$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft File: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft (raw, json) Hash identifier: N5WaGmDC/+CnACbNgQHGyf11miIA4iFqjh/fpBpX/Fc= Subject key identifier: 62:C3:8B:7B:C7:EE:1F:D2:59:EE:32:70:1E:49:A6:10:DE:98:2D:FA Authority key identifier: EA:B2:50:D0:58:FA:CB:EB:3E:A0:D1:6B:53:86:50:61:33:90:74:B6 Certificate issuer: /CN=EAB250D058FACBEB3EA0D16B53865061339074B6 Certificate serial: 0225 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft Manifest number: 021D Signing time: Mon 03 Nov 2025 22:00:45 +0000 Manifest this update: Mon 03 Nov 2025 22:00:45 +0000 Manifest next update: Wed 05 Nov 2025 22:00:45 +0000 Files and hashes: 1: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl (hash: z9a/iV2N5xyKX8J35WTpRAGaOQkbfQ6Edip+IlUKr4w=) 2: zltFiUxl9zlccvR5l1V4KOw8x_4.roa (hash: oLGQNql5JbmtJHP8yYP+HIAgq9QuBkVDJY4w9NyeBY8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 06:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAB250D058FACBEB3EA0D16B53865061339074B6 Validity Not Before: Nov 3 22:00:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=62C38B7BC7EE1FD259EE32701E49A610DE982DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:79:e8:e2:a5:ea:4a:32:ff:9f:58:2e:32: 42:52:cd:ae:63:19:55:23:6a:bd:ac:97:74:fd:31: e8:46:3a:74:bf:43:e9:44:18:cc:dd:73:cf:b3:20: e7:f9:ae:b8:19:9f:0c:d2:41:51:a1:61:28:21:f7: d9:24:f2:7d:91:b8:f8:c6:69:b9:a4:f7:04:22:6b: d1:37:6b:5a:f3:67:9b:57:31:84:20:b0:05:42:54: ae:0e:6b:7e:d0:38:c8:c5:c1:b5:c4:a3:45:74:c0: 85:3b:d2:3b:d8:37:53:96:0b:83:82:44:9a:72:f6: 98:f7:66:a3:54:e8:dd:8a:c1:ca:57:36:fd:a3:66: dd:e5:78:e3:11:49:dc:12:ed:90:d8:1d:19:73:ba: da:d2:a2:44:fe:bb:d3:5e:bc:d9:95:51:cd:fc:18: bb:9f:d0:83:1b:6f:89:c2:94:91:3e:8b:f5:0a:36: 1a:9e:82:74:ce:b7:b3:18:fd:1e:b0:b3:14:60:02: 92:a2:cf:93:56:6e:17:4d:90:60:a9:eb:f1:f1:db: 57:bd:27:f7:bb:d9:ca:fd:32:bb:be:bb:86:16:75: d8:97:a5:f3:38:7b:b3:1e:5f:d0:3d:c7:89:71:82: 0b:df:09:a3:fd:4b:3c:a4:28:22:cc:4e:5e:eb:75: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C3:8B:7B:C7:EE:1F:D2:59:EE:32:70:1E:49:A6:10:DE:98:2D:FA X509v3 Authority Key Identifier: keyid:EA:B2:50:D0:58:FA:CB:EB:3E:A0:D1:6B:53:86:50:61:33:90:74:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9d:2a:b6:c8:96:27:ab:52:5a:04:82:bf:ff:54:00:79:73: 68:b3:30:bc:5b:5b:3b:37:dd:b6:16:ea:d9:31:17:c0:2d:c5: 10:97:64:32:30:40:07:ee:6d:6b:e8:7c:55:aa:92:7c:86:2c: 0f:f8:4d:b7:d6:d3:b7:a8:19:f8:f7:71:f5:f5:68:f1:1c:01: c0:16:a6:6f:d8:4e:1c:4c:f0:a5:07:dc:9a:a7:2c:24:d2:ba: 32:82:88:1c:b5:c4:b5:87:ee:0a:52:37:71:9a:cf:21:c7:4d: 44:19:f8:66:a8:e9:62:f2:c6:d2:e5:82:9d:86:07:ec:80:f4: 83:12:1c:44:fe:56:a5:1b:d9:c4:b3:89:a7:95:29:2c:c2:9d: 4f:e4:f3:0d:72:4c:7f:b6:01:a8:1a:99:d1:0d:98:bb:a6:95: 71:83:ef:5e:b5:59:15:bd:4a:d7:2f:9b:43:15:1a:f9:cd:a2: 53:f4:d6:96:09:40:84:dc:31:3e:11:66:e0:03:c8:ca:01:ea: a3:11:7d:b5:ef:08:07:22:55:90:9a:c8:fe:c3:e1:64:d4:47: 4f:24:c6:e6:aa:48:15:62:b5:85:4a:7c:f7:10:a0:3f:d4:66: 1f:52:ba:ae:58:87:d0:d8:bb:e6:95:18:a6:c1:3f:92:17:81: b5:90:81:ea -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUFC MjUwRDA1OEZBQ0JFQjNFQTBEMTZCNTM4NjUwNjEzMzkwNzRCNjAeFw0yNTExMDMy MjAwNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYyQzM4QjdCQzdFRTFG RDI1OUVFMzI3MDFFNDlBNjEwREU5ODJERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC1Hno4qXqSjL/n1guMkJSza5jGVUjar2sl3T9MehGOnS/Q+lE GMzdc8+zIOf5rrgZnwzSQVGhYSgh99kk8n2RuPjGabmk9wQia9E3a1rzZ5tXMYQg sAVCVK4Oa37QOMjFwbXEo0V0wIU70jvYN1OWC4OCRJpy9pj3ZqNU6N2KwcpXNv2j Zt3leOMRSdwS7ZDYHRlzutrSokT+u9NevNmVUc38GLuf0IMbb4nClJE+i/UKNhqe gnTOt7MY/R6wsxRgApKiz5NWbhdNkGCp6/Hx21e9J/e72cr9Mru+u4YWddiXpfM4 e7MeX9A9x4lxggvfCaP9SzykKCLMTl7rdXJpAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUYsOLe8fuH9JZ7jJwHkmmEN6YLfowHwYDVR0jBBgwFoAU6rJQ0Fj6y+s+oNFr U4ZQYTOQdLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVJDSEUv NnJKUTBGajZ5LXMtb05GclU0WlFZVE9RZExZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS82ckpRMEZqNnktcy1vTkZyVTRaUVlUT1FkTFkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BUkNIRS82ckpRMEZqNnktcy1vTkZyVTRa UVlUT1FkTFkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ0q tsiWJ6tSWgSCv/9UAHlzaLMwvFtbOzfdthbq2TEXwC3FEJdkMjBAB+5ta+h8VaqS fIYsD/hNt9bTt6gZ+Pdx9fVo8RwBwBamb9hOHEzwpQfcmqcsJNK6MoKIHLXEtYfu ClI3cZrPIcdNRBn4ZqjpYvLG0uWCnYYH7ID0gxIcRP5WpRvZxLOJp5UpLMKdT+Tz DXJMf7YBqBqZ0Q2Yu6aVcYPvXrVZFb1K1y+bQxUa+c2iU/TWlglAhNwxPhFm4API ygHqoxF9te8IByJVkJrI/sPhZNRHTyTG5qpIFWK1hUp89xCgP9RmH1K6rliH0Ni7 5pUYpsE/kheBtZCB6g== -----END CERTIFICATE-----Generated at Tue Nov 4 06:05:57 2025 by rpki-client