$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft File: tDIP1437ak0ckjIveUlmuFJd_dI.mft (raw, json) Hash identifier: d73tmR4cawkZluM6JEpbN2pd+y5ugE38w3VIk4xxEy4= Subject key identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9 Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 594D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft Manifest number: 591A Signing time: Thu 21 Nov 2024 07:23:37 +0000 Manifest this update: Thu 21 Nov 2024 07:23:37 +0000 Manifest next update: Sat 23 Nov 2024 07:23:37 +0000 Files and hashes: 1: -tjLOJ_JzcudCYm4i6iBdrTi-aM.roa (hash: yK4BALN1VcTXwNYPVOeJvFc21jtzEFL7W4MU1J1kPBU=) 2: 0GJxPfA2IBZRKJdwOGeqFenXPE0.roa (hash: QIwkgY7mxHbKcGT5hk7KRlqVhCDyGDAGaxtOcq1lfdo=) 3: ER6ZbzB7wKI2Lu1wVWQcSoDz--0.roa (hash: xMLmxtzS7co9nimpsVCi78bZrikjnjuO3QOnmcDndrs=) 4: X96xYudbxNaWInHH7GUruV1fYS4.roa (hash: ZLW2ZwwJVf4/av1jq0a7aWttWEHm6xrFeF9evcZ2Xq8=) 5: hopZdJlQK32rqHUT6gKYea9M_SA.roa (hash: 3Spx2pA28SI3qZe6n94POhvrzrhQxwUhoiHkhqgfsuA=) 6: nbzkfdtg-rL288Zw9i-Q0HAFWsY.roa (hash: BwKF14tYfWY1BuDdBe7fGaA1HZwknuJ6D9GgSmqEC/8=) 7: oUiq5jZ9lBpCKFRweO45CxVH9q0.roa (hash: bqda3OHncwGr1KSXnU6aifHgDZfleKCBaTCOPLnSmB0=) 8: tDIP1437ak0ckjIveUlmuFJd_dI.crl (hash: m8cmfnZPDpBD4XdF0Lb5oX8ykf/KU9kt89j/Mq3Vdx4=) 9: wqb4MbKOtH_lR__mdhFY8GNwwOA.roa (hash: rbxq5EVv2sNhtV+jTscQX6jMLJVICxDhvZhgPC+z2MU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22861 (0x594d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Nov 21 07:23:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1FA6ECAF83C39B5FFDE3AC1DAFFCA2780F9A71E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:13:73:54:80:9b:39:15:8d:ff:0d:64:6a: 90:d9:41:d9:ad:16:31:95:96:25:c1:98:68:d7:a8: b5:50:a9:f6:8a:81:4f:87:18:dc:40:89:24:8c:09: cb:ab:94:b2:e0:a6:73:1c:3a:e4:e9:bc:45:69:95: 8d:61:db:a0:64:cc:68:b2:f5:d6:29:cd:96:51:fa: 8d:f9:64:84:f8:ce:06:d5:42:79:4e:f1:50:f4:91: 9d:69:6e:68:9b:46:08:4b:fd:46:73:c8:79:31:2b: 41:7a:fd:d7:c4:b5:e3:93:b2:6a:75:0f:16:76:ef: 7e:26:51:96:60:6d:48:c3:49:5c:17:68:a6:1a:b9: f0:e3:7e:ac:c3:fd:7b:64:4d:ff:0d:f0:52:cb:fe: bc:b7:9d:73:40:ac:32:ff:4b:64:b5:db:f7:f9:21: 25:30:6e:3b:61:23:0c:1c:5b:f1:f5:f2:86:ff:84: 59:30:21:6a:11:ac:17:fb:f7:d5:1b:6c:76:94:81: d9:72:1d:b4:8a:a6:48:75:95:72:66:f1:25:41:c0: 75:82:45:8d:b6:ef:f7:07:a7:fd:e3:a6:e1:63:19: 29:d1:30:69:57:49:e3:36:07:c8:5e:ac:b0:12:3a: 64:35:fc:33:02:9f:c1:29:d7:c5:20:4e:eb:82:a2: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9e:ff:c3:8e:01:ba:05:ee:c2:a4:5d:96:21:f2:c7:df:7c: 7d:f4:9e:ad:26:08:38:2d:ed:b3:2a:80:cf:d1:82:ff:1b:ac: 5a:f4:be:c3:b4:2d:c3:23:f5:e9:fc:2f:ef:38:08:ab:5b:6d: 0b:09:d0:1f:bc:30:94:85:cc:92:10:e4:03:7a:5d:ce:93:3e: 2d:8e:49:3c:9f:06:ab:e7:70:ee:a4:cf:51:23:e3:a0:89:99: 36:a3:f3:69:99:0b:24:63:92:a3:ca:67:0b:34:de:bf:0c:e5: f8:dc:58:cf:ce:b1:6a:9b:5a:93:c3:47:58:77:8b:96:21:09: 09:4a:16:58:73:38:d3:d2:96:c6:53:8e:db:40:6b:86:73:d0: 6e:e0:24:0d:a6:04:41:7a:e6:45:c2:0f:20:f7:4a:e0:d6:8d: 0c:21:0e:26:81:1b:e4:85:32:22:d8:55:76:9a:fa:39:de:0c: 4b:43:fd:72:38:29:76:04:8d:b5:45:92:8d:f0:1b:41:83:fa: ab:e0:bb:16:e0:59:b7:ed:97:b3:7b:ad:ae:9b:c2:fc:17:43: 16:f2:79:2d:d8:34:16:db:b5:75:c6:48:76:f2:a9:b9:c1:46: 87:04:4a:35:bf:25:08:9d:52:11:9b:b7:bc:2c:8d:aa:b8:24: 8d:8c:a9:1a -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICWU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNDExMjEw NzIzMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGQTZFQ0FGODNDMzlC NUZGREUzQUMxREFGRkNBMjc4MEY5QTcxRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJohNzVICbORWN/w1kapDZQdmtFjGVliXBmGjXqLVQqfaKgU+H GNxAiSSMCcurlLLgpnMcOuTpvEVplY1h26BkzGiy9dYpzZZR+o35ZIT4zgbVQnlO 8VD0kZ1pbmibRghL/UZzyHkxK0F6/dfEteOTsmp1DxZ2734mUZZgbUjDSVwXaKYa ufDjfqzD/XtkTf8N8FLL/ry3nXNArDL/S2S12/f5ISUwbjthIwwcW/H18ob/hFkw IWoRrBf799UbbHaUgdlyHbSKpkh1lXJm8SVBwHWCRY227/cHp/3jpuFjGSnRMGlX SeM2B8herLASOmQ1/DMCn8Ep18UgTuuComaRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUH6bsr4PDm1/946wdr/yieA+acekwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvdERJUDE0MzdhazBja2pJ dmVVbG11RkpkX2RJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AGae/8OOAboF7sKkXZYh8sfffH30nq0mCDgt7bMqgM/Rgv8brFr0vsO0LcMj9en8 L+84CKtbbQsJ0B+8MJSFzJIQ5AN6Xc6TPi2OSTyfBqvncO6kz1Ej46CJmTaj82mZ CyRjkqPKZws03r8M5fjcWM/OsWqbWpPDR1h3i5YhCQlKFlhzONPSlsZTjttAa4Zz 0G7gJA2mBEF65kXCDyD3SuDWjQwhDiaBG+SFMiLYVXaa+jneDEtD/XI4KXYEjbVF ko3wG0GD+qvguxbgWbftl7N7ra6bwvwXQxbyeS3YNBbbtXXGSHbyqbnBRocESjW/ JQidUhGbt7wsjaq4JI2MqRo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org