$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft File: eVqR7UCqoVuavKIcIFs27HSUn8g.mft (raw, json) Hash identifier: 4gEInOD+QvDGkU7V6aezwJ7YQG/rVMKvFyyOzIqZ8sE= Subject key identifier: 36:0F:99:CB:59:D9:46:09:BC:F8:35:D3:0D:15:41:BD:FA:5C:04:C3 Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0BA3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft Manifest number: 0B87 Signing time: Sun 19 May 2024 14:35:07 +0000 Manifest this update: Sun 19 May 2024 14:35:07 +0000 Manifest next update: Tue 21 May 2024 14:35:07 +0000 Files and hashes: 1: -tmURObEDbBOi4rPvCxFMA7h5PE.roa (hash: 4qYR4jFNcvu1U8/L2nt8d/j0ZaJny+zIfm6oBuGf80U=) 2: ZVVmWWnlzvYDKi5TadGabFENpAk.roa (hash: kl0MAfu0v7XqbLkVq98IHvBQupx7k97GfOgp2lx1Kps=) 3: eVqR7UCqoVuavKIcIFs27HSUn8g.crl (hash: H4/lLhe7/agZreVG1Oeef1W4pza1Zrw/ym0HNiE+784=) 4: s60ob46yiFgVkIzPlcV0Arx4qyk.roa (hash: CboJN/mBicn3F05VcAxMy8FH/nLh3eUYfSPhqGjgyJw=) 5: vZmo3-WO0bNshJZIcRp09gDu6No.roa (hash: A53ootDEC7KFBB0l1S8bN80+Lg2cQCCQsrrqL1HnZSo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 19:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: May 19 14:35:07 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=360F99CB59D94609BCF835D30D1541BDFA5C04C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:5b:7b:6f:7e:7f:a2:4a:ea:41:67:ba:30: 6f:53:e1:42:8f:44:78:86:83:b2:06:a5:48:d8:13: 6f:a8:9e:ef:d1:53:5b:b9:29:82:de:c1:d2:08:04: 3a:ad:66:03:16:a8:98:41:f1:15:5a:3b:a6:c5:e6: e4:bb:64:6b:a8:64:d7:d7:93:fb:cd:b2:f2:29:5b: b4:af:58:25:25:7e:38:3f:99:e1:87:bd:83:b0:4d: ae:b4:9e:45:8d:7d:1e:76:f3:98:5e:96:77:b8:fd: 72:bd:5c:dc:8c:13:8b:46:2d:35:a0:5d:a5:18:36: 13:d2:98:ab:8e:f4:e1:e5:33:5f:75:14:b7:0e:c9: db:14:30:a4:83:7f:8a:59:bc:56:30:9c:05:be:33: d3:9f:3c:63:50:87:9b:61:89:8f:3e:c9:d6:38:b5: c8:67:15:55:1a:b9:2c:54:16:90:e1:62:4b:e9:a4: ef:1d:b5:32:da:eb:81:9d:79:ac:fb:28:4d:ce:20: cc:76:cb:b4:fe:fd:c2:02:da:3c:ec:bd:9d:89:a3: 02:14:8c:c1:de:2c:fa:60:5e:58:b4:de:29:c0:40: 0d:65:04:6f:61:02:39:1a:7d:80:12:71:43:61:dc: 91:13:40:ff:cf:8a:3d:cc:e7:a4:93:59:b8:23:fb: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:99:CB:59:D9:46:09:BC:F8:35:D3:0D:15:41:BD:FA:5C:04:C3 X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:33:31:85:1a:f4:d0:ab:48:99:30:c2:c7:6c:ab:8a:56:ce: 0b:7c:be:2e:8b:f0:a1:28:a4:bf:a3:23:37:ac:9a:1d:4d:39: 7a:e3:ca:64:59:33:19:10:9e:30:eb:4d:b2:8a:e1:c7:91:27: ae:f1:e4:08:d8:57:66:a5:36:bf:9e:60:ef:a8:fd:56:ea:b6: 13:90:fb:7a:69:06:b8:ae:1c:69:69:e7:33:9b:3d:7c:39:11: a3:c0:9a:49:74:67:29:a8:fc:5a:df:60:17:56:fc:c5:eb:98: cd:c4:89:5d:1e:bd:8e:7d:b9:91:cd:a7:fa:f3:2e:98:fe:bd: 91:29:1f:d7:c4:50:5b:bb:ff:c4:64:74:71:5e:e9:00:46:9c: 5f:1f:20:7e:a6:0a:a4:72:4a:e4:ca:e8:57:a5:73:fd:a3:13: d1:50:81:81:ab:fd:8f:31:4b:3f:cd:07:c7:cb:57:89:69:c7: e2:6b:14:68:c4:16:21:51:b9:43:87:dd:27:88:9b:1b:31:38: 9f:d7:0f:4d:27:76:79:3d:0b:d1:d0:5b:87:18:06:77:c3:47: cc:be:60:22:21:48:f8:8f:05:49:87:c8:5c:c9:ef:4d:da:cd: 2f:a2:a5:69:28:02:73:d6:ea:56:0b:9b:1d:a3:8e:90:15:12: 90:78:02:7e -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNDA1MTkx NDM1MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM2MEY5OUNCNTlEOTQ2 MDlCQ0Y4MzVEMzBEMTU0MUJERkE1QzA0QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIRFt7b35/okrqQWe6MG9T4UKPRHiGg7IGpUjYE2+onu/RU1u5 KYLewdIIBDqtZgMWqJhB8RVaO6bF5uS7ZGuoZNfXk/vNsvIpW7SvWCUlfjg/meGH vYOwTa60nkWNfR5285helne4/XK9XNyME4tGLTWgXaUYNhPSmKuO9OHlM191FLcO ydsUMKSDf4pZvFYwnAW+M9OfPGNQh5thiY8+ydY4tchnFVUauSxUFpDhYkvppO8d tTLa64Gdeaz7KE3OIMx2y7T+/cIC2jzsvZ2JowIUjMHeLPpgXli03inAQA1lBG9h AjkafYAScUNh3JETQP/Pij3M56STWbgj++GnAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUNg+Zy1nZRgm8+DXTDRVBvfpcBMMwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC9lVnFSN1VDcW9WdWF2 S0ljSUZzMjdIU1VuOGcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKzMxhRr00KtImTDCx2yrilbOC3y+LovwoSikv6MjN6yaHU05euPKZFkzGRCe MOtNsorhx5EnrvHkCNhXZqU2v55g76j9Vuq2E5D7emkGuK4caWnnM5s9fDkRo8Ca SXRnKaj8Wt9gF1b8xeuYzcSJXR69jn25kc2n+vMumP69kSkf18RQW7v/xGR0cV7p AEacXx8gfqYKpHJK5MroV6Vz/aMT0VCBgav9jzFLP80Hx8tXiWnH4msUaMQWIVG5 Q4fdJ4ibGzE4n9cPTSd2eT0L0dBbhxgGd8NHzL5gIiFI+I8FSYfIXMnvTdrNL6Kl aSgCc9bqVgubHaOOkBUSkHgCfg== -----END CERTIFICATE-----Generated at Sun May 19 18:40:55 2024 by rpki-client on console-ams.rpki-client.org