$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft File: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft (raw, json) Hash identifier: 7/23lqvH9SwP04HlWLopWQhb6f8ToIslKZvY/z2LliM= Subject key identifier: 6F:89:D2:68:6D:F1:FD:2F:29:FF:5C:09:97:6A:1C:AB:40:47:0D:16 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 02C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft Manifest number: 026B Signing time: Wed 17 Sep 2025 11:49:18 +0000 Manifest this update: Wed 17 Sep 2025 11:49:18 +0000 Manifest next update: Fri 19 Sep 2025 11:49:18 +0000 Files and hashes: 1: 69HDrNSLJtku69QLQwIqOzf9OYM.roa (hash: PoVwnjbdfgjGE3Oqs/QKtYFcJpw9U1dUQ6RMe+QRgTk=) 2: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl (hash: vS4sZBBMOIusKrD2Wuw4xTqXYmTM2wmcajEVaZSMT+Y=) 3: CwUtEVM1TNiCig5YarJZ3ZATpt4.roa (hash: 4FKnu/dRAQH09cc4QLt7NQzyg9yO2k0ADyWksvzhX34=) 4: NhhbQb0rSaSD1gEW8oFZQo9Pcyg.roa (hash: kDrNod8n++gjcG3SHiwFyOGISfPyCCyrzU+p5Btf3yw=) 5: QKhJUhMXLQ-dk0cZSRnIq3hjQTM.roa (hash: cL4XN+3XoQHPzu/TQlKf0XbgsWghOWfijDuZ7wOe1Ws=) 6: ScLGIsknhkSPh1oRlzdmof-MtJc.roa (hash: FjAsLbZxW/EdLwxDN0W8BPA4toYBR9idbL9GTMR+w5A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 20:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Sep 17 11:49:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6F89D2686DF1FD2F29FF5C09976A1CAB40470D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:e0:1d:ba:02:05:85:10:a9:24:cb:35:fd: a8:46:f9:84:2d:c1:5d:58:bf:e6:32:d5:5b:b0:44: 41:1d:43:5e:04:e3:98:7d:0e:95:10:07:fb:86:06: fe:ab:87:f5:a7:d1:4d:36:a1:af:e2:13:dc:81:13: b3:36:4a:2f:ab:25:b3:e7:de:23:28:37:f9:48:b7: 8a:40:16:48:7f:a7:d1:28:06:ee:36:75:31:5c:01: 14:94:73:1b:a6:f4:88:e1:a8:32:25:a2:5e:7b:39: 39:f7:1d:da:93:27:ac:2d:15:d4:e0:5a:e5:81:bd: d6:29:6b:4e:7c:42:49:18:e2:25:d3:15:05:0d:25: f5:75:c4:82:80:44:fc:96:a5:b6:66:2e:52:95:a4: 82:95:26:a0:89:fe:96:12:71:05:94:af:a7:5a:bb: c7:dd:6a:4f:98:76:36:e4:6f:c5:a0:5e:1b:e4:5a: c6:a2:5e:18:07:8b:a9:2a:87:aa:bb:c8:29:db:a2: d8:17:a6:fd:8a:28:02:27:09:3c:d5:77:d4:41:b8: 11:64:09:e4:39:0a:8e:3c:4d:ac:91:4f:14:df:d7: 46:cf:6d:77:d2:38:14:f1:39:12:6a:8b:fa:9b:90: 89:4f:eb:58:ef:99:2b:83:78:42:e7:77:49:6c:19: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:89:D2:68:6D:F1:FD:2F:29:FF:5C:09:97:6A:1C:AB:40:47:0D:16 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2e:3f:d2:74:0a:72:7c:7d:70:a5:1b:c1:d3:ac:5d:65:0d: 27:2d:93:e8:bd:1e:c3:3b:a7:e2:72:a4:b1:86:29:31:cc:78: ae:63:5d:37:86:9c:4a:cf:7f:40:82:05:c8:73:54:29:52:f3: 74:13:b5:75:15:61:22:ea:29:29:d9:b9:9c:58:08:23:07:33: 59:1d:42:53:2c:a7:5a:06:95:35:bd:a3:1d:36:c3:64:31:8f: af:21:2e:a1:84:6a:d8:3c:e7:a0:14:0e:37:c2:32:aa:15:16: f7:20:d4:f4:c7:9c:d3:74:eb:bf:e3:ba:36:42:11:0d:cf:d1: d5:cd:0c:04:f7:b5:9c:21:f5:58:55:f4:d3:d6:d9:97:d0:d9: 62:a6:ab:1d:b1:a1:a0:cb:a9:35:3a:ea:15:b9:66:f0:ee:a3: 8c:ed:3c:4d:1d:23:42:78:d0:5c:01:06:0d:d2:91:ce:e4:63: b0:45:a7:d1:cd:0a:56:db:0f:c6:26:54:48:28:bc:ad:06:32: 03:12:8f:bb:a4:11:a3:f8:49:18:b3:6a:5d:3d:db:e5:0e:80: 23:b7:b3:50:38:bd:6f:63:a2:79:85:c6:8a:4c:5c:59:7c:d3: 2e:d6:bf:7a:83:9c:c6:84:82:3f:ff:db:1c:88:d3:3b:fe:ba: 4c:1f:53:7e -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA5MTcx MTQ5MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZGODlEMjY4NkRGMUZE MkYyOUZGNUMwOTk3NkExQ0FCNDA0NzBEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/a+AdugIFhRCpJMs1/ahG+YQtwV1Yv+Yy1VuwREEdQ14E45h9 DpUQB/uGBv6rh/Wn0U02oa/iE9yBE7M2Si+rJbPn3iMoN/lIt4pAFkh/p9EoBu42 dTFcARSUcxum9IjhqDIlol57OTn3HdqTJ6wtFdTgWuWBvdYpa058QkkY4iXTFQUN JfV1xIKARPyWpbZmLlKVpIKVJqCJ/pYScQWUr6dau8fdak+Ydjbkb8WgXhvkWsai XhgHi6kqh6q7yCnbotgXpv2KKAInCTzVd9RBuBFkCeQ5Co48TayRTxTf10bPbXfS OBTxORJqi/qbkIlP61jvmSuDeELnd0lsGYZLAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUb4nSaG3x/S8p/1wJl2ocq0BHDRYwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvOHpweXF2ZVlFRnV5ZF9DVVJZNUdT MFpaLUFNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAHouP9J0 CnJ8fXClG8HTrF1lDSctk+i9HsM7p+JypLGGKTHMeK5jXTeGnErPf0CCBchzVClS 83QTtXUVYSLqKSnZuZxYCCMHM1kdQlMsp1oGlTW9ox02w2Qxj68hLqGEatg856AU DjfCMqoVFvcg1PTHnNN067/jujZCEQ3P0dXNDAT3tZwh9VhV9NPW2ZfQ2WKmqx2x oaDLqTU66hW5ZvDuo4ztPE0dI0J40FwBBg3Skc7kY7BFp9HNClbbD8YmVEgovK0G MgMSj7ukEaP4SRizal092+UOgCO3s1A4vW9jonmFxopMXFl80y7Wv3qDnMaEgj// 2xyI0zv+ukwfU34= -----END CERTIFICATE-----Generated at Thu Sep 18 16:20:57 2025 by rpki-client