$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: Ta2yxCi1WoScKW99SZRb87c4oRm0MiG9+8+NuuB6w78= Subject key identifier: 4A:2F:66:EF:8F:DB:2B:D6:C5:D9:C1:31:3A:75:82:FF:ED:31:62:D1 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 07BC19BEA66DAC96DC473D86C292719871CE0CC9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: 07 Signing time: Wed 13 May 2026 06:17:19 +0000 Manifest this update: Wed 13 May 2026 06:12:19 +0000 Manifest next update: Thu 14 May 2026 07:41:19 +0000 Files and hashes: 1: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) 2: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) 3: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: Iy913qyZneicy78RT9ehPBdAmcemre8mT0Jq0Z3w3mU=) 4: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) 5: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:bc:19:be:a6:6d:ac:96:dc:47:3d:86:c2:92:71:98:71:ce:0c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: May 13 06:12:19 2026 GMT Not After : May 14 07:41:19 2026 GMT Subject: CN=4A2F66EF8FDB2BD6C5D9C1313A7582FFED3162D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:f0:23:5d:f5:3f:34:cc:47:c1:92:76:cd: 16:d1:d2:eb:07:22:d1:8e:fe:89:59:75:17:eb:df: 38:bd:a2:31:40:4f:21:96:c6:b6:d8:2c:5a:52:17: 31:2f:8c:f3:2e:93:f3:08:f8:d5:f0:6a:91:30:16: 97:29:5b:b1:aa:7f:ce:ae:54:9e:fc:68:f3:f4:19: 3a:a4:c3:df:6d:86:e9:56:fa:cd:2e:0c:00:9f:f8: 9b:18:69:c9:8a:18:e5:4b:47:ee:d3:c5:92:34:0a: 99:a3:4e:a8:d1:4b:6c:2f:22:b5:f5:c5:42:ac:c0: 98:9a:5e:1a:da:3c:ed:eb:ee:7c:5b:92:2d:f1:c3: 05:ca:92:d2:a2:54:e1:90:56:64:05:cb:0f:51:36: 10:15:e2:ae:fd:b5:3c:4e:13:99:43:f3:7c:4e:2c: 9e:8b:29:0f:9b:b7:31:18:e8:d9:28:8c:7d:1e:be: df:15:f0:e3:b1:d7:99:2e:7d:72:52:fd:87:fc:fb: 4d:64:22:4c:08:e2:69:a0:ca:0d:6c:96:6e:0f:e2: 69:72:2a:1b:62:12:a4:f1:f2:ac:06:95:80:7b:53: e9:0a:46:d8:05:e3:f6:24:b1:7d:23:f1:1a:ed:47: 1f:7f:34:60:32:c8:29:42:fb:fc:8b:89:b3:11:c7: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2F:66:EF:8F:DB:2B:D6:C5:D9:C1:31:3A:75:82:FF:ED:31:62:D1 X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9c:da:6e:77:93:6b:5a:ec:83:a7:c1:95:27:82:ee:00:00: 45:7c:06:3d:f3:8f:66:08:db:c0:df:99:68:7c:b0:58:1b:b1: 33:18:d2:ba:66:c3:1f:2e:0b:eb:a8:12:66:69:ec:63:ec:40: 31:b7:9a:71:bf:67:f1:08:c2:8e:e1:a2:b5:2e:f4:0e:60:27: 9e:37:50:42:bd:89:29:80:fb:49:a0:9c:3f:a4:76:48:03:ee: 15:20:5e:d2:11:30:4e:73:03:9c:12:7d:57:fa:12:6b:6d:f5: bd:c5:b8:44:0d:50:07:11:96:c4:96:c8:8f:49:7c:72:49:2a: 20:8a:05:d6:ee:14:ba:42:19:ac:b1:19:9d:9a:6b:79:74:3a: e2:f1:f4:94:de:c2:28:5c:ff:66:91:4f:c7:c7:f5:db:79:04: d1:27:cf:a1:d4:a4:7c:c7:a8:e5:76:df:44:8a:81:9b:6e:df: 77:5f:1b:4d:a5:2b:c7:14:3e:a7:7a:ed:bf:66:a6:47:b2:02: 36:bf:ae:66:1f:11:10:32:6e:01:4e:f5:c8:da:f7:b3:1f:22: 42:75:ff:29:9a:5e:bb:c6:b4:25:58:b1:f3:da:08:15:84:a8: a7:95:0f:e4:06:90:e1:7d:9c:0c:d6:ce:9b:04:3d:e4:e5:cd: 95:cc:ee:d5 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUB7wZvqZtrJbcRz2GwpJxmHHODMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA1MTMwNjEyMTlaFw0yNjA1MTQwNzQxMTlaMDMxMTAvBgNV BAMTKDRBMkY2NkVGOEZEQjJCRDZDNUQ5QzEzMTNBNzU4MkZGRUQzMTYyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSvAjXfU/NMxHwZJ2zRbR0usH ItGO/olZdRfr3zi9ojFATyGWxrbYLFpSFzEvjPMuk/MI+NXwapEwFpcpW7Gqf86u VJ78aPP0GTqkw99thulW+s0uDACf+JsYacmKGOVLR+7TxZI0CpmjTqjRS2wvIrX1 xUKswJiaXhraPO3r7nxbki3xwwXKktKiVOGQVmQFyw9RNhAV4q79tTxOE5lD83xO LJ6LKQ+btzEY6NkojH0evt8V8OOx15kufXJS/Yf8+01kIkwI4mmgyg1slm4P4mly KhtiEqTx8qwGlYB7U+kKRtgF4/YksX0j8RrtRx9/NGAyyClC+/yLibMRxw9LAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUSi9m74/bK9bF2cExOnWC/+0xYtEwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNnNpud5NrWuyD p8GVJ4LuAABFfAY9849mCNvA35lofLBYG7EzGNK6ZsMfLgvrqBJmaexj7EAxt5px v2fxCMKO4aK1LvQOYCeeN1BCvYkpgPtJoJw/pHZIA+4VIF7SETBOcwOcEn1X+hJr bfW9xbhEDVAHEZbElsiPSXxySSogigXW7hS6QhmssRmdmmt5dDri8fSU3sIoXP9m kU/Hx/XbeQTRJ8+h1KR8x6jldt9EioGbbt93XxtNpSvHFD6neu2/ZqZHsgI2v65m HxEQMm4BTvXI2vezHyJCdf8pml67xrQlWLHz2ggVhKinlQ/kBpDhfZwM1s6bBD3k 5c2VzO7V -----END CERTIFICATE-----Generated at Wed May 13 20:33:41 2026 by rpki-client