$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft File: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json) Hash identifier: K0kaYjQuxoQNSJdNAggtrmQECKL7aqtDuQTs0tQX7J0= Subject key identifier: 35:CB:AE:C1:CE:AD:ED:A7:64:E1:C6:B0:03:07:DF:F1:C6:D2:63:49 Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3 Certificate issuer: /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3 Certificate serial: 20FB162B31854D81BD477D0593BAD7C2A0FE4297 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft Manifest number: 36 Signing time: Thu 11 Jun 2026 16:13:52 +0000 Manifest this update: Thu 11 Jun 2026 16:08:52 +0000 Manifest next update: Fri 12 Jun 2026 18:28:52 +0000 Files and hashes: 1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: CcK9sUFTCVbdS/XHnuMlBjgXv350Ia92vMGYfM/6DTY=) 2: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fb:16:2b:31:85:4d:81:bd:47:7d:05:93:ba:d7:c2:a0:fe:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3 Validity Not Before: Jun 11 16:08:52 2026 GMT Not After : Jun 12 18:28:52 2026 GMT Subject: CN=35CBAEC1CEADEDA764E1C6B00307DFF1C6D26349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c1:3f:3b:37:07:de:54:76:be:37:00:50:04: 91:31:5e:ba:c7:95:29:2f:d5:79:97:63:64:29:99: d4:91:8c:98:c6:b4:b6:f8:2e:2d:1a:7f:61:96:64: 4c:ea:a9:81:fc:b7:8d:d9:be:86:e0:cd:2c:01:ac: 6d:17:bd:2c:ad:f6:6c:b7:a8:d6:00:c4:30:45:78: 1f:e1:ef:ec:8f:96:0a:78:e6:7b:fe:92:f6:44:86: f6:6a:6a:3a:70:1a:3b:69:ed:de:a0:eb:c6:3e:e7: 96:a3:0d:8c:6c:72:45:d5:0e:24:02:8c:f8:69:d8: 76:c2:98:83:3a:7d:49:fb:8f:0d:88:d9:24:b6:75: 2b:ff:67:c3:22:67:e7:7e:71:de:29:04:a8:50:5a: 6e:77:e1:a5:97:12:d3:9c:38:d0:62:f8:8e:a1:87: 18:32:7f:ec:b0:02:3d:ee:ee:25:57:c6:5d:9f:b1: aa:c3:2c:46:f6:ec:e9:c3:5d:60:f9:4e:f9:a2:50: b8:94:8b:23:b7:65:69:2f:ed:ab:d7:6f:ef:5d:ed: 03:12:98:5d:05:db:e1:f0:46:84:2f:9d:e1:1f:b4: a7:d7:56:81:e8:98:b9:79:92:f9:99:62:6a:fb:fb: c5:aa:fa:dd:f1:7c:90:58:a3:af:b5:0c:b4:94:c3: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:AE:C1:CE:AD:ED:A7:64:E1:C6:B0:03:07:DF:F1:C6:D2:63:49 X509v3 Authority Key Identifier: keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1e:cf:54:27:c4:d2:01:55:c0:60:eb:7c:ac:ef:54:c2:a9: 87:9f:1c:08:97:86:0c:d5:96:42:c8:bc:bb:8f:68:72:8d:74: 04:4d:fc:f9:8b:df:f8:39:ce:b4:5c:4f:d1:6b:7d:1a:9a:2e: c0:2c:03:8e:53:11:07:c0:32:02:fe:ac:80:2f:61:f9:3c:82: c1:64:b7:eb:12:55:f8:c1:dd:2a:9c:c0:9f:a6:81:aa:9f:3a: e4:41:67:83:f9:00:fa:5f:d0:7b:65:77:f7:12:70:6a:81:6e: 63:9d:00:78:67:1e:65:98:56:46:de:14:5d:17:36:63:61:17: 1e:76:d4:54:85:4a:38:98:85:6e:16:10:ad:f0:52:a1:ab:a4: 86:39:f2:3a:d9:74:8f:a6:86:ab:f5:f2:30:71:ea:e7:7c:08: 43:24:03:9b:71:f7:db:de:37:10:1b:e2:97:8b:e9:e3:d4:7e: af:3a:33:13:8b:1a:2e:c4:3e:d7:b0:5b:d1:1e:0e:79:26:36: 9c:91:3b:8c:8e:f6:34:f5:f4:0a:91:8c:19:eb:e0:23:ff:aa: 97:78:5b:2b:11:61:97:e7:83:48:7c:44:bb:80:a5:28:81:3e: 58:7b:ad:6c:11:27:c5:02:25:3c:ae:12:04:00:42:56:82:82: e6:9e:f2:86 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUIPsWKzGFTYG9R30Fk7rXwqD+QpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NFNzU5RjQ1RTJF N0U0MjFBMzAeFw0yNjA2MTExNjA4NTJaFw0yNjA2MTIxODI4NTJaMDMxMTAvBgNV BAMTKDM1Q0JBRUMxQ0VBREVEQTc2NEUxQzZCMDAzMDdERkYxQzZEMjYzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIwT87NwfeVHa+NwBQBJExXrrH lSkv1XmXY2QpmdSRjJjGtLb4Li0af2GWZEzqqYH8t43ZvobgzSwBrG0XvSyt9my3 qNYAxDBFeB/h7+yPlgp45nv+kvZEhvZqajpwGjtp7d6g68Y+55ajDYxsckXVDiQC jPhp2HbCmIM6fUn7jw2I2SS2dSv/Z8MiZ+d+cd4pBKhQWm534aWXEtOcONBi+I6h hxgyf+ywAj3u7iVXxl2fsarDLEb27OnDXWD5TvmiULiUiyO3ZWkv7avXb+9d7QMS mF0F2+HwRoQvneEftKfXVoHomLl5kvmZYmr7+8Wq+t3xfJBYo6+1DLSUw2GXAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUNcuuwc6t7adk4cawAwff8cbSY0kwHwYDVR0j BBgwFoAUlbGmJHmzbBQU/xfOdZ9F4ufkIaMwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t Q0hBTi8xLzk1QjFBNjI0NzlCMzZDMTQxNEZGMTdDRTc1OUY0NUUyRTdFNDIxQTMu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzIvOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NF NzU5RjQ1RTJFN0U0MjFBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMS85NUIx QTYyNDc5QjM2QzE0MTRGRjE3Q0U3NTlGNDVFMkU3RTQyMUEzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA aB7PVCfE0gFVwGDrfKzvVMKph58cCJeGDNWWQsi8u49oco10BE38+Yvf+DnOtFxP 0Wt9GpouwCwDjlMRB8AyAv6sgC9h+TyCwWS36xJV+MHdKpzAn6aBqp865EFng/kA +l/Qe2V39xJwaoFuY50AeGceZZhWRt4UXRc2Y2EXHnbUVIVKOJiFbhYQrfBSoauk hjnyOtl0j6aGq/XyMHHq53wIQyQDm3H32943EBvil4vp49R+rzozE4saLsQ+17Bb 0R4OeSY2nJE7jI72NPX0CpGMGevgI/+ql3hbKxFhl+eDSHxEu4ClKIE+WHutbBEn xQIlPK4SBABCVoKC5p7yhg== -----END CERTIFICATE-----Generated at Thu Jun 11 22:51:07 2026 by rpki-client