$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json) Hash identifier: fkfbdC8WJNLEXKyc4aywQielrnljn6WCy8QDoAIK69U= Subject key identifier: 50:3E:A9:CE:65:DF:57:B8:4D:BC:74:EF:99:EA:CD:BD:DA:1D:5F:59 Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 1E264CA9848D72FF8FDD03BEE2258E95BB0239E1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft Manifest number: 07 Signing time: Wed 13 May 2026 07:07:33 +0000 Manifest this update: Wed 13 May 2026 07:02:33 +0000 Manifest next update: Thu 14 May 2026 07:53:33 +0000 Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=) 2: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: nXP9kfIzp/moVEZu5UoyuR0jYSjL13Q8BSelYqGGeZc=) 3: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=) 4: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=) 5: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:26:4c:a9:84:8d:72:ff:8f:dd:03:be:e2:25:8e:95:bb:02:39:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: May 13 07:02:33 2026 GMT Not After : May 14 07:53:33 2026 GMT Subject: CN=503EA9CE65DF57B84DBC74EF99EACDBDDA1D5F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:57:f2:3e:7c:cc:04:34:e9:ba:c6:6c:65: c8:21:32:c0:31:c6:d9:24:ee:8c:ba:85:33:ee:15: ee:f8:01:e5:34:44:93:39:58:c8:0d:98:3b:cf:aa: 00:2e:d6:89:0a:b3:b5:ad:4c:73:ec:5d:40:6e:1c: af:cd:29:e4:fd:12:a4:0f:6a:77:8a:b9:c1:a5:d3: 9c:e3:f4:d3:8c:14:1b:f9:e6:8b:52:11:f9:7c:f2: 25:c7:ad:a1:66:57:54:68:93:3d:ee:ae:ab:7b:3b: 21:01:9f:8c:35:d5:36:f9:fa:de:95:2f:30:a6:59: 64:ac:e2:46:e7:b9:61:8f:f4:48:b5:cf:fc:51:16: 48:e7:41:86:55:96:5b:54:7b:ca:07:0e:28:0c:e3: 39:4e:9b:20:e2:fd:6c:7b:90:b5:20:a7:9e:df:64: c8:46:ee:d4:65:8b:e0:60:44:3d:75:fa:a6:ec:9d: 7e:d0:4a:e2:53:06:1e:45:9e:54:bd:2b:5b:14:1a: 11:56:c0:99:61:54:ce:75:42:eb:a5:76:45:e0:f9: 00:c2:34:57:ee:23:b8:af:7a:4c:d8:8e:ef:0b:97: 9e:2c:dc:52:93:80:9a:18:f2:87:d0:7a:d2:50:19: 30:82:db:5f:01:07:37:55:cb:32:2b:c4:5d:45:80: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:A9:CE:65:DF:57:B8:4D:BC:74:EF:99:EA:CD:BD:DA:1D:5F:59 X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:45:4d:c6:94:33:30:73:12:8c:cf:72:74:85:70:51:4c:00: 32:89:65:95:0c:a9:d6:23:e1:40:3e:83:7b:08:b7:5c:3d:50: c7:f2:80:9b:9c:8e:56:46:19:9b:72:bc:34:1d:95:4a:65:7c: 32:26:cd:27:9a:25:ef:74:9c:af:a6:65:e1:22:d8:21:14:92: b8:4d:50:51:cb:d4:1e:68:ab:be:90:11:ff:3f:de:84:dc:45: 10:fe:3d:ab:1a:9e:43:4f:56:d3:89:1a:e4:a8:70:40:fd:19: e9:cd:1d:43:db:69:59:db:fb:d8:e5:64:a8:25:32:fe:ec:e2: 16:2a:e1:d3:61:22:09:c5:f8:a1:51:0a:7a:b2:28:2d:59:90: 7e:76:c0:15:b2:36:b6:ef:eb:74:a7:90:87:a7:c4:1e:54:b0: 68:b9:90:23:d8:84:60:5a:ec:53:56:da:e4:d6:f5:44:fd:f8: fd:40:79:7e:bf:ac:ec:be:2c:19:d6:23:b8:6a:a1:dc:96:b0: c8:ed:34:4b:7d:ce:7d:43:9f:e7:5a:ef:d0:50:a3:a7:79:7d: 8a:58:8a:e5:3c:1b:6c:bb:c8:ec:5a:04:d4:7a:9a:fc:f3:1a: 7e:a8:97:8b:29:9a:e3:94:ad:3b:85:34:0f:6a:97:b4:0b:fe: 10:7f:6d:de -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUHiZMqYSNcv+P3QO+4iWOlbsCOeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA1MTMwNzAyMzNaFw0yNjA1MTQwNzUzMzNaMDMxMTAvBgNV BAMTKDUwM0VBOUNFNjVERjU3Qjg0REJDNzRFRjk5RUFDREJEREExRDVGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGPFfyPnzMBDTpusZsZcghMsAx xtkk7oy6hTPuFe74AeU0RJM5WMgNmDvPqgAu1okKs7WtTHPsXUBuHK/NKeT9EqQP aneKucGl05zj9NOMFBv55otSEfl88iXHraFmV1Rokz3urqt7OyEBn4w11Tb5+t6V LzCmWWSs4kbnuWGP9Ei1z/xRFkjnQYZVlltUe8oHDigM4zlOmyDi/Wx7kLUgp57f ZMhG7tRli+BgRD11+qbsnX7QSuJTBh5FnlS9K1sUGhFWwJlhVM51QuuldkXg+QDC NFfuI7ivekzYju8Ll54s3FKTgJoY8ofQetJQGTCC218BBzdVyzIrxF1FgD3TAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUUD6pzmXfV7hNvHTvmerNvdodX1kwHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMjFCNjJENjBFMUFCNTM4MDNC MjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAExFTcaUMzBzEozPcnSF cFFMADKJZZUMqdYj4UA+g3sIt1w9UMfygJucjlZGGZtyvDQdlUplfDImzSeaJe90 nK+mZeEi2CEUkrhNUFHL1B5oq76QEf8/3oTcRRD+PasankNPVtOJGuSocED9GenN HUPbaVnb+9jlZKglMv7s4hYq4dNhIgnF+KFRCnqyKC1ZkH52wBWyNrbv63SnkIen xB5UsGi5kCPYhGBa7FNW2uTW9UT9+P1AeX6/rOy+LBnWI7hqodyWsMjtNEt9zn1D n+da79BQo6d5fYpYiuU8G2y7yOxaBNR6mvzzGn6ol4spmuOUrTuFNA9ql7QL/hB/ bd4= -----END CERTIFICATE-----Generated at Wed May 13 20:33:29 2026 by rpki-client