$ rpki-client -vvf rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft File: 2D50476E80CFF23F1675B2EF9B63BB103C893243.mft (raw, json) Hash identifier: dq2ONfPIKrCS8Krc6rzVwDx9L2jy85E7Sx5y66MK10w= Subject key identifier: 81:CE:10:30:60:31:FD:30:C1:EC:C6:7E:B4:8D:CF:39:FC:49:94:E7 Authority key identifier: 2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 Certificate issuer: /CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Certificate serial: 7D782561ACCCDDE9233E15C044150B2070A7A501 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft Manifest number: 04 Signing time: Wed 13 May 2026 07:27:37 +0000 Manifest this update: Wed 13 May 2026 07:22:37 +0000 Manifest next update: Thu 14 May 2026 09:03:37 +0000 Files and hashes: 1: 2D50476E80CFF23F1675B2EF9B63BB103C893243.crl (hash: dlXDyuHaM+nuEOeuwt5IectxFASP8xtJtYt22eQVun8=) 2: 3130332e3138332e3135342e302f32332d3234203d3e2037343833.roa (hash: nxCey52fLbG4LlN5x0FYINGVY7pYCO3Y1zJpZMqwSeA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:78:25:61:ac:cc:dd:e9:23:3e:15:c0:44:15:0b:20:70:a7:a5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D50476E80CFF23F1675B2EF9B63BB103C893243 Validity Not Before: May 13 07:22:37 2026 GMT Not After : May 14 09:03:37 2026 GMT Subject: CN=81CE10306031FD30C1ECC67EB48DCF39FC4994E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:31:86:c0:c3:21:6d:dc:1b:4a:26:54:92: 4a:95:20:d2:77:a4:2a:f9:b6:3d:12:c9:d5:9c:b1: 75:22:9b:8d:13:3e:b1:0e:d5:4a:8b:be:17:ab:93: 24:d5:d4:9b:32:f1:50:19:ff:93:d2:06:fe:13:cd: e7:12:bb:85:94:2b:bf:e7:11:74:02:47:bd:c8:b2: 1e:cc:2d:8a:08:ad:a6:f3:0d:23:b0:ba:3d:bd:07: 6e:db:09:60:2f:29:22:ce:d4:01:72:55:2f:1f:a3: 31:e5:38:69:f2:8d:de:53:f5:f8:09:e8:be:07:6e: dc:48:d7:2f:aa:c8:78:1c:6c:d2:b5:fa:50:13:47: ea:2a:6f:f0:83:9c:f4:5b:a7:24:3d:13:6b:ea:04: cd:d1:db:ec:9f:0c:86:ef:06:45:8c:1e:f2:9b:4a: fa:a4:8c:4f:3f:6e:7d:ac:15:6f:cf:f8:fb:d2:82: 79:fb:44:dd:7f:b1:01:80:da:27:9e:df:08:11:e9: 79:1d:47:20:72:df:2c:5d:57:fc:89:9f:28:c9:b7: 7c:19:95:98:f5:e8:82:8b:62:35:8f:c1:c2:b6:f6: 50:66:fb:73:25:eb:13:2d:88:5f:a2:d0:da:d0:7a: cd:00:b5:d8:39:93:f1:a2:71:bb:18:3f:3c:a5:bc: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:10:30:60:31:FD:30:C1:EC:C6:7E:B4:8D:CF:39:FC:49:94:E7 X509v3 Authority Key Identifier: keyid:2D:50:47:6E:80:CF:F2:3F:16:75:B2:EF:9B:63:BB:10:3C:89:32:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D50476E80CFF23F1675B2EF9B63BB103C893243.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYVC/0/2D50476E80CFF23F1675B2EF9B63BB103C893243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:68:79:e1:09:42:63:3c:6f:34:1e:e0:98:42:22:b3:be:ca: 62:f4:90:b6:a5:89:1c:42:1a:42:7f:75:89:1c:7f:7f:c0:b2: 2d:f1:f2:54:08:3e:c5:ad:22:a5:7b:25:ec:1c:9b:40:45:7e: c6:29:b9:40:05:61:46:bb:21:84:bb:c5:e7:4c:48:cf:54:10: 08:f8:c0:c5:ae:25:29:26:ce:93:cf:52:08:58:5d:4e:cd:0a: 5b:29:e1:95:72:a1:52:61:00:90:43:ff:b5:48:b8:c2:a8:0a: 3b:1e:57:fc:b7:43:73:41:86:55:b8:c1:ae:4d:33:48:0f:43: 9c:cf:6e:66:c0:5b:d0:75:83:b2:16:f9:f8:04:90:52:9f:c9: 95:0a:bb:2d:41:04:db:cb:bc:7a:d0:13:47:d0:d8:a3:cf:07: f5:59:bf:9c:0d:fb:0d:ea:f2:d6:6f:e4:ef:40:21:71:77:1b: 25:20:da:12:a3:11:c7:c4:25:88:dd:ee:6d:bc:24:cd:9a:04: d6:5d:74:7f:5a:07:cb:b2:5b:57:97:f0:e1:64:45:ad:5c:a2: c7:87:b7:46:5e:0a:a4:0e:23:c0:e8:b9:fa:43:24:e3:0f:d4: dd:a2:a1:22:b9:7e:3d:49:a9:be:d0:10:30:35:58:6c:99:58: 89:90:21:18 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUfXglYazM3ekjPhXARBULIHCnpQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JCMTAz Qzg5MzI0MzAeFw0yNjA1MTMwNzIyMzdaFw0yNjA1MTQwOTAzMzdaMDMxMTAvBgNV BAMTKDgxQ0UxMDMwNjAzMUZEMzBDMUVDQzY3RUI0OERDRjM5RkM0OTk0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVTGGwMMhbdwbSiZUkkqVINJ3 pCr5tj0SydWcsXUim40TPrEO1UqLvherkyTV1Jsy8VAZ/5PSBv4TzecSu4WUK7/n EXQCR73Ish7MLYoIrabzDSOwuj29B27bCWAvKSLO1AFyVS8fozHlOGnyjd5T9fgJ 6L4HbtxI1y+qyHgcbNK1+lATR+oqb/CDnPRbpyQ9E2vqBM3R2+yfDIbvBkWMHvKb SvqkjE8/bn2sFW/P+PvSgnn7RN1/sQGA2iee3wgR6XkdRyBy3yxdV/yJnyjJt3wZ lZj16IKLYjWPwcK29lBm+3Ml6xMtiF+i0NrQes0Atdg5k/GicbsYPzylvPbNAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUgc4QMGAx/TDB7MZ+tI3POfxJlOcwHwYDVR0j BBgwFoAULVBHboDP8j8WdbLvm2O7EDyJMkMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1lWQy8w LzJENTA0NzZFODBDRkYyM0YxNjc1QjJFRjlCNjNCQjEwM0M4OTMyNDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1MDQ3NkU4MENGRjIzRjE2NzVCMkVGOUI2M0JC MTAzQzg5MzI0My5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NZVkMvMC8yRDUwNDc2RTgwQ0ZGMjNG MTY3NUIyRUY5QjYzQkIxMDNDODkzMjQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2h54QlCYzxvNB7g mEIis77KYvSQtqWJHEIaQn91iRx/f8CyLfHyVAg+xa0ipXsl7BybQEV+xim5QAVh RrshhLvF50xIz1QQCPjAxa4lKSbOk89SCFhdTs0KWynhlXKhUmEAkEP/tUi4wqgK Ox5X/LdDc0GGVbjBrk0zSA9DnM9uZsBb0HWDshb5+ASQUp/JlQq7LUEE28u8etAT R9DYo88H9Vm/nA37Dery1m/k70AhcXcbJSDaEqMRx8QliN3ubbwkzZoE1l10f1oH y7JbV5fw4WRFrVyix4e3Rl4KpA4jwOi5+kMk4w/U3aKhIrl+PUmpvtAQMDVYbJlY iZAhGA== -----END CERTIFICATE-----Generated at Wed May 13 20:33:33 2026 by rpki-client