$ rpki-client -vvvf rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft File: 540D5EB957E44D80783D8B880FD2A47A69077A24.mft (raw, json) Hash identifier: XK1ZtoVXmIfcoitGUiS6AmQwDDdrUefDWzKKP39R7ws= Subject key identifier: 6A:B8:FD:A3:21:77:D5:BF:F9:20:DF:E3:90:1C:9C:25:5B:D9:A2:AB Authority key identifier: 54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24 Certificate issuer: /CN=540D5EB957E44D80783D8B880FD2A47A69077A24 Certificate serial: 778A3F64E794E88EBB4025BCBAB7368A044B3459 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft Manifest number: CC Signing time: Fri 09 Oct 2026 09:31:27 +0000 Manifest this update: Fri 09 Oct 2026 09:26:27 +0000 Manifest next update: Sat 10 Oct 2026 12:16:27 +0000 Files and hashes: 1: 540D5EB957E44D80783D8B880FD2A47A69077A24.crl (hash: h+KMaXwPzB8oDYymVJIpK6YWip3cQCzuT2581xk+NcY=) 2: 3130332e33362e32342e302f32342d3234203d3e203233343536.roa (hash: p/w43y2DPRvlMQR+IzDyNE2Tat+jQWqMf06/CS3XHqI=) 3: 323430303a626561303a3a2f33322d3332203d3e203233343536.roa (hash: 7EISQbTz08S8vCeQ9Io6cF/M5d2qZgpTRijYGhMKT8Q=) 4: 3130332e33362e32342e302f32332d3234203d3e203233343536.roa (hash: 5VqRFEAHfoYwMvZ0tfnuV3to7ncxhe7kaQUJ2iNVZ0M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 12:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8a:3f:64:e7:94:e8:8e:bb:40:25:bc:ba:b7:36:8a:04:4b:34:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540D5EB957E44D80783D8B880FD2A47A69077A24 Validity Not Before: Oct 9 09:26:27 2026 GMT Not After : Oct 10 12:16:27 2026 GMT Subject: CN=6AB8FDA32177D5BFF920DFE3901C9C255BD9A2AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:25:82:ad:da:f5:95:a4:33:c1:45:66:d5: 32:05:39:e1:14:b6:10:b8:9f:6d:87:7e:4e:5a:ff: 4e:03:6b:9f:eb:f4:cb:f9:3a:1e:cf:a7:a7:02:1e: 5b:b7:b9:5e:f6:4c:48:27:47:4e:74:0e:c1:02:05: 8f:ad:58:f9:82:67:9a:e4:70:f5:33:c3:c4:bf:38: b6:e5:9a:26:a7:68:95:e4:d0:12:46:9d:25:a2:08: 5a:86:da:09:98:cf:c9:d2:a5:f8:36:58:74:d0:31: a5:f4:98:6e:a4:f8:c2:c9:55:e6:3a:da:1b:fc:99: 15:73:be:e8:7c:c3:2b:61:d3:3a:d4:c7:98:fd:80: 7d:72:7c:9d:0f:c1:ea:e4:75:33:d3:f0:1a:f1:cd: 1f:7f:1b:51:83:b6:8c:2a:1b:84:f6:84:22:6d:a1: ce:8a:9b:0b:ca:c0:12:e8:30:54:66:96:7e:78:63: 76:73:ca:06:87:77:9a:13:c3:24:4f:7f:9a:3d:50: a5:51:c8:7a:a5:ae:59:97:6a:fc:49:3e:db:12:87: f1:17:f5:63:dc:6e:1d:36:10:e0:da:1b:af:2f:f7: b6:0c:a9:b7:d1:bb:80:3b:cc:f6:4e:ec:7d:dd:b8: 06:51:d0:10:dd:f3:9a:61:0f:db:9f:89:9e:8e:3b: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B8:FD:A3:21:77:D5:BF:F9:20:DF:E3:90:1C:9C:25:5B:D9:A2:AB X509v3 Authority Key Identifier: keyid:54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:31:32:69:36:2f:d3:0f:66:18:a4:67:2b:24:8c:a3:fb:a2: ae:01:e1:c2:32:1c:fe:b9:20:82:2c:e2:de:e2:04:1d:5e:c3: 23:6c:0b:28:c8:25:db:8b:9f:3e:b1:3c:92:df:1f:8c:dc:8b: f4:54:65:e2:f7:bf:f9:2e:e0:d1:53:0d:0a:fa:6e:4e:0e:84: 8e:0c:5d:90:2f:06:3a:80:bd:c1:c7:21:cd:e3:c2:22:96:7f: 5d:83:c9:86:8a:1e:e1:d1:b1:bd:f6:44:1d:a5:1c:6a:a2:5b: 2a:70:84:ca:6f:22:24:1d:cf:9c:f0:48:a8:55:2a:3d:e2:c1: c4:a3:5b:2f:88:e2:5b:1e:7e:61:be:5b:3b:6a:99:ba:ea:55: 63:11:e5:99:b3:20:a0:82:66:1f:43:01:df:1e:d7:b7:10:b9: 95:fe:2f:6c:da:ba:a3:a2:81:9f:f4:bd:13:35:a7:f4:af:1e: db:e7:92:15:08:a4:84:4c:bb:d8:25:0c:da:2c:67:97:21:04: 47:14:cc:92:f6:63:36:7b:92:f9:15:22:87:b4:d7:fa:37:c2: 78:26:2d:e0:0c:76:00:ac:c1:62:84:60:ca:32:3e:4b:af:62: f1:ef:6e:82:98:32:00:ca:e4:0f:07:e6:3c:1f:7a:cb:06:dd: d0:24:73:f9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUd4o/ZOeU6I67QCW8urc2igRLNFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQwRDVFQjk1N0U0NEQ4MDc4M0Q4Qjg4MEZEMkE0N0E2 OTA3N0EyNDAeFw0yNjEwMDkwOTI2MjdaFw0yNjEwMTAxMjE2MjdaMDMxMTAvBgNV BAMTKDZBQjhGREEzMjE3N0Q1QkZGOTIwREZFMzkwMUM5QzI1NUJEOUEyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRnSWCrdr1laQzwUVm1TIFOeEU thC4n22Hfk5a/04Da5/r9Mv5Oh7Pp6cCHlu3uV72TEgnR050DsECBY+tWPmCZ5rk cPUzw8S/OLblmianaJXk0BJGnSWiCFqG2gmYz8nSpfg2WHTQMaX0mG6k+MLJVeY6 2hv8mRVzvuh8wyth0zrUx5j9gH1yfJ0PwerkdTPT8BrxzR9/G1GDtowqG4T2hCJt oc6KmwvKwBLoMFRmln54Y3ZzygaHd5oTwyRPf5o9UKVRyHqlrlmXavxJPtsSh/EX 9WPcbh02EODaG68v97YMqbfRu4A7zPZO7H3duAZR0BDd85phD9ufiZ6OO89tAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUarj9oyF31b/5IN/jkBycJVvZoqswHwYDVR0j BBgwFoAUVA1euVfkTYB4PYuID9KkemkHeiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DSEVO VEVLLzAvNTQwRDVFQjk1N0U0NEQ4MDc4M0Q4Qjg4MEZEMkE0N0E2OTA3N0EyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS81NDBENUVCOTU3RTQ0RDgwNzgzRDhCODgw RkQyQTQ3QTY5MDc3QTI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DSEVOVEVLLzAvNTQwRDVF Qjk1N0U0NEQ4MDc4M0Q4Qjg4MEZEMkE0N0E2OTA3N0EyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE8x Mmk2L9MPZhikZyskjKP7oq4B4cIyHP65IIIs4t7iBB1ewyNsCyjIJduLnz6xPJLf H4zci/RUZeL3v/ku4NFTDQr6bk4OhI4MXZAvBjqAvcHHIc3jwiKWf12DyYaKHuHR sb32RB2lHGqiWypwhMpvIiQdz5zwSKhVKj3iwcSjWy+I4lsefmG+WztqmbrqVWMR 5ZmzIKCCZh9DAd8e17cQuZX+L2zauqOigZ/0vRM1p/SvHtvnkhUIpIRMu9glDNos Z5chBEcUzJL2YzZ7kvkVIoe01/o3wngmLeAMdgCswWKEYMoyPkuvYvHvboKYMgDK 5A8H5jwfessG3dAkc/k= -----END CERTIFICATE-----Generated at Sat Oct 10 00:37:56 2026 by rpki-client