$ rpki-client -vvvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: QBD0V73PpXZOaQSAcaqQDL8GcFAdqQlnzpC/7Sw183Y= Subject key identifier: 0D:D4:51:25:54:8F:AA:B8:7C:CF:21:24:27:48:E9:7A:E1:95:02:CD Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 65085BCC97907547099D39A7A13AF6B8A3EEC27A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: CA Signing time: Tue 06 Oct 2026 06:46:58 +0000 Manifest this update: Tue 06 Oct 2026 06:41:58 +0000 Manifest next update: Wed 07 Oct 2026 07:34:58 +0000 Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 2: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) 3: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 4: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: lNaQ09EmWg3o2usMgCKnBgAC8cpJN1SoHj9w8hH7odg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 07:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:08:5b:cc:97:90:75:47:09:9d:39:a7:a1:3a:f6:b8:a3:ee:c2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Oct 6 06:41:58 2026 GMT Not After : Oct 7 07:34:58 2026 GMT Subject: CN=0DD45125548FAAB87CCF21242748E97AE19502CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:38:4e:93:ab:2b:c0:30:cb:be:db:d1:5a: b8:4f:94:81:79:14:3f:1f:48:01:95:d5:ab:02:c3: 91:8f:72:ab:35:71:a5:eb:c0:27:ab:be:c0:73:20: 31:72:78:f9:51:ba:6f:3c:48:34:c6:b8:a4:f3:7e: c1:85:68:fb:71:c0:39:f2:45:8f:49:80:b1:0c:7b: c4:48:92:f7:9f:ef:85:d5:7a:76:41:14:a8:8d:f9: 4a:4f:13:a7:9d:32:7a:56:7e:74:1b:ad:3d:cf:43: eb:20:89:e3:b7:5a:d7:ab:fc:44:11:63:74:6f:ef: f0:2a:ba:7e:ec:6b:bc:92:3b:98:b4:43:2e:36:5d: 7e:b5:56:a9:1f:53:48:b4:39:e1:0c:7b:33:df:3d: fb:40:22:be:04:7f:1f:8b:87:e6:ff:e7:47:82:68: 3e:50:3c:1b:69:bf:71:38:b7:f9:c1:22:6a:7f:ef: 57:f5:f1:9c:5e:c0:f3:f0:74:f3:50:2f:10:81:78: 44:bd:ac:0c:8e:ed:98:a8:73:46:35:20:8d:e2:ab: 35:96:0f:16:47:03:17:da:66:36:86:85:2f:0a:f1: b6:98:d7:26:a0:63:a1:96:14:24:8a:b3:ee:e9:d9: 91:84:9e:78:32:6b:fe:db:05:03:d1:13:00:b9:4f: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D4:51:25:54:8F:AA:B8:7C:CF:21:24:27:48:E9:7A:E1:95:02:CD X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6c:27:b9:b9:45:de:8d:c1:8c:f0:6c:83:c2:97:94:0c:27: 68:58:7a:0b:7e:46:cc:06:80:92:c9:7c:8f:37:95:ed:c4:4a: cf:5b:c6:f2:8c:c9:3f:e9:dd:1b:3f:8e:ec:32:5a:39:8c:77: 5f:1e:20:8e:cd:c1:cb:66:fd:da:77:fc:3a:97:66:97:d9:52: 96:0e:bb:1a:52:8d:4b:3a:70:21:73:b4:a8:c9:a7:49:e2:76: cc:7d:6e:df:bb:ac:70:e3:93:9b:c0:2a:12:d0:2c:78:14:28: c0:dd:b0:99:be:81:2c:53:4e:33:dc:cc:cb:b4:ab:fe:10:19: cb:e5:39:16:3e:5f:44:3d:cd:55:2e:95:73:7a:af:cb:f4:db: ce:86:b4:53:d5:b1:aa:f6:1a:55:4c:4c:ee:a5:4d:8e:91:e7: f8:db:19:32:b4:83:76:57:85:c6:24:72:a5:14:5a:3e:a1:4d: 48:78:9b:fb:f2:c3:29:bc:f6:03:4c:d7:28:ec:24:1b:03:19: 44:32:1f:ec:e8:d5:2e:4a:80:7d:74:4b:e0:63:15:1a:be:ac: 24:db:61:cb:9b:f3:aa:ce:79:2a:7f:1c:8d:e3:09:75:6a:76: a1:37:c6:96:ec:ee:b6:90:65:39:45:34:f7:79:54:2d:15:48: 28:83:ef:da -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUZQhbzJeQdUcJnTmnoTr2uKPuwnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjEwMDYwNjQxNThaFw0yNjEwMDcwNzM0NThaMDMxMTAvBgNV BAMTKDBERDQ1MTI1NTQ4RkFBQjg3Q0NGMjEyNDI3NDhFOTdBRTE5NTAyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80ThOk6srwDDLvtvRWrhPlIF5 FD8fSAGV1asCw5GPcqs1caXrwCervsBzIDFyePlRum88SDTGuKTzfsGFaPtxwDny RY9JgLEMe8RIkvef74XVenZBFKiN+UpPE6edMnpWfnQbrT3PQ+sgieO3Wter/EQR Y3Rv7/Aqun7sa7ySO5i0Qy42XX61VqkfU0i0OeEMezPfPftAIr4Efx+Lh+b/50eC aD5QPBtpv3E4t/nBImp/71f18ZxewPPwdPNQLxCBeES9rAyO7Zioc0Y1II3iqzWW DxZHAxfaZjaGhS8K8baY1yagY6GWFCSKs+7p2ZGEnngya/7bBQPREwC5TxNJAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUDdRRJVSPqrh8zyEkJ0jpeuGVAs0wHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAxsJ7m5Rd6N wYzwbIPCl5QMJ2hYegt+RswGgJLJfI83le3ESs9bxvKMyT/p3Rs/juwyWjmMd18e II7Nwctm/dp3/DqXZpfZUpYOuxpSjUs6cCFztKjJp0nidsx9bt+7rHDjk5vAKhLQ LHgUKMDdsJm+gSxTTjPczMu0q/4QGcvlORY+X0Q9zVUulXN6r8v0286GtFPVsar2 GlVMTO6lTY6R5/jbGTK0g3ZXhcYkcqUUWj6hTUh4m/vywym89gNM1yjsJBsDGUQy H+zo1S5KgH10S+BjFRq+rCTbYcub86rOeSp/HI3jCXVqdqE3xpbs7raQZTlFNPd5 VC0VSCiD79o= -----END CERTIFICATE-----Generated at Tue Oct 6 20:34:05 2026 by rpki-client