$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft File: vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft (raw, json) Hash identifier: Qx94AQpY0ZMMXVueuAy6ZFlR9pwFl0N34qjWz/og9+U= Subject key identifier: 40:AA:00:3A:AE:D3:C0:43:B5:9B:08:D3:F4:9B:A2:33:CF:8B:E7:0D Authority key identifier: BC:3C:BE:1B:08:67:14:C0:05:B7:33:0D:7C:C2:26:DD:03:D7:74:3A Certificate issuer: /CN=BC3CBE1B086714C005B7330D7CC226DD03D7743A Certificate serial: 0C13 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/vDy-GwhnFMAFtzMNfMIm3QPXdDo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft Manifest number: 0C13 Signing time: Mon 25 Nov 2024 15:54:41 +0000 Manifest this update: Mon 25 Nov 2024 15:54:41 +0000 Manifest next update: Wed 27 Nov 2024 15:54:41 +0000 Files and hashes: 1: vDy-GwhnFMAFtzMNfMIm3QPXdDo.crl (hash: CJmqxrYlaCNTxw4h+KhtDPWnPhDMIRIgr5V38OPu+eA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/vDy-GwhnFMAFtzMNfMIm3QPXdDo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC3CBE1B086714C005B7330D7CC226DD03D7743A Validity Not Before: Nov 25 15:54:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=40AA003AAED3C043B59B08D3F49BA233CF8BE70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:f7:61:8b:bf:36:1e:92:ca:21:98:a2:8f: ff:2f:c5:66:67:d2:57:89:92:4d:68:d8:d8:60:ad: f5:fb:41:38:7b:18:54:b4:db:ad:25:a0:41:7a:b4: e5:c1:17:a8:a0:ec:3f:1a:83:10:60:8e:a2:cb:eb: e5:c4:b9:35:10:aa:7e:f4:9f:3a:05:ff:fb:16:86: d5:de:b8:68:66:51:65:5b:55:ff:58:ff:96:cf:cf: 76:d0:aa:ec:f2:69:1b:d3:01:90:62:69:b5:a6:52: 84:43:d6:59:29:34:a7:c0:d8:21:1d:96:5d:c1:3c: f5:f8:cb:d8:e9:e9:5c:70:88:04:98:43:9b:ab:54: ed:3e:59:b7:2f:58:9c:60:6c:11:3b:7c:84:1c:35: df:a2:c2:4b:ae:d7:99:74:ca:96:f4:b6:02:82:b9: 1f:97:20:83:50:f5:71:c6:d1:b0:70:93:e1:fc:ad: 5e:f3:de:ce:c0:3b:5e:c1:f7:46:4e:1f:1f:11:8d: f1:72:28:8c:28:8e:47:62:bd:98:24:d9:81:6e:64: 5a:3c:70:20:20:2a:e6:57:e5:60:30:2f:76:41:25: 59:34:3a:42:23:48:e7:16:1e:38:72:53:74:d6:59: de:99:6a:32:cd:35:06:5d:a0:28:04:76:85:fc:16: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:00:3A:AE:D3:C0:43:B5:9B:08:D3:F4:9B:A2:33:CF:8B:E7:0D X509v3 Authority Key Identifier: keyid:BC:3C:BE:1B:08:67:14:C0:05:B7:33:0D:7C:C2:26:DD:03:D7:74:3A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vDy-GwhnFMAFtzMNfMIm3QPXdDo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:71:b8:7f:c1:42:9e:75:0b:ac:f7:2d:be:e0:74:c1:a2:36: c3:b8:3f:76:f3:9c:bd:9a:1c:b7:4e:ee:82:2c:45:eb:c5:8e: 24:6e:a9:a3:9f:2c:b4:9f:6a:d4:46:01:11:21:8a:b9:38:66: 69:58:53:a3:a1:75:3b:37:cd:78:3b:d6:12:9d:39:a8:7f:0a: da:14:cc:c6:db:b9:cf:14:c8:5c:55:c0:e9:c0:25:35:2c:9c: 21:6b:18:1c:78:42:10:3c:c1:1a:e4:d8:e2:ce:c8:2d:79:51: ac:45:5e:51:d0:31:52:5b:09:7b:25:f5:28:43:b4:0b:93:b6: 1e:ad:db:b3:43:a6:4f:e0:34:55:84:f2:e8:8e:51:0e:51:41: 08:39:95:d5:82:c1:ef:ef:be:15:da:95:46:b6:05:4c:d3:7d: 23:41:42:e0:a7:b0:40:45:17:d3:57:4e:89:0d:f5:b5:e5:82: c9:b9:bc:a8:6e:83:0c:2c:e4:12:70:4a:8b:be:e3:4f:3b:aa: 2b:f5:b4:be:11:81:23:0b:16:0b:03:8f:60:77:69:8e:20:be: 54:3e:4d:33:3d:f3:b6:8a:c0:76:5d:e9:3b:69:d1:d9:11:1a: 78:e5:3c:8e:1e:fd:18:cc:15:50:10:b7:fb:6b:77:a7:20:eb: 56:e6:36:5b -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkMz Q0JFMUIwODY3MTRDMDA1QjczMzBEN0NDMjI2REQwM0Q3NzQzQTAeFw0yNDExMjUx NTU0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwQUEwMDNBQUVEM0Mw NDNCNTlCMDhEM0Y0OUJBMjMzQ0Y4QkU3MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDo4/dhi782HpLKIZiij/8vxWZn0leJkk1o2NhgrfX7QTh7GFS0 260loEF6tOXBF6ig7D8agxBgjqLL6+XEuTUQqn70nzoF//sWhtXeuGhmUWVbVf9Y /5bPz3bQquzyaRvTAZBiabWmUoRD1lkpNKfA2CEdll3BPPX4y9jp6VxwiASYQ5ur VO0+WbcvWJxgbBE7fIQcNd+iwkuu15l0ypb0tgKCuR+XIINQ9XHG0bBwk+H8rV7z 3s7AO17B90ZOHx8RjfFyKIwojkdivZgk2YFuZFo8cCAgKuZX5WAwL3ZBJVk0OkIj SOcWHjhyU3TWWd6ZajLNNQZdoCgEdoX8FnN9AgMBAAGjggIFMIICATAdBgNVHQ4E FgQUQKoAOq7TwEO1mwjT9JuiM8+L5w0wHwYDVR0jBBgwFoAUvDy+GwhnFMAFtzMN fMIm3QPXdDowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklURUwv dkR5LUd3aG5GTUFGdHpNTmZNSW0zUVBYZERvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS92RHktR3dobkZNQUZ0ek1OZk1JbTNRUFhkRG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9GSVRFTC92RHktR3dobkZNQUZ0ek1OZk1J bTNRUFhkRG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHG4 f8FCnnULrPctvuB0waI2w7g/dvOcvZoct07ugixF68WOJG6po58stJ9q1EYBESGK uThmaVhTo6F1OzfNeDvWEp05qH8K2hTMxtu5zxTIXFXA6cAlNSycIWsYHHhCEDzB GuTY4s7ILXlRrEVeUdAxUlsJeyX1KEO0C5O2Hq3bs0OmT+A0VYTy6I5RDlFBCDmV 1YLB7+++FdqVRrYFTNN9I0FC4KewQEUX01dOiQ31teWCybm8qG6DDCzkEnBKi77j TzuqK/W0vhGBIwsWCwOPYHdpjiC+VD5NMz3ztorAdl3pO2nR2REaeOU8jh79GMwV UBC3+2t3pyDrVuY2Ww== -----END CERTIFICATE-----Generated at Mon Nov 25 18:39:33 2024 by rpki-client on console-fra.rpki-client.org