$ rpki-client -vvvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: y28ZIdHVhGRxVy/+IDHvMoKzY6xWFR0WBMhDyebl7V4= Subject key identifier: F0:2F:C6:74:0A:27:D6:75:F7:0D:ED:F4:9B:24:F2:72:1E:AD:23:08 Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 0CAAFC734809855059B5FD9778452D72E5966DB5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: FE Signing time: Sat 14 Nov 2026 23:48:50 +0000 Manifest this update: Sat 14 Nov 2026 23:43:50 +0000 Manifest next update: Mon 16 Nov 2026 03:32:50 +0000 Files and hashes: 1: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 2: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: /d//XCpCZh5RBwVHkoNIeFUySJU2Xr1U2IbvPr67FeE=) 3: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) 4: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:aa:fc:73:48:09:85:50:59:b5:fd:97:78:45:2d:72:e5:96:6d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Nov 14 23:43:50 2026 GMT Not After : Nov 16 03:32:50 2026 GMT Subject: CN=F02FC6740A27D675F70DEDF49B24F2721EAD2308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:61:64:48:46:44:a1:02:9a:7f:17:96:aa: 2f:f8:e2:99:40:a9:e4:b5:80:4e:e6:57:09:5a:b0: 34:ae:3b:53:5e:23:9c:b2:5b:d4:d4:89:f3:33:7e: 0d:a4:36:11:c4:28:2a:09:9f:04:5f:2c:9e:3f:ab: 73:15:68:f4:f6:98:51:06:5d:7c:25:92:43:03:d4: 5c:79:a3:3f:bf:59:f0:45:9b:4e:be:d8:e8:91:73: 6c:35:79:f2:da:7f:95:25:8f:38:f8:e2:5e:06:d9: 42:f5:8b:f4:44:df:87:73:90:7a:17:9a:0b:77:70: de:88:f2:f2:03:bc:cd:f9:5d:c9:19:6b:65:93:fc: d6:1f:ce:71:0e:e3:89:67:94:40:a0:82:38:e9:2e: e8:a3:cc:b0:52:2d:95:75:3b:26:7f:41:5e:d3:44: aa:19:a5:e9:95:22:68:da:4a:cb:f5:7a:5d:49:46: b3:22:e6:8c:3d:bd:a8:74:d0:43:e7:ed:9f:41:9a: 1b:c8:da:6e:cb:63:87:6b:48:7f:fd:df:30:8c:ee: d4:61:4f:c5:06:1c:47:57:63:2c:9b:86:8a:fe:f0: 1a:83:dd:d7:58:3e:85:4f:44:fd:5f:29:14:21:04: 9b:58:4e:1f:21:fc:90:b7:48:5f:d1:4e:ff:ac:c6: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:C6:74:0A:27:D6:75:F7:0D:ED:F4:9B:24:F2:72:1E:AD:23:08 X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ee:88:06:98:5d:1e:ee:bd:5d:c9:6a:58:12:f0:5e:57:70: 04:c4:93:08:e0:59:dc:cc:10:0d:6c:85:a2:5f:f7:d6:a1:a5: 9c:d6:7c:af:58:53:c8:d6:6f:05:68:e0:ac:01:15:26:c4:ea: 1a:0b:d5:19:ad:50:81:e1:c0:92:63:6f:1e:2a:21:f4:59:19: 4c:bb:5e:81:89:73:f4:2b:c2:d4:ea:54:c5:ca:2d:ae:bf:40: 9b:eb:e2:6e:e6:5f:b8:6e:b3:05:85:07:ad:c9:9c:7e:04:e5: 8f:de:f0:49:86:b4:e9:17:45:22:ca:8d:92:75:5f:40:54:df: ce:5d:fd:69:f4:bd:01:b8:cf:cc:f2:a0:31:0d:a9:3d:58:56: 6b:28:0c:32:09:90:4e:a0:99:f0:20:1a:f5:5a:ba:fd:b1:ef: 28:4f:45:72:03:e4:9e:2e:48:57:5d:ae:34:d6:d4:b7:c2:bc: 2f:81:8d:71:5c:f8:e1:84:9d:39:8e:f8:08:f7:cc:d6:42:92: 9c:6e:be:34:1d:1d:77:99:d3:6f:2b:a3:9e:a0:54:70:4d:88: 90:c9:7e:02:ca:96:a9:fd:62:a5:f5:ef:20:ac:01:41:c3:fa: dc:f2:6c:74:ab:f6:55:bf:af:1b:95:be:44:a5:be:10:de:0d: 9b:6a:a1:44 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUDKr8c0gJhVBZtf2XeEUtcuWWbbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjExMTQyMzQzNTBaFw0yNjExMTYwMzMyNTBaMDMxMTAvBgNV BAMTKEYwMkZDNjc0MEEyN0Q2NzVGNzBERURGNDlCMjRGMjcyMUVBRDIzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqGFkSEZEoQKafxeWqi/44plA qeS1gE7mVwlasDSuO1NeI5yyW9TUifMzfg2kNhHEKCoJnwRfLJ4/q3MVaPT2mFEG XXwlkkMD1Fx5oz+/WfBFm06+2OiRc2w1efLaf5Uljzj44l4G2UL1i/RE34dzkHoX mgt3cN6I8vIDvM35XckZa2WT/NYfznEO44lnlECggjjpLuijzLBSLZV1OyZ/QV7T RKoZpemVImjaSsv1el1JRrMi5ow9vah00EPn7Z9BmhvI2m7LY4drSH/93zCM7tRh T8UGHEdXYyybhor+8BqD3ddYPoVPRP1fKRQhBJtYTh8h/JC3SF/RTv+sxv5nAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU8C/GdAon1nX3De30myTych6tIwgwHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI3uiAaYXR7u vV3JalgS8F5XcATEkwjgWdzMEA1shaJf99ahpZzWfK9YU8jWbwVo4KwBFSbE6hoL 1RmtUIHhwJJjbx4qIfRZGUy7XoGJc/QrwtTqVMXKLa6/QJvr4m7mX7huswWFB63J nH4E5Y/e8EmGtOkXRSLKjZJ1X0BU385d/Wn0vQG4z8zyoDENqT1YVmsoDDIJkE6g mfAgGvVauv2x7yhPRXID5J4uSFddrjTW1LfCvC+BjXFc+OGEnTmO+Aj3zNZCkpxu vjQdHXeZ028ro56gVHBNiJDJfgLKlqn9YqX17yCsAUHD+tzybHSr9lW/rxuVvkSl vhDeDZtqoUQ= -----END CERTIFICATE-----Generated at Sun Nov 15 21:58:16 2026 by rpki-client