$ rpki-client -vvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json) Hash identifier: k3KVsM5ABPaw7bHJSS44Puzcl4PEwm4p/LgjPQwSdZU= Subject key identifier: 31:B4:8A:5A:F4:3A:2B:C0:93:BF:3E:19:E7:86:CE:05:25:57:83:BF Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 Certificate issuer: /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Certificate serial: 517DFB0CB7AF6293315C533E34E48AB57D8D7DA0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft Manifest number: 05 Signing time: Wed 13 May 2026 05:22:06 +0000 Manifest this update: Wed 13 May 2026 05:17:06 +0000 Manifest next update: Thu 14 May 2026 05:49:06 +0000 Files and hashes: 1: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: W2tFBqr5dbtGU1UhxFzBo8at65v4/DmNPadDdLY8c94=) 2: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=) 3: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7d:fb:0c:b7:af:62:93:31:5c:53:3e:34:e4:8a:b5:7d:8d:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Validity Not Before: May 13 05:17:06 2026 GMT Not After : May 14 05:49:06 2026 GMT Subject: CN=31B48A5AF43A2BC093BF3E19E786CE05255783BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:92:51:d6:84:c2:85:27:31:47:8f:46:60: c4:33:90:d5:54:c1:1b:cb:81:71:f1:97:4c:93:85: 7c:c7:b3:bc:d2:25:cd:0b:a7:ef:65:ac:5a:8b:79: b2:37:4a:76:5d:a5:55:89:31:86:8d:63:ea:4f:c7: fa:3d:2c:b8:d8:62:56:0d:86:2d:91:27:21:c8:e4: 13:ad:fb:99:18:ed:78:c9:4a:be:ef:fb:6e:f0:d0: 19:64:71:cd:66:43:b4:50:b5:d1:f4:51:e5:00:02: 34:9e:eb:74:28:2c:14:d1:4b:fe:4f:b4:28:79:9c: 6f:cf:c3:6d:f8:3f:8b:6b:06:5a:1a:63:76:24:6e: 58:fd:6a:35:7d:89:ae:a9:cd:23:a1:0d:61:71:74: 43:df:d9:a5:aa:9a:9c:82:22:d7:d2:ce:98:64:ac: 5e:75:76:04:89:ff:c3:c6:69:29:a8:8d:e9:3f:02: a3:bc:4a:04:b6:42:4e:07:90:ae:8e:ad:f4:73:0e: 64:18:a4:d0:09:5d:6b:4d:95:54:26:0f:1f:f1:10: be:08:84:f7:6a:b9:a7:78:55:18:6e:a7:ba:81:ad: 27:4b:a4:1b:48:52:9d:71:68:33:66:84:b5:9f:99: b5:4b:0e:3e:a0:ee:fa:3e:a4:f1:62:e6:86:78:2c: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B4:8A:5A:F4:3A:2B:C0:93:BF:3E:19:E7:86:CE:05:25:57:83:BF X509v3 Authority Key Identifier: keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1d:eb:24:21:27:1c:03:bf:d3:3d:8a:fe:4c:13:97:c3:5c: 00:f6:76:e4:98:ca:e5:ff:bd:f1:01:e8:16:55:19:bd:6e:57: c0:74:a7:7d:fe:a0:ed:1c:81:0c:04:3b:f4:7c:88:51:f2:b6: 0b:11:00:05:21:ee:0b:c3:5c:e9:ca:48:f5:a1:5a:19:d9:c4: ee:6a:5b:d6:f5:03:71:1b:62:ca:6d:0d:5b:1d:c7:57:a3:db: af:f3:88:81:8b:00:dc:3b:c6:a5:a0:6a:ea:ae:b1:df:6c:79: ea:9f:4b:7c:5d:cb:7e:7d:66:76:f5:f6:24:22:99:5f:92:2a: 4a:0f:2e:b1:56:b4:9a:d0:d9:08:b5:be:a8:d4:fb:ab:06:73: da:b5:31:a1:61:e3:e1:00:78:51:78:0d:67:1e:ae:bc:b0:a0: 08:83:05:fd:20:49:b9:6b:d5:3d:57:a6:21:ce:86:f8:91:83: 7d:30:d2:25:2f:a0:bc:f4:22:b7:27:9e:5d:05:49:b7:97:7e: ee:0e:30:cf:af:ee:9c:1d:93:b3:b7:9d:8e:93:d1:b1:2b:91: 11:cd:83:00:cf:c5:4d:22:0a:fe:cb:a4:ba:84:d4:ff:10:03: bb:1a:a6:df:39:a8:28:26:01:8b:c1:26:61:1b:8c:d6:70:dc: 36:66:23:8c -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUUX37DLevYpMxXFM+NOSKtX2NfaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4NkMyMzE3MURGRkFG NUFEN0REODAeFw0yNjA1MTMwNTE3MDZaFw0yNjA1MTQwNTQ5MDZaMDMxMTAvBgNV BAMTKDMxQjQ4QTVBRjQzQTJCQzA5M0JGM0UxOUU3ODZDRTA1MjU1NzgzQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iJJR1oTChScxR49GYMQzkNVU wRvLgXHxl0yThXzHs7zSJc0Lp+9lrFqLebI3SnZdpVWJMYaNY+pPx/o9LLjYYlYN hi2RJyHI5BOt+5kY7XjJSr7v+27w0Blkcc1mQ7RQtdH0UeUAAjSe63QoLBTRS/5P tCh5nG/Pw234P4trBloaY3Ykblj9ajV9ia6pzSOhDWFxdEPf2aWqmpyCItfSzphk rF51dgSJ/8PGaSmojek/AqO8SgS2Qk4HkK6OrfRzDmQYpNAJXWtNlVQmDx/xEL4I hPdquad4VRhup7qBrSdLpBtIUp1xaDNmhLWfmbVLDj6g7vo+pPFi5oZ4LNntAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUMbSKWvQ6K8CTvz4Z54bOBSVXg78wHwYDVR0j BBgwFoAUNtqRQt4dyAnvAIbCMXHf+vWtfdgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hBUk1X QVkvMC8zNkRBOTE0MkRFMURDODA5RUYwMDg2QzIzMTcxREZGQUY1QUQ3REQ4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMx NzFERkZBRjVBRDdERDguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8wLzM2REE5MTQy REUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbHesk ISccA7/TPYr+TBOXw1wA9nbkmMrl/73xAegWVRm9blfAdKd9/qDtHIEMBDv0fIhR 8rYLEQAFIe4Lw1zpykj1oVoZ2cTualvW9QNxG2LKbQ1bHcdXo9uv84iBiwDcO8al oGrqrrHfbHnqn0t8Xct+fWZ29fYkIplfkipKDy6xVrSa0NkItb6o1PurBnPatTGh YePhAHhReA1nHq68sKAIgwX9IEm5a9U9V6Yhzob4kYN9MNIlL6C89CK3J55dBUm3 l37uDjDPr+6cHZOzt52Ok9GxK5ERzYMAz8VNIgr+y6S6hNT/EAO7GqbfOagoJgGL wSZhG4zWcNw2ZiOM -----END CERTIFICATE-----Generated at Wed May 13 20:33:28 2026 by rpki-client