$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft File: BD49467776DCA7472F88470782DAD5722E5AFE49.mft (raw, json) Hash identifier: ezIhKLnYN7N7S9i/g0sFf0pXOBoyclR2h4hZzSp05Gg= Subject key identifier: 4E:8C:91:C2:D2:89:15:A6:23:C8:68:41:1C:2D:2F:D6:F0:B8:3D:19 Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Certificate serial: 784C65D999B26C48C72AF7EF76D7CD0AF978E942 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft Manifest number: 48 Signing time: Tue 30 Jun 2026 16:09:14 +0000 Manifest this update: Tue 30 Jun 2026 16:04:14 +0000 Manifest next update: Wed 01 Jul 2026 18:45:14 +0000 Files and hashes: 1: 3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (hash: O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=) 2: 3230322e3132362e36342e302f32322d3234203d3e2033343632.roa (hash: JSztXJfkuE++Rr44bJxraDVeK0vJ1Z2LCKTFE+mnoSo=) 3: 3130332e3133322e3135362e302f32322d3234203d3e2033343632.roa (hash: VPf6uIakoYZwsPqscjmnQeuLXrwksi5sXN8VBO8l4Lc=) 4: BD49467776DCA7472F88470782DAD5722E5AFE49.crl (hash: 4ReazcK55Toxli5qaVt93j/iwy7RUx1rfwOQ8rrLabM=) 5: 3230322e3132362e36342e302f32302d3234203d3e2033343632.roa (hash: pv9lagNPR6ISK4mgr1r0U+d2oQ424uEiHyejWXcDKkg=) 6: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (hash: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4c:65:d9:99:b2:6c:48:c7:2a:f7:ef:76:d7:cd:0a:f9:78:e9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49 Validity Not Before: Jun 30 16:04:14 2026 GMT Not After : Jul 1 18:45:14 2026 GMT Subject: CN=4E8C91C2D28915A623C868411C2D2FD6F0B83D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:7b:b5:b3:22:00:b1:41:75:02:1e:70:4a: 40:46:22:68:5f:dd:61:9f:f8:d2:74:6a:01:80:e6: 9e:9a:07:09:64:18:d7:8b:cc:be:1d:12:f0:f9:32: 50:75:64:9d:af:f8:d1:31:d4:b8:a5:7b:94:e8:f2: ac:ad:80:e0:be:d2:49:53:4d:cd:3a:a7:d6:3f:a6: 86:07:fa:7a:7b:88:90:f1:8e:c0:e6:f0:51:aa:8f: d5:e3:8e:2b:a3:3e:18:7d:87:dd:a9:8c:71:83:d6: 92:d5:8e:b0:c2:17:a7:a6:8b:12:62:68:d8:07:7f: b7:b1:b8:a9:a7:73:0a:f2:a7:8a:e6:e5:72:3c:b5: 73:54:44:83:ba:23:a5:6e:ef:4f:17:1a:54:27:d2: 50:ef:f3:0b:c9:ac:a5:57:a3:2f:18:54:37:54:83: 0c:0c:10:b7:f5:77:89:aa:3f:71:be:4d:e5:af:52: 63:e1:64:e2:ea:6b:8d:10:80:d8:97:6e:ae:a0:7c: cc:b5:0b:85:72:cd:f3:5a:bf:d6:cc:32:58:26:8d: 95:8c:54:7d:62:d0:f6:fb:65:62:ac:57:2c:08:d3: 04:29:14:1c:f8:90:88:cf:fd:ec:d0:16:2d:e6:18: b3:ba:74:22:61:7a:98:5f:d9:d8:bd:7d:2b:c8:63: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8C:91:C2:D2:89:15:A6:23:C8:68:41:1C:2D:2F:D6:F0:B8:3D:19 X509v3 Authority Key Identifier: keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:eb:29:cd:71:06:bc:f2:0a:24:24:04:99:4e:25:c4:c4:6a: f0:b3:79:54:39:67:f1:e8:87:22:6a:3c:4a:b8:ee:c0:e9:74: 52:29:a7:8f:21:84:e2:3d:99:46:b8:c3:27:f6:8f:66:b1:dc: 77:22:4c:cf:58:26:49:0a:eb:d1:b7:d0:a3:29:9a:28:2e:a2: a2:37:db:ed:15:03:fd:f4:ba:13:7e:b1:0a:c4:ff:b8:5b:ae: 55:f0:56:de:b3:ba:8e:bb:86:c3:a7:1a:3d:dc:00:9a:18:5b: cb:50:95:1b:b2:3a:ce:8d:02:c6:38:9e:b3:96:24:ce:8e:f8: 3e:b4:bd:3b:d6:16:da:a5:58:f2:ac:c0:0c:a0:2c:31:89:d8: 3f:8d:4c:b2:27:5a:e3:f1:47:ab:d1:22:e9:8d:76:b5:40:ff: 9c:45:9e:30:06:c2:c7:19:3f:f0:09:42:20:fd:86:34:07:e0: bc:71:bb:a7:e6:5e:65:23:33:c8:1e:b4:ed:f4:da:3e:c0:d6: 1f:67:d4:cc:33:f5:c1:23:6e:7c:64:09:80:b8:ee:9c:da:e3: 61:40:b6:73:ac:c7:cd:e0:22:13:13:e1:d0:2c:60:93:fe:8f: 0a:16:9a:5d:8b:6a:ef:5f:ea:72:60:92:90:f3:49:c2:0e:03: 72:75:a5:bf -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUeExl2ZmybEjHKvfvdtfNCvl46UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1NzIy RTVBRkU0OTAeFw0yNjA2MzAxNjA0MTRaFw0yNjA3MDExODQ1MTRaMDMxMTAvBgNV BAMTKDRFOEM5MUMyRDI4OTE1QTYyM0M4Njg0MTFDMkQyRkQ2RjBCODNEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoHu1syIAsUF1Ah5wSkBGImhf 3WGf+NJ0agGA5p6aBwlkGNeLzL4dEvD5MlB1ZJ2v+NEx1Lile5To8qytgOC+0klT Tc06p9Y/poYH+np7iJDxjsDm8FGqj9XjjiujPhh9h92pjHGD1pLVjrDCF6emixJi aNgHf7exuKmncwryp4rm5XI8tXNURIO6I6Vu708XGlQn0lDv8wvJrKVXoy8YVDdU gwwMELf1d4mqP3G+TeWvUmPhZOLqa40QgNiXbq6gfMy1C4VyzfNav9bMMlgmjZWM VH1i0Pb7ZWKsVywI0wQpFBz4kIjP/ezQFi3mGLO6dCJhephf2di9fSvIY2AtAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUToyRwtKJFaYjyGhBHC0v1vC4PRkwHwYDVR0j BBgwFoAUvUlGd3bcp0cviEcHgtrVci5a/kkwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFNNQy8w L0JENDk0Njc3NzZEQ0E3NDcyRjg4NDcwNzgyREFENTcyMkU1QUZFNDkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkQ0OTQ2Nzc3NkRDQTc0NzJGODg0NzA3ODJEQUQ1 NzIyRTVBRkU0OS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RTTUMvMC9CRDQ5NDY3Nzc2RENBNzQ3 MkY4ODQ3MDc4MkRBRDU3MjJFNUFGRTQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOspzXEGvPIKJCQE mU4lxMRq8LN5VDln8eiHImo8SrjuwOl0UimnjyGE4j2ZRrjDJ/aPZrHcdyJMz1gm SQrr0bfQoymaKC6iojfb7RUD/fS6E36xCsT/uFuuVfBW3rO6jruGw6caPdwAmhhb y1CVG7I6zo0Cxjies5Ykzo74PrS9O9YW2qVY8qzADKAsMYnYP41Msida4/FHq9Ei 6Y12tUD/nEWeMAbCxxk/8AlCIP2GNAfgvHG7p+ZeZSMzyB607fTaPsDWH2fUzDP1 wSNufGQJgLjunNrjYUC2c6zHzeAiExPh0Cxgk/6PChaaXYtq71/qcmCSkPNJwg4D cnWlvw== -----END CERTIFICATE-----Generated at Tue Jun 30 19:10:59 2026 by rpki-client