$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json) Hash identifier: KVsisTo1irfUS8bmP2g8Cyiv2CHWepAfqF4wm1oR1+c= Subject key identifier: 6B:05:47:47:AB:19:E3:09:31:32:F1:1A:6C:DE:36:06:89:63:5D:C8 Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Certificate serial: 3D6D1E235EBD8088825F8CCACAB0D6B6A1B241B5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft Manifest number: 06 Signing time: Wed 13 May 2026 08:22:47 +0000 Manifest this update: Wed 13 May 2026 08:17:47 +0000 Manifest next update: Thu 14 May 2026 11:37:47 +0000 Files and hashes: 1: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=) 2: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=) 3: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: dMIRnDSTICeQ4ArfmB66z3m+Nygf1vK1w9wgfXznLBY=) 4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6d:1e:23:5e:bd:80:88:82:5f:8c:ca:ca:b0:d6:b6:a1:b2:41:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Validity Not Before: May 13 08:17:47 2026 GMT Not After : May 14 11:37:47 2026 GMT Subject: CN=6B054747AB19E3093132F11A6CDE360689635DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:bb:dd:31:b6:43:07:2c:e0:73:f5:6c:a0: dd:e6:7e:b6:8f:93:72:e5:1f:04:3c:f7:c0:5c:bc: af:57:30:0b:46:51:d7:39:8d:59:18:0a:61:6c:a7: b2:9d:cc:43:0e:1b:b0:45:f1:b0:30:8b:d7:43:9e: 1a:db:94:39:29:b4:7c:04:03:76:6b:a7:da:c5:75: 1f:49:ab:dd:cf:55:04:8c:14:04:10:c8:30:ab:76: 25:7d:3e:d1:33:45:4e:e9:04:2a:ce:d6:5e:2a:1a: 5c:e3:99:a9:2d:0e:80:03:6a:7e:67:40:4e:19:c6: d6:2e:db:63:5b:a5:48:8b:0c:68:4c:70:d6:3e:9e: 9a:51:8b:32:85:38:dc:a9:c7:d6:ac:2d:e4:81:c9: 7e:f9:f4:7f:77:66:a8:06:b7:b3:a0:bf:32:20:34: 00:ab:87:96:b1:d4:b0:8b:5e:ba:9c:52:d7:73:fd: aa:e0:0f:db:0d:e2:84:bb:a5:a5:99:64:5d:05:1b: ab:10:17:79:d8:34:bb:32:e0:e6:8a:57:55:43:4f: f8:a1:a1:db:50:4b:06:99:d3:d2:fd:74:b1:67:ce: 31:11:9f:36:87:6b:3a:4d:41:95:82:fa:25:a4:8b: 02:75:28:9c:a4:f5:05:94:ab:65:c3:04:fd:7e:06: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:05:47:47:AB:19:E3:09:31:32:F1:1A:6C:DE:36:06:89:63:5D:C8 X509v3 Authority Key Identifier: keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:64:1a:ba:72:01:9c:fe:6c:7e:c9:37:ab:ca:57:16:da:06: cc:c1:fd:09:08:81:8a:eb:aa:db:5a:d6:98:32:03:1e:d7:c5: 74:10:71:eb:7f:f4:97:04:6a:99:1d:47:63:56:f1:8a:e9:c2: c8:9f:76:78:85:ea:3b:93:79:aa:07:55:93:64:2d:98:7a:51: b5:ce:cd:3f:cc:08:45:35:f2:e3:14:20:c8:3c:ce:84:a9:85: d6:cb:ea:79:12:bc:0a:0c:5b:fc:a3:a4:59:2a:0a:56:37:76: ec:bb:15:0e:de:e2:80:20:4b:d6:5d:92:46:01:7e:77:60:10: e0:e6:ef:ba:38:6f:47:55:6b:5f:65:e2:ec:97:7c:df:2d:cc: 42:b0:08:1a:83:44:96:c7:57:ca:04:e3:23:c1:7b:76:37:81: 0b:5f:09:91:9c:0d:fc:1d:d1:cf:e7:53:d3:41:3a:1f:a7:c5: 3d:f6:bd:ed:c8:48:86:03:57:0e:df:49:e7:60:d2:fd:a3:1c: 2a:96:8c:f7:a7:70:f5:ea:43:a8:c2:5b:91:80:ee:b0:44:8b: be:2a:de:1a:81:2f:2a:c2:32:0f:f1:88:6e:40:bd:64:75:e5: 4b:c6:38:81:79:5d:64:b6:a5:16:fe:f9:13:2a:d5:12:57:af: 80:77:59:25 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUPW0eI169gIiCX4zKyrDWtqGyQbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEz MjU3MDVGMDAeFw0yNjA1MTMwODE3NDdaFw0yNjA1MTQxMTM3NDdaMDMxMTAvBgNV BAMTKDZCMDU0NzQ3QUIxOUUzMDkzMTMyRjExQTZDREUzNjA2ODk2MzVEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQrrvdMbZDByzgc/VsoN3mfraP k3LlHwQ898BcvK9XMAtGUdc5jVkYCmFsp7KdzEMOG7BF8bAwi9dDnhrblDkptHwE A3Zrp9rFdR9Jq93PVQSMFAQQyDCrdiV9PtEzRU7pBCrO1l4qGlzjmaktDoADan5n QE4ZxtYu22NbpUiLDGhMcNY+nppRizKFONypx9asLeSByX759H93ZqgGt7OgvzIg NACrh5ax1LCLXrqcUtdz/argD9sN4oS7paWZZF0FG6sQF3nYNLsy4OaKV1VDT/ih odtQSwaZ09L9dLFnzjERnzaHazpNQZWC+iWkiwJ1KJyk9QWUq2XDBP1+BhCRAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUawVHR6sZ4wkxMvEabN42BoljXcgwHwYDVR0j BBgwFoAUaFhM0cfrCAjhri3kwZXM4TJXBfAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAv Njg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEzMjU3MDVGMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS82ODU4NENEMUM3RUIwODA4RTFBRTJERTRDMTk1Q0NF MTMyNTcwNUYwLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAvNjg1ODRDRDFDN0VCMDgwOEUx QUUyREU0QzE5NUNDRTEzMjU3MDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHRkGrpyAZz+bH7JN6vK VxbaBszB/QkIgYrrqtta1pgyAx7XxXQQcet/9JcEapkdR2NW8YrpwsifdniF6juT eaoHVZNkLZh6UbXOzT/MCEU18uMUIMg8zoSphdbL6nkSvAoMW/yjpFkqClY3duy7 FQ7e4oAgS9ZdkkYBfndgEODm77o4b0dVa19l4uyXfN8tzEKwCBqDRJbHV8oE4yPB e3Y3gQtfCZGcDfwd0c/nU9NBOh+nxT32ve3ISIYDVw7fSedg0v2jHCqWjPencPXq Q6jCW5GA7rBEi74q3hqBLyrCMg/xiG5AvWR15UvGOIF5XWS2pRb++RMq1RJXr4B3 WSU= -----END CERTIFICATE-----Generated at Wed May 13 20:33:39 2026 by rpki-client