$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCTAIWAN/0Z9VOlaaJM67GbQXoI9VvuKHhtE.mft File: 0Z9VOlaaJM67GbQXoI9VvuKHhtE.mft (raw, json) Hash identifier: DZtxyKq8am9DL3WkEhAqD3IwhAIMhx0gtKZvqHS3fH0= Subject key identifier: 36:19:00:08:88:0E:05:26:9D:8C:DC:B1:21:B6:49:9C:6F:43:12:62 Authority key identifier: D1:9F:55:3A:56:9A:24:CE:BB:19:B4:17:A0:8F:55:BE:E2:87:86:D1 Certificate issuer: /CN=D19F553A569A24CEBB19B417A08F55BEE28786D1 Certificate serial: 0C1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0Z9VOlaaJM67GbQXoI9VvuKHhtE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCTAIWAN/0Z9VOlaaJM67GbQXoI9VvuKHhtE.mft Manifest number: 0C1A Signing time: Sun 24 Nov 2024 03:54:05 +0000 Manifest this update: Sun 24 Nov 2024 03:54:05 +0000 Manifest next update: Tue 26 Nov 2024 03:54:05 +0000 Files and hashes: 1: 0Z9VOlaaJM67GbQXoI9VvuKHhtE.crl (hash: yA0r/svuaL6SRSKkm2KiF5f2XAI+w16q06TKrOuQdBg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCTAIWAN/0Z9VOlaaJM67GbQXoI9VvuKHhtE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCTAIWAN/0Z9VOlaaJM67GbQXoI9VvuKHhtE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0Z9VOlaaJM67GbQXoI9VvuKHhtE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D19F553A569A24CEBB19B417A08F55BEE28786D1 Validity Not Before: Nov 24 03:54:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36190008880E05269D8CDCB121B6499C6F431262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:ee:af:4c:f0:38:73:24:19:e8:6c:8d:72: 51:05:3d:28:79:d9:94:cb:c6:98:13:54:d4:25:83: 56:2f:cc:a9:af:1f:18:02:75:75:fe:fc:01:5a:2b: d4:2b:15:89:2e:72:ae:77:66:9b:c3:ce:6b:cd:d6: 3c:78:af:0d:95:a3:f7:81:e5:45:28:07:93:9e:0b: 5e:23:3b:ff:9a:2e:97:0f:1b:07:a0:f2:ea:fd:e8: 75:82:e4:b5:b1:16:13:dd:b0:2f:0a:6d:f6:04:94: 2c:60:d0:bc:42:2e:5d:d4:36:cc:67:ca:69:c3:32: da:3b:d3:5c:b6:f7:a1:8c:7c:0c:2c:03:ed:5f:ee: e0:19:4d:06:9f:8b:4b:2d:fe:71:7a:b9:d4:a4:11: a1:e7:8f:f6:be:ed:d3:09:30:53:c5:86:4c:3a:10: 14:0e:2c:1c:ca:ac:33:95:aa:fe:04:7a:36:c7:52: 19:c3:8c:40:2e:c9:0a:6a:a8:a6:90:22:cc:bf:f8: 5c:55:ce:ce:8f:78:56:7e:8a:79:5d:03:1a:51:48: 4d:54:4d:c7:2e:36:5e:79:ac:a2:f5:06:da:aa:89: f6:09:93:49:da:3f:c4:f7:38:1b:d2:a5:d7:d5:7c: 4e:4d:7d:ec:96:07:23:63:39:fb:e8:db:6f:90:05: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:19:00:08:88:0E:05:26:9D:8C:DC:B1:21:B6:49:9C:6F:43:12:62 X509v3 Authority Key Identifier: keyid:D1:9F:55:3A:56:9A:24:CE:BB:19:B4:17:A0:8F:55:BE:E2:87:86:D1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCTAIWAN/0Z9VOlaaJM67GbQXoI9VvuKHhtE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0Z9VOlaaJM67GbQXoI9VvuKHhtE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCTAIWAN/0Z9VOlaaJM67GbQXoI9VvuKHhtE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:cd:8e:d8:2d:d4:67:06:55:aa:e8:58:b3:6c:9b:14:be:17: a8:d2:74:b7:77:a0:eb:7f:d5:57:ea:00:71:a6:58:30:ba:3c: 4c:73:f9:f1:3b:d8:d3:d7:4e:f0:77:8c:ec:c8:26:eb:3b:8c: 9d:51:95:0f:5f:e4:67:1e:f6:18:41:a2:8a:59:11:17:5d:9f: 64:f3:f9:7f:46:13:d7:ab:db:4e:e2:cf:bb:51:ac:29:5e:7c: c8:8b:98:1e:a4:04:cd:80:3d:df:15:f6:d3:03:80:c1:df:e5: 38:cd:b3:b2:ae:79:e5:cd:99:41:0d:a6:1d:ec:c9:b0:31:b4: 42:95:0c:af:9e:4e:f7:94:14:58:68:cd:47:19:7e:e3:a2:80: 3d:55:33:89:b2:da:7f:f7:bf:93:04:4d:12:ef:a0:2f:5c:b7: 44:c8:91:30:f7:20:1e:c6:39:a1:b5:ba:e8:48:d0:db:d4:49: fa:22:09:10:1b:bf:a2:6d:ae:24:45:0c:4d:2e:3d:b7:c7:3b: 80:4d:f5:ba:ca:14:91:f4:75:24:66:d7:fd:26:0f:2e:ea:8b: c1:49:31:3b:5d:e2:94:f3:48:42:cc:95:ae:ec:04:a7:3b:86: c8:b4:12:f9:ea:45:53:fe:fa:aa:e9:c6:20:8c:a9:a6:51:2e: 12:68:b9:a0 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE5 RjU1M0E1NjlBMjRDRUJCMTlCNDE3QTA4RjU1QkVFMjg3ODZEMTAeFw0yNDExMjQw MzU0MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2MTkwMDA4ODgwRTA1 MjY5RDhDRENCMTIxQjY0OTlDNkY0MzEyNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCiu6vTPA4cyQZ6GyNclEFPSh52ZTLxpgTVNQlg1YvzKmvHxgC dXX+/AFaK9QrFYkucq53ZpvDzmvN1jx4rw2Vo/eB5UUoB5OeC14jO/+aLpcPGweg 8ur96HWC5LWxFhPdsC8KbfYElCxg0LxCLl3UNsxnymnDMto701y296GMfAwsA+1f 7uAZTQafi0st/nF6udSkEaHnj/a+7dMJMFPFhkw6EBQOLBzKrDOVqv4EejbHUhnD jEAuyQpqqKaQIsy/+FxVzs6PeFZ+inldAxpRSE1UTccuNl55rKL1BtqqifYJk0na P8T3OBvSpdfVfE5NfeyWByNjOfvo22+QBReDAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUNhkACIgOBSadjNyxIbZJnG9DEmIwHwYDVR0jBBgwFoAU0Z9VOlaaJM67GbQX oI9VvuKHhtEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNUQUlX QU4vMFo5Vk9sYWFKTTY3R2JRWG9JOVZ2dUtIaHRFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wWjlWT2xhYUpNNjdHYlFYb0k5VnZ1S0hodEUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9OQ1RBSVdBTi8wWjlWT2xhYUpNNjdH YlFYb0k5VnZ1S0hodEUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFM2O2C3UZwZVquhYs2ybFL4XqNJ0t3eg63/VV+oAcaZYMLo8THP58TvY09dO 8HeM7Mgm6zuMnVGVD1/kZx72GEGiilkRF12fZPP5f0YT16vbTuLPu1GsKV58yIuY HqQEzYA93xX20wOAwd/lOM2zsq555c2ZQQ2mHezJsDG0QpUMr55O95QUWGjNRxl+ 46KAPVUzibLaf/e/kwRNEu+gL1y3RMiRMPcgHsY5obW66EjQ29RJ+iIJEBu/om2u JEUMTS49t8c7gE31usoUkfR1JGbX/SYPLuqLwUkxO13ilPNIQsyVruwEpzuGyLQS +epFU/76qunGIIypplEuEmi5oA== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org