$ rpki-client -vvf rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft File: ECE230A523016A2711501CE158F766961D12E232.mft (raw, json) Hash identifier: zBpjrztkzF74X3ygfuPlNdlKev2BN0CtdYmjsDs2OCE= Subject key identifier: 60:BC:7C:45:34:BE:C5:A1:50:FC:D5:B6:E2:5A:57:9C:19:08:1D:8E Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32 Certificate issuer: /CN=ECE230A523016A2711501CE158F766961D12E232 Certificate serial: 29E49CBF1B25A8A213301F9AAD1F3652271C5F3C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft Manifest number: 43 Signing time: Mon 29 Jun 2026 22:07:28 +0000 Manifest this update: Mon 29 Jun 2026 22:02:28 +0000 Manifest next update: Wed 01 Jul 2026 01:11:28 +0000 Files and hashes: 1: 3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (hash: oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=) 2: ECE230A523016A2711501CE158F766961D12E232.crl (hash: pfaDh1hWCGrVJuQcP5eksos8xyNSirgfPNr+IvniROk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 01:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e4:9c:bf:1b:25:a8:a2:13:30:1f:9a:ad:1f:36:52:27:1c:5f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECE230A523016A2711501CE158F766961D12E232 Validity Not Before: Jun 29 22:02:28 2026 GMT Not After : Jul 1 01:11:28 2026 GMT Subject: CN=60BC7C4534BEC5A150FCD5B6E25A579C19081D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:35:45:7b:36:af:28:d2:b0:56:4f:fc:df: d4:31:e8:85:83:24:5e:66:4a:17:44:3b:2a:6e:4a: f3:33:aa:c9:8c:69:5d:bc:1a:50:19:52:5d:25:86: fd:8c:87:74:06:eb:a3:78:ae:84:6f:75:e0:ec:1a: 41:f9:36:7f:67:56:d8:af:6c:af:7f:c1:02:3c:05: cd:66:9d:b8:aa:0d:e4:83:ef:fb:9d:f4:4c:59:2f: 7f:dc:9b:db:64:9e:c6:bd:2f:4c:6b:9e:00:a5:91: 02:de:c4:63:a0:2b:84:f1:e3:99:b8:97:63:92:37: a8:8c:9a:ce:61:70:ee:d8:d3:ee:be:f1:54:d2:ea: a9:4d:8c:a7:0e:b1:03:6a:db:3d:69:8a:57:c0:ad: 5f:aa:2c:d5:88:dd:51:bc:14:94:59:20:f3:97:9a: b8:89:a6:c7:90:7e:3c:76:32:a1:08:92:a4:39:55: b2:71:cd:15:8f:aa:9a:58:3b:f9:6b:e5:2f:ab:7a: ef:e4:19:ca:0d:c4:a8:59:e7:b0:ec:3e:f0:75:9c: 9e:6a:04:38:f2:33:0e:a3:b9:53:aa:75:b4:c2:34: 04:f0:18:1d:b1:9d:2c:01:e1:05:c9:76:69:26:dd: aa:79:7c:b3:90:c3:f0:35:ba:60:1d:2f:82:7c:9b: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:7C:45:34:BE:C5:A1:50:FC:D5:B6:E2:5A:57:9C:19:08:1D:8E X509v3 Authority Key Identifier: keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:19:6b:43:5d:5f:b0:ab:ae:9c:c9:a8:bc:16:b9:bf:48:29: 65:63:48:2e:2c:e3:5e:80:81:d5:fa:4b:0a:d3:d9:77:b2:b6: eb:94:39:b0:5b:e3:e8:bc:83:e0:a1:de:fc:dc:6e:91:b0:72: 6e:83:26:07:bd:e6:42:1f:8a:cc:ea:e4:c9:dd:9e:e0:5b:b4: 78:85:f8:15:ff:85:b2:44:50:dc:56:5c:1c:b3:f9:0c:50:6c: 3a:d2:11:cd:82:04:4a:dd:a4:36:e9:7f:01:33:ba:74:71:40: ee:bb:de:18:35:7b:12:3e:87:5e:d4:c4:15:38:1f:96:b6:ff: df:aa:77:91:ea:8a:bf:4c:07:fc:bb:e2:2e:6e:c8:0c:68:18: 8d:fe:57:fc:67:5b:74:13:91:68:31:f9:4f:bd:d9:ad:31:53: 9f:6f:11:98:19:1e:0d:0c:75:a6:f7:01:e7:bf:ad:fa:d8:30: c9:d8:c2:b1:c7:d7:eb:7c:75:da:1c:7e:b7:20:fd:af:1a:66: 47:b9:31:99:53:c6:8d:ef:8e:0a:34:86:76:99:1b:ba:75:fd: e7:9e:79:8d:3f:fb:d8:61:2a:9c:cf:d6:fd:6a:38:3d:56:f8: d6:9d:36:84:75:f2:13:da:9e:35:84:b1:01:66:c2:db:11:74: 60:db:64:80 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUKeScvxslqKITMB+arR82UiccXzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2OTYx RDEyRTIzMjAeFw0yNjA2MjkyMjAyMjhaFw0yNjA3MDEwMTExMjhaMDMxMTAvBgNV BAMTKDYwQkM3QzQ1MzRCRUM1QTE1MEZDRDVCNkUyNUE1NzlDMTkwODFEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQTVFezavKNKwVk/839Qx6IWD JF5mShdEOypuSvMzqsmMaV28GlAZUl0lhv2Mh3QG66N4roRvdeDsGkH5Nn9nVtiv bK9/wQI8Bc1mnbiqDeSD7/ud9ExZL3/cm9tknsa9L0xrngClkQLexGOgK4Tx45m4 l2OSN6iMms5hcO7Y0+6+8VTS6qlNjKcOsQNq2z1pilfArV+qLNWI3VG8FJRZIPOX mriJpseQfjx2MqEIkqQ5VbJxzRWPqppYO/lr5S+reu/kGcoNxKhZ57DsPvB1nJ5q BDjyMw6juVOqdbTCNATwGB2xnSwB4QXJdmkm3ap5fLOQw/A1umAdL4J8m+wpAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUYLx8RTS+xaFQ/NW24lpXnBkIHY4wHwYDVR0j BBgwFoAU7OIwpSMBaicRUBzhWPdmlh0S4jIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkhSSS8w L0VDRTIzMEE1MjMwMTZBMjcxMTUwMUNFMTU4Rjc2Njk2MUQxMkUyMzIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2 OTYxRDEyRTIzMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05IUkkvMC9FQ0UyMzBBNTIzMDE2QTI3 MTE1MDFDRTE1OEY3NjY5NjFEMTJFMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxBlrQ11fsKuunMmo vBa5v0gpZWNILizjXoCB1fpLCtPZd7K265Q5sFvj6LyD4KHe/NxukbByboMmB73m Qh+KzOrkyd2e4Fu0eIX4Ff+FskRQ3FZcHLP5DFBsOtIRzYIESt2kNul/ATO6dHFA 7rveGDV7Ej6HXtTEFTgflrb/36p3keqKv0wH/LviLm7IDGgYjf5X/GdbdBORaDH5 T73ZrTFTn28RmBkeDQx1pvcB57+t+tgwydjCscfX63x12hx+tyD9rxpmR7kxmVPG je+OCjSGdpkbunX95555jT/72GEqnM/W/Wo4PVb41p02hHXyE9qeNYSxAWbC2xF0 YNtkgA== -----END CERTIFICATE-----Generated at Tue Jun 30 19:10:49 2026 by rpki-client