$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: FmZh4BT2GjEGokfBwzH1ZLOsNjI99I3Tx5M4twOYgPc= Subject key identifier: D1:07:05:6C:99:14:45:2B:4E:E3:5D:DC:4E:33:EB:86:1C:B6:67:65 Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 748FCDC0471645BFD6CF0A9416FF14809615313F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 08:28:24 +0000 Manifest this update: Tue 30 Jun 2026 08:23:24 +0000 Manifest next update: Wed 01 Jul 2026 11:48:24 +0000 Files and hashes: 1: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: CUyss+CKU0rWtfWDPcee+QeI52nlI/2ftMJB/Iepvg4=) 2: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 3: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 4: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8f:cd:c0:47:16:45:bf:d6:cf:0a:94:16:ff:14:80:96:15:31:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Jun 30 08:23:24 2026 GMT Not After : Jul 1 11:48:24 2026 GMT Subject: CN=D107056C9914452B4EE35DDC4E33EB861CB66765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:85:df:d7:18:10:47:da:35:44:51:29:20: 95:ad:ab:42:33:40:c9:69:f7:ab:40:d0:57:1a:41: 5f:c2:80:ee:c9:44:aa:d0:e6:f3:ee:ab:91:15:7f: 4b:17:ff:ba:9b:2d:04:8d:41:3f:c3:b9:ae:ee:02: 92:92:fe:7b:3a:6a:d7:20:10:93:53:aa:0f:d3:d8: d4:ac:da:12:2f:c5:9f:a6:25:4f:ab:8f:7d:89:e6: fc:e0:45:6b:83:72:60:56:da:ed:15:fa:ea:c4:bb: f7:7e:04:80:04:af:22:c4:1e:6a:77:26:6f:8c:4f: 35:6e:1a:67:15:29:64:f0:c7:c0:d8:91:49:76:5b: 7d:26:49:e7:7b:8d:cb:57:0b:7a:ea:c0:9f:30:8b: 9f:43:5d:50:58:52:10:27:55:fa:88:59:a0:82:e8: f1:76:ff:b1:99:0e:e6:e6:89:7b:ba:f3:16:7b:38: 76:50:b4:d7:2f:d6:fb:c1:1b:c4:5c:64:df:12:69: 7b:1e:5a:dd:96:b7:c4:01:e5:e2:be:7c:ce:7e:7c: 9b:70:ee:7b:27:4a:38:6a:ad:f8:40:8b:b3:14:62: 70:45:25:35:10:da:d8:fd:3b:7c:9a:b3:2b:1e:a1: fe:99:ad:9d:7c:61:9a:a8:56:c1:5d:96:8a:f7:33: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:07:05:6C:99:14:45:2B:4E:E3:5D:DC:4E:33:EB:86:1C:B6:67:65 X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:03:86:58:74:86:ad:83:8b:08:e8:4a:2f:38:7a:f4:76:ad: 65:d8:16:7b:9a:e4:2a:5f:9e:29:59:68:02:65:61:d5:0b:d9: 06:1a:16:e8:98:de:36:48:6e:d8:86:ca:d2:87:4d:bd:61:de: 0e:62:d5:2f:c5:b4:76:f8:db:55:ea:a1:a5:07:9d:1e:57:e3: 98:a1:18:85:aa:0c:85:d9:1c:d1:1b:da:d2:c7:2d:44:93:d2: 6e:25:ae:9d:07:ef:51:21:d2:50:b7:c1:a9:70:58:f4:8d:87: bd:21:54:4f:24:de:b4:51:7d:93:76:20:b0:3a:81:46:4e:02: 70:f3:a8:3f:f3:9a:32:82:fd:cf:8a:a3:9f:bd:a5:f9:06:e1: 06:ae:25:7e:fc:ae:2d:be:16:6d:da:30:ab:21:2e:c8:22:93: c6:b1:10:6b:74:1f:f3:fc:41:3f:63:33:78:3c:1d:dd:2d:51: 7c:17:fd:f1:4a:a1:a5:7e:7e:40:9f:2f:4e:78:9d:97:19:d9: 9c:61:29:85:71:7a:1c:50:9f:00:33:3f:1d:42:1f:fa:eb:d0: c5:a8:d1:7d:aa:e7:6a:28:fa:27:6c:6b:72:7e:0e:f0:52:21: e9:fc:4a:57:ba:90:27:9b:f4:bc:95:6e:96:41:49:6f:5c:22: 8b:75:d7:ef -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUdI/NwEcWRb/WzwqUFv8UgJYVMT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA2MzAwODIzMjRaFw0yNjA3MDExMTQ4MjRaMDMxMTAvBgNV BAMTKEQxMDcwNTZDOTkxNDQ1MkI0RUUzNUREQzRFMzNFQjg2MUNCNjY3NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuL4Xf1xgQR9o1RFEpIJWtq0Iz QMlp96tA0FcaQV/CgO7JRKrQ5vPuq5EVf0sX/7qbLQSNQT/Dua7uApKS/ns6atcg EJNTqg/T2NSs2hIvxZ+mJU+rj32J5vzgRWuDcmBW2u0V+urEu/d+BIAEryLEHmp3 Jm+MTzVuGmcVKWTwx8DYkUl2W30mSed7jctXC3rqwJ8wi59DXVBYUhAnVfqIWaCC 6PF2/7GZDubmiXu68xZ7OHZQtNcv1vvBG8RcZN8SaXseWt2Wt8QB5eK+fM5+fJtw 7nsnSjhqrfhAi7MUYnBFJTUQ2tj9O3yasyseof6ZrZ18YZqoVsFdlor3M3JfAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU0QcFbJkURStO413cTjPrhhy2Z2UwHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIsDhlh0hq2D iwjoSi84evR2rWXYFnua5CpfnilZaAJlYdUL2QYaFuiY3jZIbtiGytKHTb1h3g5i 1S/FtHb421XqoaUHnR5X45ihGIWqDIXZHNEb2tLHLUST0m4lrp0H71Eh0lC3walw WPSNh70hVE8k3rRRfZN2ILA6gUZOAnDzqD/zmjKC/c+Ko5+9pfkG4QauJX78ri2+ Fm3aMKshLsgik8axEGt0H/P8QT9jM3g8Hd0tUXwX/fFKoaV+fkCfL054nZcZ2Zxh KYVxehxQnwAzPx1CH/rr0MWo0X2q52oo+idsa3J+DvBSIen8Sle6kCeb9LyVbpZB SW9cIot11+8= -----END CERTIFICATE-----Generated at Tue Jun 30 19:11:00 2026 by rpki-client