$ rpki-client -vvf rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft File: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft (raw, json) Hash identifier: d1WSSihpxzs1QWJlQUGMNv4jlTXR3ga6gp5PRAlkdTs= Subject key identifier: 87:48:E8:4E:09:06:51:FA:C2:E6:C8:67:5D:AD:00:08:B2:EE:82:55 Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Certificate serial: 17CF8320CF9C36B75F082935872465261400C907 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft Manifest number: 83 Signing time: Sat 15 Aug 2026 03:04:10 +0000 Manifest this update: Sat 15 Aug 2026 02:59:10 +0000 Manifest next update: Sun 16 Aug 2026 04:40:10 +0000 Files and hashes: 1: 3231312e37392e39382e302f32332d3234203d3e2037343833.roa (hash: CV931fhtw0I4Ug+ZdjJ2kNYqIh93pZBX4rG+jxT2d9s=) 2: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (hash: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=) 3: 3231312e37392e39382e302f32332d3234203d3e203231383539.roa (hash: I1jX/SnnFc+gmcZStVqiSrnNdoqyaCZ0ExujTfgAaX0=) 4: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl (hash: xyzctUFx9RDiwPj20PV4xe33MHt7mN5WmAylJ6xbjNk=) 5: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (hash: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cf:83:20:cf:9c:36:b7:5f:08:29:35:87:24:65:26:14:00:c9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Validity Not Before: Aug 15 02:59:10 2026 GMT Not After : Aug 16 04:40:10 2026 GMT Subject: CN=8748E84E090651FAC2E6C8675DAD0008B2EE8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:0c:93:09:65:17:30:d3:e0:f8:05:38:e2: 8f:c8:2b:22:69:5f:ea:fc:a4:66:74:8e:42:1a:af: b7:44:e9:cc:a1:bd:b9:98:06:11:ed:82:1c:af:6b: 8f:86:09:14:3b:ab:23:53:b8:0e:67:16:33:89:67: 4b:9d:86:88:3a:9c:20:b8:c7:be:2b:e6:88:0d:51: 01:de:6f:8a:92:09:6d:51:f9:5c:fe:dc:15:2b:ec: 56:34:41:d8:65:d9:64:a5:6e:3d:b1:fc:bc:93:80: 91:d9:3e:60:43:3e:c7:ec:a2:9a:fd:3b:4e:15:a4: 92:4e:60:30:48:c1:ea:7a:04:1d:58:cc:73:76:16: 4a:9c:4d:e3:7a:f9:da:6d:6b:47:f3:a5:53:6e:e7: 19:e2:f8:dd:3b:dd:cd:4a:80:09:d1:2d:da:8d:31: b7:1e:38:58:d7:8e:63:eb:19:e8:bf:43:7b:21:7c: bc:d2:b3:8c:c2:f2:e4:92:c5:fd:29:8f:c9:75:18: 65:f1:58:b7:67:71:2b:93:c7:9d:22:f2:8a:d5:17: fa:d4:09:7f:b4:9b:ce:20:31:fe:7d:27:50:e1:5d: fe:99:8d:3b:cf:b1:9b:e6:25:de:8e:5b:2e:24:5a: fb:6a:43:b8:8c:7f:44:62:c1:dc:9b:6b:90:31:3f: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:E8:4E:09:06:51:FA:C2:E6:C8:67:5D:AD:00:08:B2:EE:82:55 X509v3 Authority Key Identifier: keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ce:f0:3d:3f:ff:c7:fe:80:1a:bc:f4:7f:76:96:bd:cd:9f: e6:30:04:5e:bc:cf:2b:5c:f6:2f:3a:64:b8:57:a1:aa:61:82: e5:e7:4c:54:77:91:2f:54:de:4a:55:3d:7e:ef:35:63:13:2e: 63:dd:da:76:3e:ef:c4:4e:45:2e:02:50:23:c7:db:ef:03:ca: 02:70:f9:a9:2c:b0:23:f0:36:c9:12:f7:c7:dc:4f:51:2d:7d: 35:ca:52:47:c7:2d:73:a7:02:0c:ef:aa:b1:44:a3:dc:e8:20: 4c:89:f3:e2:aa:dd:65:b7:99:90:26:dc:aa:a7:94:f4:1e:f3: d8:9f:cb:fc:74:0c:98:b2:72:80:1e:57:fd:d5:dc:c1:ef:94: b2:48:5c:8f:0e:7f:cd:b8:95:30:4f:d5:87:7b:92:f6:64:e0: 6a:12:e0:db:ce:68:92:c4:b9:cc:c2:c7:41:3d:5a:7a:a0:8f: 24:30:c6:b4:f0:b6:e2:1a:09:4a:45:33:00:99:e2:d8:d1:b0: 79:ac:5d:0f:1f:a5:3d:f0:e1:95:d1:cf:36:25:7a:e8:8d:d1: 6c:b2:ea:82:8f:b7:3c:76:b5:48:a1:2d:d3:aa:9b:83:58:d0: ba:68:a3:ca:c4:cd:4a:c6:53:7f:ac:39:a8:50:c0:9f:48:18: 94:72:ab:10 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUF8+DIM+cNrdfCCk1hyRlJhQAyQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThDNjJBRkM1 MzMzQTJBODAeFw0yNjA4MTUwMjU5MTBaFw0yNjA4MTYwNDQwMTBaMDMxMTAvBgNV BAMTKDg3NDhFODRFMDkwNjUxRkFDMkU2Qzg2NzVEQUQwMDA4QjJFRTgyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHQyTCWUXMNPg+AU44o/IKyJp X+r8pGZ0jkIar7dE6cyhvbmYBhHtghyva4+GCRQ7qyNTuA5nFjOJZ0udhog6nCC4 x74r5ogNUQHeb4qSCW1R+Vz+3BUr7FY0Qdhl2WSlbj2x/LyTgJHZPmBDPsfsopr9 O04VpJJOYDBIwep6BB1YzHN2FkqcTeN6+dpta0fzpVNu5xni+N073c1KgAnRLdqN MbceOFjXjmPrGei/Q3shfLzSs4zC8uSSxf0pj8l1GGXxWLdncSuTx50i8orVF/rU CX+0m84gMf59J1DhXf6ZjTvPsZvmJd6OWy4kWvtqQ7iMf0Riwdyba5AxPzknAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUh0joTgkGUfrC5shnXa0ACLLuglUwHwYDVR0j BBgwFoAUQycW7gVM69xi/ALd6MYq/FMzoqgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9SREFU Vy8wLzQzMjcxNkVFMDU0Q0VCREM2MkZDMDJEREU4QzYyQUZDNTMzM0EyQTguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThD NjJBRkM1MzMzQTJBOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PUkRBVFcvMC80MzI3MTZFRTA1 NENFQkRDNjJGQzAyRERFOEM2MkFGQzUzMzNBMkE4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc7wPT// x/6AGrz0f3aWvc2f5jAEXrzPK1z2LzpkuFehqmGC5edMVHeRL1TeSlU9fu81YxMu Y93adj7vxE5FLgJQI8fb7wPKAnD5qSywI/A2yRL3x9xPUS19NcpSR8ctc6cCDO+q sUSj3OggTInz4qrdZbeZkCbcqqeU9B7z2J/L/HQMmLJygB5X/dXcwe+Uskhcjw5/ zbiVME/Vh3uS9mTgahLg285oksS5zMLHQT1aeqCPJDDGtPC24hoJSkUzAJni2NGw eaxdDx+lPfDhldHPNiV66I3RbLLqgo+3PHa1SKEt06qbg1jQumijysTNSsZTf6w5 qFDAn0gYlHKrEA== -----END CERTIFICATE-----Generated at Sat Aug 15 05:27:43 2026 by rpki-client