:9f:20:18:0e: 44:b3:91:17:3e:53:70:54:f1:ae:6c:07:fb:6a:c8: 62:0c:5a:52:2d:7a:f5:78:38:6b:a8:ec:4c:19:0b: a0:14:51:91:d2:62:9c:cd:af:34:19:57:3e:42:1c: 54:fe:7f:d6:f0:f0:a0:0c:74:fb:c2:41:d5:25:d3: 04:37:a1:73:c4:ee:6d:02:3c:a1:99:17:3a:87:4a: bf:6d:6a:e3:5d:2a:31:97:d3:d1:70:75:65:ed:e5: 71:f1:74:8e:cd:b2:2d:21:11:47:6a:0f:cf:bb:9f: fe:61:da:5b:72:b7:a4:a1:56:ed:70:4e:1f:1c:39: 12:c5:bf:ca:e0:c5:fd:ab:96:9f:46:81:7f:b3:bd: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FB:CA:59:87:33:27:A1:E0:9E:88:FF:97:6E:AC:B7:31:42:78:A0 X509v3 Authority Key Identifier: keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ec:0a:7b:34:f5:f2:42:98:e6:48:c8:7a:d1:8b:fe:1f:26: 61:6d:98:10:8e:55:f6:f6:08:93:23:8f:ab:87:24:2c:d5:68: 5d:a1:00:d5:84:d8:e5:23:49:d5:92:76:ac:21:da:4c:f6:32: bf:f1:a2:a5:63:d3:cb:03:c7:74:62:be:87:c7:f7:10:48:e4: 1f:0d:44:e0:26:e2:5c:42:ab:73:b3:15:d8:17:89:35:1f:fc: e2:19:dc:a1:b1:e8:3b:43:fe:13:b0:9b:0a:6b:39:30:ef:56: c0:95:bd:e8:f1:5f:ad:fb:53:03:e8:85:da:cd:34:fd:f8:94: 85:91:a6:df:14:bd:a4:01:dc:93:e6:3a:bb:23:d5:b4:e4:6e: a7:22:e3:b4:e7:77:7a:88:44:7a:0f:d1:a6:7d:c7:71:94:58: 72:d9:00:23:18:91:ec:19:2d:52:cb:0b:02:ef:2e:f4:3d:b4: 93:c6:dd:b7:7a:51:87:11:3a:68:77:0b:98:2f:ac:f7:86:8f: 8a:86:9a:76:e3:b6:af:cc:98:4f:c3:40:ab:be:fe:ab:be:df: a7:cd:19:e4:07:28:15:cc:74:04:ad:9d:0a:7c:6e:1e:49:b9: 8f:ce:ab:e3:e0:54:01:58:bd:32:64:0e:a2:34:07:a1:23:dd: 8b:fc:9b:bc -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURTOvwv3/Q3fTU8num1RlU8t7/6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4NkMyMzE3MURGRkFG NUFEN0REODAeFw0yNjA2MzAxNTI0MTJaFw0yNjA3MDExODIxMTJaMDMxMTAvBgNV BAMTKEFDRkJDQTU5ODczMzI3QTFFMDlFODhGRjk3NkVBQ0I3MzE0Mjc4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHgsRQSi32q1Bwqcll2cOapqkl b8heNcABMH7SIaWhXLn86V18IKlj2cUy3mwO6sckclhS/kh3oheZkT5QUYx5TQ62 v04rKOvDCeWspvNM2l1ymkssFD3pfPxc+mk2GVk5cWqb4p+AJZVjTpwQqp+yq9mc nyAYDkSzkRc+U3BU8a5sB/tqyGIMWlItevV4OGuo7EwZC6AUUZHSYpzNrzQZVz5C HFT+f9bw8KAMdPvCQdUl0wQ3oXPE7m0CPKGZFzqHSr9tauNdKjGX09FwdWXt5XHx dI7Nsi0hEUdqD8+7n/5h2ltyt6ShVu1wTh8cORLFv8rgxf2rlp9GgX+zvdpJAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUrPvKWYczJ6Hgnoj/l26stzFCeKAwHwYDVR0j BBgwFoAUNtqRQt4dyAnvAIbCMXHf+vWtfdgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hBUk1X QVkvMC8zNkRBOTE0MkRFMURDODA5RUYwMDg2QzIzMTcxREZGQUY1QUQ3REQ4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMx NzFERkZBRjVBRDdERDguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8wLzM2REE5MTQy REUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAI7Ap7 NPXyQpjmSMh60Yv+HyZhbZgQjlX29giTI4+rhyQs1WhdoQDVhNjlI0nVknasIdpM 9jK/8aKlY9PLA8d0Yr6Hx/cQSOQfDUTgJuJcQqtzsxXYF4k1H/ziGdyhseg7Q/4T sJsKazkw71bAlb3o8V+t+1MD6IXazTT9+JSFkabfFL2kAdyT5jq7I9W05G6nIuO0 53d6iER6D9GmfcdxlFhy2QAjGJHsGS1SywsC7y70PbSTxt23elGHETpodwuYL6z3 ho+Khpp247avzJhPw0Crvv6rvt+nzRnkBygVzHQErZ0KfG4eSbmPzqvj4FQBWL0y ZA6iNAehI92L/Ju8 -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:17 2026 by rpki-client