$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json) Hash identifier: Chas20z0wdMnL8Cxiu6IG+sh9wwtXr12hMO/8/Bn31E= Subject key identifier: 8D:58:45:79:4C:91:89:14:67:51:F5:B8:80:6E:D5:48:09:CF:DA:98 Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C Certificate serial: 47F8527BDB3D97139AC1DE5B0BA7AF232079ADBE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft Manifest number: 05 Signing time: Wed 13 May 2026 06:37:25 +0000 Manifest this update: Wed 13 May 2026 06:32:25 +0000 Manifest next update: Thu 14 May 2026 08:36:25 +0000 Files and hashes: 1: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=) 2: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=) 3: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: wtdr/MeiDtaO0zLMOxBBVg/tRocjDeHAhbWyYIOM3AI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f8:52:7b:db:3d:97:13:9a:c1:de:5b:0b:a7:af:23:20:79:ad:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C Validity Not Before: May 13 06:32:25 2026 GMT Not After : May 14 08:36:25 2026 GMT Subject: CN=8D5845794C9189146751F5B8806ED54809CFDA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:6d:db:e1:89:6a:f1:b1:ad:38:b7:35:9f: 9f:57:c8:c7:79:6c:2a:5a:98:bd:13:55:ce:be:44: 1b:aa:18:8a:35:7c:27:3e:de:fd:80:bc:aa:0f:3b: b6:39:68:1b:1f:0d:04:df:60:18:1f:41:5e:37:2b: 79:5d:ca:15:20:c7:57:93:67:0a:99:85:86:cd:68: e6:33:d4:69:2b:e4:c9:89:6b:cf:39:8c:cb:70:2a: 89:1c:24:d3:c6:25:8f:67:95:6a:64:1c:9d:e2:ae: 7d:0e:3c:c2:cb:6d:7b:c5:c1:ec:4b:f8:7a:13:0c: d9:8d:a0:9f:eb:7a:58:94:d4:0a:4c:18:15:fb:23: 90:c5:9c:47:9c:be:cd:54:1f:ca:1a:5f:19:63:69: 04:60:a5:3d:4f:2c:3b:ed:02:2e:98:ba:28:63:28: c6:b6:8a:ad:34:cb:11:71:0c:b7:08:43:41:73:8b: ea:01:5a:a7:56:42:c4:4a:d3:f1:1b:8f:77:53:01: 6a:e9:15:ef:7d:62:7a:0c:a1:0e:d7:5c:4e:65:c0: 07:15:4b:2b:7c:ac:f7:e0:d8:e9:f2:21:ea:8d:62: 41:61:cc:39:ca:86:4b:96:01:f6:7d:a8:11:7f:27: 0d:49:bb:e9:49:32:a8:91:76:3a:cd:35:b2:7d:4c: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:58:45:79:4C:91:89:14:67:51:F5:B8:80:6E:D5:48:09:CF:DA:98 X509v3 Authority Key Identifier: keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3a:63:2b:b3:a9:c2:e6:ac:6b:5e:2b:36:56:f4:35:dc:c8: 35:c2:aa:87:47:cc:84:8e:7c:78:d9:2a:67:5a:36:1f:f4:66: af:69:54:3c:b5:04:0a:9f:33:63:c8:00:2f:08:8b:1c:c4:b0: ed:34:6e:c6:d5:0b:d3:9f:4d:90:46:ca:dc:2f:94:fb:86:79: 96:21:00:19:0e:3d:e1:c3:a0:22:9b:1c:c8:86:22:cb:af:1f: a5:cd:95:c7:3a:b3:36:04:c0:ec:23:68:bb:d2:43:34:24:0f: fa:d3:aa:70:7e:05:e5:a5:ed:ec:36:4b:a3:72:1f:db:b1:d3: 50:de:f6:2e:70:fc:51:52:1a:6d:49:06:ff:bd:1f:c3:63:2e: 02:69:98:4f:f2:06:68:4d:b9:ab:7e:08:9f:06:f3:ce:4b:e7: 7b:b9:9c:60:d3:c1:be:9c:1b:8b:01:0f:53:52:eb:5a:80:0b: a6:d9:e8:ec:ab:7f:91:bf:82:7d:6e:52:63:b0:36:80:27:04: 43:ad:06:57:45:2a:38:d5:95:3f:ed:56:13:76:c3:9f:f3:bc: ef:9e:2c:e2:29:9a:c1:10:87:c4:7d:b9:89:2e:54:38:a9:8f: 77:87:80:b2:83:44:be:4f:0b:7d:fa:09:e6:d9:d6:d0:90:7f: 35:b7:9c:4c -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUR/hSe9s9lxOawd5bC6evIyB5rb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJC OThGRTE0QzAeFw0yNjA1MTMwNjMyMjVaFw0yNjA1MTQwODM2MjVaMDMxMTAvBgNV BAMTKDhENTg0NTc5NEM5MTg5MTQ2NzUxRjVCODgwNkVENTQ4MDlDRkRBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sm3b4Ylq8bGtOLc1n59XyMd5 bCpamL0TVc6+RBuqGIo1fCc+3v2AvKoPO7Y5aBsfDQTfYBgfQV43K3ldyhUgx1eT ZwqZhYbNaOYz1Gkr5MmJa885jMtwKokcJNPGJY9nlWpkHJ3irn0OPMLLbXvFwexL +HoTDNmNoJ/reliU1ApMGBX7I5DFnEecvs1UH8oaXxljaQRgpT1PLDvtAi6Yuihj KMa2iq00yxFxDLcIQ0Fzi+oBWqdWQsRK0/Ebj3dTAWrpFe99YnoMoQ7XXE5lwAcV Syt8rPfg2OnyIeqNYkFhzDnKhkuWAfZ9qBF/Jw1Ju+lJMqiRdjrNNbJ9TPS5AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUjVhFeUyRiRRnUfW4gG7VSAnP2pgwHwYDVR0j BBgwFoAUIzL0X4NnsHnLv1gzG2A3krmP4UwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZ LzAvMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMzMyRjQ1RjgzNjdCMDc5Q0JCRjU4MzMxQjYw Mzc5MkI5OEZFMTRDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZLzAvMjMzMkY0NUY4MzY3 QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALw6YyuzqcLm rGteKzZW9DXcyDXCqodHzISOfHjZKmdaNh/0Zq9pVDy1BAqfM2PIAC8IixzEsO00 bsbVC9OfTZBGytwvlPuGeZYhABkOPeHDoCKbHMiGIsuvH6XNlcc6szYEwOwjaLvS QzQkD/rTqnB+BeWl7ew2S6NyH9ux01De9i5w/FFSGm1JBv+9H8NjLgJpmE/yBmhN uat+CJ8G885L53u5nGDTwb6cG4sBD1NS61qAC6bZ6Oyrf5G/gn1uUmOwNoAnBEOt BldFKjjVlT/tVhN2w5/zvO+eLOIpmsEQh8R9uYkuVDipj3eHgLKDRL5PC336CebZ 1tCQfzW3nEw= -----END CERTIFICATE-----Generated at Wed May 13 20:33:32 2026 by rpki-client