$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft File: C2fHjjXSNjKiVTKu_otKn8q-O00.mft (raw, json) Hash identifier: Q9uKW02r1aTbT0iKOT3zbLx35W8hGgKaixyTaNjYO4w= Subject key identifier: AA:EA:58:C1:BD:94:32:45:29:A7:6D:58:72:81:D4:E2:2E:73:11:1A Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D Certificate issuer: /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Certificate serial: 0488 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft Manifest number: 0480 Signing time: Sun 02 Nov 2025 22:28:08 +0000 Manifest this update: Sun 02 Nov 2025 22:28:08 +0000 Manifest next update: Tue 04 Nov 2025 22:28:08 +0000 Files and hashes: 1: 7KdD1snMJTjVQpV_X2wJQCgI-PM.roa (hash: BMiyy7wskNfH0SDMvAXR7HTBFnxRDBZKLWmsHAXLOJQ=) 2: C2fHjjXSNjKiVTKu_otKn8q-O00.crl (hash: a0RWjpcbX23MrZaSFKfUN3ltcL24vXwUP8iepf45m0k=) 3: y_1Noo8NgLvvdz1RNh2uETC7t0E.roa (hash: 6yV2F/G0L0I5DQmnCAUPAD1FsBQEqtvhtwyEgMq5oiU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 06:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D Validity Not Before: Nov 2 22:28:08 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AAEA58C1BD94324529A76D587281D4E22E73111A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:45:3d:27:11:6b:cd:3e:21:cf:f1:4e:2e: 27:5d:0c:40:82:01:81:e7:17:ba:67:83:a6:a7:56: cf:bf:64:86:1f:c7:69:0a:e1:14:9c:33:1c:fe:de: 76:de:c3:1a:ce:ff:93:b5:66:e1:24:85:91:c1:61: de:a0:82:d6:2f:2f:30:8a:84:4e:8f:3d:e5:c2:92: 73:18:0d:f2:65:fd:38:6e:c9:76:64:6f:1f:eb:3a: 00:45:6d:66:9d:55:c6:61:b1:49:9a:bb:bb:a3:c8: e9:a9:09:d5:27:d9:4e:a5:a2:0b:18:d0:12:81:05: 02:f3:85:df:34:c5:cc:7c:83:07:f9:d3:b8:2f:da: 0c:e4:f0:f9:36:a5:fb:17:2b:e7:ce:f3:1b:57:98: 11:e8:c6:99:bb:d5:37:40:53:66:72:59:86:07:b8: c9:7d:82:b5:ea:f6:e6:e7:87:ac:4f:51:ed:06:1d: b9:54:d5:0e:d6:86:bd:fb:09:6c:2b:86:41:f3:c7: 7b:45:20:32:4a:f7:a7:42:dc:6d:7a:8b:6e:ac:ad: 8a:23:51:e5:f1:46:6f:db:03:64:13:2c:ec:e8:58: 62:e7:7e:2e:3b:89:dc:bd:46:a5:71:00:ac:fe:9c: 13:34:7d:3e:b7:c1:b4:8c:72:16:c0:e0:4d:97:f7: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:58:C1:BD:94:32:45:29:A7:6D:58:72:81:D4:E2:2E:73:11:1A X509v3 Authority Key Identifier: keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:76:54:60:13:d1:4b:10:59:af:b6:c5:58:9d:b1:96:fc:49: b0:48:c1:ab:29:84:e9:b2:d5:ae:f9:a8:88:c3:f0:0b:da:ea: 77:21:b2:8e:1a:8b:a4:76:f5:c8:e1:75:5c:ef:cc:3b:af:a3: 3a:44:fe:ad:de:42:16:a5:d8:aa:86:eb:af:9b:45:c3:99:52: 60:f7:67:d5:f1:e7:9c:36:c1:89:0f:d6:c9:19:7d:59:77:52: b1:8d:a7:42:d7:86:6f:9b:e5:4d:f8:08:05:c3:96:95:5e:de: 17:9c:46:af:7b:be:a3:6d:02:8e:52:c1:fe:5b:5f:44:02:94: 13:c8:2a:a8:72:6a:15:a9:a9:d7:d6:30:00:d1:10:f3:3d:14: 91:dd:c3:57:5a:47:a9:80:59:aa:e1:70:fa:5a:cf:7e:c5:22: 9d:1a:b7:f6:b6:f0:bc:92:ac:42:4f:a0:00:25:d8:25:1e:94: a3:be:b7:7b:f4:4c:88:28:8c:e4:ce:8e:67:59:8c:34:47:3e: 97:c8:68:99:eb:4f:7b:4e:99:fb:bb:b8:b1:99:86:14:86:82: 62:96:75:28:14:13:c2:f0:33:4b:49:ac:19:8b:37:2a:b3:8f: e0:6d:8a:02:fa:e8:9a:48:ca:94:b6:3a:05:89:1e:1c:f7:0b: f3:8b:3e:5d -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEI2 N0M3OEUzNUQyMzYzMkEyNTUzMkFFRkU4QjRBOUZDQUJFM0I0RDAeFw0yNTExMDIy MjI4MDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFBRUE1OEMxQkQ5NDMy NDUyOUE3NkQ1ODcyODFENEUyMkU3MzExMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDm50U9JxFrzT4hz/FOLiddDECCAYHnF7png6anVs+/ZIYfx2kK 4RScMxz+3nbewxrO/5O1ZuEkhZHBYd6ggtYvLzCKhE6PPeXCknMYDfJl/ThuyXZk bx/rOgBFbWadVcZhsUmau7ujyOmpCdUn2U6logsY0BKBBQLzhd80xcx8gwf507gv 2gzk8Pk2pfsXK+fO8xtXmBHoxpm71TdAU2ZyWYYHuMl9grXq9ubnh6xPUe0GHblU 1Q7Whr37CWwrhkHzx3tFIDJK96dC3G16i26srYojUeXxRm/bA2QTLOzoWGLnfi47 idy9RqVxAKz+nBM0fT63wbSMchbA4E2X975BAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUqupYwb2UMkUpp21YcoHU4i5zERowHwYDVR0jBBgwFoAUC2fHjjXSNjKiVTKu /otKn8q+O00wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9DMmZIampYU05qS2lWVEt1X290S244cS1PMDAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvQzJmSGpqWFNO aktpVlRLdV9vdEtuOHEtTzAwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFx2VGAT0UsQWa+2xVidsZb8SbBIwasphOmy1a75qIjD8Ava6nchso4a i6R29cjhdVzvzDuvozpE/q3eQhal2KqG66+bRcOZUmD3Z9Xx55w2wYkP1skZfVl3 UrGNp0LXhm+b5U34CAXDlpVe3hecRq97vqNtAo5Swf5bX0QClBPIKqhyahWpqdfW MADREPM9FJHdw1daR6mAWarhcPpaz37FIp0at/a28LySrEJPoAAl2CUelKO+t3v0 TIgojOTOjmdZjDRHPpfIaJnrT3tOmfu7uLGZhhSGgmKWdSgUE8LwM0tJrBmLNyqz j+BtigL66JpIypS2OgWJHhz3C/OLPl0= -----END CERTIFICATE-----Generated at Tue Nov 4 04:01:08 2025 by rpki-client