$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft File: -8-hiArIbOT7mfl06ZU_NZfc3go.mft (raw, json) Hash identifier: BLbTeOvLUNzPPOTGSyKXT7aw1z+Ef5RIfI2Bo2fwR2A= Subject key identifier: 43:46:14:29:00:8B:57:1F:38:A6:50:B6:2C:6D:41:14:FE:59:EF:DB Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A Certificate serial: 0D69 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft Manifest number: 0D58 Signing time: Thu 21 Nov 2024 07:23:14 +0000 Manifest this update: Thu 21 Nov 2024 07:23:14 +0000 Manifest next update: Sat 23 Nov 2024 07:23:14 +0000 Files and hashes: 1: -8-hiArIbOT7mfl06ZU_NZfc3go.crl (hash: drBrsVJtFNKPKUtmfNXweXpf4sywVjL1gtIo2FrJfJ0=) 2: TFHFcqukQtvjsqxlG0waWosyqD4.roa (hash: CDDxhOpamrkqbOr8ElqsE9mBQKHamnxV07ZZ9HCqxpw=) 3: pFbBwC3Gl1AriqQNxokuOa4Q4Bg.roa (hash: Wrd+IbXjq6wuUg//XoSQlpeB0PGM1zoTDOUPZJm5hKc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A Validity Not Before: Nov 21 07:23:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=43461429008B571F38A650B62C6D4114FE59EFDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:0f:ea:b2:ba:c1:41:1d:73:19:dc:c6:b2: ef:a3:da:29:31:65:9b:48:5d:cf:73:0d:46:0b:d7: 1a:e9:f5:1f:76:7f:5f:d6:0e:22:8e:2f:ec:ca:ae: e7:45:2e:81:54:98:90:48:19:94:9c:51:00:85:81: 17:30:9f:6f:86:4e:88:8d:2a:cc:17:38:ca:99:49: 84:ed:92:09:f0:5a:d3:d0:54:26:77:65:38:cd:6d: 57:11:fb:98:91:20:42:7a:41:d6:d5:0c:d7:17:01: 72:ec:f6:dc:06:a6:83:88:29:2a:1d:90:65:ae:9b: e7:06:6b:a0:2c:0f:df:3d:bc:5b:b8:a4:d5:e1:bb: e5:03:46:84:1c:43:c5:9a:64:34:cf:34:db:de:88: 90:39:83:b2:ea:69:9a:a0:0c:c0:29:56:50:2b:bf: 5a:98:39:1e:07:53:11:ad:fa:c4:d6:46:c1:0b:5e: 2b:1c:fe:f1:2b:4f:90:82:6b:a8:84:d8:45:25:d6: 91:86:b4:49:88:b9:b4:be:fa:a4:34:8c:0a:a1:4a: 63:ce:4d:40:a0:dc:5e:b2:a6:59:8b:d8:33:01:59: fd:92:24:04:0a:16:cc:01:5b:d8:51:60:ce:ec:db: 12:93:80:b9:16:07:7e:81:7f:72:17:e0:63:b1:92: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:14:29:00:8B:57:1F:38:A6:50:B6:2C:6D:41:14:FE:59:EF:DB X509v3 Authority Key Identifier: keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:9b:64:fa:d8:8e:43:d7:79:77:2b:a7:bc:a0:d8:44:f4:c4: 8d:ef:7e:89:3a:e3:1f:17:3c:9b:ac:f2:51:03:82:36:de:e7: 7d:3d:3e:80:ab:3c:83:89:24:5b:ac:eb:63:87:7c:a6:5d:0f: ef:bb:59:7e:68:b6:18:82:87:ed:32:97:c2:11:a0:b5:10:50: bc:32:b4:c0:b1:69:40:58:03:23:5b:e0:cf:e1:e0:93:69:fc: 3a:a2:7f:7f:ca:c0:13:39:f4:9f:41:57:de:fb:35:06:be:4f: 1a:59:d0:6d:ea:ee:4d:94:13:32:26:7b:f5:7a:d9:f5:5c:bd: db:99:82:66:b3:a4:82:ea:c4:5e:6f:cc:14:b3:8f:a6:ef:a3: e0:11:2f:f3:ec:91:76:41:f8:d1:c1:86:f6:49:d5:80:38:bf: b2:83:4f:63:7b:1d:dd:72:84:43:9c:94:cb:d9:3c:47:dc:be: f2:27:de:67:f8:2d:a9:da:ee:9f:52:85:15:2d:dc:88:a1:aa: d4:c2:11:ce:75:ac:f3:7b:2a:81:12:5b:59:2e:00:c7:60:ae: fa:c5:84:97:98:81:2c:ec:d2:dc:b6:aa:8c:e5:e6:8a:96:02: 7f:58:b3:0f:39:94:d8:48:44:12:7c:62:fb:75:4c:56:bc:69: 7b:f2:5b:42 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD RkExODgwQUM4NkNFNEZCOTlGOTc0RTk5NTNGMzU5N0RDREUwQTAeFw0yNDExMjEw NzIzMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzNDYxNDI5MDA4QjU3 MUYzOEE2NTBCNjJDNkQ0MTE0RkU1OUVGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCydQ/qsrrBQR1zGdzGsu+j2ikxZZtIXc9zDUYL1xrp9R92f1/W DiKOL+zKrudFLoFUmJBIGZScUQCFgRcwn2+GToiNKswXOMqZSYTtkgnwWtPQVCZ3 ZTjNbVcR+5iRIEJ6QdbVDNcXAXLs9twGpoOIKSodkGWum+cGa6AsD989vFu4pNXh u+UDRoQcQ8WaZDTPNNveiJA5g7LqaZqgDMApVlArv1qYOR4HUxGt+sTWRsELXisc /vErT5CCa6iE2EUl1pGGtEmIubS++qQ0jAqhSmPOTUCg3F6yplmL2DMBWf2SJAQK FswBW9hRYM7s2xKTgLkWB36Bf3IX4GOxku5lAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUQ0YUKQCLVx84plC2LG1BFP5Z79swHwYDVR0jBBgwFoAU+8+hiArIbOT7mfl0 6ZU/NZfc3gowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tTTUYv LTgtaGlBckliT1Q3bWZsMDZaVV9OWmZjM2dvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8tOC1oaUFySWJPVDdtZmwwNlpVX05aZmMzZ28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1NNRi8tOC1oaUFySWJPVDdtZmwwNlpV X05aZmMzZ28ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEArptk +tiOQ9d5dyunvKDYRPTEje9+iTrjHxc8m6zyUQOCNt7nfT0+gKs8g4kkW6zrY4d8 pl0P77tZfmi2GIKH7TKXwhGgtRBQvDK0wLFpQFgDI1vgz+Hgk2n8OqJ/f8rAEzn0 n0FX3vs1Br5PGlnQberuTZQTMiZ79XrZ9Vy925mCZrOkgurEXm/MFLOPpu+j4BEv 8+yRdkH40cGG9knVgDi/soNPY3sd3XKEQ5yUy9k8R9y+8ifeZ/gtqdrun1KFFS3c iKGq1MIRznWs83sqgRJbWS4Ax2Cu+sWEl5iBLOzS3LaqjOXmipYCf1izDzmU2EhE Enxi+3VMVrxpe/JbQg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org