$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft File: 4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json) Hash identifier: tcnwvXpOxKjgDhOAw2+ayYt3+MDOgfK2WrjMlajUxHg= Subject key identifier: 95:0F:34:5D:3E:F7:2B:FC:D1:0D:84:E7:7C:36:1A:FB:68:6C:52:7F Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Certificate serial: 39574D1F6E39FF48E0DBB7D5C5C3972CD2B8317A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft Manifest number: CA Signing time: Tue 06 Oct 2026 19:34:00 +0000 Manifest this update: Tue 06 Oct 2026 19:29:00 +0000 Manifest next update: Wed 07 Oct 2026 22:45:00 +0000 Files and hashes: 1: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=) 2: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=) 3: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (hash: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=) 4: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: mCKmmFC7ysihaH+n9EbB2DFzCCY+NZk/Ntd7VS5JgtM=) 5: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 19:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:57:4d:1f:6e:39:ff:48:e0:db:b7:d5:c5:c3:97:2c:d2:b8:31:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Validity Not Before: Oct 6 19:29:00 2026 GMT Not After : Oct 7 22:45:00 2026 GMT Subject: CN=950F345D3EF72BFCD10D84E77C361AFB686C527F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:d1:84:a9:88:26:22:71:52:e0:89:a5:b9: 7c:da:40:f1:d3:d4:67:38:13:e0:1c:68:3e:0d:27: 07:34:e2:d0:61:2c:34:7d:70:7a:9f:35:7a:3c:a6: eb:c2:f2:88:72:bd:01:55:8c:e9:00:8c:86:3d:e4: e6:f8:15:c0:ff:94:87:5b:98:40:3a:39:6d:78:10: 71:42:94:16:b6:51:62:90:db:0a:5c:16:1d:2d:10: 66:5e:ff:4d:7d:7e:1e:e2:ca:fa:95:0b:64:b0:94: b6:21:b1:7b:71:69:f0:11:2c:17:38:65:34:7f:d2: f7:40:d5:32:b9:ce:56:65:18:55:06:22:23:48:0a: f2:fe:79:a0:16:77:99:f5:62:e2:df:a5:8e:70:81: b4:51:d5:55:7a:b7:9c:f2:60:01:54:51:2d:2a:c6: fb:48:8f:a1:84:00:4e:11:62:24:36:2e:3f:52:21: 62:9b:1f:84:89:f1:4a:e9:c4:5c:5a:29:32:df:16: 68:c2:fe:2d:99:24:4a:5d:e5:66:91:78:a1:99:6f: f7:71:f1:40:6d:8e:25:37:5a:a5:8c:ee:a3:8e:f8: f0:98:9b:67:fe:b2:48:77:95:bb:6b:45:ba:86:b9: b2:6a:1e:b2:e0:5a:ca:37:42:0e:96:cc:8c:9a:d5: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0F:34:5D:3E:F7:2B:FC:D1:0D:84:E7:7C:36:1A:FB:68:6C:52:7F X509v3 Authority Key Identifier: keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:36:ed:3c:3c:e9:f3:96:a5:2c:9e:aa:8b:4d:0d:22:cc:d8: c8:23:63:90:77:41:2a:a1:5a:a7:99:bc:89:8f:e5:e1:d7:85: 95:ce:fd:d7:38:99:6b:90:eb:81:a1:4f:9f:79:f8:8e:07:c4: 4d:96:0a:63:ea:b0:71:98:11:1a:f2:f2:09:89:85:b0:c6:84: c0:17:3f:0a:bd:10:a9:ff:ba:cd:d5:f6:d9:82:55:bb:df:25: 09:8f:3c:b7:bf:07:52:07:99:28:26:33:af:0b:7c:8b:19:11: 67:7f:71:ae:cb:aa:91:af:9c:e2:31:7d:0b:f2:a2:48:13:e3: ce:f0:55:4c:f5:89:ea:c7:73:35:56:7a:70:c1:15:34:34:8a: 33:70:ae:35:be:b0:c1:4d:27:70:13:b2:06:f1:43:d6:ee:91: 97:ba:24:4d:3b:ba:e2:a0:1f:c8:cb:b1:26:ec:86:39:42:5e: 95:52:60:f4:19:10:65:fa:78:97:2c:e1:56:00:af:4a:2a:8b: 0a:af:a8:fc:f3:17:d7:f6:73:52:94:44:5d:61:12:1e:aa:31: 3a:01:60:91:92:ac:b0:41:de:82:85:69:5d:97:43:4a:4c:89: 24:11:2b:4f:a5:f0:83:1a:ed:b9:64:f2:af:a4:e9:bf:e3:df: 38:a9:76:7d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUOVdNH245/0jg27fVxcOXLNK4MXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2 OTI3Q0RFNTAeFw0yNjEwMDYxOTI5MDBaFw0yNjEwMDcyMjQ1MDBaMDMxMTAvBgNV BAMTKDk1MEYzNDVEM0VGNzJCRkNEMTBEODRFNzdDMzYxQUZCNjg2QzUyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsr9GEqYgmInFS4ImluXzaQPHT 1Gc4E+AcaD4NJwc04tBhLDR9cHqfNXo8puvC8ohyvQFVjOkAjIY95Ob4FcD/lIdb mEA6OW14EHFClBa2UWKQ2wpcFh0tEGZe/019fh7iyvqVC2SwlLYhsXtxafARLBc4 ZTR/0vdA1TK5zlZlGFUGIiNICvL+eaAWd5n1YuLfpY5wgbRR1VV6t5zyYAFUUS0q xvtIj6GEAE4RYiQ2Lj9SIWKbH4SJ8UrpxFxaKTLfFmjC/i2ZJEpd5WaReKGZb/dx 8UBtjiU3WqWM7qOO+PCYm2f+skh3lbtrRbqGubJqHrLgWso3Qg6WzIya1bDvAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUlQ80XT73K/zRDYTnfDYa+2hsUn8wHwYDVR0j BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXQkVTVFdBUkUvMC80NTky NTYyNDU5Qjg4RTg2MUQ3RTQwQjI2OUI2NEVDQzY5MjdDREU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA cjbtPDzp85alLJ6qi00NIszYyCNjkHdBKqFap5m8iY/l4deFlc791ziZa5DrgaFP n3n4jgfETZYKY+qwcZgRGvLyCYmFsMaEwBc/Cr0Qqf+6zdX22YJVu98lCY88t78H UgeZKCYzrwt8ixkRZ39xrsuqka+c4jF9C/KiSBPjzvBVTPWJ6sdzNVZ6cMEVNDSK M3CuNb6wwU0ncBOyBvFD1u6Rl7okTTu64qAfyMuxJuyGOUJelVJg9BkQZfp4lyzh VgCvSiqLCq+o/PMX1/ZzUpREXWESHqoxOgFgkZKssEHegoVpXZdDSkyJJBErT6Xw gxrtuWTyr6Tpv+PfOKl2fQ== -----END CERTIFICATE-----Generated at Wed Oct 7 05:57:27 2026 by rpki-client