$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: iNLxfFcDwZnDgzpUvceNwNVeMXhSm0sf5FvNOS1LKHk= Subject key identifier: 2F:25:AD:CB:39:29:D9:C6:6B:6E:FF:79:22:25:20:04:91:5C:3F:3D Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 1578E9D941035F4EE794AC87535E20A9C3E5B352 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: CA Signing time: Fri 02 Oct 2026 22:19:10 +0000 Manifest this update: Fri 02 Oct 2026 22:14:10 +0000 Manifest next update: Sat 03 Oct 2026 23:50:10 +0000 Files and hashes: 1: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: Di/R9nGtSzujDSyoFirU2yhk+UlkGiitscfWj1hEv68=) 2: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 3: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 4: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) 5: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 6: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 7: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) 8: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) 9: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 10: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 23:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:78:e9:d9:41:03:5f:4e:e7:94:ac:87:53:5e:20:a9:c3:e5:b3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Oct 2 22:14:10 2026 GMT Not After : Oct 3 23:50:10 2026 GMT Subject: CN=2F25ADCB3929D9C66B6EFF7922252004915C3F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:16:c7:a7:d1:a6:7e:2b:35:13:29:fe:54: 4c:94:eb:a2:0d:d2:aa:91:86:2e:99:a0:a9:c3:44: 02:e4:32:63:ec:14:48:71:b9:36:f9:83:7e:e5:6c: fc:4d:37:ad:47:1f:10:21:fc:d1:cb:99:1d:f3:fe: 1e:dd:ea:49:43:9e:89:ab:c3:e8:9c:97:52:48:56: 4c:86:32:ae:4b:08:d2:ee:93:1b:65:99:ef:b2:e8: 00:96:02:eb:73:c0:88:98:05:84:a0:c9:8d:c2:4e: e8:04:74:a3:aa:da:d6:e8:7f:7c:da:c1:b4:26:c2: 01:3a:2f:16:b4:13:82:b7:29:a5:88:88:10:be:59: 6a:6c:c4:07:e0:b4:1b:3c:68:b1:87:91:12:fa:12: f9:46:22:22:27:fa:da:74:d2:cf:76:9d:12:88:08: 6d:fd:ed:bc:82:ed:95:be:51:db:bf:62:05:e0:4c: 9a:72:ab:09:1a:74:f6:91:4f:a5:83:62:e6:01:1e: b3:fb:1a:5c:d2:b9:3b:46:d8:01:93:db:8e:cd:24: b6:da:26:e8:2f:b1:18:61:01:9e:ca:6e:72:91:50: 83:d7:a0:fb:aa:eb:c8:89:7b:a8:6d:10:c0:d8:43: bc:38:68:92:57:89:b1:ce:54:6f:43:a7:d8:aa:47: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:25:AD:CB:39:29:D9:C6:6B:6E:FF:79:22:25:20:04:91:5C:3F:3D X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ce:f5:83:bc:37:a9:28:7b:bf:fb:f1:aa:ce:8d:b7:f1:23: a1:05:15:01:e0:f8:31:72:92:e6:16:3d:36:9a:c3:bd:48:80: 6c:88:d2:5c:12:19:34:b6:ac:9d:a8:65:c2:0b:4e:72:34:bf: 3d:4f:e7:ff:2c:37:30:57:e3:93:2d:6c:d5:9c:0f:81:7c:6c: 72:0a:a2:9d:00:30:08:ee:18:dd:e6:d5:c2:1d:cd:c4:a3:2d: 54:37:74:53:be:18:b9:23:e1:8b:d9:a2:31:4e:34:82:a1:cf: 32:0d:55:f3:3b:f8:3b:fd:a3:25:e0:9d:74:28:55:d3:a3:12: 53:4c:91:94:16:e9:25:9a:a9:61:ee:3a:7b:b0:7e:e0:92:12: bd:ab:9c:da:85:cd:6e:16:bd:3d:ea:c9:34:6d:42:ae:22:99: 7f:df:89:ee:37:17:d7:ca:2f:c5:13:6a:0a:b0:20:99:6a:12: b4:34:97:91:68:4d:c3:ae:cb:53:25:cd:d3:3a:01:dd:be:9e: a0:77:4d:2a:70:07:6c:8a:77:a4:70:d0:06:1c:29:cb:78:8c: b9:cf:5b:7b:3a:1c:82:39:40:0c:9b:e9:83:6e:c9:8c:6a:da: 73:c3:ac:1f:40:63:dc:ef:95:6f:a1:7c:bb:b6:9c:ad:fe:f6: 37:16:67:09 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUFXjp2UEDX07nlKyHU14gqcPls1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjEwMDIyMjE0MTBaFw0yNjEwMDMyMzUwMTBaMDMxMTAvBgNV BAMTKDJGMjVBRENCMzkyOUQ5QzY2QjZFRkY3OTIyMjUyMDA0OTE1QzNGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxhbHp9Gmfis1Eyn+VEyU66IN 0qqRhi6ZoKnDRALkMmPsFEhxuTb5g37lbPxNN61HHxAh/NHLmR3z/h7d6klDnomr w+icl1JIVkyGMq5LCNLukxtlme+y6ACWAutzwIiYBYSgyY3CTugEdKOq2tbof3za wbQmwgE6Lxa0E4K3KaWIiBC+WWpsxAfgtBs8aLGHkRL6EvlGIiIn+tp00s92nRKI CG397byC7ZW+Udu/YgXgTJpyqwkadPaRT6WDYuYBHrP7GlzSuTtG2AGT247NJLba JugvsRhhAZ7KbnKRUIPXoPuq68iJe6htEMDYQ7w4aJJXibHOVG9Dp9iqRz85AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQULyWtyzkp2cZrbv95IiUgBJFcPz0wHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC871g7w3 qSh7v/vxqs6Nt/EjoQUVAeD4MXKS5hY9NprDvUiAbIjSXBIZNLasnahlwgtOcjS/ PU/n/yw3MFfjky1s1ZwPgXxscgqinQAwCO4Y3ebVwh3NxKMtVDd0U74YuSPhi9mi MU40gqHPMg1V8zv4O/2jJeCddChV06MSU0yRlBbpJZqpYe46e7B+4JISvauc2oXN bha9PerJNG1CriKZf9+J7jcX18ovxRNqCrAgmWoStDSXkWhNw67LUyXN0zoB3b6e oHdNKnAHbIp3pHDQBhwpy3iMuc9bezocgjlADJvpg27JjGrac8OsH0Bj3O+Vb6F8 u7acrf72NxZnCQ== -----END CERTIFICATE-----Generated at Sat Oct 3 13:05:00 2026 by rpki-client