$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft File: O-iWz_LAFpeEhFDat_IaHhSk8IY.mft (raw, json) Hash identifier: oqxsEdB1Y9AMCJdztoLJelS5A2/AYQKBbl12fzugkaM= Subject key identifier: E0:A5:01:66:7A:13:08:4F:F4:32:4A:30:C4:7F:0A:37:60:F8:74:83 Authority key identifier: 3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86 Certificate issuer: /CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086 Certificate serial: 011B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft Manifest number: 0112 Signing time: Wed 22 Apr 2026 04:04:09 +0000 Manifest this update: Wed 22 Apr 2026 04:04:09 +0000 Manifest next update: Wed 22 Apr 2026 10:04:09 +0000 Files and hashes: 1: 09d502GqBlO6UFO__wIHIFyjhgI.roa (hash: zyr7C8qbHHFmR/n5OUbqGTyrJATI+n7mgzriRst5agE=) 2: GceKaS9g56vHe4-DWtVp9VFNRbs.roa (hash: IADfD7dKHx58hJaUGz9Tj2JOjhdoDF2pk5p9WgPp2FA=) 3: Mm5QnjlCbD6JSnEDpdQND2hWSmU.roa (hash: eniA0BdI4FyR8WrUJnDAn0O8u1X4txhXxkKq+zHyiqc=) 4: NQU0pAKssuJOBCwSQVQOoXK4O5w.roa (hash: NwabWRN2eLMl2+XcmwshBr7FOAgGwc4On1Tomt6cJwc=) 5: O-iWz_LAFpeEhFDat_IaHhSk8IY.crl (hash: PQgwPqXqPQM4zsw2cN/BS9KVLcsro0TaFZ3g3GXGByM=) 6: Ra0L6udvSwDXP1V7qelnfXRirI4.roa (hash: w5I0taoY/8Sfi8/8DgzCehHrZJwECkB2rlozlasrkj0=) 7: rUYs0iTQAKoyh6qLZ6k7FH3bDbQ.roa (hash: gE3yOxnBAx9u7VyCzB06YIxi4KXeqtUTVrppiefmZ2U=) 8: v40XBXqfd3t5DHYPrbNNGVx46mM.roa (hash: VonTp+3WmJGa85ebTKpA0St4xfZW6QoaDyConcZ2xKU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086 Validity Not Before: Apr 22 04:04:09 2026 GMT Not After : Feb 24 15:30:19 2027 GMT Subject: CN=E0A501667A13084FF4324A30C47F0A3760F87483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:21:c7:95:00:2d:cb:d9:c7:9d:f3:a1:73: ca:61:79:ce:54:6e:ac:0e:dc:19:4f:9d:68:71:a3: 5f:a8:84:c7:f7:c3:74:f1:26:86:84:6c:e0:6c:f4: 19:07:4f:9d:9d:0e:10:76:19:7a:a0:ba:3b:6e:f9: 88:d0:a9:f4:00:f7:6e:fa:69:f2:da:f4:36:59:47: a2:c3:8c:51:c3:12:e6:62:da:1f:8e:1f:d5:6d:f3: 60:a1:d3:19:96:30:ba:f2:f4:7d:ce:bf:7f:e9:ff: 0f:0b:8e:ae:c6:29:95:dd:6e:d0:bd:97:e0:2b:68: 49:dc:fa:c4:c0:ec:e2:b5:53:a8:21:00:fb:bd:88: e2:ad:47:e3:00:97:09:2e:1c:4a:06:17:ce:df:7e: 25:de:eb:5f:24:b6:c6:bf:fc:12:45:27:1c:e6:8a: 23:3b:12:10:cb:18:41:6a:9f:dd:cf:d2:95:70:81: 66:f2:ce:5c:74:b7:23:07:89:0a:7e:73:e7:49:54: f6:d7:cd:4a:18:ad:32:4d:b9:03:71:95:cb:1d:93: 58:e1:8d:4e:b3:87:5e:7d:52:e4:1a:67:7f:da:aa: c3:e2:97:2b:71:ea:3c:e3:83:63:c1:15:a1:83:52: ca:4c:6d:80:33:19:83:37:e6:d0:f4:fd:6b:96:f5: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:01:66:7A:13:08:4F:F4:32:4A:30:C4:7F:0A:37:60:F8:74:83 X509v3 Authority Key Identifier: keyid:3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:86:ab:92:f0:ec:3e:fb:5c:41:69:4d:21:6c:e8:a7:58:73: e0:82:53:3c:6c:24:0c:65:12:e7:55:7b:d5:94:6c:7d:fc:f4: a0:01:93:25:d6:b7:ef:08:6f:38:02:f2:1b:ea:41:88:e9:1e: a1:af:0a:bc:5d:18:f4:b3:0f:77:08:f6:4c:11:7a:ed:8a:26: e2:2f:0c:70:44:dd:f3:0a:9f:f3:86:27:c2:ad:46:38:fb:46: af:bf:ed:a8:ee:d2:9f:1c:e1:55:17:79:d0:e9:34:0c:34:c8: ad:15:c7:b9:47:9b:35:82:6e:a2:47:0b:9b:fc:0c:b1:2d:03: 85:9d:28:10:fd:24:60:06:6b:d2:75:85:1a:05:58:6b:9c:3e: 48:9f:56:d6:7c:87:9c:df:44:ab:f0:9b:55:db:58:92:15:32: f7:81:a9:e9:87:23:ed:1c:0a:90:4d:53:62:b8:3d:a4:6d:e8: c8:eb:bc:0c:31:5e:25:35:36:07:ec:62:bb:f6:de:9a:76:57: 82:3b:8b:8e:e4:63:ba:15:a1:1e:4c:b7:75:ae:e4:cb:08:7f: 2e:3e:05:23:90:bb:c5:e7:cf:94:91:25:80:2c:1f:a9:c3:51: 3c:a6:d2:53:94:61:22:00:7e:31:df:86:7c:dc:a9:e1:af:f2: bc:36:aa:b4 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICARswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF ODk2Q0ZGMkMwMTY5Nzg0ODQ1MERBQjdGMjFBMUUxNEE0RjA4NjAeFw0yNjA0MjIw NDA0MDlaFw0yNzAyMjQxNTMwMTlaMDMxMTAvBgNVBAMTKEUwQTUwMTY2N0ExMzA4 NEZGNDMyNEEzMEM0N0YwQTM3NjBGODc0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbLyHHlQAty9nHnfOhc8phec5UbqwO3BlPnWhxo1+ohMf3w3Tx JoaEbOBs9BkHT52dDhB2GXqgujtu+YjQqfQA9276afLa9DZZR6LDjFHDEuZi2h+O H9Vt82Ch0xmWMLry9H3Ov3/p/w8Ljq7GKZXdbtC9l+AraEnc+sTA7OK1U6ghAPu9 iOKtR+MAlwkuHEoGF87ffiXe618ktsa//BJFJxzmiiM7EhDLGEFqn93P0pVwgWby zlx0tyMHiQp+c+dJVPbXzUoYrTJNuQNxlcsdk1jhjU6zh159UuQaZ3/aqsPilytx 6jzjg2PBFaGDUspMbYAzGYM35tD0/WuW9X4ZAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU4KUBZnoTCE/0MkowxH8KN2D4dIMwHwYDVR0jBBgwFoAUO+iWz/LAFpeEhFDa t/IaHhSk8IYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEFaQ08v Ty1pV3pfTEFGcGVFaEZEYXRfSWFIaFNrOElZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWlXel9MQUZwZUVoRkRhdF9JYUhoU2s4SVkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MQVpDTy9PLWlXel9MQUZwZUVoRkRhdF9J YUhoU2s4SVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4ar kvDsPvtcQWlNIWzop1hz4IJTPGwkDGUS51V71ZRsffz0oAGTJda37whvOALyG+pB iOkeoa8KvF0Y9LMPdwj2TBF67Yom4i8McETd8wqf84Ynwq1GOPtGr7/tqO7Snxzh VRd50Ok0DDTIrRXHuUebNYJuokcLm/wMsS0DhZ0oEP0kYAZr0nWFGgVYa5w+SJ9W 1nyHnN9Eq/CbVdtYkhUy94Gp6Ycj7RwKkE1TYrg9pG3oyOu8DDFeJTU2B+xiu/be mnZXgjuLjuRjuhWhHky3da7kywh/Lj4FI5C7xefPlJElgCwfqcNRPKbSU5RhIgB+ Md+GfNyp4a/yvDaqtA== -----END CERTIFICATE-----Generated at Wed Apr 22 06:30:51 2026 by rpki-client