$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: axb43x5MY0pOayopQtghWCsTYNGtPz47/gL0uzhuaEU= Subject key identifier: 8C:B2:35:09:5B:C0:97:5C:AC:EB:20:1A:40:F9:B2:AF:3A:A8:40:1A Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 2C4E323132626F1DFBF88E9053B9C98B0131CAC3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: 9F Signing time: Fri 18 Sep 2026 17:10:15 +0000 Manifest this update: Fri 18 Sep 2026 17:05:15 +0000 Manifest next update: Sat 19 Sep 2026 18:58:15 +0000 Files and hashes: 1: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) 2: 3136322e342e3233372e302f32342d3234203d3e20313331363531.roa (hash: tMr8ixZh2K6SpaPqReDJg4BecbXaqw7Rmztiq3kVMJk=) 3: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: t0sxX/J7DHyA7+RMNuIhT3/1j3L5qbFI7k7wb/onnz8=) 4: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: rkewqH+q2MmefgvP9xLiHPbeb7043RwX6NEiRy6AeiQ=) 5: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: rqIFLfCYjTacr84/afinxLOCwaaiUV1aCFWFsa89OVU=) 6: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: 320vPRBqmPyOIaf4CwfbHa3ZVsjShfWWv4nIG0EJGws=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 09:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4e:32:31:32:62:6f:1d:fb:f8:8e:90:53:b9:c9:8b:01:31:ca:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Sep 18 17:05:15 2026 GMT Not After : Sep 19 18:58:15 2026 GMT Subject: CN=8CB235095BC0975CACEB201A40F9B2AF3AA8401A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:72:96:bc:8b:8c:ca:23:73:45:f1:fe:10: 44:59:5b:56:c3:ba:eb:70:f7:13:08:68:f4:7d:6f: 3d:99:27:27:26:81:13:42:9b:d7:db:8f:b9:21:05: 67:9f:5b:49:4d:e5:43:15:0a:00:d2:f2:47:0f:71: 80:8b:13:c4:97:33:f1:ba:de:08:14:2b:2b:eb:22: a9:25:74:91:7e:e9:42:17:7b:3f:d8:dd:a1:b8:e9: 1f:5e:bd:d1:d6:fb:13:ef:a6:54:f4:53:04:95:a2: 42:20:6e:6d:d8:d7:53:fa:6d:bb:c1:ac:98:5b:90: 9d:6c:1c:54:13:92:77:fe:89:55:d3:66:32:1c:c5: 81:24:3d:25:3d:25:c0:f5:0f:20:b3:7a:a8:5c:65: 63:7b:52:52:82:62:89:94:46:c5:00:39:da:c6:cc: 6a:6a:bc:38:6c:f6:b1:c2:53:69:13:b4:ae:e5:74: 6c:1e:b6:3d:db:89:ca:09:5f:f8:70:ce:68:fd:1a: 89:24:69:ff:7c:0e:c3:8f:bf:0a:b9:56:d8:06:a8: f4:0d:c0:17:20:10:7e:e5:40:f9:2f:1f:24:08:d2: 73:3d:52:46:4a:59:73:b8:b7:27:87:c5:b7:1c:c3: 28:0e:d7:34:b3:fb:de:67:19:49:cf:e2:79:34:0f: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B2:35:09:5B:C0:97:5C:AC:EB:20:1A:40:F9:B2:AF:3A:A8:40:1A X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:7a:8d:8b:55:84:00:1e:e1:b2:17:19:14:92:40:03:b2:de: 86:2d:7e:b7:b6:f1:2e:ec:d2:5a:8d:12:d7:b7:b1:9f:4e:5f: 26:cd:f4:a6:c7:d1:b2:4f:a9:06:52:e9:a9:bd:c6:59:7d:6b: 8d:ea:aa:4f:4b:9f:c9:12:f9:de:d7:d3:7f:bf:fa:0d:f3:67: 17:2b:a5:37:c2:6d:04:64:48:b8:d6:df:60:3d:6f:16:9f:7c: 10:0e:f4:3b:f4:5f:d9:30:93:92:78:f8:54:39:2c:b9:3f:e2: 55:c2:21:70:2b:dd:ec:e5:c0:f5:42:cc:bc:5e:94:08:8a:45: 0e:0d:86:8d:6a:e2:fa:77:e0:17:49:c4:52:e7:b3:6c:5e:57: 6c:e3:48:0c:2f:cd:b9:de:95:ec:58:fc:99:dd:85:3c:81:f3: 82:a4:b0:73:5b:1b:92:85:e4:d1:b7:08:e7:c2:64:22:1a:9f: 85:5d:81:91:4a:b6:05:f0:18:25:19:86:e0:aa:9a:46:08:91: a0:06:3d:f2:c6:74:95:eb:03:0b:15:68:b1:de:05:51:96:c4: 87:cf:89:8b:0b:9b:c6:2a:77:05:1d:cf:1e:4e:37:57:2f:f8: b0:e9:05:3f:a5:70:70:ca:4e:b7:7d:99:43:c1:30:50:74:ca: 9a:f1:07:5a -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULE4yMTJibx37+I6QU7nJiwExysMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA5MTgxNzA1MTVaFw0yNjA5MTkxODU4MTVaMDMxMTAvBgNV BAMTKDhDQjIzNTA5NUJDMDk3NUNBQ0VCMjAxQTQwRjlCMkFGM0FBODQwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yXKWvIuMyiNzRfH+EERZW1bD uutw9xMIaPR9bz2ZJycmgRNCm9fbj7khBWefW0lN5UMVCgDS8kcPcYCLE8SXM/G6 3ggUKyvrIqkldJF+6UIXez/Y3aG46R9evdHW+xPvplT0UwSVokIgbm3Y11P6bbvB rJhbkJ1sHFQTknf+iVXTZjIcxYEkPSU9JcD1DyCzeqhcZWN7UlKCYomURsUAOdrG zGpqvDhs9rHCU2kTtK7ldGwetj3bicoJX/hwzmj9Gokkaf98DsOPvwq5VtgGqPQN wBcgEH7lQPkvHyQI0nM9UkZKWXO4tyeHxbccwygO1zSz+95nGUnP4nk0D4gvAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUjLI1CVvAl1ys6yAaQPmyrzqoQBowHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMl6jYtVhAAe 4bIXGRSSQAOy3oYtfre28S7s0lqNEte3sZ9OXybN9KbH0bJPqQZS6am9xll9a43q qk9Ln8kS+d7X03+/+g3zZxcrpTfCbQRkSLjW32A9bxaffBAO9Dv0X9kwk5J4+FQ5 LLk/4lXCIXAr3ezlwPVCzLxelAiKRQ4Nho1q4vp34BdJxFLns2xeV2zjSAwvzbne lexY/JndhTyB84KksHNbG5KF5NG3COfCZCIan4VdgZFKtgXwGCUZhuCqmkYIkaAG PfLGdJXrAwsVaLHeBVGWxIfPiYsLm8YqdwUdzx5ON1cv+LDpBT+lcHDKTrd9mUPB MFB0yprxB1o= -----END CERTIFICATE-----Generated at Sat Sep 19 03:37:51 2026 by rpki-client