$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft File: -8-hiArIbOT7mfl06ZU_NZfc3go.mft (raw, json) Hash identifier: Ig1tOz6T7nvSbxqnXOwnFyw4kW87DwsE1t3wr36etiA= Subject key identifier: 43:46:14:29:00:8B:57:1F:38:A6:50:B6:2C:6D:41:14:FE:59:EF:DB Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A Certificate serial: 0CF0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft Manifest number: 0CE3 Signing time: Sun 02 Jun 2024 03:43:01 +0000 Manifest this update: Sun 02 Jun 2024 03:43:01 +0000 Manifest next update: Tue 04 Jun 2024 03:43:01 +0000 Files and hashes: 1: -8-hiArIbOT7mfl06ZU_NZfc3go.crl (hash: 5PJ1z7DcOHhUPIy197Un2tO4dh/TO9Gh9kUVQUjeldE=) 2: Okhv4KY7koLD9Cym6i9_QANXh8I.roa (hash: CACz784oQjn9/mnd2nIyGqJVVSXYHukB8+OZT4VsAlM=) 3: ngZIVAFZ5_hqPBEsk1xP5HqTzFA.roa (hash: b2/9U12uRp8jrfpTr/pkHVg9Yhit9cQ2JI365g0tv1Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A Validity Not Before: Jun 2 03:43:01 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=43461429008B571F38A650B62C6D4114FE59EFDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:0f:ea:b2:ba:c1:41:1d:73:19:dc:c6:b2: ef:a3:da:29:31:65:9b:48:5d:cf:73:0d:46:0b:d7: 1a:e9:f5:1f:76:7f:5f:d6:0e:22:8e:2f:ec:ca:ae: e7:45:2e:81:54:98:90:48:19:94:9c:51:00:85:81: 17:30:9f:6f:86:4e:88:8d:2a:cc:17:38:ca:99:49: 84:ed:92:09:f0:5a:d3:d0:54:26:77:65:38:cd:6d: 57:11:fb:98:91:20:42:7a:41:d6:d5:0c:d7:17:01: 72:ec:f6:dc:06:a6:83:88:29:2a:1d:90:65:ae:9b: e7:06:6b:a0:2c:0f:df:3d:bc:5b:b8:a4:d5:e1:bb: e5:03:46:84:1c:43:c5:9a:64:34:cf:34:db:de:88: 90:39:83:b2:ea:69:9a:a0:0c:c0:29:56:50:2b:bf: 5a:98:39:1e:07:53:11:ad:fa:c4:d6:46:c1:0b:5e: 2b:1c:fe:f1:2b:4f:90:82:6b:a8:84:d8:45:25:d6: 91:86:b4:49:88:b9:b4:be:fa:a4:34:8c:0a:a1:4a: 63:ce:4d:40:a0:dc:5e:b2:a6:59:8b:d8:33:01:59: fd:92:24:04:0a:16:cc:01:5b:d8:51:60:ce:ec:db: 12:93:80:b9:16:07:7e:81:7f:72:17:e0:63:b1:92: ee:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:14:29:00:8B:57:1F:38:A6:50:B6:2C:6D:41:14:FE:59:EF:DB X509v3 Authority Key Identifier: keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:1b:48:be:84:00:85:24:6f:87:6f:ba:46:f2:5d:7a:a2: 91:e4:3e:33:fb:27:81:cf:9c:11:7c:5f:b8:eb:da:30:55:92: 77:1d:1f:8b:ad:d4:88:e5:9b:25:d2:63:48:f0:f6:66:93:bf: c3:db:c9:32:08:a8:51:7d:00:5b:07:0c:c8:8c:e6:65:1f:3a: 23:88:98:fb:9f:7f:ad:e2:c2:e5:7a:86:3b:50:ae:ce:57:98: ac:99:96:f9:c4:25:ad:77:56:75:b4:33:3c:c1:ac:ec:1a:07: 1a:8c:08:7b:64:eb:ca:f9:d5:14:96:67:f5:79:c5:24:c9:7a: a5:0e:b4:7e:11:6a:3b:83:15:b3:d4:20:7f:e5:d9:13:0b:b2: 5b:fc:7d:fe:af:bb:04:ec:c9:93:aa:27:af:14:68:92:a2:4c: ec:20:e4:26:a5:b8:3c:f0:7a:b0:9f:2d:7c:30:ae:0e:b6:61: 5a:35:90:97:41:e7:b2:d7:0a:4e:72:23:b7:4b:0a:f9:14:07: 8d:c4:0d:0a:91:3f:c0:1f:51:61:37:6c:4a:f3:42:f9:38:c1: 12:50:d1:b1:c7:68:99:63:aa:3f:4e:c6:7c:57:3e:ef:e2:c6: ce:14:d1:1a:af:fd:ad:9f:f5:f6:49:6e:b1:39:da:dc:9f:b8: f3:5b:e9:b4 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD RkExODgwQUM4NkNFNEZCOTlGOTc0RTk5NTNGMzU5N0RDREUwQTAeFw0yNDA2MDIw MzQzMDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQzNDYxNDI5MDA4QjU3 MUYzOEE2NTBCNjJDNkQ0MTE0RkU1OUVGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCydQ/qsrrBQR1zGdzGsu+j2ikxZZtIXc9zDUYL1xrp9R92f1/W DiKOL+zKrudFLoFUmJBIGZScUQCFgRcwn2+GToiNKswXOMqZSYTtkgnwWtPQVCZ3 ZTjNbVcR+5iRIEJ6QdbVDNcXAXLs9twGpoOIKSodkGWum+cGa6AsD989vFu4pNXh u+UDRoQcQ8WaZDTPNNveiJA5g7LqaZqgDMApVlArv1qYOR4HUxGt+sTWRsELXisc /vErT5CCa6iE2EUl1pGGtEmIubS++qQ0jAqhSmPOTUCg3F6yplmL2DMBWf2SJAQK FswBW9hRYM7s2xKTgLkWB36Bf3IX4GOxku5lAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUQ0YUKQCLVx84plC2LG1BFP5Z79swHwYDVR0jBBgwFoAU+8+hiArIbOT7mfl0 6ZU/NZfc3gowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tTTUYv LTgtaGlBckliT1Q3bWZsMDZaVV9OWmZjM2dvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8tOC1oaUFySWJPVDdtZmwwNlpVX05aZmMzZ28uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1NNRi8tOC1oaUFySWJPVDdtZmwwNlpV X05aZmMzZ28ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW78b SL6EAIUkb4dvukbyXXqikeQ+M/sngc+cEXxfuOvaMFWSdx0fi63UiOWbJdJjSPD2 ZpO/w9vJMgioUX0AWwcMyIzmZR86I4iY+59/reLC5XqGO1CuzleYrJmW+cQlrXdW dbQzPMGs7BoHGowIe2TryvnVFJZn9XnFJMl6pQ60fhFqO4MVs9Qgf+XZEwuyW/x9 /q+7BOzJk6onrxRokqJM7CDkJqW4PPB6sJ8tfDCuDrZhWjWQl0HnstcKTnIjt0sK +RQHjcQNCpE/wB9RYTdsSvNC+TjBElDRscdomWOqP07GfFc+7+LGzhTRGq/9rZ/1 9klusTna3J+481vptA== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org