$ rpki-client -vvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: l1WydTnkMahoat8zoQFX6N9671D1cdWUwP3taGgbP7w= Subject key identifier: 0B:AB:1A:CC:E2:5C:F2:4D:CA:6B:D7:62:28:48:35:D8:BF:43:50:5C Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 4777B3E90091959913B79ECE807F871B5C8442EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: 06 Signing time: Wed 13 May 2026 04:46:54 +0000 Manifest this update: Wed 13 May 2026 04:41:54 +0000 Manifest next update: Thu 14 May 2026 05:04:54 +0000 Files and hashes: 1: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 2: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) 3: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) 4: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: EjEZlEdUzOcGGl7z9KmRvPI0uT1YAzMOc+VwhQqS2Ko=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:77:b3:e9:00:91:95:99:13:b7:9e:ce:80:7f:87:1b:5c:84:42:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: May 13 04:41:54 2026 GMT Not After : May 14 05:04:54 2026 GMT Subject: CN=0BAB1ACCE25CF24DCA6BD762284835D8BF43505C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:83:8f:8a:d6:d6:d5:aa:70:a3:e0:42:57: 8a:5a:2b:63:f1:8a:b1:16:4a:39:38:47:53:cc:fd: be:02:8a:18:7e:22:6a:f3:b4:aa:0b:97:30:24:f8: 4c:fe:9b:04:7b:4d:63:82:79:ff:c1:6b:0f:6c:fe: fd:af:f1:27:d5:47:0b:92:45:17:14:38:0a:7c:19: bc:a9:86:9d:cb:85:46:63:f8:45:40:2c:e7:1c:32: 1c:68:05:a1:72:d8:b0:89:b4:72:6a:18:ee:40:2b: 03:d6:5f:0d:c0:62:74:c3:97:4a:1c:76:c4:97:20: f5:e1:f5:c5:db:5d:a0:c3:1f:fa:cd:0a:38:31:e4: 72:c3:33:bc:9e:f2:fb:1f:92:81:dc:7a:f1:ac:71: 9a:dd:dd:52:94:f9:56:b8:b0:b4:bc:8a:43:bb:9c: 1b:b2:fa:b7:08:0d:e8:ac:af:74:8f:55:44:e2:7d: 70:12:f4:f5:c6:e9:e1:8b:e4:bc:c1:08:0c:cc:d6: 89:42:ab:ce:96:00:75:dc:83:45:e8:25:55:43:bd: 4a:10:c9:71:54:a3:a5:32:7c:b4:8b:c8:3f:a6:69: cb:b1:b3:f8:6a:0f:d2:46:7e:d4:c9:e5:6c:e0:32: 3b:61:18:e0:35:65:6b:7b:de:97:b7:95:8a:e3:f6: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:1A:CC:E2:5C:F2:4D:CA:6B:D7:62:28:48:35:D8:BF:43:50:5C X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:13:6d:50:33:e7:d7:98:d7:42:52:ff:1e:48:f8:36:48:cd: 5c:f9:d4:75:7a:98:82:44:fe:db:fe:9d:46:5f:63:b9:19:bf: 8a:f5:d3:3d:f9:99:ab:c8:93:13:8f:7d:96:c4:bc:a4:7a:7d: cc:98:4d:2b:e9:3c:94:17:cd:f6:62:1f:88:23:fb:52:3f:70: 43:01:f4:c6:8b:16:26:1a:ff:a2:29:f4:af:26:0a:f7:bd:57: 12:3f:f6:10:03:8e:b5:b4:bd:97:81:e2:3f:df:49:19:f2:99: a8:fd:89:b3:c5:73:f2:e0:f0:3a:a1:dd:0b:f9:a7:f7:5f:1b: 82:1c:73:bf:f7:6b:e5:6c:32:b1:8a:a0:a3:c6:1b:c9:d7:a7: 82:c9:13:5d:d5:82:41:2c:ec:a3:ed:53:80:c4:41:fe:88:79: 0c:c7:78:c7:18:6c:d3:fd:38:35:4b:53:05:e0:17:3c:74:73: 4d:3a:59:44:82:fe:25:1b:36:a1:83:9b:e9:39:2e:01:88:4a: 5b:a1:1d:14:89:5f:68:7c:63:f3:78:15:d4:61:88:53:e0:20: da:35:fe:36:5c:be:e7:62:c9:b7:7b:16:31:db:ea:6e:31:2d: 26:1e:eb:b3:7a:39:f2:88:00:1b:f5:f5:56:2c:40:66:0a:7d: 5c:38:8c:2c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUR3ez6QCRlZkTt57OgH+HG1yEQuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjA1MTMwNDQxNTRaFw0yNjA1MTQwNTA0NTRaMDMxMTAvBgNV BAMTKDBCQUIxQUNDRTI1Q0YyNERDQTZCRDc2MjI4NDgzNUQ4QkY0MzUwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDn4OPitbW1apwo+BCV4paK2Px irEWSjk4R1PM/b4Cihh+ImrztKoLlzAk+Ez+mwR7TWOCef/Baw9s/v2v8SfVRwuS RRcUOAp8Gbyphp3LhUZj+EVALOccMhxoBaFy2LCJtHJqGO5AKwPWXw3AYnTDl0oc dsSXIPXh9cXbXaDDH/rNCjgx5HLDM7ye8vsfkoHcevGscZrd3VKU+Va4sLS8ikO7 nBuy+rcIDeisr3SPVUTifXAS9PXG6eGL5LzBCAzM1olCq86WAHXcg0XoJVVDvUoQ yXFUo6UyfLSLyD+macuxs/hqD9JGftTJ5WzgMjthGOA1ZWt73pe3lYrj9t+TAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUC6sazOJc8k3Ka9diKEg12L9DUFwwHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKsTbVAz59eY10JS/x5I +DZIzVz51HV6mIJE/tv+nUZfY7kZv4r10z35mavIkxOPfZbEvKR6fcyYTSvpPJQX zfZiH4gj+1I/cEMB9MaLFiYa/6Ip9K8mCve9VxI/9hADjrW0vZeB4j/fSRnymaj9 ibPFc/Lg8Dqh3Qv5p/dfG4Icc7/3a+VsMrGKoKPGG8nXp4LJE13VgkEs7KPtU4DE Qf6IeQzHeMcYbNP9ODVLUwXgFzx0c006WUSC/iUbNqGDm+k5LgGISluhHRSJX2h8 Y/N4FdRhiFPgINo1/jZcvudiybd7FjHb6m4xLSYe67N6OfKIABv19VYsQGYKfVw4 jCw= -----END CERTIFICATE-----Generated at Wed May 13 20:33:37 2026 by rpki-client