$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft File: ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft (raw, json) Hash identifier: cuHnPLSJPHsQw8F6Ijf+iamF+3sN0PnJ5WcKlRkKlKU= Subject key identifier: AE:54:CE:57:6C:FB:DB:40:EE:46:9E:15:24:E8:FF:4B:30:C0:79:5E Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D Certificate serial: 02B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft Manifest number: 02A5 Signing time: Fri 03 May 2024 02:40:49 +0000 Manifest this update: Fri 03 May 2024 02:40:49 +0000 Manifest next update: Sun 05 May 2024 02:40:49 +0000 Files and hashes: 1: 9dL6JjEIRXxYdAQ3ZLUTeT4L_Ds.roa (hash: 2Lhlq1A3r0KN3Zh4tmEjI6g9FT4MW2PxyDDLOnU76Zk=) 2: ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl (hash: q9FA5Z/VFrog69N8JYQjViSphjq6S17JmnykJg6Ldco=) 3: IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa (hash: ayDZ1Bzl8bKjeV2VVfrj/ACa48hMyn7w2oOvD7jU1O4=) 4: YRtCtzkM1tr3L8l29ZXxjEeKtiQ.roa (hash: 9+duMiJYmHfrW24TO3QNdEYsN2iBz9AZK8ORZxNGavo=) 5: e37yBVHYm9GUR3ZBWT-L2atKXRA.roa (hash: 0luerAypKJ5YtiJ4kNuGcltg3LFAuNmmIDaO6dUlJIE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 23:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D Validity Not Before: May 3 02:40:49 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AE54CE576CFBDB40EE469E1524E8FF4B30C0795E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:f1:57:e7:d9:3f:7a:b2:61:6d:90:6c:a1: cd:21:49:a4:a2:3a:d8:e5:09:bc:88:ba:5e:4a:52: 65:dd:ca:bc:0b:7e:6c:0c:ca:1c:77:48:fc:b1:20: f4:91:d8:cb:81:53:ee:23:35:2e:c5:d0:ab:0b:da: 0b:c3:a5:db:8d:c1:67:38:db:ff:08:ce:13:0b:d5: d5:d1:40:62:e9:2a:fd:0d:61:e0:69:d4:c8:68:54: d9:e7:2b:65:15:28:81:6c:30:f9:6a:4f:2c:3b:53: e8:a2:f7:c4:b5:ad:3d:b2:eb:15:54:1f:ac:83:27: 8d:d9:eb:78:1e:9f:a7:97:7e:b8:a2:9a:8f:f4:50: 85:f1:7e:77:0c:07:c8:e1:48:1c:05:96:9b:ae:01: 90:ef:91:c5:5b:f3:c4:2c:c5:84:dc:e0:ba:ce:4e: 21:7d:46:c7:cd:d5:6f:7c:14:5d:b0:b7:e8:d5:5a: 47:89:69:d8:04:e6:89:e3:86:95:6a:45:ad:ef:a3: 98:05:62:46:ed:a1:72:f8:d0:18:5f:e7:78:85:e0: 59:6a:ec:7d:9e:50:61:92:c8:db:4a:b3:18:c6:60: 9c:e4:3e:2f:b6:18:ec:3d:8e:6b:70:d9:e5:32:4f: b6:98:5e:1f:21:5d:7a:c4:a3:7f:55:60:75:e6:3b: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:54:CE:57:6C:FB:DB:40:EE:46:9E:15:24:E8:FF:4B:30:C0:79:5E X509v3 Authority Key Identifier: keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:e2:73:77:b0:3d:cf:9d:86:ab:19:d6:c4:78:99:ce:56: 91:6c:48:d2:21:3e:4f:e7:29:f9:d7:08:4f:5c:6c:5b:0d:4d: 5f:9c:59:cd:3d:e6:23:99:06:f4:b1:46:28:69:41:d6:6a:36: 19:cc:78:d7:97:a9:2d:a7:60:1a:2c:98:98:53:ce:a7:a1:d9: 3a:66:74:93:ca:7a:5f:2d:f3:7c:8a:2c:82:78:ee:67:a3:68: e5:93:14:4a:73:75:a0:00:22:74:e2:d0:7f:58:0a:8a:66:2e: 4f:7c:eb:ee:bd:b2:7c:8d:ae:b5:fa:20:73:a1:d4:50:6b:48: f7:b7:e2:82:17:3c:31:4e:de:d9:b1:4f:07:bd:2d:26:45:74: 5e:6f:e0:94:42:de:68:77:ed:12:ee:8a:f6:4a:fa:ce:ca:88: f7:46:e9:a2:db:38:6c:91:1f:79:be:57:08:f2:19:bc:63:6d: 45:67:a0:12:6e:5e:a6:c2:23:6f:8c:bf:ef:09:9f:ae:27:73: 1e:65:26:a4:01:81:cc:65:a7:61:2e:52:23:43:7d:ae:70:02: 6a:fa:da:b5:47:ae:0f:0b:67:72:11:55:99:48:f8:cf:e2:24: c5:a2:b5:9d:e0:f8:a5:ac:42:95:2c:e5:a5:24:de:78:d5:c0: 5a:7c:a7:32 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICArQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDBE Q0YwNTBDNENFQUU1MDIxQUE4RDMxMTk1M0YwMkQ2MTIxRkQ4RDAeFw0yNDA1MDMw MjQwNDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFFNTRDRTU3NkNGQkRC NDBFRTQ2OUUxNTI0RThGRjRCMzBDMDc5NUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCU9vFX59k/erJhbZBsoc0hSaSiOtjlCbyIul5KUmXdyrwLfmwM yhx3SPyxIPSR2MuBU+4jNS7F0KsL2gvDpduNwWc42/8IzhML1dXRQGLpKv0NYeBp 1MhoVNnnK2UVKIFsMPlqTyw7U+ii98S1rT2y6xVUH6yDJ43Z63gen6eXfriimo/0 UIXxfncMB8jhSBwFlpuuAZDvkcVb88QsxYTc4LrOTiF9RsfN1W98FF2wt+jVWkeJ adgE5onjhpVqRa3vo5gFYkbtoXL40Bhf53iF4Flq7H2eUGGSyNtKsxjGYJzkPi+2 GOw9jmtw2eUyT7aYXh8hXXrEo39VYHXmOwHtAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUrlTOV2z720DuRp4VJOj/SzDAeV4wHwYDVR0jBBgwFoAUANzwUMTOrlAhqo0x GVPwLWEh/Y0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEFQUFlN T05FWS9BTnp3VU1UT3JsQWhxbzB4R1ZQd0xXRWhfWTAuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0FOendVTVRPcmxBaHFvMHhHVlB3TFdFaF9ZMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hBUFBZTU9ORVkvQU56d1VNVE9y bEFocW8weEdWUHdMV0VoX1kwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKD34nN3sD3PnYarGdbEeJnOVpFsSNIhPk/nKfnXCE9cbFsNTV+cWc09 5iOZBvSxRihpQdZqNhnMeNeXqS2nYBosmJhTzqeh2TpmdJPKel8t83yKLIJ47mej aOWTFEpzdaAAInTi0H9YCopmLk986+69snyNrrX6IHOh1FBrSPe34oIXPDFO3tmx Twe9LSZFdF5v4JRC3mh37RLuivZK+s7KiPdG6aLbOGyRH3m+VwjyGbxjbUVnoBJu XqbCI2+Mv+8Jn64ncx5lJqQBgcxlp2EuUiNDfa5wAmr62rVHrg8LZ3IRVZlI+M/i JMWitZ3g+KWsQpUs5aUk3njVwFp8pzI= -----END CERTIFICATE-----Generated at Fri May 3 17:13:49 2024 by rpki-client on console-fra.rpki-client.org