$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft File: 2963CB623A578334B7033062B58BFED2DC07BB04.mft (raw, json) Hash identifier: DemK7xJjcGaEd9J+V93ZUk2vgPS8T4BMaqWeO3D7D6M= Subject key identifier: 28:08:F2:21:DD:5E:B1:D3:35:86:90:04:75:B5:E5:E7:29:35:B6:26 Authority key identifier: 29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 Certificate issuer: /CN=2963CB623A578334B7033062B58BFED2DC07BB04 Certificate serial: 5F1F8B05553A5B69F3966F3B0AF609FCE4F20B76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject info access: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft Manifest number: 45 Signing time: Tue 30 Jun 2026 05:23:09 +0000 Manifest this update: Tue 30 Jun 2026 05:18:09 +0000 Manifest next update: Wed 01 Jul 2026 06:59:09 +0000 Files and hashes: 1: 2963CB623A578334B7033062B58BFED2DC07BB04.crl (hash: s6nfcc5AswTnoa/6Z2zdXmHR+xzKJ/cKbsH3o/bIJbs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 06:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1f:8b:05:55:3a:5b:69:f3:96:6f:3b:0a:f6:09:fc:e4:f2:0b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2963CB623A578334B7033062B58BFED2DC07BB04 Validity Not Before: Jun 30 05:18:09 2026 GMT Not After : Jul 1 06:59:09 2026 GMT Subject: CN=2808F221DD5EB1D33586900475B5E5E72935B626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:4e:da:f7:e2:64:60:6f:80:96:ac:f8:4c: 20:01:25:1c:dc:3f:65:1e:08:7d:83:f1:8e:63:cf: 79:8c:cf:53:9c:b1:79:6a:2a:3f:08:82:09:93:8b: eb:f8:92:da:2f:c2:21:70:3e:0e:88:a7:1c:c6:b0: ab:dd:ff:42:84:5e:4a:05:1d:01:d7:15:bd:8d:9a: cb:8c:0f:d3:d0:4a:32:69:a4:f7:41:d7:cf:32:6b: fa:a3:55:06:63:ef:b9:ea:e0:9b:d0:6f:2b:ea:14: eb:10:41:04:80:06:aa:a9:73:32:1e:1e:82:6b:15: f7:52:be:e4:36:f6:b7:b0:89:1d:53:18:78:91:e5: ae:6f:39:c1:cf:36:4b:b7:e8:1a:5d:07:76:ed:97: e4:32:6d:6c:4e:87:b7:70:27:60:60:f7:6a:2b:77: 77:a6:7c:b7:47:76:dd:15:c3:50:d9:e6:a8:5c:4c: 16:81:33:48:bd:85:55:77:9f:04:e9:ea:e3:c0:57: 94:9b:c5:e4:8c:b5:2a:3f:5b:3f:f7:84:29:5a:4f: 23:e3:00:ed:3b:25:33:6a:cc:9c:6d:c3:b2:ed:c0: f6:03:cc:e4:14:5a:47:bb:36:d9:cd:5d:16:d7:c2: 14:d5:44:16:d5:15:9a:79:19:be:19:ad:19:20:3e: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:F2:21:DD:5E:B1:D3:35:86:90:04:75:B5:E5:E7:29:35:B6:26 X509v3 Authority Key Identifier: keyid:29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a5:38:99:0c:cd:6a:d2:b2:72:fd:d3:34:21:60:6c:fd:03: 0e:83:01:0d:1f:64:30:c0:be:61:83:ed:9d:1d:ae:5d:48:98: 43:de:0e:e7:ae:6b:b4:5e:3a:e9:76:4d:d7:da:3a:1f:88:65: cc:c4:c6:0d:4f:70:dc:ae:57:41:e5:bc:fb:45:d9:0b:0a:1b: 00:bc:66:20:76:ff:09:09:8f:19:de:f8:df:39:06:93:3a:7a: 59:9f:fc:65:46:96:5a:b9:7e:e8:79:5d:61:6a:8f:78:97:03: 94:3e:82:18:d2:af:86:9f:99:dd:49:ec:97:3a:41:b1:37:d5: e8:db:43:f6:fb:d7:9e:ff:cd:a0:0a:71:1b:f1:94:7f:58:01: 2a:32:48:3a:21:3a:a1:57:67:20:28:85:14:53:90:9d:6b:3f: 8d:c8:b4:09:3e:55:91:ff:32:13:84:36:fb:78:8c:6f:4d:e2: 70:45:02:03:ee:93:6a:3d:8f:1b:e3:65:bb:b3:ed:25:73:2e: 50:f1:12:4c:b4:03:cd:98:66:3f:39:53:58:8b:9a:4f:6b:d3: 37:a5:cb:18:f6:e2:c5:28:57:af:9d:30:33:ab:08:34:51:4a: 2a:51:cd:00:3b:6e:3b:e2:67:6e:6a:e7:2f:af:7d:4f:90:7c: 3a:5f:4f:1a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUXx+LBVU6W2nzlm87CvYJ/OTyC3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJE QzA3QkIwNDAeFw0yNjA2MzAwNTE4MDlaFw0yNjA3MDEwNjU5MDlaMDMxMTAvBgNV BAMTKDI4MDhGMjIxREQ1RUIxRDMzNTg2OTAwNDc1QjVFNUU3MjkzNUI2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3k7a9+JkYG+Alqz4TCABJRzc P2UeCH2D8Y5jz3mMz1OcsXlqKj8IggmTi+v4ktovwiFwPg6IpxzGsKvd/0KEXkoF HQHXFb2NmsuMD9PQSjJppPdB188ya/qjVQZj77nq4JvQbyvqFOsQQQSABqqpczIe HoJrFfdSvuQ29rewiR1TGHiR5a5vOcHPNku36BpdB3btl+QybWxOh7dwJ2Bg92or d3emfLdHdt0Vw1DZ5qhcTBaBM0i9hVV3nwTp6uPAV5SbxeSMtSo/Wz/3hClaTyPj AO07JTNqzJxtw7LtwPYDzOQUWke7NtnNXRbXwhTVRBbVFZp5Gb4ZrRkgPulDAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUKAjyId1esdM1hpAEdbXl5yk1tiYwHwYDVR0j BBgwFoAUKWPLYjpXgzS3AzBitYv+0twHuwQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAv Mjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yOTYzQ0I2MjNBNTc4MzM0QjcwMzMwNjJCNThCRkVE MkRDMDdCQjA0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAvMjk2M0NCNjIzQTU3ODMzNEI3 MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAylOJkMzWrSsnL90zQh YGz9Aw6DAQ0fZDDAvmGD7Z0drl1ImEPeDueua7ReOul2TdfaOh+IZczExg1PcNyu V0HlvPtF2QsKGwC8ZiB2/wkJjxne+N85BpM6elmf/GVGllq5fuh5XWFqj3iXA5Q+ ghjSr4afmd1J7Jc6QbE31ejbQ/b7157/zaAKcRvxlH9YASoySDohOqFXZyAohRRT kJ1rP43ItAk+VZH/MhOENvt4jG9N4nBFAgPuk2o9jxvjZbuz7SVzLlDxEky0A82Y Zj85U1iLmk9r0zelyxj24sUoV6+dMDOrCDRRSipRzQA7bjviZ25q5y+vfU+QfDpf Txo= -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:17 2026 by rpki-client