$ rpki-client -vvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft File: D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json) Hash identifier: 3s2msAqs+QIjx4tWha9efEyjvnTQp+qpVUgoyzyh5uU= Subject key identifier: C5:24:D6:F3:17:1E:CD:40:E8:7E:25:EA:8B:02:55:80:E2:6B:4A:83 Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 Certificate issuer: /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Certificate serial: 7A1E805DAD5FB637DC7B65CB366D36876BCEBFFB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft Manifest number: 04 Signing time: Wed 13 May 2026 05:17:05 +0000 Manifest this update: Wed 13 May 2026 05:12:05 +0000 Manifest next update: Thu 14 May 2026 09:06:05 +0000 Files and hashes: 1: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: BEj4i20XVqJQ8wnl5G+7BQY8tLPMjlyvwkWm+/Jp2dE=) 2: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1e:80:5d:ad:5f:b6:37:dc:7b:65:cb:36:6d:36:87:6b:ce:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Validity Not Before: May 13 05:12:05 2026 GMT Not After : May 14 09:06:05 2026 GMT Subject: CN=C524D6F3171ECD40E87E25EA8B025580E26B4A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:f9:3b:7d:85:0e:36:69:f8:07:b7:a5:f0: d1:a1:96:71:9a:3e:e2:6f:be:12:25:f1:b2:66:12: a4:0a:6c:e2:dd:29:1c:ba:03:c6:61:62:a3:a9:24: 0d:19:af:cc:c2:1e:33:3d:1a:cd:cb:37:54:1d:9d: 42:b8:ea:0a:cd:8c:30:54:3b:05:80:d7:26:59:be: a5:f5:19:45:26:ae:69:cd:76:c8:79:ef:98:f7:a6: c2:2a:79:e1:35:fb:d6:61:2a:40:0d:03:29:8a:0e: 96:04:b3:ef:61:67:03:0c:4d:8f:ef:1b:8b:4d:78: 6f:21:ff:cb:a8:05:0e:d3:51:69:90:b9:76:47:0d: e9:e0:96:b2:f9:ac:41:7d:9d:f7:a7:31:49:e4:02: 18:77:48:ea:8e:07:b0:6a:af:1e:4b:bd:80:c3:f0: 40:cf:f5:75:2a:98:84:e9:e7:4e:71:d6:4a:c1:4a: 7c:c2:4b:4e:d1:80:3d:a1:35:dd:3f:4f:a3:f4:41: 3c:86:45:41:de:ed:f9:01:36:e2:ff:02:78:a5:9f: bf:01:b2:bd:a7:04:65:da:0c:dc:0e:ee:d2:82:51: 30:39:3a:9b:de:57:58:90:a2:f1:c6:e5:53:91:e4: 19:ef:11:66:66:9f:e0:16:8a:29:8c:99:27:4b:21: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:24:D6:F3:17:1E:CD:40:E8:7E:25:EA:8B:02:55:80:E2:6B:4A:83 X509v3 Authority Key Identifier: keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:de:2d:b3:07:eb:4f:1b:bb:18:d3:c8:07:b1:c6:eb:0a:8e: 56:8c:f6:c4:76:26:20:67:12:f7:90:85:c5:24:f3:94:35:98: 58:51:d9:7a:42:34:91:49:82:58:e1:80:f1:30:6b:f9:0e:0e: f5:68:03:96:e2:39:6d:9a:eb:4e:63:5b:f1:e0:83:a2:59:d8: 44:f9:2a:52:a3:bf:4d:f2:9a:c2:56:c1:22:5f:f8:87:55:13: b2:a1:40:16:6c:63:11:d7:14:12:aa:56:9f:fa:da:e1:27:4c: 85:60:9d:f9:e7:d6:3e:f1:92:32:da:cb:2b:41:9c:41:46:8f: 26:96:a3:0e:47:aa:ac:12:5e:31:4e:a8:2d:fe:16:d5:62:c2: c3:3a:a5:5c:e4:4c:3d:80:8b:72:9a:df:7f:ac:a7:9f:c8:18: ab:e9:c0:b2:b9:db:fa:fa:e3:44:16:4f:61:92:7d:49:46:30: 14:46:0b:90:8b:8c:5f:ab:d3:a6:4d:69:bb:0e:f8:b8:56:80: 63:9c:85:ed:8d:fb:c6:0e:15:aa:c5:22:92:1c:2b:7a:32:31: e5:db:53:0e:68:dd:40:eb:8c:13:88:d2:6c:b0:07:e0:1c:a6: 5d:d7:9d:a0:5d:3a:8d:f6:d4:91:f9:86:9f:41:f8:73:bd:27: 3d:73:b6:30 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUeh6AXa1ftjfce2XLNm02h2vOv/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBFMDk0MDczOUM3QzhBMUUzOUZBOTkzQTE1OUYyNzkw MUFEMTIyNzAeFw0yNjA1MTMwNTEyMDVaFw0yNjA1MTQwOTA2MDVaMDMxMTAvBgNV BAMTKEM1MjRENkYzMTcxRUNENDBFODdFMjVFQThCMDI1NTgwRTI2QjRBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUDfk7fYUONmn4B7el8NGhlnGa PuJvvhIl8bJmEqQKbOLdKRy6A8ZhYqOpJA0Zr8zCHjM9Gs3LN1QdnUK46grNjDBU OwWA1yZZvqX1GUUmrmnNdsh575j3psIqeeE1+9ZhKkANAymKDpYEs+9hZwMMTY/v G4tNeG8h/8uoBQ7TUWmQuXZHDenglrL5rEF9nfenMUnkAhh3SOqOB7Bqrx5LvYDD 8EDP9XUqmITp505x1krBSnzCS07RgD2hNd0/T6P0QTyGRUHe7fkBNuL/Aniln78B sr2nBGXaDNwO7tKCUTA5OpveV1iQovHG5VOR5BnvEWZmn+AWiimMmSdLIQKHAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUxSTW8xcezUDofiXqiwJVgOJrSoMwHwYDVR0j BBgwFoAU0OCUBznHyKHjn6mToVnyeQGtEicwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VSVkNP TVAvMC9EMEUwOTQwNzM5QzdDOEExRTM5RkE5OTNBMTU5RjI3OTAxQUQxMjI3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwRTA5NDA3MzlDN0M4QTFFMzlGQTk5M0Ex NTlGMjc5MDFBRDEyMjcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRVJWQ09NUC8wL0QwRTA5NDA3 MzlDN0M4QTFFMzlGQTk5M0ExNTlGMjc5MDFBRDEyMjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCf3i2z B+tPG7sY08gHscbrCo5WjPbEdiYgZxL3kIXFJPOUNZhYUdl6QjSRSYJY4YDxMGv5 Dg71aAOW4jltmutOY1vx4IOiWdhE+SpSo79N8prCVsEiX/iHVROyoUAWbGMR1xQS qlaf+trhJ0yFYJ3559Y+8ZIy2ssrQZxBRo8mlqMOR6qsEl4xTqgt/hbVYsLDOqVc 5Ew9gItymt9/rKefyBir6cCyudv6+uNEFk9hkn1JRjAURguQi4xfq9OmTWm7Dvi4 VoBjnIXtjfvGDhWqxSKSHCt6MjHl21MOaN1A64wTiNJssAfgHKZd152gXTqN9tSR +YafQfhzvSc9c7Yw -----END CERTIFICATE-----Generated at Wed May 13 20:36:11 2026 by rpki-client