$ rpki-client -vvf rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft File: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft (raw, json) Hash identifier: ynkbqcbhTnxf139EpdetmIh413M/pneAXBSpc897TP8= Subject key identifier: 78:52:C1:D5:C9:41:B0:8C:69:91:E8:37:DE:EA:17:AC:9B:34:B0:25 Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A Certificate issuer: /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A Certificate serial: 6F07CBC5DFE35FC7D393179796D687C7BACE5C2D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft Manifest number: 04 Signing time: Wed 13 May 2026 03:16:30 +0000 Manifest this update: Wed 13 May 2026 03:11:30 +0000 Manifest next update: Thu 14 May 2026 05:17:30 +0000 Files and hashes: 1: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl (hash: gXf04qw0yvHgzdlxq8frOfpIMqI5u7p+5ko/GSY7V7E=) 2: 3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (hash: 0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:07:cb:c5:df:e3:5f:c7:d3:93:17:97:96:d6:87:c7:ba:ce:5c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A Validity Not Before: May 13 03:11:30 2026 GMT Not After : May 14 05:17:30 2026 GMT Subject: CN=7852C1D5C941B08C6991E837DEEA17AC9B34B025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:5b:ed:c4:53:71:f7:8d:c1:0b:97:16:e7: 93:78:66:9f:b7:1c:76:32:35:b6:df:5e:92:90:b4: 96:0b:a2:90:96:fc:d7:dc:d9:04:ab:ef:1a:bc:b9: 0a:d7:15:25:93:a6:32:86:36:bc:3a:89:56:01:55: 8d:9a:a3:52:a4:35:b5:db:e7:41:17:75:6b:1f:92: 11:32:5c:5a:18:3e:26:76:47:1b:c6:9f:4b:5d:f7: 08:0f:50:71:41:25:fe:53:b2:07:c6:85:a1:b8:77: 69:d0:8d:d5:25:69:f6:33:fd:4b:dc:17:25:15:42: 19:ad:02:c6:43:c8:cb:2e:0b:37:d6:60:41:65:f2: ee:56:12:05:08:b3:af:10:d9:67:05:3b:4b:53:b7: 3a:49:a8:83:d2:a8:e2:3f:8d:fb:45:f2:75:c8:91: ca:4b:bd:f9:e4:67:55:c2:39:d1:c8:be:57:ea:2c: 1e:94:ba:f6:d8:da:4e:f7:11:f0:50:f0:6e:83:36: 22:d6:ce:08:d5:67:9e:a8:df:03:48:42:01:dd:31: 32:9b:92:65:4c:b4:09:4d:b7:15:fd:b0:dd:24:d2: c3:95:d7:ae:79:7d:89:d2:68:f8:f8:28:ea:40:58: 8c:7e:6e:d9:11:0f:91:0d:02:79:d0:ab:a9:65:e9: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:C1:D5:C9:41:B0:8C:69:91:E8:37:DE:EA:17:AC:9B:34:B0:25 X509v3 Authority Key Identifier: keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:11:ac:57:5e:79:d8:54:cb:24:36:87:e1:b9:87:26:73: 05:6f:3e:5a:cc:5e:ae:05:9e:41:4a:dd:02:5f:75:f3:c8:fd: 52:2b:c1:bc:90:94:fb:8d:e9:07:7a:61:c6:1d:6a:47:b5:60: 54:6d:10:13:4c:ee:76:65:9a:4d:1b:69:89:5e:00:ee:31:be: f2:db:48:7c:8d:1a:68:63:cb:43:23:9d:7b:ec:18:97:7c:19: f8:fe:76:89:48:ec:a8:d4:29:37:8a:97:47:97:9b:51:0b:96: 99:92:20:f0:dd:15:d0:76:24:4a:27:7f:f3:44:e2:ef:a2:35: a7:0f:70:2c:41:f0:13:34:dd:ef:28:96:75:7a:d0:bd:5a:4f: 53:40:33:f1:1d:a1:5a:6b:cc:bc:89:f3:d7:06:d2:34:c9:9c: ef:ae:dc:d3:94:31:b9:e8:86:13:5c:dc:a6:ff:e5:b4:eb:b8: e3:2e:0d:ae:41:d4:53:ce:93:6a:88:11:bb:50:0a:d3:3e:f0: 08:8b:47:c1:25:5c:5c:39:d2:89:cd:ea:fc:2d:53:e6:fb:3b: 36:e4:62:7c:cd:d7:62:a5:80:d6:97:87:7e:36:ae:5e:51:35: f3:47:c0:0d:9c:c1:61:52:d6:bd:7a:9c:a4:88:fa:19:e3:f5: 18:28:7a:e7 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUbwfLxd/jX8fTkxeXltaHx7rOXC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU2Njc4OTcyQ0JFMzFGOUUzNDZFNEU3N0ZEODc5MkY0 QjEwNjkwQTAeFw0yNjA1MTMwMzExMzBaFw0yNjA1MTQwNTE3MzBaMDMxMTAvBgNV BAMTKDc4NTJDMUQ1Qzk0MUIwOEM2OTkxRTgzN0RFRUExN0FDOUIzNEIwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+A1vtxFNx943BC5cW55N4Zp+3 HHYyNbbfXpKQtJYLopCW/Nfc2QSr7xq8uQrXFSWTpjKGNrw6iVYBVY2ao1KkNbXb 50EXdWsfkhEyXFoYPiZ2RxvGn0td9wgPUHFBJf5TsgfGhaG4d2nQjdUlafYz/Uvc FyUVQhmtAsZDyMsuCzfWYEFl8u5WEgUIs68Q2WcFO0tTtzpJqIPSqOI/jftF8nXI kcpLvfnkZ1XCOdHIvlfqLB6UuvbY2k73EfBQ8G6DNiLWzgjVZ56o3wNIQgHdMTKb kmVMtAlNtxX9sN0k0sOV1655fYnSaPj4KOpAWIx+btkRD5ENAnnQq6ll6cH5AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUeFLB1clBsIxpkeg33uoXrJs0sCUwHwYDVR0j BBgwFoAUjmZ4lyy+MfnjRuTnf9h5L0sQaQowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09NUEFM LzAvOEU2Njc4OTcyQ0JFMzFGOUUzNDZFNEU3N0ZEODc5MkY0QjEwNjkwQS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RTY2Nzg5NzJDQkUzMUY5RTM0NkU0RTc3RkQ4 NzkyRjRCMTA2OTBBLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09NUEFMLzAvOEU2Njc4OTcyQ0JF MzFGOUUzNDZFNEU3N0ZEODc5MkY0QjEwNjkwQS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKDtEaxXXnnY VMskNofhuYcmcwVvPlrMXq4FnkFK3QJfdfPI/VIrwbyQlPuN6Qd6YcYdake1YFRt EBNM7nZlmk0baYleAO4xvvLbSHyNGmhjy0MjnXvsGJd8Gfj+dolI7KjUKTeKl0eX m1ELlpmSIPDdFdB2JEonf/NE4u+iNacPcCxB8BM03e8olnV60L1aT1NAM/EdoVpr zLyJ89cG0jTJnO+u3NOUMbnohhNc3Kb/5bTruOMuDa5B1FPOk2qIEbtQCtM+8AiL R8ElXFw50onN6vwtU+b7OzbkYnzN12KlgNaXh342rl5RNfNHwA2cwWFS1r16nKSI +hnj9Rgoeuc= -----END CERTIFICATE-----Generated at Wed May 13 20:33:31 2026 by rpki-client