$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft File: 19q9YUE92E00MFv6mPOYRiJp_bs.mft (raw, json) Hash identifier: BUTrcj1ICKzlbOlp40B1V3HQZv2Inw/NMHfe+LEcJcw= Subject key identifier: 87:57:DD:8F:AA:A5:4A:FC:17:68:7D:AB:54:DF:F2:15:9F:63:C9:5F Authority key identifier: D7:DA:BD:61:41:3D:D8:4D:34:30:5B:FA:98:F3:98:46:22:69:FD:BB Certificate issuer: /CN=D7DABD61413DD84D34305BFA98F398462269FDBB Certificate serial: 01F1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft Manifest number: 01EE Signing time: Tue 21 Apr 2026 20:04:22 +0000 Manifest this update: Tue 21 Apr 2026 20:04:22 +0000 Manifest next update: Wed 22 Apr 2026 02:04:22 +0000 Files and hashes: 1: 19q9YUE92E00MFv6mPOYRiJp_bs.crl (hash: TzWivCek4krKho7QM+B8yYDPoNlMhG7N/krA+Ob9dj8=) 2: _I60OKMXL8SEMDB1nCe1DNYKrlo.roa (hash: z7tBxaoRKCTXW+2dWi4zYTzrxf7pFqNKDTql/msIOJQ=) 3: n07SyCGhHMZ9y40r6-pcLgBb5EU.roa (hash: zPSyV3XJYeuPR2jkyXhOuQIF5Kfjog8CqErNU7Pgg/c=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7DABD61413DD84D34305BFA98F398462269FDBB Validity Not Before: Apr 21 20:04:22 2026 GMT Not After : Jan 12 15:30:19 2027 GMT Subject: CN=8757DD8FAAA54AFC17687DAB54DFF2159F63C95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:6a:60:76:03:39:18:c3:92:cb:0d:3a:d0: 24:32:f3:22:9b:24:97:98:70:d4:52:cd:fd:1e:a1: ec:79:0f:bc:a0:85:8c:e5:46:54:69:65:b2:d5:7c: d1:9b:3c:21:24:25:c9:77:f0:3c:0b:b0:2b:7c:03: 5a:25:d7:2d:ac:18:31:b8:b1:d8:c1:e4:8b:c3:a0: 2a:96:10:19:f4:42:f3:b8:1b:54:44:e8:c3:f2:e1: be:80:0a:15:2a:e7:cc:9b:82:67:ae:f3:83:64:c8: 56:58:12:42:2c:d1:d4:e2:19:25:73:8b:00:c6:33: 51:f7:80:f5:99:96:f0:6b:8e:84:d5:3c:53:ba:a4: 47:29:6e:ea:9f:6d:35:14:0f:5e:7e:45:e0:08:fc: 57:94:23:1a:35:e8:b4:93:bb:99:53:ad:f3:3c:1d: 2f:51:d7:56:b6:bf:52:66:7c:30:ac:63:4c:8a:1a: 64:2f:39:24:7d:60:93:c6:70:6c:29:38:dd:fd:83: d1:b7:43:39:31:38:93:bb:e8:71:4a:58:06:35:cb: cb:60:a3:bd:2e:3c:66:e7:1f:a0:ce:ee:8a:5f:4f: b8:71:b9:3a:9e:6c:c6:65:b0:a6:09:69:42:c9:58: 4a:82:f0:da:7e:5b:a4:43:ef:64:99:c9:1d:fa:79: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:57:DD:8F:AA:A5:4A:FC:17:68:7D:AB:54:DF:F2:15:9F:63:C9:5F X509v3 Authority Key Identifier: keyid:D7:DA:BD:61:41:3D:D8:4D:34:30:5B:FA:98:F3:98:46:22:69:FD:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/19q9YUE92E00MFv6mPOYRiJp_bs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BHIS/19q9YUE92E00MFv6mPOYRiJp_bs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b9:83:31:37:2c:13:b0:86:32:93:18:65:0c:b9:21:4f:4f: 59:fb:4d:bc:a3:02:35:d9:24:86:76:97:9f:29:2d:ff:55:b3: 12:90:5a:8c:96:d3:8d:76:6e:35:a9:e4:fb:be:e9:0f:9c:12: 42:5c:a4:53:6e:a0:46:13:0d:9b:7b:7f:31:7f:0c:00:58:31: 87:6d:e8:d9:4c:c7:fa:90:20:f5:22:e9:25:3a:b2:43:56:8f: a8:9e:2a:d1:01:c8:22:75:8d:d0:f3:5b:ef:0e:ae:f1:4c:28: 4e:b8:fa:ea:d4:4e:8b:ff:80:51:0c:8c:b1:ab:32:02:e5:54: 6a:2e:67:cf:6d:f3:6f:96:cb:3b:c5:50:90:27:b8:0e:4c:f6: 4e:aa:f7:de:95:07:f2:c8:09:60:25:fe:a4:18:9b:d5:4c:59: d6:11:27:8b:c0:43:a3:31:67:da:10:cf:00:ed:be:6b:ba:3d: f8:b5:ac:66:91:17:56:9a:1d:98:70:6e:40:9a:b9:b9:1d:b7: 78:f8:20:83:36:ab:5c:30:50:9d:d7:90:20:34:3f:b9:6c:69: 0a:83:02:b8:80:b3:a8:04:4c:da:d0:c2:f1:0f:84:fc:f9:cf: c4:52:8c:d7:83:e7:66:02:b8:93:ba:80:6e:35:64:e3:54:d2: 69:a7:1c:fa -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDdE QUJENjE0MTNERDg0RDM0MzA1QkZBOThGMzk4NDYyMjY5RkRCQjAeFw0yNjA0MjEy MDA0MjJaFw0yNzAxMTIxNTMwMTlaMDMxMTAvBgNVBAMTKDg3NTdERDhGQUFBNTRB RkMxNzY4N0RBQjU0REZGMjE1OUY2M0M5NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxCGpgdgM5GMOSyw060CQy8yKbJJeYcNRSzf0eoex5D7yghYzl RlRpZbLVfNGbPCEkJcl38DwLsCt8A1ol1y2sGDG4sdjB5IvDoCqWEBn0QvO4G1RE 6MPy4b6AChUq58ybgmeu84NkyFZYEkIs0dTiGSVziwDGM1H3gPWZlvBrjoTVPFO6 pEcpbuqfbTUUD15+ReAI/FeUIxo16LSTu5lTrfM8HS9R11a2v1JmfDCsY0yKGmQv OSR9YJPGcGwpON39g9G3QzkxOJO76HFKWAY1y8tgo70uPGbnH6DO7opfT7hxuTqe bMZlsKYJaULJWEqC8Np+W6RD72SZyR36eTGdAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUh1fdj6qlSvwXaH2rVN/yFZ9jyV8wHwYDVR0jBBgwFoAU19q9YUE92E00MFv6 mPOYRiJp/bswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkhJUy8x OXE5WVVFOTJFMDBNRnY2bVBPWVJpSnBfYnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzE5cTlZVUU5MkUwME1GdjZtUE9ZUmlKcF9icy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0JISVMvMTlxOVlVRTkyRTAwTUZ2Nm1QT1lS aUpwX2JzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAKW5gzE3 LBOwhjKTGGUMuSFPT1n7TbyjAjXZJIZ2l58pLf9VsxKQWoyW0412bjWp5Pu+6Q+c EkJcpFNuoEYTDZt7fzF/DABYMYdt6NlMx/qQIPUi6SU6skNWj6ieKtEByCJ1jdDz W+8OrvFMKE64+urUTov/gFEMjLGrMgLlVGouZ89t82+WyzvFUJAnuA5M9k6q996V B/LICWAl/qQYm9VMWdYRJ4vAQ6MxZ9oQzwDtvmu6Pfi1rGaRF1aaHZhwbkCaubkd t3j4IIM2q1wwUJ3XkCA0P7lsaQqDAriAs6gETNrQwvEPhPz5z8RSjNeD52YCuJO6 gG41ZONU0mmnHPo= -----END CERTIFICATE-----Generated at Wed Apr 22 01:41:30 2026 by rpki-client