$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: eeO0Q3fOtq7wojOmpfLQYpMYHHi1xeHGMQ/lAdeOzGE= Subject key identifier: 37:FE:14:E3:A3:02:88:C8:5C:79:DC:3A:59:27:DB:84:05:FA:66:3B Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 4137AA9D38493E7363665AC1771388D94A24FB89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: 4C Signing time: Tue 30 Jun 2026 09:08:30 +0000 Manifest this update: Tue 30 Jun 2026 09:03:30 +0000 Manifest next update: Wed 01 Jul 2026 12:25:30 +0000 Files and hashes: 1: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 2: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 3: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 4: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) 5: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) 6: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 7: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) 8: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) 9: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 10: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: 1v1ZdZZ3VVxeLPynJmb6H+kRhazf0UcNWo4nBatz/rc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:37:aa:9d:38:49:3e:73:63:66:5a:c1:77:13:88:d9:4a:24:fb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Jun 30 09:03:30 2026 GMT Not After : Jul 1 12:25:30 2026 GMT Subject: CN=37FE14E3A30288C85C79DC3A5927DB8405FA663B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:a8:2b:21:93:17:b9:68:85:f3:45:5c:28: 22:41:fc:5c:a3:29:59:49:1d:73:d7:8b:2e:49:d7: 3c:c1:cd:ff:9e:9c:ae:5c:d4:c0:18:25:d9:69:40: c6:85:ba:f5:97:86:a8:96:e5:9c:05:02:2b:89:91: 24:03:ae:60:d1:8f:8b:f5:9a:da:c5:5b:ab:5d:b3: d2:1a:31:89:40:bc:e7:7d:06:c5:75:bf:66:83:bf: 5d:95:f0:c5:da:88:9f:bc:01:13:4b:1d:26:a1:03: 30:19:b0:d5:63:4d:9e:87:3d:3b:5d:0c:28:a1:6b: 93:d5:a0:14:3b:f0:56:6f:52:dc:fb:4b:2a:2e:df: cc:39:36:1d:12:8b:c8:f3:ad:1b:46:6d:1b:91:e2: 98:e8:68:17:9d:89:91:55:e1:ce:9e:87:02:04:47: 2d:15:1e:08:2d:cb:64:9e:cf:c7:d6:8a:ea:47:71: b6:fb:34:90:9d:4b:6c:a1:66:4f:bf:08:20:ed:e3: 6b:18:f7:ff:0c:39:86:89:44:54:20:4b:f7:ef:be: 58:e3:3b:8c:3d:11:15:06:55:2e:bf:a6:5f:a1:9c: 39:9d:01:2e:e3:28:d3:54:bb:5e:0a:85:64:71:f4: 0e:a2:7c:c7:e6:c5:cd:1d:c6:c8:9c:5c:00:bc:9f: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:14:E3:A3:02:88:C8:5C:79:DC:3A:59:27:DB:84:05:FA:66:3B X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:64:36:e4:d7:d1:91:1d:55:ef:9a:38:61:64:d4:14:61:7f: 6d:72:46:17:98:7a:d7:68:80:1d:05:15:2d:5b:20:59:7f:26: 95:69:b4:a2:3e:1d:67:f8:4d:20:a5:38:3e:19:fb:ae:48:88: a0:89:f4:2b:f3:a1:18:36:13:b5:48:6b:73:ba:7b:68:ec:09: b2:21:e0:2e:f3:4b:cb:a8:45:2a:2c:ef:f0:ff:89:f8:51:7a: 8a:11:a4:fc:29:bb:bf:6c:44:5b:4e:51:81:fb:84:d6:8a:13: bc:16:90:ca:04:6e:b8:64:c4:5a:e3:9c:b7:3a:75:ad:4a:41: 53:b4:94:84:66:1a:15:6c:3f:d1:28:ec:26:40:e6:c3:aa:2f: 4d:a2:78:bb:fa:71:92:b4:5f:9c:f4:e9:5c:8d:f3:53:75:7c: bd:c2:15:35:b3:64:37:c6:fa:bf:b6:c3:78:c7:20:8a:c1:49: 67:e2:50:18:c0:22:fc:26:1d:62:ac:7c:c3:4c:8a:5f:68:97: 70:61:ae:c1:6c:03:25:79:88:a6:24:78:98:bb:75:90:6e:cc: 6e:07:a9:bc:d2:ad:8f:28:0a:dd:20:cf:e2:c0:7b:69:d2:fa: 9a:78:21:be:41:48:2a:13:19:c8:c9:f2:f0:13:be:df:25:0b: e3:63:7a:66 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUQTeqnThJPnNjZlrBdxOI2Uok+4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjA2MzAwOTAzMzBaFw0yNjA3MDExMjI1MzBaMDMxMTAvBgNV BAMTKDM3RkUxNEUzQTMwMjg4Qzg1Qzc5REMzQTU5MjdEQjg0MDVGQTY2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYqgrIZMXuWiF80VcKCJB/Fyj KVlJHXPXiy5J1zzBzf+enK5c1MAYJdlpQMaFuvWXhqiW5ZwFAiuJkSQDrmDRj4v1 mtrFW6tds9IaMYlAvOd9BsV1v2aDv12V8MXaiJ+8ARNLHSahAzAZsNVjTZ6HPTtd DCiha5PVoBQ78FZvUtz7Syou38w5Nh0Si8jzrRtGbRuR4pjoaBediZFV4c6ehwIE Ry0VHggty2Sez8fWiupHcbb7NJCdS2yhZk+/CCDt42sY9/8MOYaJRFQgS/fvvljj O4w9ERUGVS6/pl+hnDmdAS7jKNNUu14KhWRx9A6ifMfmxc0dxsicXAC8n0WlAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUN/4U46MCiMhcedw6WSfbhAX6ZjswHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmQ25NfR kR1V75o4YWTUFGF/bXJGF5h612iAHQUVLVsgWX8mlWm0oj4dZ/hNIKU4Phn7rkiI oIn0K/OhGDYTtUhrc7p7aOwJsiHgLvNLy6hFKizv8P+J+FF6ihGk/Cm7v2xEW05R gfuE1ooTvBaQygRuuGTEWuOctzp1rUpBU7SUhGYaFWw/0SjsJkDmw6ovTaJ4u/px krRfnPTpXI3zU3V8vcIVNbNkN8b6v7bDeMcgisFJZ+JQGMAi/CYdYqx8w0yKX2iX cGGuwWwDJXmIpiR4mLt1kG7MbgepvNKtjygK3SDP4sB7adL6mnghvkFIKhMZyMny 8BO+3yUL42N6Zg== -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:05 2026 by rpki-client