$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft File: _u9qfUSgfrkJ7anFbFkwXloFXbc.mft (raw, json) Hash identifier: cAMI9dTIlyv5QrC8BeIUhOMjDa9PoMk4jcziRw5tmCQ= Subject key identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 Authority key identifier: FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 Certificate issuer: /CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Certificate serial: 0950 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft Manifest number: 0950 Signing time: Wed 30 Jul 2025 10:07:56 +0000 Manifest this update: Wed 30 Jul 2025 10:07:56 +0000 Manifest next update: Fri 01 Aug 2025 10:07:56 +0000 Files and hashes: 1: _u9qfUSgfrkJ7anFbFkwXloFXbc.crl (hash: p/kTd6PN+2T4gd18Pjwi47K+olEjbdEIdCXqlEpHRz8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2384 (0x950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEEF6A7D44A07EB909EDA9C56C59305E5A055DB7 Validity Not Before: Jul 30 10:07:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EA5271DC95DDD2AE4AFF4D1A0608941753481B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:05:6f:74:a8:6c:8d:d0:25:96:c0:db:dc: f2:d5:a0:4c:28:0f:8d:87:e7:cb:3b:d7:4e:ed:24: 92:9a:e4:f4:e4:e9:bf:fd:3e:cd:58:73:8e:d2:68: 54:6d:ff:e6:18:bc:fe:e6:7e:3e:50:77:fe:04:8d: ab:d6:5d:0f:78:c1:ae:78:6d:2a:8e:5e:b3:1f:ce: 74:bb:1d:ef:08:33:e4:c1:86:bd:cb:c9:0b:de:66: 16:3e:93:23:63:8a:f5:db:7b:63:88:d0:e7:19:81: c7:d6:be:29:1e:a5:70:36:e9:bc:38:22:ee:c9:96: 53:d1:d5:45:92:6c:d3:6b:ee:bc:81:fb:e4:ad:c5: aa:db:ba:73:69:16:6d:72:c9:63:b5:48:2e:6d:f8: 30:ee:de:7e:2e:cc:09:2e:bd:7b:7c:4a:ee:f5:91: d1:4b:6c:e4:2e:d7:9f:06:ab:59:7f:9e:5d:fe:2e: 82:f6:8e:a7:4a:2d:ae:ff:1f:f3:08:f3:5f:7a:b3: af:4a:78:2b:a2:73:1f:e4:13:07:f9:29:64:d4:22: 1e:75:2c:65:95:37:08:55:16:46:48:75:fe:dc:fe: 02:10:d0:80:92:68:00:46:c8:f4:b0:0f:7e:52:af: ee:5c:79:de:fe:04:7d:c1:63:92:d2:45:8f:d7:22: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:71:DC:95:DD:D2:AE:4A:FF:4D:1A:06:08:94:17:53:48:1B:84 X509v3 Authority Key Identifier: keyid:FE:EF:6A:7D:44:A0:7E:B9:09:ED:A9:C5:6C:59:30:5E:5A:05:5D:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_u9qfUSgfrkJ7anFbFkwXloFXbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GUANTING/_u9qfUSgfrkJ7anFbFkwXloFXbc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b5:ad:ed:a1:84:e4:82:ce:e9:b7:9c:e9:ae:f5:ef:b9:a4: 54:48:b7:d0:1c:79:14:c2:04:99:87:ac:0b:be:e9:03:44:f4: e1:fd:70:45:60:4d:0c:0a:90:de:a0:24:93:cb:bb:55:7b:74: ed:c5:70:de:0a:76:0d:26:51:6f:81:5f:ce:64:36:bd:07:3e: 9d:de:80:92:c7:e3:6d:af:6c:3f:7c:00:ab:9b:61:cc:33:23: 74:7b:a7:61:91:9a:c9:09:31:3c:8a:1b:6b:91:e7:a9:b6:35: 58:f7:25:99:80:97:29:89:90:23:72:9f:4e:12:08:23:42:8d: d0:32:1c:5d:d8:7d:ae:1f:0d:a6:3f:6d:a6:8f:51:1c:23:4f: fd:9a:b0:fc:1d:26:e6:bf:83:f5:fa:1b:b4:07:97:85:6b:e2: fa:9c:3f:fd:b4:c5:4e:5a:10:c1:70:ab:86:e5:9a:eb:80:5c: c1:68:61:34:8b:19:11:fc:f5:ea:bc:84:0f:25:2e:bc:4f:3c: 5c:96:5d:f9:3c:39:05:b2:fa:fd:52:40:85:90:2a:77:f4:ff: 08:12:4c:21:fe:3a:b5:d8:b1:f8:9b:07:b4:7f:d9:dc:2d:fc: de:94:57:53:5f:fc:91:d4:e7:32:c3:af:b0:60:f8:31:9f:e4: 62:11:43:ef -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkVF RjZBN0Q0NEEwN0VCOTA5RURBOUM1NkM1OTMwNUU1QTA1NURCNzAeFw0yNTA3MzAx MDA3NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVBNTI3MURDOTVEREQy QUU0QUZGNEQxQTA2MDg5NDE3NTM0ODFCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVbQVvdKhsjdAllsDb3PLVoEwoD42H58s7107tJJKa5PTk6b/9 Ps1Yc47SaFRt/+YYvP7mfj5Qd/4EjavWXQ94wa54bSqOXrMfznS7He8IM+TBhr3L yQveZhY+kyNjivXbe2OI0OcZgcfWvikepXA26bw4Iu7JllPR1UWSbNNr7ryB++St xarbunNpFm1yyWO1SC5t+DDu3n4uzAkuvXt8Su71kdFLbOQu158Gq1l/nl3+LoL2 jqdKLa7/H/MI8196s69KeCuicx/kEwf5KWTUIh51LGWVNwhVFkZIdf7c/gIQ0ICS aABGyPSwD35Sr+5ced7+BH3BY5LSRY/XIiMbAgMBAAGjggILMIICBzAdBgNVHQ4E FgQU6lJx3JXd0q5K/00aBgiUF1NIG4QwHwYDVR0jBBgwFoAU/u9qfUSgfrkJ7anF bFkwXloFXbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1VBTlRJ TkcvX3U5cWZVU2dmcmtKN2FuRmJGa3dYbG9GWGJjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fdTlxZlVTZ2Zya0o3YW5GYkZrd1hsb0ZYYmMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HVUFOVElORy9fdTlxZlVTZ2Zya0o3 YW5GYkZrd1hsb0ZYYmMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAirWt7aGE5ILO6bec6a7177mkVEi30Bx5FMIEmYesC77pA0T04f1wRWBNDAqQ 3qAkk8u7VXt07cVw3gp2DSZRb4FfzmQ2vQc+nd6Aksfjba9sP3wAq5thzDMjdHun YZGayQkxPIoba5HnqbY1WPclmYCXKYmQI3KfThIII0KN0DIcXdh9rh8Npj9tpo9R HCNP/Zqw/B0m5r+D9fobtAeXhWvi+pw//bTFTloQwXCrhuWa64BcwWhhNIsZEfz1 6ryEDyUuvE88XJZd+Tw5BbL6/VJAhZAqd/T/CBJMIf46tdix+JsHtH/Z3C383pRX U1/8kdTnMsOvsGD4MZ/kYhFD7w== -----END CERTIFICATE-----Generated at Thu Jul 31 18:21:14 2025 by rpki-client