$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAIHWA/rzhwT5WIigrTtooEuwys_aOKtB8.mft File: rzhwT5WIigrTtooEuwys_aOKtB8.mft (raw, json) Hash identifier: fzVVJGYN0YdomYMzdtaAseJCL06deDGO6fb9lwLTv5c= Subject key identifier: 9A:D1:0A:A2:80:23:E5:F2:2C:62:0D:E0:58:67:10:4B:83:A8:0C:C8 Authority key identifier: AF:38:70:4F:95:88:8A:0A:D3:B6:8A:04:BB:0C:AC:FD:A3:8A:B4:1F Certificate issuer: /CN=AF38704F95888A0AD3B68A04BB0CACFDA38AB41F Certificate serial: 0CFD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rzhwT5WIigrTtooEuwys_aOKtB8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAIHWA/rzhwT5WIigrTtooEuwys_aOKtB8.mft Manifest number: 0CFD Signing time: Wed 30 Jul 2025 11:07:21 +0000 Manifest this update: Wed 30 Jul 2025 11:07:21 +0000 Manifest next update: Fri 01 Aug 2025 11:07:21 +0000 Files and hashes: 1: rzhwT5WIigrTtooEuwys_aOKtB8.crl (hash: R3cWTCQXM66SOP0hpapiPx1psfs1LGBOPchwuasRyjo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAIHWA/rzhwT5WIigrTtooEuwys_aOKtB8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HAIHWA/rzhwT5WIigrTtooEuwys_aOKtB8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rzhwT5WIigrTtooEuwys_aOKtB8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF38704F95888A0AD3B68A04BB0CACFDA38AB41F Validity Not Before: Jul 30 11:07:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9AD10AA28023E5F22C620DE05867104B83A80CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:75:a3:db:07:0a:1b:d9:88:5e:6d:93:4a: 58:55:97:04:0e:e2:8a:3d:68:d8:0a:7b:65:6c:a6: 32:06:ce:d0:e5:ae:c3:e7:89:7a:aa:90:6a:06:0b: 35:e8:5b:95:39:30:1b:a0:f2:d2:2f:6a:6f:ea:c6: 79:80:f4:3a:c1:b7:d2:c6:fa:22:89:6e:16:ac:30: 4f:d0:40:17:6c:56:06:8d:e0:20:c9:18:9b:8a:41: 74:e4:cf:c3:d5:9e:69:a9:69:c0:09:bc:60:84:57: 0e:c1:ab:f5:da:d1:a0:20:74:fa:c4:a9:a3:37:f9: 1b:8e:2b:a7:99:62:6a:56:de:fb:f1:42:4b:ed:70: 85:f5:2d:47:78:6a:a8:b9:c4:29:51:7c:f2:82:a4: d8:81:3c:07:58:34:b3:43:2e:78:83:07:a4:81:44: ec:61:f9:2e:b5:3f:a1:e4:be:d6:38:92:42:83:bb: c7:9a:f1:4a:0c:86:66:e3:86:e7:13:9e:26:64:bc: 91:79:0a:83:c1:b5:9a:f7:78:cb:01:cc:b2:fe:d0: 87:24:ff:fb:03:cc:0a:5e:26:33:b1:b8:02:c9:6a: 84:f7:40:7d:8c:7b:b7:dd:7f:a5:6a:e3:1c:bf:e3: 93:94:7d:ae:47:00:c1:c1:75:c2:77:f1:b5:1a:f0: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D1:0A:A2:80:23:E5:F2:2C:62:0D:E0:58:67:10:4B:83:A8:0C:C8 X509v3 Authority Key Identifier: keyid:AF:38:70:4F:95:88:8A:0A:D3:B6:8A:04:BB:0C:AC:FD:A3:8A:B4:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAIHWA/rzhwT5WIigrTtooEuwys_aOKtB8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rzhwT5WIigrTtooEuwys_aOKtB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAIHWA/rzhwT5WIigrTtooEuwys_aOKtB8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8a:59:d9:63:e4:a0:b9:1b:44:54:ac:4d:62:b8:84:fd:60: af:6a:30:22:a2:03:e9:34:6b:65:72:72:92:50:8c:6f:22:ad: 26:32:95:a2:e4:38:5f:fb:52:69:48:b4:23:91:9a:4e:1d:b3: 35:c9:11:fb:13:c7:75:9a:83:6b:0b:a3:b8:78:f9:c7:71:2c: f9:2d:4d:7e:44:c5:7a:bf:f6:6e:ec:d5:10:fc:01:29:d3:fb: 65:51:8e:71:6f:aa:c3:de:77:6f:a4:7b:81:45:34:00:c5:49: 9b:1e:bc:6f:6d:fc:c2:aa:aa:95:a5:77:27:73:a0:2d:c6:17: 75:a1:e4:07:94:18:b0:84:fb:5d:08:21:b6:58:c4:1b:56:cc: eb:75:1c:43:01:96:e9:d2:fb:97:d0:4c:b9:84:2d:64:92:eb: 2d:9a:77:bb:ae:b7:0b:52:ce:51:97:09:07:34:a4:16:68:00: 05:e8:0e:bf:91:95:cf:c9:3e:dd:5e:e9:b7:b6:62:ba:2f:94: b5:8e:f4:b5:29:47:c7:98:f3:1b:6f:84:1d:25:84:1d:3e:0d: 11:3b:7b:29:07:8f:42:f8:8a:8e:d3:85:ac:0a:bf:90:4b:75: 92:cb:90:5c:3e:bf:9d:10:4a:d8:a7:02:ab:0d:23:d8:c9:65: b9:71:5c:16 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUYz ODcwNEY5NTg4OEEwQUQzQjY4QTA0QkIwQ0FDRkRBMzhBQjQxRjAeFw0yNTA3MzAx MTA3MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBRDEwQUEyODAyM0U1 RjIyQzYyMERFMDU4NjcxMDRCODNBODBDQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSTXWj2wcKG9mIXm2TSlhVlwQO4oo9aNgKe2VspjIGztDlrsPn iXqqkGoGCzXoW5U5MBug8tIvam/qxnmA9DrBt9LG+iKJbhasME/QQBdsVgaN4CDJ GJuKQXTkz8PVnmmpacAJvGCEVw7Bq/Xa0aAgdPrEqaM3+RuOK6eZYmpW3vvxQkvt cIX1LUd4aqi5xClRfPKCpNiBPAdYNLNDLniDB6SBROxh+S61P6HkvtY4kkKDu8ea 8UoMhmbjhucTniZkvJF5CoPBtZr3eMsBzLL+0Ick//sDzApeJjOxuALJaoT3QH2M e7fdf6Vq4xy/45OUfa5HAMHBdcJ38bUa8A0RAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUmtEKooAj5fIsYg3gWGcQS4OoDMgwHwYDVR0jBBgwFoAUrzhwT5WIigrTtooE uwys/aOKtB8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFJSFdB L3J6aHdUNVdJaWdyVHRvb0V1d3lzX2FPS3RCOC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evcnpod1Q1V0lpZ3JUdG9vRXV3eXNfYU9LdEI4LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFJSFdBL3J6aHdUNVdJaWdyVHRvb0V1 d3lzX2FPS3RCOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn ilnZY+SguRtEVKxNYriE/WCvajAiogPpNGtlcnKSUIxvIq0mMpWi5Dhf+1JpSLQj kZpOHbM1yRH7E8d1moNrC6O4ePnHcSz5LU1+RMV6v/Zu7NUQ/AEp0/tlUY5xb6rD 3ndvpHuBRTQAxUmbHrxvbfzCqqqVpXcnc6Atxhd1oeQHlBiwhPtdCCG2WMQbVszr dRxDAZbp0vuX0Ey5hC1kkustmne7rrcLUs5RlwkHNKQWaAAF6A6/kZXPyT7dXum3 tmK6L5S1jvS1KUfHmPMbb4QdJYQdPg0RO3spB49C+IqO04WsCr+QS3WSy5BcPr+d EErYpwKrDSPYyWW5cVwW -----END CERTIFICATE-----Generated at Thu Jul 31 18:14:21 2025 by rpki-client