$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft File: EUZfw0oIeBMpxIgj9JEEdltcMzs.mft (raw, json) Hash identifier: DsFT//pujN/8jB0z3Tvugl/Fs/uiOrPgOtGFgY9gDow= Subject key identifier: E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B Certificate issuer: /CN=11465FC34A08781329C48823F49104765B5C333B Certificate serial: 037C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft Manifest number: 035D Signing time: Sun 16 Feb 2025 16:28:00 +0000 Manifest this update: Sun 16 Feb 2025 16:28:00 +0000 Manifest next update: Sun 16 Feb 2025 22:28:00 +0000 Files and hashes: 1: EUZfw0oIeBMpxIgj9JEEdltcMzs.crl (hash: A0man1jVCWCNXhAMRlmo+ApBAJL6WNK7AZrRI16ivvc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Feb 2025 22:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11465FC34A08781329C48823F49104765B5C333B Validity Not Before: Feb 16 16:28:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E00FA148901B9490C7D86E998FF2E43D2EA1DD9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:6f:ed:5a:14:6f:fb:ce:5f:13:ca:43:93: 48:be:29:e4:5b:64:27:af:d2:3e:d8:d1:26:cd:5d: 64:31:34:c3:fe:7f:5f:93:5a:75:59:01:75:8b:2d: 2a:19:0b:97:c3:1b:70:f0:d4:c4:76:25:13:a6:7e: a2:c8:4f:ee:a9:65:78:3e:52:50:44:40:69:e8:57: 8c:6c:82:df:60:a1:6a:a2:a1:54:89:1f:5a:75:99: 07:f9:fe:d0:5a:ff:83:6a:db:f1:54:42:4b:52:ea: 86:d2:95:3f:3c:4f:a7:7d:ab:1e:3b:b5:3a:8a:72: 51:4b:f3:cc:5a:1c:40:24:b0:91:eb:16:5e:c2:40: f4:b4:ed:f9:01:94:64:ef:28:e7:df:49:51:ff:76: d0:59:b7:12:84:5f:20:19:2b:77:22:c7:a0:6f:1c: fe:dc:d6:c7:1d:21:66:c5:01:59:df:bf:9e:51:11: f7:fa:26:5d:ab:b2:0d:b8:f7:f0:84:7c:a0:20:8e: 2b:f0:24:d0:b4:61:ae:c3:80:8a:02:20:81:7f:3b: 30:f0:d0:43:76:70:a9:5a:fd:cc:a2:f2:fe:67:b9: c8:6e:be:83:54:fe:b5:19:87:90:ad:26:c8:48:8a: 09:c5:24:cf:1b:3b:ac:da:a5:d5:c3:34:59:8a:22: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B X509v3 Authority Key Identifier: keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f9:d2:b9:82:fd:70:6c:4e:c2:96:7f:b5:54:0b:9f:41:58: 51:61:68:0a:92:4c:aa:bb:6a:d7:1b:8e:06:01:5f:c6:1b:8f: 5a:77:9a:b1:1a:50:72:6a:62:c7:f8:92:e8:0e:fd:d5:5f:4b: 86:9b:aa:b6:70:ae:37:cb:85:84:92:52:cf:fe:b3:19:e8:e2: 33:6c:ac:d9:e5:7a:4f:f8:4f:83:79:62:09:8f:da:01:49:f1: 31:f7:9e:6a:ed:da:1b:8d:05:36:99:b9:37:e0:b9:53:d8:fa: 53:a3:5b:68:f9:84:3b:08:66:69:f2:20:b3:f0:d9:f5:fb:f6: a2:59:37:d4:b3:4f:2a:34:ee:22:e7:19:e1:2f:b5:a5:65:23: 7e:bd:2c:63:44:64:3f:9e:d2:65:86:8b:60:45:3f:2a:c9:6f: 18:1d:d9:a5:4a:d6:80:2e:d8:0b:bb:f1:c2:fe:0f:5c:19:9c: 58:98:b7:65:9e:e0:91:52:38:8e:6f:8d:69:59:4a:bd:f8:b4: 23:01:b8:ef:b0:f5:92:81:df:9f:76:08:73:51:5e:ce:1d:3d: 93:62:69:a3:7e:e3:51:26:d0:d7:54:39:68:4d:b4:70:25:fa: 2b:12:e6:29:70:7f:18:9f:7f:ec:a3:1a:6d:4b:36:46:72:9d: 1f:a1:a0:10 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTE0 NjVGQzM0QTA4NzgxMzI5QzQ4ODIzRjQ5MTA0NzY1QjVDMzMzQjAeFw0yNTAyMTYx NjI4MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUwMEZBMTQ4OTAxQjk0 OTBDN0Q4NkU5OThGRjJFNDNEMkVBMUREOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmq2/tWhRv+85fE8pDk0i+KeRbZCev0j7Y0SbNXWQxNMP+f1+T WnVZAXWLLSoZC5fDG3Dw1MR2JROmfqLIT+6pZXg+UlBEQGnoV4xsgt9goWqioVSJ H1p1mQf5/tBa/4Nq2/FUQktS6obSlT88T6d9qx47tTqKclFL88xaHEAksJHrFl7C QPS07fkBlGTvKOffSVH/dtBZtxKEXyAZK3cix6BvHP7c1scdIWbFAVnfv55REff6 Jl2rsg249/CEfKAgjivwJNC0Ya7DgIoCIIF/OzDw0EN2cKla/cyi8v5nuchuvoNU /rUZh5CtJshIignFJM8bO6zapdXDNFmKIiYBAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU4A+hSJAblJDH2G6Zj/LkPS6h3ZswHwYDVR0jBBgwFoAUEUZfw0oIeBMpxIgj 9JEEdltcMzswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBSUpJ Ti9FVVpmdzBvSWVCTXB4SWdqOUpFRWRsdGNNenMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0VVWmZ3MG9JZUJNcHhJZ2o5SkVFZGx0Y016cy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIQUlKSU4vRVVaZncwb0llQk1weEln ajlKRUVkbHRjTXpzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AC350rmC/XBsTsKWf7VUC59BWFFhaAqSTKq7atcbjgYBX8Ybj1p3mrEaUHJqYsf4 kugO/dVfS4abqrZwrjfLhYSSUs/+sxno4jNsrNnlek/4T4N5YgmP2gFJ8TH3nmrt 2huNBTaZuTfguVPY+lOjW2j5hDsIZmnyILPw2fX79qJZN9SzTyo07iLnGeEvtaVl I369LGNEZD+e0mWGi2BFPyrJbxgd2aVK1oAu2Au78cL+D1wZnFiYt2We4JFSOI5v jWlZSr34tCMBuO+w9ZKB3592CHNRXs4dPZNiaaN+41Em0NdUOWhNtHAl+isS5ilw fxiff+yjGm1LNkZynR+hoBA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:27 2025 by rpki-client