$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft File: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft (raw, json) Hash identifier: sOJOT5fPy2fTf33szo4o48NpR99onnE0oIQH57BsJSA= Subject key identifier: DB:62:05:CE:2F:DB:73:8B:4B:F4:27:57:30:9F:6C:C6:5F:61:59:CF Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Certificate serial: 08C7A22B32040244F3C236F4EF0E88EBE41AA869 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft Manifest number: 1B Signing time: Wed 27 May 2026 17:33:16 +0000 Manifest this update: Wed 27 May 2026 17:28:16 +0000 Manifest next update: Thu 28 May 2026 20:23:16 +0000 Files and hashes: 1: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl (hash: rV5AjSDuw43ONIVnDs46JRZ64VYEc5pHzVNJhbPDCkM=) 2: 3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa (hash: N130VCEwGnahMmdQnEoFsloWsrRvCZQOZhmdArYbsZw=) 3: 3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa (hash: Cd6OMIoEih6thkDQvlDIyWr358PSZmpUGiX23euG7pQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 20:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c7:a2:2b:32:04:02:44:f3:c2:36:f4:ef:0e:88:eb:e4:1a:a8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Validity Not Before: May 27 17:28:16 2026 GMT Not After : May 28 20:23:16 2026 GMT Subject: CN=DB6205CE2FDB738B4BF42757309F6CC65F6159CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:c1:82:9b:b6:4c:c4:f1:f2:fa:ee:5d:d5: 9a:dd:21:dc:1f:87:8a:44:d3:d5:91:ea:54:13:01: 88:4e:94:58:ec:a1:21:ea:60:31:0c:d9:71:43:4b: fa:ba:64:87:41:73:b1:6b:5c:4b:c2:2d:5a:dc:3c: 6f:fa:3d:62:2b:66:93:6e:4b:3a:8d:e6:b3:b8:08: 2d:10:46:ef:89:34:5d:d8:51:75:55:ef:10:d8:78: 03:00:86:19:62:d3:f3:d4:4a:c3:b3:0e:8f:0a:a7: a6:a8:57:00:f0:0b:4e:0a:41:bd:55:31:ba:41:59: 81:55:57:e3:ac:96:6a:dd:7d:c1:45:a7:44:01:e5: 0f:ae:bd:19:51:f9:96:0d:02:90:21:8b:cb:b0:be: 0a:3a:51:0b:eb:c5:39:86:e1:32:ff:34:d1:89:51: d8:42:d6:f6:fd:13:2a:38:5c:92:9c:a2:c4:30:f1: dc:96:86:a1:05:3d:37:03:b0:5d:b0:15:1c:01:c8: 05:57:bf:52:c7:86:ec:6b:24:b4:09:66:43:65:6e: 66:be:10:8c:25:b7:d6:b5:80:49:b3:bb:69:7e:78: 5c:df:1e:6d:fe:ed:e0:3e:26:d5:52:a9:8d:f7:be: 05:1a:05:3e:e6:4e:c1:7e:cc:c5:97:27:b9:bc:be: f3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:62:05:CE:2F:DB:73:8B:4B:F4:27:57:30:9F:6C:C6:5F:61:59:CF X509v3 Authority Key Identifier: keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:69:ab:f9:1d:3e:75:7f:61:7e:f5:1d:13:a5:4a:81:64:f3: c4:dc:e1:7d:8d:7e:68:17:f6:3e:3f:9b:6c:5e:c3:52:87:ea: 52:28:0a:0b:63:a7:cf:17:8a:3d:2e:be:f1:77:e3:a5:f6:e1: ea:8b:21:64:c1:8e:88:c8:64:e0:b8:e3:59:e5:e5:36:d7:78: 49:47:5f:f2:78:a0:13:0a:b5:f3:27:a7:1d:ec:6c:c2:55:64: 8a:8b:79:75:5a:15:a0:a5:b2:bd:7f:18:2e:ec:dd:71:0d:4c: aa:85:f1:c1:e4:96:f2:22:b5:7a:ce:01:38:13:bc:f4:6c:a6: 55:7b:15:6f:5b:7e:2e:6c:dc:e8:68:c6:d6:3e:ae:d2:e2:c8: 40:06:35:c0:b0:44:7a:65:da:cc:99:02:93:86:e2:62:07:ee: be:98:ce:40:8a:85:f2:ad:be:1b:92:77:e9:46:1d:1b:47:20: 2f:68:7e:77:c9:fe:6f:6c:38:e1:6e:b6:a8:cd:43:49:db:ef: 49:a4:d5:a0:02:8c:cd:d8:e0:9e:59:eb:f4:da:50:99:d5:da: 20:ce:b7:ad:50:73:0d:9e:1c:d4:fe:36:d8:1c:e2:70:bf:08: 6d:69:5b:d7:64:65:18:af:9c:38:59:cd:fe:ca:27:b2:e3:14: 8f:28:94:be -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUCMeiKzIEAkTzwjb07w6I6+QaqGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRC RkY4QjYzMTAeFw0yNjA1MjcxNzI4MTZaFw0yNjA1MjgyMDIzMTZaMDMxMTAvBgNV BAMTKERCNjIwNUNFMkZEQjczOEI0QkY0Mjc1NzMwOUY2Q0M2NUY2MTU5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlMGCm7ZMxPHy+u5d1ZrdIdwf h4pE09WR6lQTAYhOlFjsoSHqYDEM2XFDS/q6ZIdBc7FrXEvCLVrcPG/6PWIrZpNu SzqN5rO4CC0QRu+JNF3YUXVV7xDYeAMAhhli0/PUSsOzDo8Kp6aoVwDwC04KQb1V MbpBWYFVV+OslmrdfcFFp0QB5Q+uvRlR+ZYNApAhi8uwvgo6UQvrxTmG4TL/NNGJ UdhC1vb9Eyo4XJKcosQw8dyWhqEFPTcDsF2wFRwByAVXv1LHhuxrJLQJZkNlbma+ EIwlt9a1gEmzu2l+eFzfHm3+7eA+JtVSqY33vgUaBT7mTsF+zMWXJ7m8vvN7AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU22IFzi/bc4tL9CdXMJ9sxl9hWc8wHwYDVR0j BBgwFoAUE4oFSuICMv502kGn0ftmhL/4tjEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzEvMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy8xMzhBMDU0QUUyMDIzMkZFNzREQTQxQTdEMUZC NjY4NEJGRjhCNjMxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzEvMTM4QTA1NEFFMjAy MzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANppq/kdPnV/ YX71HROlSoFk88Tc4X2NfmgX9j4/m2xew1KH6lIoCgtjp88Xij0uvvF346X24eqL IWTBjojIZOC441nl5TbXeElHX/J4oBMKtfMnpx3sbMJVZIqLeXVaFaClsr1/GC7s 3XENTKqF8cHklvIitXrOATgTvPRsplV7FW9bfi5s3OhoxtY+rtLiyEAGNcCwRHpl 2syZApOG4mIH7r6YzkCKhfKtvhuSd+lGHRtHIC9ofnfJ/m9sOOFutqjNQ0nb70mk 1aACjM3Y4J5Z6/TaUJnV2iDOt61Qcw2eHNT+Ntgc4nC/CG1pW9dkZRivnDhZzf7K J7LjFI8olL4= -----END CERTIFICATE-----Generated at Thu May 28 07:18:42 2026 by rpki-client