$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft File: KFWXNnKx7tcXYMCULCf9X3VpAZw.mft (raw, json) Hash identifier: eHdBTZ3CgCscU2eHFp2Casw3Jtbf4P3YmJ0QQuKRL6M= Subject key identifier: 48:61:35:D1:45:6F:92:C6:2E:B7:E6:74:57:A5:30:84:77:76:C6:95 Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0C2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft Manifest number: 0BDD Signing time: Mon 03 Jun 2024 07:26:02 +0000 Manifest this update: Mon 03 Jun 2024 07:26:02 +0000 Manifest next update: Wed 05 Jun 2024 07:26:02 +0000 Files and hashes: 1: 2kR6oUlo7pOGfXGt2VIQy-7eSyk.roa (hash: +SRPl665CX+26XuVVs2JvM9QvPrya7a0j5LF6Kaa5jE=) 2: 3hYJoi6m26-E3az_pIphnWgXtbg.roa (hash: R2siSaU0gZGQsj1fTeGSiRhNwTkfyYOLnGRYx8vbUcQ=) 3: 6WDnNDu-VtoeuwR7Y5eBtfV-dFQ.roa (hash: wbLcHVnV5uyJbjbmzUuhYJCRNyDflIZYNFoOAgB2NHo=) 4: KFWXNnKx7tcXYMCULCf9X3VpAZw.crl (hash: mQyd4+d1igElrvduxFWFpr/on3Zb9/je867Rmv2WGx4=) 5: Qe1UmkpwDBiqgnW4KK2gFdFUxcY.roa (hash: lShg2jjx7mCFdfwMRQfee3bLx/t3cketPlHHo+gpBWo=) 6: Uwf36Gq-7HIAR_PkNaOSYTX_i_A.roa (hash: M2gh1nzwH5apWfoGyYD6xnOgNVE9PxldjhggdXWuMQo=) 7: XNEiSKJNJEmWDAhH2-VTFObzFdk.roa (hash: iAzOS+R+N6SIt+Zk8IsbUNTxHPkcnV3p6hjwPDdM21g=) 8: cweqPWQFSRc-k0tkM5_j6R9K-NY.roa (hash: 54YZ0AYx4fg/kmq56WZDP5te8P6eWnHrLZnGBxCUZDQ=) 9: oKUIqqgVGyJJvn3OLKDUeXwO-_k.roa (hash: vMx6zFj83UYYIivgFbKYuu3Afk+1/M2bLPQf8370kDI=) 10: ocjVCSErUCeoalXg73DrksxBbj4.roa (hash: uOeD4iDOgM2cLASBTKuMxnD689BmSvzcz8ArkK/7iHo=) 11: sQTZehGqNCykeX8M1D8NSzDzM1I.roa (hash: 6/N/0zqRWoQPPIwef90bcwzQXSvcPpOf7KQ0UxCB5ho=) 12: wQfd41Yxn35IzWBJJPTVxr7GAVE.roa (hash: tZk8YpdqLnMYEp9RfCSfWiASXQtj3cLQ8DCUTqkAEiA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Jun 3 07:26:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=486135D1456F92C62EB7E67457A530847776C695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:6d:85:51:20:07:e8:8c:54:8f:07:0d:1a: 14:6e:8f:d5:c2:1c:6f:c4:35:ec:96:fb:31:99:68: dc:7e:1e:67:2f:00:b0:64:5e:b1:e9:44:7f:ed:8a: 98:95:64:f4:83:11:61:a7:05:82:ba:de:c7:e5:55: c7:2e:cb:7d:f9:12:b0:b8:62:da:00:ab:8d:64:a1: 17:f2:00:4b:4c:90:72:9f:39:4c:81:61:23:91:84: 28:33:48:0e:e8:7a:a0:84:c5:0f:80:2f:9b:3a:e2: 44:ee:5c:14:d8:05:da:4f:39:07:2c:60:b8:78:30: b9:00:05:34:26:87:99:d8:6e:0c:3a:a7:0f:08:27: 90:6d:b2:80:ec:25:a8:e1:22:7b:45:01:f4:e7:ba: 4e:75:f3:b0:e4:9d:78:a2:09:0f:c4:dd:a0:ff:a2: d8:c4:8b:c8:fe:1d:dd:a3:26:6e:61:65:ef:50:76: 45:4f:20:fb:cf:e2:74:d7:9c:ea:fe:86:b6:3e:76: 6f:f8:b5:84:e9:4c:37:fa:92:db:f3:f2:c0:8d:67: 7a:f7:be:11:05:12:01:0c:b3:9a:1e:59:c5:40:c3: 79:3e:2e:96:d2:b9:bc:c2:99:11:23:6e:50:34:a9: 61:08:4e:67:ff:c0:04:08:1c:b5:c1:6c:a8:9d:60: e9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:61:35:D1:45:6F:92:C6:2E:B7:E6:74:57:A5:30:84:77:76:C6:95 X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:56:1d:80:a6:c5:b2:6f:69:41:19:26:66:56:9e:57:ad:94: d2:20:f3:fc:3c:c7:19:54:ad:35:bb:3b:0a:71:5d:1b:82:a0: 05:ad:40:e7:ce:58:74:ee:c0:3c:2e:0b:48:4e:49:e9:fd:56: 5a:ec:a0:4c:2b:36:38:3c:18:ea:9c:50:cb:5b:e8:f8:2a:97: f5:72:d3:5c:fc:2f:f6:bc:3c:f4:63:81:cd:cf:e2:a6:3b:8d: b9:ae:e9:93:d7:fd:ac:f2:26:af:5c:18:df:28:e7:09:a0:65: a6:37:96:35:6c:04:91:dc:94:2c:1e:05:3e:08:72:95:ef:52: ca:a9:57:e6:5b:5c:18:e9:3d:34:bc:09:b7:ae:06:ef:40:f0: 59:0b:a3:7c:cd:7f:f2:3a:62:9a:fe:68:ed:55:78:5f:6f:6a: cd:4e:86:44:a5:7a:27:00:99:f8:62:c5:58:78:29:d9:e3:e1: 3b:1d:0c:eb:95:0f:bb:f7:55:fa:40:58:f7:04:c4:48:ad:04: d3:f6:e9:e5:c0:3b:c4:84:b2:ef:22:c7:e0:4b:87:0d:e1:ec: 43:08:b3:9f:ee:a5:7e:3a:cf:39:b6:6a:53:31:c3:34:d5:3e: 97:d6:b1:99:0b:d8:dd:97:3b:77:aa:c6:4e:3a:eb:d7:ec:b8: 10:fc:eb:84 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNDA2MDMw NzI2MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ4NjEzNUQxNDU2Rjky QzYyRUI3RTY3NDU3QTUzMDg0Nzc3NkM2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2WG2FUSAH6IxUjwcNGhRuj9XCHG/ENeyW+zGZaNx+HmcvALBk XrHpRH/tipiVZPSDEWGnBYK63sflVccuy335ErC4YtoAq41koRfyAEtMkHKfOUyB YSORhCgzSA7oeqCExQ+AL5s64kTuXBTYBdpPOQcsYLh4MLkABTQmh5nYbgw6pw8I J5BtsoDsJajhIntFAfTnuk5187DknXiiCQ/E3aD/otjEi8j+Hd2jJm5hZe9QdkVP IPvP4nTXnOr+hrY+dm/4tYTpTDf6ktvz8sCNZ3r3vhEFEgEMs5oeWcVAw3k+LpbS ubzCmREjblA0qWEITmf/wAQIHLXBbKidYOndAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUSGE10UVvksYut+Z0V6UwhHd2xpUwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vS0ZXWE5uS3g3 dGNYWU1DVUxDZjlYM1ZwQVp3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGVWHYCmxbJvaUEZJmZWnletlNIg8/w8xxlUrTW7OwpxXRuCoAWtQOfO WHTuwDwuC0hOSen9VlrsoEwrNjg8GOqcUMtb6Pgql/Vy01z8L/a8PPRjgc3P4qY7 jbmu6ZPX/azyJq9cGN8o5wmgZaY3ljVsBJHclCweBT4IcpXvUsqpV+ZbXBjpPTS8 CbeuBu9A8FkLo3zNf/I6Ypr+aO1VeF9vas1OhkSleicAmfhixVh4Kdnj4TsdDOuV D7v3VfpAWPcExEitBNP26eXAO8SEsu8ix+BLhw3h7EMIs5/upX46zzm2alMxwzTV PpfWsZkL2N2XO3eqxk4669fsuBD864Q= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org