$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft File: eVqR7UCqoVuavKIcIFs27HSUn8g.mft (raw, json) Hash identifier: B3tSLWBUuYJHI6cjllyanujf8ALCeQoUqtwBjiHivwc= Subject key identifier: 36:0F:99:CB:59:D9:46:09:BC:F8:35:D3:0D:15:41:BD:FA:5C:04:C3 Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0CDF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft Manifest number: 0CB7 Signing time: Wed 12 Mar 2025 21:04:12 +0000 Manifest this update: Wed 12 Mar 2025 21:04:12 +0000 Manifest next update: Fri 14 Mar 2025 21:04:12 +0000 Files and hashes: 1: 1brI50nLcAK2cgT42tQ18maS3f0.roa (hash: MuqUPyWjDhw+L1N6COLHQGK12vnRCrgEFjKVoFV3aag=) 2: cFcftMd_aI2pC0puLsqRax_4zAk.roa (hash: pIbvE4TLIvnM6Eq+ua9FO3Si+qu59gXoHZYzgPeQoAE=) 3: eVqR7UCqoVuavKIcIFs27HSUn8g.crl (hash: YhlTxtKPe2vY0pZDVdVjUVJxLO/hi1t6PHMK2ngFBqc=) 4: jQsjixSyTll4g-VJu3QjrYJNFTE.roa (hash: ncREZmSjLmzYPtRoWZBLasjLakpsod8504XElyiB+XQ=) 5: tvnj3EJpgQ8_jK-Y8_eE75nbZAI.roa (hash: DfPP1gzX9R0g4D4VwZ1EvDbEgoJfMP0e9+REtHu3DyM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 07:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Mar 12 21:04:12 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=360F99CB59D94609BCF835D30D1541BDFA5C04C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:5b:7b:6f:7e:7f:a2:4a:ea:41:67:ba:30: 6f:53:e1:42:8f:44:78:86:83:b2:06:a5:48:d8:13: 6f:a8:9e:ef:d1:53:5b:b9:29:82:de:c1:d2:08:04: 3a:ad:66:03:16:a8:98:41:f1:15:5a:3b:a6:c5:e6: e4:bb:64:6b:a8:64:d7:d7:93:fb:cd:b2:f2:29:5b: b4:af:58:25:25:7e:38:3f:99:e1:87:bd:83:b0:4d: ae:b4:9e:45:8d:7d:1e:76:f3:98:5e:96:77:b8:fd: 72:bd:5c:dc:8c:13:8b:46:2d:35:a0:5d:a5:18:36: 13:d2:98:ab:8e:f4:e1:e5:33:5f:75:14:b7:0e:c9: db:14:30:a4:83:7f:8a:59:bc:56:30:9c:05:be:33: d3:9f:3c:63:50:87:9b:61:89:8f:3e:c9:d6:38:b5: c8:67:15:55:1a:b9:2c:54:16:90:e1:62:4b:e9:a4: ef:1d:b5:32:da:eb:81:9d:79:ac:fb:28:4d:ce:20: cc:76:cb:b4:fe:fd:c2:02:da:3c:ec:bd:9d:89:a3: 02:14:8c:c1:de:2c:fa:60:5e:58:b4:de:29:c0:40: 0d:65:04:6f:61:02:39:1a:7d:80:12:71:43:61:dc: 91:13:40:ff:cf:8a:3d:cc:e7:a4:93:59:b8:23:fb: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:99:CB:59:D9:46:09:BC:F8:35:D3:0D:15:41:BD:FA:5C:04:C3 X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a7:cf:03:0d:47:55:1f:7d:56:ca:eb:74:78:4e:d8:54:81: a5:ba:51:98:66:78:7d:b0:82:68:3a:0b:c1:61:86:d8:3c:64: e0:d4:82:36:b2:90:17:3a:af:00:6a:4f:03:8b:7a:a8:f1:6e: de:d9:9f:cf:6a:54:dd:43:3c:eb:e4:ff:58:af:10:b4:7e:46: d1:38:a0:30:6f:5f:70:74:24:a8:59:b3:54:cb:4c:3b:e4:37: a4:e7:dd:cf:cd:51:39:e5:d7:fc:50:2c:fc:9c:d2:59:55:39: d3:3b:8b:17:08:eb:cf:e1:88:cc:79:ca:12:61:97:d0:7a:2f: 90:2c:0d:26:89:77:5e:da:47:55:2c:da:24:bd:3a:e6:f3:6a: 9e:75:10:22:30:3f:a6:c5:41:f2:fb:4e:73:f4:df:63:53:17: 60:a4:b7:de:54:b2:0b:c1:54:34:f8:0a:46:d7:cf:73:98:92: c8:50:5e:38:3a:8b:f0:df:5d:67:de:f6:eb:54:ea:bd:55:cc: d1:fd:c4:d3:c9:1c:ba:de:a3:82:dd:33:25:41:10:5c:32:43: 18:35:c3:16:0a:dd:4c:6b:12:dc:20:24:80:df:f6:f9:34:6c: 14:8e:dd:1f:e8:9c:89:43:ae:7a:14:29:0f:a0:44:69:36:d0: 97:37:92:47 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNTAzMTIy MTA0MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2MEY5OUNCNTlEOTQ2 MDlCQ0Y4MzVEMzBEMTU0MUJERkE1QzA0QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIRFt7b35/okrqQWe6MG9T4UKPRHiGg7IGpUjYE2+onu/RU1u5 KYLewdIIBDqtZgMWqJhB8RVaO6bF5uS7ZGuoZNfXk/vNsvIpW7SvWCUlfjg/meGH vYOwTa60nkWNfR5285helne4/XK9XNyME4tGLTWgXaUYNhPSmKuO9OHlM191FLcO ydsUMKSDf4pZvFYwnAW+M9OfPGNQh5thiY8+ydY4tchnFVUauSxUFpDhYkvppO8d tTLa64Gdeaz7KE3OIMx2y7T+/cIC2jzsvZ2JowIUjMHeLPpgXli03inAQA1lBG9h AjkafYAScUNh3JETQP/Pij3M56STWbgj++GnAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUNg+Zy1nZRgm8+DXTDRVBvfpcBMMwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC9lVnFSN1VDcW9WdWF2 S0ljSUZzMjdIU1VuOGcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApKfPAw1HVR99VsrrdHhO2FSBpbpRmGZ4fbCCaDoLwWGG2Dxk4NSCNrKQFzqv AGpPA4t6qPFu3tmfz2pU3UM86+T/WK8QtH5G0TigMG9fcHQkqFmzVMtMO+Q3pOfd z81ROeXX/FAs/JzSWVU50zuLFwjrz+GIzHnKEmGX0HovkCwNJol3XtpHVSzaJL06 5vNqnnUQIjA/psVB8vtOc/TfY1MXYKS33lSyC8FUNPgKRtfPc5iSyFBeODqL8N9d Z97261TqvVXM0f3E08kcut6jgt0zJUEQXDJDGDXDFgrdTGsS3CAkgN/2+TRsFI7d H+iciUOuehQpD6BEaTbQlzeSRw== -----END CERTIFICATE-----Generated at Thu Mar 13 01:48:41 2025 by rpki-client