$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft File: fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json) Hash identifier: d69SVlvnMEr4YqbtEmldZm26t86mtcBl5pYwqzxwY94= Subject key identifier: 9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 Certificate issuer: /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Certificate serial: 053A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft Manifest number: 0534 Signing time: Wed 04 Jun 2025 21:27:06 +0000 Manifest this update: Wed 04 Jun 2025 21:27:06 +0000 Manifest next update: Fri 06 Jun 2025 21:27:06 +0000 Files and hashes: 1: VRx72pdtTHFMiqN9RD6G7x7eSYo.roa (hash: nWRuke5cNs4w9hWijKV4rkTrE3Ajcy5FghoTH7TFyis=) 2: ccfBSmWYHLx8ju0a14YXyamObYE.roa (hash: nMx4N12WJ5f89/ZKOCn2BWDB/IPiWRbtDQzPE191OPQ=) 3: dqEvc27_bBvGC_DLFqiTu7nrWI8.roa (hash: gxOH4BAt3zIg+Cldbx42+J51xa/Hfx3WhRoDsmfBTyo=) 4: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: 61CLFBiGLBuXpDu8Qyy097q6a5BZHMIyNl0sHiRI7TM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951 Validity Not Before: Jun 4 21:27:06 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4: d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1: d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2: cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af: f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa: 35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c: cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3: 98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60: d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f: 4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc: 23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1: b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4: d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9: 44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46: 2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47: a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69: 78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC X509v3 Authority Key Identifier: keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e5:cc:d0:e1:4c:48:af:47:06:7c:5d:86:61:91:de:64:7f: 66:f3:3c:e3:5b:41:01:26:85:01:18:7e:64:c3:bf:39:1d:86: 68:42:45:c0:8c:da:33:37:ff:02:f9:23:54:c0:d0:5b:2b:d6: 57:8f:c3:71:60:da:a7:8c:eb:3e:d6:38:34:c0:10:2e:f6:fa: e5:19:c4:13:b7:4a:2a:77:90:09:aa:e6:ac:91:b2:01:55:6e: b4:c6:dc:43:04:74:a8:20:de:87:07:26:fa:72:ea:c3:8c:cb: 6b:e9:77:c5:c4:dc:8c:22:15:0c:5f:d8:99:68:4d:8f:14:c0: d6:ca:bd:7b:31:d0:9f:7f:e2:ac:6f:2d:f3:62:66:9e:5b:0c: dc:ae:7f:fe:b3:a2:29:93:d1:fb:dc:df:70:43:47:1a:d6:c3: 8d:86:f2:24:9c:88:f9:d3:10:f9:68:78:6e:38:e6:b9:2d:5b: 57:3a:38:f8:32:53:82:b0:45:c1:cf:09:d7:a2:ab:86:5d:9e: b7:1e:69:11:1a:3f:f2:64:07:d5:7b:52:9d:b8:10:b8:f1:f1: f6:ea:c5:3e:e6:3f:32:8e:b2:3f:5a:a1:8e:dc:c6:6e:0b:11: 76:58:26:84:cc:57:3d:8f:fd:8a:dd:f5:24:74:b2:a8:f6:2c: ed:c1:d8:61 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICBTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0U5 Q0VGMjdDOERFRDEzNTA2QjMzOTlEOTkyRUNGRjYyNkI1Nzk1MTAeFw0yNTA2MDQy MTI3MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBRTAwODg0OThBNzM2 NDEzMkRDRTE2ODIyQjY5RjQ3OTU3NEUzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4VomApCeu+cwVqQnktNf/RGiQ7cRcg6OE6jlH8dGDcviWYroF haE3XJMZos1QHSsIEA5271OXIZqXr/BSAWCJMPWS42io1MZu+jWOyXwOrme+K14k ww8PbMuldxafXI4k86oU1uah45g8bSPtFKZje+O6s4r8YNQy+eezU3J2hQUwaq+9 D04VvDqNbkZRUj8cC1R43COF1tEQY7B5UFwb180S4bK3QL0SdEHr/SbzAQg15NEg 9WZ1MPHyhxp6owl9uUSlQ6Kc+Us61W348Pc8RiyTi8Cah7nBJ2DKTgZVR6jzS+Ii o/83lgWo0XEYaXjIiIu7BeeiBVI9r21yCkUXAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUmuAIhJinNkEy3OFoIrafR5V04/wwHwYDVR0jBBgwFoAUfpzvJ8je0TUGszmd mS7P9ia1eVEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NFVEVD SC9mcHp2SjhqZTBUVUdzem1kbVM3UDlpYTFlVkUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2ZwenZKOGplMFRVR3N6bWRtUzdQOWlhMWVWRS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDRVRFQ0gvZnB6dko4amUwVFVHc3pt ZG1TN1A5aWExZVZFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ALflzNDhTEivRwZ8XYZhkd5kf2bzPONbQQEmhQEYfmTDvzkdhmhCRcCM2jM3/wL5 I1TA0Fsr1lePw3Fg2qeM6z7WODTAEC72+uUZxBO3Sip3kAmq5qyRsgFVbrTG3EME dKgg3ocHJvpy6sOMy2vpd8XE3IwiFQxf2JloTY8UwNbKvXsx0J9/4qxvLfNiZp5b DNyuf/6zoimT0fvc33BDRxrWw42G8iSciPnTEPloeG445rktW1c6OPgyU4KwRcHP Cdeiq4ZdnrceaREaP/JkB9V7Up24ELjx8fbqxT7mPzKOsj9aoY7cxm4LEXZYJoTM Vz2P/Yrd9SR0sqj2LO3B2GE= -----END CERTIFICATE-----Generated at Thu Jun 5 20:04:22 2025 by rpki-client