$ rpki-client -vvvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: OMW4T6jOPwugBt/NjtG5fJ2WQF7zC3OBIU/BVKouNo8= Subject key identifier: 63:B7:92:DC:3A:E7:FF:50:53:A2:4E:CD:96:97:88:10:6B:6B:8D:4A Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 224C6B203AB6169C03D899689853EF384452F777 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: C3 Signing time: Wed 30 Sep 2026 20:10:04 +0000 Manifest this update: Wed 30 Sep 2026 20:05:04 +0000 Manifest next update: Fri 02 Oct 2026 00:06:04 +0000 Files and hashes: 1: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 2: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) 3: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) 4: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: 54os3GDZKhKXe4VO5Ikrj/fBxbsegFyVA11XfJ5qiZ4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4c:6b:20:3a:b6:16:9c:03:d8:99:68:98:53:ef:38:44:52:f7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Sep 30 20:05:04 2026 GMT Not After : Oct 2 00:06:04 2026 GMT Subject: CN=63B792DC3AE7FF5053A24ECD969788106B6B8D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3c:2b:d8:f2:10:5b:9b:c7:e1:39:e0:ef:b2: ef:e4:61:a1:2d:89:71:1c:88:0c:4a:0c:5e:8f:08: 9a:7b:26:41:fb:cc:21:b1:ba:f7:f0:f6:f9:95:37: bd:36:6d:ed:80:2d:4a:b6:9d:bc:6c:46:ab:f5:f6: 6f:79:2b:41:c2:8d:e0:e3:09:55:90:b5:be:07:27: ac:0f:d1:a8:2e:81:7b:98:b6:d6:74:79:4d:cf:bd: cf:fb:86:e8:b9:3a:27:5d:75:b9:69:bb:c1:ac:8a: 82:b3:cd:42:34:52:52:13:f8:2e:27:bd:34:ed:d0: 20:69:e0:18:06:43:9f:6c:79:61:7a:db:76:77:86: d1:2d:f7:db:fb:5a:49:7e:10:07:77:dc:1c:aa:a5: 63:16:da:f9:d7:2f:51:63:f9:d5:38:e3:27:dc:02: 2c:c5:a7:fe:93:a0:44:06:db:ae:29:f2:e7:1e:61: bf:83:c2:55:bc:f2:5b:0c:42:46:6f:9d:32:5f:3f: 13:90:40:f8:0b:7c:37:c3:28:4b:37:1d:ee:73:21: 48:8f:59:67:42:13:78:ec:a8:fc:a7:e0:19:dd:c4: 30:31:67:1c:60:cb:24:8e:dd:b5:b5:31:0f:bf:4f: e6:32:a5:3d:a4:10:94:53:3c:cf:e6:ad:45:a5:9d: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B7:92:DC:3A:E7:FF:50:53:A2:4E:CD:96:97:88:10:6B:6B:8D:4A X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:42:2f:0a:fd:4e:ec:56:a5:82:f7:4e:ed:9d:e9:3a:68:da: fc:d6:1c:86:4f:1f:33:0b:00:b2:59:d9:67:b0:ed:61:f8:69: de:1b:fb:29:7c:ae:8a:86:c7:33:c0:10:0e:89:58:5d:d7:1b: 6c:c5:c9:11:47:5e:11:af:0a:d6:5c:04:08:5d:18:4c:9d:77: 0d:b5:1a:fb:20:3f:46:aa:cc:46:e4:6e:29:59:4d:da:a8:2f: aa:d8:4b:7b:61:4e:9d:56:df:67:37:bf:fa:f2:51:5b:fc:dd: 7c:34:3f:d2:9f:7f:af:d2:bb:c2:d3:88:af:44:3e:a4:97:ca: b5:3d:45:d2:a0:fd:81:04:12:eb:cc:e7:29:d8:9c:9b:96:52: 50:2f:c7:91:b7:a3:94:63:3c:9b:4d:4b:80:5d:45:47:29:9c: 31:b9:27:36:f7:fc:5e:d3:f6:e1:85:60:ad:75:05:81:3f:7c: 6e:ee:29:7c:d3:75:dd:f6:b8:f2:50:61:78:cb:7e:55:fe:c3: 04:2a:41:16:04:a7:5c:0a:0b:a3:ff:32:f2:0e:7e:04:7b:f9: 41:3b:48:30:27:2a:13:7a:c4:e9:01:93:52:9e:53:24:1c:1c: 47:d1:95:d4:f9:70:e6:b1:b3:76:3d:02:70:0a:cc:f0:e1:a2: 2b:ae:f1:bb -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUIkxrIDq2FpwD2JlomFPvOERS93cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA5MzAyMDA1MDRaFw0yNjEwMDIwMDA2MDRaMDMxMTAvBgNV BAMTKDYzQjc5MkRDM0FFN0ZGNTA1M0EyNEVDRDk2OTc4ODEwNkI2QjhENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPCvY8hBbm8fhOeDvsu/kYaEt iXEciAxKDF6PCJp7JkH7zCGxuvfw9vmVN702be2ALUq2nbxsRqv19m95K0HCjeDj CVWQtb4HJ6wP0agugXuYttZ0eU3Pvc/7hui5Oidddblpu8GsioKzzUI0UlIT+C4n vTTt0CBp4BgGQ59seWF623Z3htEt99v7Wkl+EAd33ByqpWMW2vnXL1Fj+dU44yfc AizFp/6ToEQG264p8uceYb+DwlW88lsMQkZvnTJfPxOQQPgLfDfDKEs3He5zIUiP WWdCE3jsqPyn4BndxDAxZxxgyySO3bW1MQ+/T+YypT2kEJRTPM/mrUWlnferAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUY7eS3Drn/1BTok7NlpeIEGtrjUowHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACNCLwr9TuxW pYL3Tu2d6Tpo2vzWHIZPHzMLALJZ2Wew7WH4ad4b+yl8roqGxzPAEA6JWF3XG2zF yRFHXhGvCtZcBAhdGEyddw21GvsgP0aqzEbkbilZTdqoL6rYS3thTp1W32c3v/ry UVv83Xw0P9Kff6/Su8LTiK9EPqSXyrU9RdKg/YEEEuvM5ynYnJuWUlAvx5G3o5Rj PJtNS4BdRUcpnDG5Jzb3/F7T9uGFYK11BYE/fG7uKXzTdd32uPJQYXjLflX+wwQq QRYEp1wKC6P/MvIOfgR7+UE7SDAnKhN6xOkBk1KeUyQcHEfRldT5cOaxs3Y9AnAK zPDhoiuu8bs= -----END CERTIFICATE-----Generated at Thu Oct 1 18:52:06 2026 by rpki-client