$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft File: H4d5g1J0cOIA1a4GoBWIITVV_uY.mft (raw, json) Hash identifier: 5lOA3/chfVbxc3n2DT5kinNRn1T71yXMajBjTKjFH+g= Subject key identifier: 86:F9:0A:C1:D1:2D:A9:2B:9F:F6:88:D0:61:E0:27:30:68:0B:85:7F Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6 Certificate serial: 03ED Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft Manifest number: 03D3 Signing time: Sun 26 Apr 2026 22:35:07 +0000 Manifest this update: Sun 26 Apr 2026 22:35:07 +0000 Manifest next update: Tue 28 Apr 2026 22:35:07 +0000 Files and hashes: 1: 6xb5GIogFcLPLXnAO7uTPNGN-eE.roa (hash: kflATpPFlJE3DKWOtuDB50wPQhdlGCWIcRQ6V3dTnKc=) 2: H4d5g1J0cOIA1a4GoBWIITVV_uY.crl (hash: 0M/VqH4gjUgFSvZlJdtQKIXAoDqnMpWEocRSOehYhCU=) 3: TYx2l_8z_nAq2QEus0U2e9VUv_k.roa (hash: 7CBhEIM0DVkZC40w7yGKlReYMKtOASvRG7tVqSHiGD8=) 4: Yuy0l4pnnBzAIOsP9xCrl4oiL4c.roa (hash: +Ynuii0mJidSKGaAA8fJlN+edGoofTL8lYarYgp9WuA=) 5: hOPcBiZH-Xxa2ZkMj3xYYtkN3jY.roa (hash: +6aW6GMUeZt3K5PvZTf8p40PBEfp2BfYhg71iTnq3Tk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 12:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6 Validity Not Before: Apr 26 22:35:07 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=86F90AC1D12DA92B9FF688D061E02730680B857F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:9a:5c:b9:82:9f:85:e0:67:ea:b6:71:b0: 99:fa:b3:2e:dc:9d:d4:9d:a8:70:d2:9b:6e:76:7f: 89:d2:d1:99:9b:aa:e5:9f:60:9a:4b:28:a6:22:10: 65:e1:9b:02:bf:46:18:75:1e:7f:53:77:da:9d:af: 6b:2b:26:ed:ce:a4:0d:47:d9:56:5d:75:17:53:08: 47:ca:b9:dd:4d:9f:81:dd:eb:30:5e:1c:96:74:e4: 49:f3:ad:0e:1d:c8:d5:f0:01:f5:28:87:3c:f9:f4: 74:c5:dd:d9:77:7f:b8:eb:7b:40:0b:b1:c6:a1:c0: e7:91:f6:e9:27:77:e3:68:af:60:03:58:65:9a:58: 9b:e7:bf:a2:6e:cf:c8:3e:e1:87:ee:12:5f:32:52: 14:d5:64:12:64:31:be:26:f2:ee:12:83:49:f6:ca: 3b:f0:0c:c5:e2:a8:df:24:ea:db:3f:03:42:38:ca: be:b0:73:73:2b:d1:d0:64:e4:35:31:c9:09:b3:f2: 9c:3a:22:b6:91:07:fa:6b:76:74:7e:e9:9f:46:cd: b8:be:5e:1b:c3:69:f2:70:97:88:22:7d:52:0d:c2: 12:22:64:df:c4:4d:58:d6:e6:0d:ce:7a:9d:ef:82: 51:28:ba:16:ab:d5:84:79:60:9b:8f:76:dd:96:31: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:0A:C1:D1:2D:A9:2B:9F:F6:88:D0:61:E0:27:30:68:0B:85:7F X509v3 Authority Key Identifier: keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:31:ee:cc:dc:8b:2c:90:72:a1:7a:93:e9:5b:0c:2d:49:fb: a7:fb:12:d1:8c:26:11:63:9f:44:96:ea:11:a2:a7:4b:00:b2: 5b:1f:06:60:32:7d:74:da:45:39:82:ca:61:72:91:4f:fe:87: 3d:f0:12:6d:04:0b:1a:86:03:23:cb:70:ee:e1:73:25:b3:72: 48:29:dc:70:5d:1a:58:eb:2c:f2:30:bc:13:f3:78:2d:a6:2e: e3:51:38:0d:97:9c:54:e0:86:8c:85:8d:90:85:44:d1:ea:78: 0a:11:3f:58:35:ef:e8:c2:af:c6:ea:7e:d3:cc:49:b0:d7:83: 74:9d:85:55:23:23:de:24:4a:55:ba:30:46:a3:b2:f8:45:29: 55:5b:51:d4:80:c6:57:fc:a0:f9:5e:6c:34:36:84:5a:b7:56: c3:e2:bd:f2:8a:03:69:39:44:7c:ab:ff:ae:4c:0d:5a:a1:b1: 8c:29:84:e0:32:f1:4c:21:ad:27:08:97:27:78:2e:81:ae:d3: 8a:8e:2c:ba:48:87:1a:41:31:0a:41:82:b0:29:14:14:04:2b: 5d:01:d8:d8:d6:14:81:f6:dc:bc:09:7f:f5:70:f2:dd:a7:31: 1a:54:8f:cc:49:b7:aa:5b:ff:68:ce:2b:59:bc:e8:60:ab:1d: 20:e3:b9:45 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY4 Nzc5ODM1Mjc0NzBFMjAwRDVBRTA2QTAxNTg4MjEzNTU1RkVFNjAeFw0yNjA0MjYy MjM1MDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2RjkwQUMxRDEyREE5 MkI5RkY2ODhEMDYxRTAyNzMwNjgwQjg1N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw2ppcuYKfheBn6rZxsJn6sy7cndSdqHDSm252f4nS0ZmbquWf YJpLKKYiEGXhmwK/Rhh1Hn9Td9qdr2srJu3OpA1H2VZddRdTCEfKud1Nn4Hd6zBe HJZ05EnzrQ4dyNXwAfUohzz59HTF3dl3f7jre0ALscahwOeR9uknd+Nor2ADWGWa WJvnv6Juz8g+4YfuEl8yUhTVZBJkMb4m8u4Sg0n2yjvwDMXiqN8k6ts/A0I4yr6w c3Mr0dBk5DUxyQmz8pw6IraRB/prdnR+6Z9Gzbi+XhvDafJwl4gifVINwhIiZN/E TVjW5g3Oep3vglEouhar1YR5YJuPdt2WMYxxAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUhvkKwdEtqSuf9ojQYeAnMGgLhX8wHwYDVR0jBBgwFoAUH4d5g1J0cOIA1a4G oBWIITVV/uYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1BTWVMv SDRkNWcxSjBjT0lBMWE0R29CV0lJVFZWX3VZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9INGQ1ZzFKMGNPSUExYTRHb0JXSUlUVlZfdVkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUFNZUy9INGQ1ZzFKMGNPSUExYTRHb0JX SUlUVlZfdVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDHu zNyLLJByoXqT6VsMLUn7p/sS0YwmEWOfRJbqEaKnSwCyWx8GYDJ9dNpFOYLKYXKR T/6HPfASbQQLGoYDI8tw7uFzJbNySCnccF0aWOss8jC8E/N4LaYu41E4DZecVOCG jIWNkIVE0ep4ChE/WDXv6MKvxup+08xJsNeDdJ2FVSMj3iRKVbowRqOy+EUpVVtR 1IDGV/yg+V5sNDaEWrdWw+K98ooDaTlEfKv/rkwNWqGxjCmE4DLxTCGtJwiXJ3gu ga7Tio4sukiHGkExCkGCsCkUFAQrXQHY2NYUgfbcvAl/9XDy3acxGlSPzEm3qlv/ aM4rWbzoYKsdIOO5RQ== -----END CERTIFICATE-----Generated at Mon Apr 27 08:26:20 2026 by rpki-client