$ rpki-client -vvvf rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft File: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft (raw, json) Hash identifier: p4hcfdn1JW7nxRpB3t/fNkRMmIOJNBJZmg0Iv0A4v/w= Subject key identifier: 60:1F:B8:A2:C3:28:DF:E2:45:AB:DA:88:9E:5E:84:A6:E3:9C:C5:AB Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Certificate serial: 0D8F6AC20318741AF0EE3BE7C5DF8F9087557B8A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft Manifest number: C4 Signing time: Fri 02 Oct 2026 19:23:37 +0000 Manifest this update: Fri 02 Oct 2026 19:18:37 +0000 Manifest next update: Sat 03 Oct 2026 20:21:37 +0000 Files and hashes: 1: 3231312e37392e39382e302f32332d3234203d3e2037343833.roa (hash: CV931fhtw0I4Ug+ZdjJ2kNYqIh93pZBX4rG+jxT2d9s=) 2: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (hash: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=) 3: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (hash: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=) 4: 3231312e37392e39382e302f32332d3234203d3e203231383539.roa (hash: I1jX/SnnFc+gmcZStVqiSrnNdoqyaCZ0ExujTfgAaX0=) 5: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl (hash: gM3torGUyfiKd4XIkPKadJ4hqkUCUfV+hchZCfEY154=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 20:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8f:6a:c2:03:18:74:1a:f0:ee:3b:e7:c5:df:8f:90:87:55:7b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Validity Not Before: Oct 2 19:18:37 2026 GMT Not After : Oct 3 20:21:37 2026 GMT Subject: CN=601FB8A2C328DFE245ABDA889E5E84A6E39CC5AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:a1:f4:f5:d5:a3:3d:3f:be:9c:fa:ee:21: 33:6e:54:54:a2:49:54:b2:c8:bc:94:cc:b8:9f:23: 62:06:5e:84:2d:5e:6b:00:fe:02:3b:e9:b2:16:d7: bb:d7:c8:f7:9f:df:77:7f:24:5f:ff:86:01:f8:de: f3:fb:74:2d:be:38:c6:60:c9:1b:22:24:13:e4:74: a6:13:a4:2f:7d:85:d9:ae:0b:48:05:59:b3:26:eb: 3e:1c:bb:4d:f7:c5:8c:f9:01:e4:ee:66:7f:4b:74: f9:91:1d:df:45:2b:09:5e:1d:d9:b2:8c:e3:6f:15: c1:c4:73:29:9e:b2:96:9c:fe:cb:75:b0:4b:5f:a8: 9f:27:07:cf:f1:79:f8:7c:5a:a0:51:3e:b8:d2:5c: 43:50:ad:d1:0d:57:9b:50:b9:ca:1c:30:19:fa:4a: 50:59:7e:87:28:b1:fe:b3:a7:d5:e6:3b:5e:6d:94: af:e5:f7:39:54:2a:22:ef:d2:16:9e:a9:11:11:2e: de:68:93:1f:c9:12:2f:af:c7:2a:13:7a:df:8a:79: 76:45:cf:58:8b:fc:0a:92:1c:06:5e:00:5c:b5:47: c2:ee:97:d6:55:3f:d4:27:30:be:3b:bf:a3:80:4f: ba:7a:f1:bc:a4:76:6c:a9:7d:c4:43:eb:89:9d:ee: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:B8:A2:C3:28:DF:E2:45:AB:DA:88:9E:5E:84:A6:E3:9C:C5:AB X509v3 Authority Key Identifier: keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:25:37:98:78:c7:69:3f:74:06:94:7a:af:4c:66:92:9e:41: fc:76:f8:aa:be:3e:76:2e:cc:7d:38:c8:e9:10:da:3a:0c:ae: 8f:90:9c:29:d5:b4:e2:ad:2b:19:cd:c7:86:62:f7:a3:e0:96: 8a:05:5a:f2:7a:a0:7e:be:ef:89:35:2d:b4:c3:4e:23:3a:c5: 71:6c:0f:5a:70:73:a4:18:cf:01:0d:8d:53:58:8a:2e:e7:3e: 88:f7:d6:a1:76:af:77:c8:c8:c6:02:5b:04:ad:63:46:1d:e0: aa:d1:00:c0:fa:fa:1a:df:a5:cd:29:62:d2:c1:b1:e8:91:c1: 80:12:ec:ea:8d:37:7c:38:66:0a:6c:7f:2c:06:d7:49:c6:f7: 32:d4:e4:aa:24:34:47:a0:71:25:4c:e2:e4:e3:32:ad:98:fb: 55:3d:b6:ae:31:b5:3e:f3:c7:ec:2d:1d:b8:86:77:72:78:f7: 6d:a0:6a:41:9c:fd:f8:81:f2:1d:49:fb:5f:20:ce:4a:57:5b: d7:13:0e:50:bc:95:1e:97:60:87:ed:02:c9:8a:1e:3b:c6:cc: ad:ca:3c:e9:48:f6:dc:80:7d:13:d8:cd:39:32:b3:3c:9d:43: 4d:b0:f5:ce:b9:1e:e7:80:1d:7e:8d:66:4a:01:f4:99:5c:16: c8:ac:95:71 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUDY9qwgMYdBrw7jvnxd+PkIdVe4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThDNjJBRkM1 MzMzQTJBODAeFw0yNjEwMDIxOTE4MzdaFw0yNjEwMDMyMDIxMzdaMDMxMTAvBgNV BAMTKDYwMUZCOEEyQzMyOERGRTI0NUFCREE4ODlFNUU4NEE2RTM5Q0M1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvKH09dWjPT++nPruITNuVFSi SVSyyLyUzLifI2IGXoQtXmsA/gI76bIW17vXyPef33d/JF//hgH43vP7dC2+OMZg yRsiJBPkdKYTpC99hdmuC0gFWbMm6z4cu033xYz5AeTuZn9LdPmRHd9FKwleHdmy jONvFcHEcymespac/st1sEtfqJ8nB8/xefh8WqBRPrjSXENQrdENV5tQucocMBn6 SlBZfocosf6zp9XmO15tlK/l9zlUKiLv0haeqRERLt5okx/JEi+vxyoTet+KeXZF z1iL/AqSHAZeAFy1R8Lul9ZVP9QnML47v6OAT7p68bykdmypfcRD64md7nKJAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUYB+4osMo3+JFq9qInl6EpuOcxaswHwYDVR0j BBgwFoAUQycW7gVM69xi/ALd6MYq/FMzoqgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9SREFU Vy8wLzQzMjcxNkVFMDU0Q0VCREM2MkZDMDJEREU4QzYyQUZDNTMzM0EyQTguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThD NjJBRkM1MzMzQTJBOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PUkRBVFcvMC80MzI3MTZFRTA1 NENFQkRDNjJGQzAyRERFOEM2MkFGQzUzMzNBMkE4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCU3mHjH aT90BpR6r0xmkp5B/Hb4qr4+di7MfTjI6RDaOgyuj5CcKdW04q0rGc3HhmL3o+CW igVa8nqgfr7viTUttMNOIzrFcWwPWnBzpBjPAQ2NU1iKLuc+iPfWoXavd8jIxgJb BK1jRh3gqtEAwPr6Gt+lzSli0sGx6JHBgBLs6o03fDhmCmx/LAbXScb3MtTkqiQ0 R6BxJUzi5OMyrZj7VT22rjG1PvPH7C0duIZ3cnj3baBqQZz9+IHyHUn7XyDOSldb 1xMOULyVHpdgh+0CyYoeO8bMrco86Uj23IB9E9jNOTKzPJ1DTbD1zrke54Adfo1m SgH0mVwWyKyVcQ== -----END CERTIFICATE-----Generated at Sat Oct 3 13:06:46 2026 by rpki-client