$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft File: 1PDdD0-4AQJdWG75mcXu4C18IFk.mft (raw, json) Hash identifier: 534u5vNTzEFu17SkXwLIs/oZhbWYps5c48aDUCH4k20= Subject key identifier: 36:66:64:52:32:0A:BA:DC:BA:A3:52:9D:6F:65:14:9C:19:94:8C:EB Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0FBA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft Manifest number: 0F46 Signing time: Sun 16 Feb 2025 16:28:11 +0000 Manifest this update: Sun 16 Feb 2025 16:28:11 +0000 Manifest next update: Sun 16 Feb 2025 22:28:11 +0000 Files and hashes: 1: -6meSA_gYHH2GNus8etfLguxJGk.roa (hash: +0huFbIe0wVe/+59cUq7MutVavOjDW2LXLUzXLo8Bp8=) 2: 0fxMZr-xSDyNKJLdAzaUs77XPI4.roa (hash: BdU4v9HZmr4ueIZLLx7/NZkw0BJY9ylFy4145joG5Jc=) 3: 1PDdD0-4AQJdWG75mcXu4C18IFk.crl (hash: f++CW4hHbqeuP3yNFoE2I7zDnS99FawrKZy/6kMWwBs=) 4: Ph3LXUUCHNzQbx8ZF3Xp2jGIrao.roa (hash: zMMaRyMSxfpE19/h+9HVfhEWN4zmgzH1mVw/R7zMJ6k=) 5: PhlE3e5xCgkmsLk8nVKhvc7xN9M.roa (hash: HKLsporc2jllNgpzy4+uuOzdDbmzNvvQlIPTMrEas2M=) 6: RZt8ik18y9atnUalzHkBomxnZos.roa (hash: cvi9K4iwLTSyWudTKK57hyiopJfPzAxtgw1EEddudDU=) 7: YPdc360PEFbWhqVvEyvpCKka3nA.roa (hash: 10K5Gw/UVEhmWYYssZijTApkxWDVY4Mqc0Kk1pUWEXU=) 8: eRWE6a5vfoWCWCMJwlWwTqzGFMM.roa (hash: XihPeSndSy61JAi+Zwro9P2JuemF+3b89GbgcsvmWok=) 9: mg5Pb36Ed8Qv3k_YEqaFZvERe0I.roa (hash: Q3PKKLm+2lFbBPPWZDJx6s4Y08oGpPv83go4EVgOnM0=) 10: na900zgWs54EDVa1nBJKbOShrzI.roa (hash: 4WCjXfiXRT2W9l7U7IIGIQBxhUC8A1i9PUnnbX+kUz4=) 11: qZAnPuIsZ-wdbzdyou5tqpF40Zg.roa (hash: f2idFSznlDWbD+BndphmUxux6HJe+jn4cHvz2HPGs3g=) 12: s8CGOcAdc3AywWg5PdIJ3hNrQ64.roa (hash: QzsbOEzyGHyu+MaVCnE6ernqsIx6bRtycwY7gv3al5A=) 13: sz4M1ZiLPSJ6UI_Ya8frER0kXjw.roa (hash: drG0UFyFBp3trqOt1dwrpRu6xOJsYl6Csm+P43n1iHs=) 14: w4giOLeJgtwZBEclKCl9L2zpNqE.roa (hash: H4LPJK8YFwv9mpRc7i2sfXu142PvmyjG/+Tfg1lsVSw=) 15: z6GfaBOgWGWFbK9dKl0T1DdFjUg.roa (hash: xDcFnVzlYrK7jZYkbZb0iOoX57VyWnP7hfKUaiAkhP0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Feb 2025 22:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4026 (0xfba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Feb 16 16:28:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36666452320ABADCBAA3529D6F65149C19948CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:3f:e0:8a:04:50:cd:e1:bd:8f:d1:d2:18: a7:fa:59:dc:58:40:b0:51:8e:7c:c4:b9:db:b4:75: 20:9f:0b:49:4e:ba:d6:9c:77:37:78:c6:19:f8:50: 87:2d:2c:10:c3:b1:5e:29:b4:b5:b6:3d:c6:a1:f1: e3:56:05:b7:ef:d3:b2:a3:dd:c0:db:27:86:74:dd: 5b:ad:28:4a:20:75:87:63:29:28:1a:42:ee:15:b0: 44:9c:11:e3:b6:43:6b:ec:56:c5:36:d5:5a:a8:56: 5b:64:e1:2f:b9:fe:13:75:ee:5a:5b:21:86:1c:21: d4:65:cd:c4:43:ed:80:e4:88:1c:ce:1f:80:7c:29: e3:fd:9b:a1:1a:f2:95:b9:8d:ba:31:c2:24:0e:da: f2:4d:d3:51:15:cd:bc:c0:3a:89:0d:10:2f:32:86: 46:e1:1e:6f:30:96:90:f8:52:63:1e:8e:6b:b3:e0: fd:61:d3:70:30:d6:5c:d7:99:57:eb:9f:34:bf:54: 02:af:ff:b5:ff:52:ff:d9:f7:d7:02:5b:31:b2:ea: 66:61:6c:fb:90:5e:55:4e:43:0b:dd:8c:d9:aa:77: 55:16:f5:7e:a8:8a:bf:6d:dd:52:db:77:e8:1a:1e: 75:31:2a:57:a9:da:6d:c7:4f:09:28:09:35:46:40: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:66:64:52:32:0A:BA:DC:BA:A3:52:9D:6F:65:14:9C:19:94:8C:EB X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7c:d5:dd:66:3c:ae:26:f3:7a:a9:95:f0:e4:d1:48:1e:da: 91:ff:0e:78:5c:c7:a2:d1:1d:af:1b:b1:3d:92:5b:cd:0f:25: 35:66:13:24:30:f7:b3:61:b3:3f:4a:f4:d2:b4:97:1b:9a:c9: df:4e:f8:86:9e:58:5f:58:2a:d6:75:9b:6c:ff:38:cf:1f:c9: 69:38:a5:28:60:76:5d:3c:41:bc:bc:16:be:e7:1d:27:7e:2d: 11:a4:e6:8f:92:b9:2c:c2:eb:49:38:67:b1:90:fc:b3:5a:b9: 6e:d0:77:93:5a:0c:05:58:fa:ff:b8:e9:f7:b2:2e:0d:47:8b: 41:61:93:b2:f5:d2:a4:ea:48:83:0a:df:02:a3:24:3b:fd:b1: b2:12:46:fb:63:92:51:c9:26:c0:10:77:57:f6:c0:28:62:b8: 5c:0a:72:19:80:c4:93:37:57:b7:39:cf:6e:c8:e9:92:1d:b9: 45:98:b2:b6:b1:5b:74:6e:05:69:30:56:c9:e8:22:ac:48:4f: f8:b8:ee:c2:9d:9d:79:ad:1e:ab:7a:5f:bb:ca:11:1d:19:eb: 8e:0e:be:21:28:7b:ea:36:20:a7:c5:e9:2a:10:72:9a:3d:00: 75:0f:dd:b6:4c:c1:d4:20:a6:f1:43:b2:32:b4:ee:32:0a:bd: 06:f3:8a:90 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICD7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNTAyMTYx NjI4MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2NjY2NDUyMzIwQUJB RENCQUEzNTI5RDZGNjUxNDlDMTk5NDhDRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDItz/gigRQzeG9j9HSGKf6WdxYQLBRjnzEudu0dSCfC0lOutac dzd4xhn4UIctLBDDsV4ptLW2Pcah8eNWBbfv07Kj3cDbJ4Z03VutKEogdYdjKSga Qu4VsEScEeO2Q2vsVsU21VqoVltk4S+5/hN17lpbIYYcIdRlzcRD7YDkiBzOH4B8 KeP9m6Ea8pW5jboxwiQO2vJN01EVzbzAOokNEC8yhkbhHm8wlpD4UmMejmuz4P1h 03Aw1lzXmVfrnzS/VAKv/7X/Uv/Z99cCWzGy6mZhbPuQXlVOQwvdjNmqd1UW9X6o ir9t3VLbd+gaHnUxKlep2m3HTwkoCTVGQNVzAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUNmZkUjIKuty6o1Kdb2UUnBmUjOswHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQRGREMC00QVFKZFdHNzVtY1h1NEMx OElGay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKfNXdZjyu JvN6qZXw5NFIHtqR/w54XMei0R2vG7E9klvNDyU1ZhMkMPezYbM/SvTStJcbmsnf TviGnlhfWCrWdZts/zjPH8lpOKUoYHZdPEG8vBa+5x0nfi0RpOaPkrkswutJOGex kPyzWrlu0HeTWgwFWPr/uOn3si4NR4tBYZOy9dKk6kiDCt8CoyQ7/bGyEkb7Y5JR ySbAEHdX9sAoYrhcCnIZgMSTN1e3Oc9uyOmSHblFmLK2sVt0bgVpMFbJ6CKsSE/4 uO7CnZ15rR6rel+7yhEdGeuODr4hKHvqNiCnxekqEHKaPQB1D922TMHUIKbxQ7Iy tO4yCr0G84qQ -----END CERTIFICATE-----Generated at Sun Feb 16 20:37:02 2025 by rpki-client