$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft File: SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft (raw, json) Hash identifier: /Jkzr+2aMlhPBiM3unYDNGYF7C4SnhHP+IKQXtLVF/A= Subject key identifier: F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF Authority key identifier: 4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97 Certificate issuer: /CN=4AC29EB919D071916D744665F29341B00A036297 Certificate serial: 2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft Manifest number: 2C Signing time: Wed 17 Sep 2025 22:17:57 +0000 Manifest this update: Wed 17 Sep 2025 22:17:57 +0000 Manifest next update: Thu 18 Sep 2025 04:17:57 +0000 Files and hashes: 1: -rM84dFnltLzFCWPl4AGxt3d70o.roa (hash: OBYLVbSP/fiL5gNwYlwz1qku0qGFB8y4odJJJJFQvN8=) 2: Nqa0Qhn4yvrq5vNhQmcCw7hAdSE.roa (hash: Y5nBa0ULJqBAX+uCNVgjgWDOtFmo25XLO+BS2Ijf5+0=) 3: SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl (hash: EpBl2Oo+bj2BRCQPsCEhTfn8WRp5/OcFSlex1Y0LX2o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC29EB919D071916D744665F29341B00A036297 Validity Not Before: Sep 17 22:17:57 2025 GMT Not After : Sep 9 15:30:21 2026 GMT Subject: CN=F49C525057A5F2379EFB80268997DF0D565AA5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:80:7b:34:42:0e:d7:d1:dc:e6:32:8e:60: 41:68:d1:15:3a:4b:a5:91:8c:ea:07:06:b6:bf:3c: 46:7a:76:2b:dc:f2:32:23:e1:6c:c7:7f:ae:65:4d: af:22:24:f2:cb:97:ec:f0:b6:fd:2a:79:e1:5d:2e: e5:84:c4:5f:4f:df:87:44:dd:80:34:32:6c:64:9b: d9:d1:74:07:ac:53:fe:9a:6c:2d:ce:1e:aa:ba:97: 8d:72:49:e6:14:43:de:12:db:32:df:4f:3a:bf:94: 9c:fe:83:8b:98:04:e7:b7:08:ef:b8:d1:45:eb:44: a6:62:82:ca:76:e3:f4:3d:53:0a:22:65:95:0e:3c: 46:d9:03:f9:ac:56:21:67:aa:98:c9:1f:49:00:06: 94:09:88:d4:1d:48:d6:89:47:6d:61:a0:79:05:34: 2d:10:19:b9:69:5a:bb:99:3b:81:b2:75:cb:e3:e0: 98:62:13:04:21:eb:be:fa:fd:24:ec:54:55:ee:c7: 73:ce:aa:bd:b8:ff:81:a7:5b:26:ba:1c:c9:1e:e8: de:b2:55:4b:b6:b2:a6:65:e9:50:33:fd:50:84:ba: e6:9b:df:0a:72:9d:a6:a8:27:8a:f0:8a:c3:6a:d5: 42:c3:f2:5c:cb:75:c3:36:d6:3b:c1:52:14:3d:f6: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF X509v3 Authority Key Identifier: keyid:4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0c:97:2b:af:d2:b3:0f:d9:52:f7:39:c6:be:28:ce:36:83: f9:e3:d8:92:a7:cc:b5:d5:27:ee:a6:ed:5f:8e:88:db:84:5b: 23:36:92:5c:0b:98:29:a2:67:21:04:21:32:76:21:5b:b8:29: 7b:92:ec:6b:af:78:23:9b:b3:08:96:b4:3d:32:8f:21:3e:e8: b4:95:48:bd:1a:e8:38:cb:a5:8f:ac:9e:36:0c:f0:34:fe:cd: 34:d2:10:f3:10:85:8a:2f:de:a1:4b:47:a6:97:93:c3:da:89: 8a:6d:d4:59:ea:a2:80:49:b1:18:90:5d:25:26:f4:5a:9e:72: a6:8b:a6:17:61:f3:ad:4b:82:ca:07:28:22:1a:cc:86:72:e4: 39:0a:6e:8a:82:15:39:d3:36:88:23:22:a7:50:d5:a3:66:ba: 3f:bf:a7:c0:e8:3a:f7:9f:96:5d:0d:40:f6:d9:b9:64:a3:2a: 30:81:00:b0:4d:09:c0:fc:d8:d0:6d:f8:59:39:9f:ba:4c:13: b7:db:b3:51:8f:83:f5:76:19:ea:33:74:d6:08:96:a2:8a:21: 47:3a:51:30:ff:ef:88:89:a5:3c:f4:bf:b4:92:3a:28:8d:45: a0:7d:f3:98:2f:02:a7:bc:5b:c1:82:bc:fb:74:ec:38:63:4d: f7:f8:bb:6f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0QUMy OUVCOTE5RDA3MTkxNkQ3NDQ2NjVGMjkzNDFCMDBBMDM2Mjk3MB4XDTI1MDkxNzIy MTc1N1oXDTI2MDkwOTE1MzAyMVowMzExMC8GA1UEAxMoRjQ5QzUyNTA1N0E1RjIz NzlFRkI4MDI2ODk5N0RGMEQ1NjVBQTVGRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALNWgHs0Qg7X0dzmMo5gQWjRFTpLpZGM6gcGtr88Rnp2K9zyMiPh bMd/rmVNryIk8suX7PC2/Sp54V0u5YTEX0/fh0TdgDQybGSb2dF0B6xT/ppsLc4e qrqXjXJJ5hRD3hLbMt9POr+UnP6Di5gE57cI77jRRetEpmKCynbj9D1TCiJllQ48 RtkD+axWIWeqmMkfSQAGlAmI1B1I1olHbWGgeQU0LRAZuWlau5k7gbJ1y+PgmGIT BCHrvvr9JOxUVe7Hc86qvbj/gadbJrocyR7o3rJVS7aypmXpUDP9UIS65pvfCnKd pqgnivCKw2rVQsPyXMt1wzbWO8FSFD326cMCAwEAAaOCAg0wggIJMB0GA1UdDgQW BBT0nFJQV6XyN577gCaJl98NVlql/zAfBgNVHSMEGDAWgBRKwp65GdBxkW10RmXy k0GwCgNilzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElBT0NP UlAvU3NLZXVSblFjWkZ0ZEVabDhwTkJzQW9EWXBjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9Tc0tldVJuUWNaRnRkRVpsOHBOQnNBb0RZcGMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElBT0NPUlAvU3NLZXVSblFjWkZ0 ZEVabDhwTkJzQW9EWXBjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABIMlyuv0rMP2VL3Oca+KM42g/nj2JKnzLXVJ+6m7V+OiNuEWyM2klwLmCmi ZyEEITJ2IVu4KXuS7GuveCObswiWtD0yjyE+6LSVSL0a6DjLpY+snjYM8DT+zTTS EPMQhYov3qFLR6aXk8PaiYpt1FnqooBJsRiQXSUm9FqecqaLphdh861LgsoHKCIa zIZy5DkKboqCFTnTNogjIqdQ1aNmuj+/p8DoOvefll0NQPbZuWSjKjCBALBNCcD8 2NBt+Fk5n7pME7fbs1GPg/V2GeozdNYIlqKKIUc6UTD/74iJpTz0v7SSOiiNRaB9 85gvAqe8W8GCvPt07DhjTff4u28= -----END CERTIFICATE-----Generated at Thu Sep 18 02:08:30 2025 by rpki-client