$ rpki-client -vvvf rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft File: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft (raw, json) Hash identifier: ZoMiJoVG+5lO4XUF8UdiNtgLj+6Rw78dX0jL9SadCL4= Subject key identifier: A3:E0:22:BD:7E:86:69:C0:F4:22:B7:E6:F0:41:2A:21:C6:BB:0B:6B Authority key identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5 Certificate issuer: /CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5 Certificate serial: 26C0EE89F84F3A665F91281515BE4FD7DC4E439B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft Manifest number: CA Signing time: Wed 07 Oct 2026 02:20:12 +0000 Manifest this update: Wed 07 Oct 2026 02:15:12 +0000 Manifest next update: Thu 08 Oct 2026 03:31:12 +0000 Files and hashes: 1: 3130332e3133362e3231302e302f32332d3234203d3e20313334383233.roa (hash: ORlTefciXfs7B8j/V1m0IX5sH4O69987zDEATqKs4Vg=) 2: 3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa (hash: iW1ZLD2xVMVzTgjKNYmVbGt8qDm7cZnk4mm0FDu/bKA=) 3: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl (hash: YqSmMRHa/Fhdvpic7saZYt2GMFJNk53k+uo2Mj9bqNM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 19:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c0:ee:89:f8:4f:3a:66:5f:91:28:15:15:be:4f:d7:dc:4e:43:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5 Validity Not Before: Oct 7 02:15:12 2026 GMT Not After : Oct 8 03:31:12 2026 GMT Subject: CN=A3E022BD7E8669C0F422B7E6F0412A21C6BB0B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:ee:7e:23:e5:bd:a4:08:23:ae:fe:5d:a7: d7:d7:f8:c8:57:d6:4c:de:50:97:b3:d8:3e:c0:d7: af:aa:09:85:1f:78:49:d5:7f:bf:98:2a:e8:4e:8b: 3e:36:d9:49:86:bc:64:8e:1d:18:5f:c6:13:d4:75: 97:73:d3:58:ab:dc:7d:6a:cc:04:d7:ff:ba:ca:a4: 7e:3c:e6:57:c2:ab:11:24:d7:42:f6:8b:16:42:d4: e4:1b:ca:c1:e7:0d:6c:00:8f:e9:0e:30:6c:21:77: 94:12:a4:f4:4e:b4:37:f7:4b:c1:3f:34:d0:88:6e: f0:83:58:cd:46:5e:cf:03:f9:7d:17:d9:b8:02:a6: 29:37:05:3c:8f:8e:51:0e:e4:6b:83:75:d1:2c:64: 1f:83:bb:dd:ce:fa:61:fd:ce:6c:2b:9c:77:d0:19: 25:e4:1e:cc:38:db:e5:ca:9c:d7:46:20:15:83:63: 3a:e7:21:86:0d:db:0f:7a:27:1b:0c:ef:ed:2f:60: 87:9f:79:16:14:10:a0:f0:05:63:7a:24:05:85:7e: a7:68:76:0a:ba:32:db:6b:d1:22:49:d5:cd:11:de: ef:dc:79:17:1d:c3:6b:1b:37:c5:59:f6:99:1f:2d: 26:f8:a9:f1:3a:b0:26:6d:77:8e:cc:ca:df:35:07: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:22:BD:7E:86:69:C0:F4:22:B7:E6:F0:41:2A:21:C6:BB:0B:6B X509v3 Authority Key Identifier: keyid:E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0f:a8:e5:50:0e:88:d1:3d:6f:a5:70:fa:a1:93:20:40:03: 9a:73:87:d0:1f:3b:21:dd:eb:15:63:70:85:de:aa:e6:76:a9: 0c:ad:17:eb:32:6a:06:5c:78:b7:d5:7b:f0:e6:b1:2e:18:8d: 3b:17:c4:30:97:01:97:23:03:d4:af:75:0b:4e:65:57:c9:79: be:5c:1c:40:08:d2:63:1e:28:73:0d:7f:59:83:6f:c9:82:ab: a2:9a:7c:cd:7f:32:63:38:cf:5b:bc:93:e5:a5:c4:a4:f9:77: b8:c1:a7:81:11:43:3c:ca:c6:9e:4b:5f:75:90:29:9e:29:ee: 31:ec:55:e2:85:b1:78:2e:77:bc:91:38:4c:cf:a0:a1:6a:18: 37:bf:ca:d3:3c:69:a5:cd:fb:03:fa:59:00:36:27:97:5c:09: b6:46:1c:c2:5e:aa:64:fb:0b:e3:fa:f1:92:ed:37:b5:4f:66: 29:fa:9e:ca:d2:d0:9b:4e:62:7c:91:6e:87:e1:8a:c8:08:1e: 4d:27:27:bb:d5:31:e3:03:c4:fc:8a:0c:91:73:d5:78:c1:07: f9:a7:a0:a7:5a:db:d9:04:c6:de:2a:79:54:d2:bc:3d:7e:84: 3c:33:95:ae:0e:78:34:c2:22:8b:97:0e:53:26:df:cf:bd:1f: bf:aa:c2:f7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJsDuifhPOmZfkSgVFb5P19xOQ5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQw RjI5ODdBNTAeFw0yNjEwMDcwMjE1MTJaFw0yNjEwMDgwMzMxMTJaMDMxMTAvBgNV BAMTKEEzRTAyMkJEN0U4NjY5QzBGNDIyQjdFNkYwNDEyQTIxQzZCQjBCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnO5+I+W9pAgjrv5dp9fX+MhX 1kzeUJez2D7A16+qCYUfeEnVf7+YKuhOiz422UmGvGSOHRhfxhPUdZdz01ir3H1q zATX/7rKpH485lfCqxEk10L2ixZC1OQbysHnDWwAj+kOMGwhd5QSpPROtDf3S8E/ NNCIbvCDWM1GXs8D+X0X2bgCpik3BTyPjlEO5GuDddEsZB+Du93O+mH9zmwrnHfQ GSXkHsw42+XKnNdGIBWDYzrnIYYN2w96JxsM7+0vYIefeRYUEKDwBWN6JAWFfqdo dgq6Mttr0SJJ1c0R3u/ceRcdw2sbN8VZ9pkfLSb4qfE6sCZtd47Myt81B8MdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUo+AivX6GacD0Irfm8EEqIca7C2swHwYDVR0j BBgwFoAU4GnL/SNPGrTlQP7V6OOhbQ8ph6UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VBTkdT SElILzAvRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdBNS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMDY5Q0JGRDIzNEYxQUI0RTU0MEZFRDVF OEUzQTE2RDBGMjk4N0E1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VBTkdTSElILzAvRTA2OUNC RkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdBNS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIcP qOVQDojRPW+lcPqhkyBAA5pzh9AfOyHd6xVjcIXequZ2qQytF+syagZceLfVe/Dm sS4YjTsXxDCXAZcjA9SvdQtOZVfJeb5cHEAI0mMeKHMNf1mDb8mCq6KafM1/MmM4 z1u8k+WlxKT5d7jBp4ERQzzKxp5LX3WQKZ4p7jHsVeKFsXgud7yROEzPoKFqGDe/ ytM8aaXN+wP6WQA2J5dcCbZGHMJeqmT7C+P68ZLtN7VPZin6nsrS0JtOYnyRbofh isgIHk0nJ7vVMeMDxPyKDJFz1XjBB/mnoKda29kExt4qeVTSvD1+hDwzla4OeDTC IouXDlMm38+9H7+qwvc= -----END CERTIFICATE-----Generated at Wed Oct 7 07:53:37 2026 by rpki-client