$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft File: ftgwlnECe35vya4nucaMnE4pxXU.mft (raw, json) Hash identifier: hzf/P3i50J3HlbwCknvBZqWzDr6F2bn9km5djlPC3BU= Subject key identifier: 66:A9:74:07:81:77:DC:FD:04:3F:D9:68:DE:DF:E1:B1:80:12:D4:2F Authority key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 Certificate issuer: /CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Certificate serial: 014A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft Manifest number: 0146 Signing time: Mon 08 Sep 2025 07:16:27 +0000 Manifest this update: Mon 08 Sep 2025 07:16:27 +0000 Manifest next update: Mon 08 Sep 2025 13:16:27 +0000 Files and hashes: 1: YpjaZC5LJccyTWPtUV5W8y7mQGY.roa (hash: eUalxOIeDjSTxJCisxHcY9I9f8YtwI2myu3jsK0kajc=) 2: ftgwlnECe35vya4nucaMnE4pxXU.crl (hash: vOvWnRJNtcjUSR5BH+ZYGuILFJAGERWnnZjiJro8LHM=) 3: mKdR6--Ct0FenOYAQquVe1RtECw.roa (hash: xDLu6qxNzNW8m67vaBbUTurxrLTvcboUKmV8uB7NENk=) 4: td3jCjzHIYCL0-HvpN4nhdz2tvg.roa (hash: rBvJqif2TLaa20JqvQMoW3jO03c53tQSeUOcr0H7L0I=) 5: uNVqEJogHZSaPrKSieumrfhC8bk.roa (hash: dR9jkjn7FRhIqoQ74x6PlkHXiKpeC16K+bmQtEzwsc0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575 Validity Not Before: Sep 8 07:16:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=66A974078177DCFD043FD968DEDFE1B18012D42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:2e:ce:01:3c:ee:31:ae:3d:11:9f:9c:1d: 2c:de:41:17:95:93:07:18:4b:f2:b5:7c:6d:99:11: 32:65:a7:b4:4c:d4:9c:5c:95:33:3f:41:56:f8:40: 75:39:d9:67:03:42:b5:3f:a8:3c:89:a0:f6:db:57: 34:6f:92:8d:6b:1d:38:b3:e2:58:1f:9d:02:05:1d: 40:a0:25:bc:00:bb:2f:ed:17:eb:bd:6b:3a:98:83: 02:d4:c8:37:39:bf:88:25:c2:b3:c9:51:43:ef:74: 5b:ce:74:f8:6f:85:79:7e:b5:a0:73:bc:45:16:ca: 5d:fb:4b:98:54:18:71:70:d2:f0:60:b5:d5:2f:a6: cb:c0:4b:c9:37:05:0a:fa:02:09:06:99:f7:53:c7: 81:f0:7c:1c:56:ba:76:e1:0a:6a:49:5e:49:32:3e: 01:c3:8e:db:b7:69:30:a0:af:b7:17:d0:f6:47:22: 20:bf:7b:3c:90:ad:3e:35:8d:58:de:73:c7:55:88: f1:60:00:98:90:ff:a4:e8:bd:62:12:14:de:ae:3a: 55:24:a8:d2:3d:f8:2e:6d:b0:23:91:7a:95:72:9a: 7a:ca:32:d1:e4:46:b1:67:77:bc:63:43:53:d9:08: 3b:86:bb:be:d3:a8:e9:b4:3d:1e:e4:da:7e:19:cf: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A9:74:07:81:77:DC:FD:04:3F:D9:68:DE:DF:E1:B1:80:12:D4:2F X509v3 Authority Key Identifier: keyid:7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e2:5d:2c:2c:c0:04:bc:03:20:76:75:87:15:cd:bf:a2:d2: 8f:1c:a5:ba:a7:d4:1a:4f:70:0f:2f:85:77:13:91:d2:7b:0b: de:4a:bb:48:f4:3c:7b:a5:79:fb:7f:b7:86:f1:ef:2a:f4:f0: 90:36:ff:e1:3d:9d:bc:0c:ac:75:36:8a:d6:90:dc:c0:66:aa: cc:63:48:52:0b:9f:53:db:a8:78:f1:c7:9c:a6:4b:54:02:89: e5:f7:58:da:22:f5:17:ed:3e:12:2d:66:7b:2e:65:d6:79:34: b9:69:f1:12:ca:09:d4:60:4d:ec:a2:5a:8f:a6:b8:85:68:19: ad:41:11:cb:87:f6:e9:87:e0:3d:98:1f:dc:b9:38:1f:a4:be: df:75:e4:d8:8f:07:d7:99:a9:ca:e0:cf:27:fc:0d:fc:27:c4: ef:10:e9:c5:9f:09:e9:21:5a:c5:fd:15:11:ca:73:72:c2:71: 91:8d:ea:7a:aa:ab:90:54:9d:69:39:1d:70:ef:73:d5:25:89: 68:49:30:33:2b:d6:57:ef:c3:36:0e:fe:c5:d5:6c:29:c9:5e: fc:d4:89:27:96:c2:93:02:a2:9a:d0:da:b3:df:a1:31:78:02: 9a:60:4b:0a:ac:75:b9:0b:c5:14:86:f6:90:b1:fd:c5:fd:6e: 8f:53:f2:8c -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICAUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VE ODMwOTY3MTAyN0I3RTZGQzlBRTI3QjlDNjhDOUM0RTI5QzU3NTAeFw0yNTA5MDgw NzE2MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY2QTk3NDA3ODE3N0RD RkQwNDNGRDk2OERFREZFMUIxODAxMkQ0MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOJS7OATzuMa49EZ+cHSzeQReVkwcYS/K1fG2ZETJlp7RM1Jxc lTM/QVb4QHU52WcDQrU/qDyJoPbbVzRvko1rHTiz4lgfnQIFHUCgJbwAuy/tF+u9 azqYgwLUyDc5v4glwrPJUUPvdFvOdPhvhXl+taBzvEUWyl37S5hUGHFw0vBgtdUv psvAS8k3BQr6AgkGmfdTx4HwfBxWunbhCmpJXkkyPgHDjtu3aTCgr7cX0PZHIiC/ ezyQrT41jVjec8dViPFgAJiQ/6TovWISFN6uOlUkqNI9+C5tsCORepVymnrKMtHk RrFnd7xjQ1PZCDuGu77TqOm0PR7k2n4Zz4xJAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUZql0B4F33P0EP9lo3t/hsYAS1C8wHwYDVR0jBBgwFoAUftgwlnECe35vya4n ucaMnE4pxXUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNQkVT T04vZnRnd2xuRUNlMzV2eWE0bnVjYU1uRTRweFhVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9mdGd3bG5FQ2UzNXZ5YTRudWNhTW5FNHB4WFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1CRVNPTi9mdGd3bG5FQ2UzNXZ5 YTRudWNhTW5FNHB4WFUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOOJdLCzABLwDIHZ1hxXNv6LSjxyluqfUGk9wDy+FdxOR0nsL3kq7SPQ8e6V5 +3+3hvHvKvTwkDb/4T2dvAysdTaK1pDcwGaqzGNIUgufU9uoePHHnKZLVAKJ5fdY 2iL1F+0+Ei1mey5l1nk0uWnxEsoJ1GBN7KJaj6a4hWgZrUERy4f26YfgPZgf3Lk4 H6S+33Xk2I8H15mpyuDPJ/wN/CfE7xDpxZ8J6SFaxf0VEcpzcsJxkY3qeqqrkFSd aTkdcO9z1SWJaEkwMyvWV+/DNg7+xdVsKcle/NSJJ5bCkwKimtDas9+hMXgCmmBL Cqx1uQvFFIb2kLH9xf1uj1PyjA== -----END CERTIFICATE-----Generated at Mon Sep 8 11:22:57 2025 by rpki-client