$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: d9QXDNTyYsV95RznZV14hoEkIPo2ImIgJFsImS3psl8= Subject key identifier: FF:EC:8D:A5:E3:4F:1B:87:BD:19:AB:D2:63:34:43:F6:1A:1F:A8:08 Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 3088EB03E11B17535DC74EA11500D3E5BB127CCC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: 06 Signing time: Wed 13 May 2026 05:07:00 +0000 Manifest this update: Wed 13 May 2026 05:02:00 +0000 Manifest next update: Thu 14 May 2026 06:22:00 +0000 Files and hashes: 1: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 2: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 3: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: FBwSlJ83ScBSJ1VRRK0JCNzFLlHgaz7PyiTe9OOR014=) 4: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:88:eb:03:e1:1b:17:53:5d:c7:4e:a1:15:00:d3:e5:bb:12:7c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: May 13 05:02:00 2026 GMT Not After : May 14 06:22:00 2026 GMT Subject: CN=FFEC8DA5E34F1B87BD19ABD2633443F61A1FA808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:05:20:05:f6:54:b9:8e:44:77:80:00:80: df:97:39:a1:08:cf:a8:df:66:36:85:67:a2:c4:f4: 53:b6:1a:0b:d8:64:c0:b2:64:f5:99:36:31:85:10: 27:8c:73:db:6b:f6:07:30:f0:30:c6:58:ce:97:39: 15:0e:1f:08:5f:a7:b4:62:e2:f8:23:21:92:15:2c: 06:29:7f:8f:50:79:8f:1c:a0:ec:f7:8f:57:66:28: 1a:19:e5:d0:82:e6:99:26:e0:08:50:35:49:6f:7f: db:b5:17:c2:c0:c1:c4:a0:6c:e7:53:4b:ec:87:62: 91:7b:c5:3d:48:32:17:8b:f6:8e:92:67:32:a4:39: 47:14:5e:3b:5e:12:10:5c:4e:27:c4:18:3c:45:b8: db:ab:a0:2c:55:bb:e2:b2:ae:c7:3a:80:6a:cd:25: 4f:ec:e0:28:44:fd:b7:45:32:e3:d3:79:92:14:df: 88:a5:86:94:8b:c7:d2:e9:b5:29:34:68:df:23:12: cf:c3:25:92:f7:28:21:98:f0:66:54:ff:3f:1e:63: 9e:1d:2d:4e:d0:93:3a:3f:c3:5f:e9:ce:3f:b4:e6: 32:35:4b:a3:1f:9a:e0:20:3e:5c:8a:93:11:b3:9b: 23:ba:00:8e:96:f3:7c:6e:a5:73:85:37:62:a4:6b: 16:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:8D:A5:E3:4F:1B:87:BD:19:AB:D2:63:34:43:F6:1A:1F:A8:08 X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b4:14:cc:9a:d9:98:e9:e1:a1:fa:23:d0:18:9a:7e:74:05: d6:d1:be:73:fd:27:f8:aa:ac:b0:a3:8a:5f:ad:4b:ba:5e:49: d3:91:de:c3:1c:76:e9:8d:fa:59:3d:88:21:d2:36:ab:5f:d0: 4e:6d:7b:e7:12:bc:4a:87:08:74:57:85:d8:5b:35:a0:dc:13: db:5a:4a:4f:3b:ad:dc:1c:9d:c3:37:16:c2:25:62:fd:83:30: 60:99:a5:a7:fc:52:19:cf:a7:5c:f2:6f:b6:f7:c1:68:ca:a6: bf:ae:09:1f:4d:45:20:c9:d4:0d:07:dc:cd:25:08:78:ec:ae: 4b:12:64:e7:63:c5:ff:a1:2b:13:6e:b6:13:93:96:61:da:bc: 07:9c:a2:66:f2:47:53:ea:4b:ee:38:c1:ca:57:05:c6:c6:c4: 79:a9:3c:9e:60:43:05:f7:ec:88:21:e5:2a:7e:4e:d8:87:b5: 3f:70:07:d3:b8:5c:27:c2:4f:a6:8a:a2:0d:35:90:a9:dd:5e: ee:fc:09:5b:6b:05:48:ab:5f:e7:65:b6:7d:11:7f:d8:5d:00: cc:37:32:75:28:74:7f:75:1b:e7:a1:f4:0a:fc:68:b3:00:cb: e9:71:0c:44:6c:35:bb:7f:f9:4b:31:66:7b:c5:53:3a:9b:26: c8:46:56:40 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUMIjrA+EbF1Ndx06hFQDT5bsSfMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA1MTMwNTAyMDBaFw0yNjA1MTQwNjIyMDBaMDMxMTAvBgNV BAMTKEZGRUM4REE1RTM0RjFCODdCRDE5QUJEMjYzMzQ0M0Y2MUExRkE4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGAUgBfZUuY5Ed4AAgN+XOaEI z6jfZjaFZ6LE9FO2GgvYZMCyZPWZNjGFECeMc9tr9gcw8DDGWM6XORUOHwhfp7Ri 4vgjIZIVLAYpf49QeY8coOz3j1dmKBoZ5dCC5pkm4AhQNUlvf9u1F8LAwcSgbOdT S+yHYpF7xT1IMheL9o6SZzKkOUcUXjteEhBcTifEGDxFuNuroCxVu+Kyrsc6gGrN JU/s4ChE/bdFMuPTeZIU34ilhpSLx9LptSk0aN8jEs/DJZL3KCGY8GZU/z8eY54d LU7Qkzo/w1/pzj+05jI1S6MfmuAgPlyKkxGzmyO6AI6W83xupXOFN2Kkaxa7AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU/+yNpeNPG4e9GavSYzRD9hofqAgwHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKu0FMya2Zjp 4aH6I9AYmn50BdbRvnP9J/iqrLCjil+tS7peSdOR3sMcdumN+lk9iCHSNqtf0E5t e+cSvEqHCHRXhdhbNaDcE9taSk87rdwcncM3FsIlYv2DMGCZpaf8UhnPp1zyb7b3 wWjKpr+uCR9NRSDJ1A0H3M0lCHjsrksSZOdjxf+hKxNuthOTlmHavAecombyR1Pq S+44wcpXBcbGxHmpPJ5gQwX37Igh5Sp+TtiHtT9wB9O4XCfCT6aKog01kKndXu78 CVtrBUirX+dltn0Rf9hdAMw3MnUodH91G+eh9Ar8aLMAy+lxDERsNbt/+UsxZnvF UzqbJshGVkA= -----END CERTIFICATE-----Generated at Wed May 13 20:36:33 2026 by rpki-client