$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft File: fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json) Hash identifier: qcs5TmxTYyXNfYxWGykBHHLJl0oHp+FMi7negSK8/r4= Subject key identifier: 9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 057E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft Manifest number: 0575 Signing time: Tue 09 Sep 2025 09:16:42 +0000 Manifest this update: Tue 09 Sep 2025 09:16:42 +0000 Manifest next update: Thu 11 Sep 2025 09:16:42 +0000 Files and hashes: 1: 8iU3wEzok3gKvIqLkgbHhsw6-eg.roa (hash: xN2RK1h4tjD0XjogrtTLV9kUMGsJJ+fW2BNxkFyGmEs=) 2: BdnHgYWxhScNUkJzMJgTK9EZj9k.roa (hash: uOPSkQQ3RPLaNEZfmE2R1qOR8Uqz3QJGq0JkmDWo7/A=) 3: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: ajdf1qE2CXCScWXwuz70x20Zip+G9IbvQR6OkPWFVQ4=) 4: jFvLfPC02_ndHiHFt2mAldtwwZk.roa (hash: Kw7ZynrZ7I7k68tbzP6vE3jEm/LjvzArRoedzDlVi8g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Sep 9 09:16:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4: d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1: d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2: cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af: f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa: 35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c: cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3: 98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60: d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f: 4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc: 23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1: b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4: d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9: 44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46: 2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47: a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69: 78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e3:8b:42:c9:3d:10:24:69:d4:bd:d5:b3:56:32:b2:1f:f6: c7:e8:62:a9:4e:79:2e:1d:a4:ae:4e:d6:c0:92:ee:1a:8b:d9: 65:a3:2e:4f:65:ac:44:c0:64:2f:a9:86:d7:2f:c6:da:d0:2f: 06:0e:39:8b:4a:17:0e:cf:7c:ed:ca:53:5b:d9:03:3a:ac:fc: df:67:69:46:30:2e:5e:09:66:b9:9e:12:10:cc:ef:eb:b4:55: 8b:44:1b:c0:c8:33:f2:b4:52:10:bd:8d:12:8c:57:f6:b1:95: a7:44:85:99:4f:24:c7:3b:99:01:08:08:d1:b6:d5:8d:58:ed: a3:9c:f3:6e:3b:b3:b3:40:78:c5:96:3b:55:25:d7:f1:11:3d: 81:49:d5:ec:0a:3a:37:36:9a:49:d5:3b:25:68:74:12:5e:df: f7:f8:03:fc:87:5a:b8:22:39:85:92:74:b5:3b:81:4c:52:1b: b2:8d:36:f3:18:20:36:be:bb:4f:01:25:3a:d5:26:a0:d0:8d: b1:13:1c:90:5b:43:ba:aa:a8:6b:a8:a1:75:51:76:35:36:ca: 18:c4:0d:17:32:1e:31:9b:59:82:4a:9a:50:f1:06:f5:a3:e4: c3:c6:62:59:66:29:6a:a3:37:2c:9a:3c:4c:70:e5:9a:92:53: 1e:47:ee:e7 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTA5MDkw OTE2NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBRTAwODg0OThBNzM2 NDEzMkRDRTE2ODIyQjY5RjQ3OTU3NEUzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4VomApCeu+cwVqQnktNf/RGiQ7cRcg6OE6jlH8dGDcviWYroF haE3XJMZos1QHSsIEA5271OXIZqXr/BSAWCJMPWS42io1MZu+jWOyXwOrme+K14k ww8PbMuldxafXI4k86oU1uah45g8bSPtFKZje+O6s4r8YNQy+eezU3J2hQUwaq+9 D04VvDqNbkZRUj8cC1R43COF1tEQY7B5UFwb180S4bK3QL0SdEHr/SbzAQg15NEg 9WZ1MPHyhxp6owl9uUSlQ6Kc+Us61W348Pc8RiyTi8Cah7nBJ2DKTgZVR6jzS+Ii o/83lgWo0XEYaXjIiIu7BeeiBVI9r21yCkUXAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmuAIhJinNkEy3OFoIrafR5V04/wwHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvZnB6dko4amUwVFVHc3pt ZG1TN1A5aWExZVZFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AEPji0LJPRAkadS91bNWMrIf9sfoYqlOeS4dpK5O1sCS7hqL2WWjLk9lrETAZC+p htcvxtrQLwYOOYtKFw7PfO3KU1vZAzqs/N9naUYwLl4JZrmeEhDM7+u0VYtEG8DI M/K0UhC9jRKMV/axladEhZlPJMc7mQEICNG21Y1Y7aOc8247s7NAeMWWO1Ul1/ER PYFJ1ewKOjc2mknVOyVodBJe3/f4A/yHWrgiOYWSdLU7gUxSG7KNNvMYIDa+u08B JTrVJqDQjbETHJBbQ7qqqGuooXVRdjU2yhjEDRcyHjGbWYJKmlDxBvWj5MPGYllm KWqjNyyaPExw5ZqSUx5H7uc= -----END CERTIFICATE-----Generated at Wed Sep 10 00:06:08 2025 by rpki-client