$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft File: Uptgbbhig71KCK9-sz7ziiVmMbs.mft (raw, json) Hash identifier: b1FXn8rcTk7xCX9R50Eh5xuvhD3DmPS2Sb2AuTFA/s8= Subject key identifier: FE:AD:35:29:A5:99:ED:7B:16:CF:C4:44:3C:03:E1:43:93:77:56:1F Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0C86 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft Manifest number: 0C1C Signing time: Thu 21 Nov 2024 07:52:58 +0000 Manifest this update: Thu 21 Nov 2024 07:52:58 +0000 Manifest next update: Sat 23 Nov 2024 07:52:58 +0000 Files and hashes: 1: -Ze1pmQ9YBoNFFkA1bNh1xa4_Jw.roa (hash: phM1vV4ony/DEJ8te895Xs2p+0ck6+ldZ1ob46MWN6U=) 2: 8xUcp9IQF_zIssEejvscI4ulDUE.roa (hash: s7B9AKiNZvi066PRsyMq72G7qajdz31n9ncSLleQz1A=) 3: C1uxMJvQohjdqGRXYx7qHYD6L5c.roa (hash: H/EauVbBvGJUD+a3nrkpkKADAz40Iwm4bTjq0Nu5Keo=) 4: CV1SeW3bk2Edd4dBsKpLdwCURlo.roa (hash: u7lqOJNH39lv/K0M9+HpePf23MlFW801Ym3dVI/l+7M=) 5: QeFIq35KD-EpQvo6_Tu6v5W0KHI.roa (hash: VwsXLEIHoma0o06l4MfszVmMdtQwU9YAbYVUDpi9B1k=) 6: RN-Fq5fmVb0C0HtgePF7e-_Y7qY.roa (hash: uhZo6Q+s0neaT9hdm6vxTP0aAUY+lNbs7b+kn9aWAwA=) 7: Uptgbbhig71KCK9-sz7ziiVmMbs.crl (hash: pq6Gg2ujrYyK7bYcsci/jDk45muwgpuwaN4xtSIjGNg=) 8: WTxXE1MmZ2u-MJis_7oxKPXt3i4.roa (hash: BolTMolh6z3Y5+z7LqHVzZCxyst6hA/Whfm7Yo64kUY=) 9: WVwGrkQP0fc7dSQoOvtICwe4wjQ.roa (hash: 8TtfoUUKfvL8h5qXf6BacUasKkVVmDdJosl5w45qINA=) 10: ZRbmqzyUZnMoCXD5NoWDvRKRlXg.roa (hash: oSvprG5Sep2tW892ERMdESlZjNDLa3nuOI55EJwyWiQ=) 11: iBt7V4NrNsQbAsTuMB5PkBFzV-M.roa (hash: M5EHUr3gRoQgEv9Ofo0HsdwT6UPH6IN1y16HRQwTHX8=) 12: psX_xXjKKTR1y14gNI_xLsCtnJY.roa (hash: R0p48LTEDJkGixMNPIPtWwmtgCw+NxKUxNOiX+DJGTU=) 13: t8yYmcUmPU4GgSI3xsZS9aQ-xcY.roa (hash: C0NBQYTpbroZWrQ/e9LDjpU76m4laUv9WngOCDGpBn0=) 14: x-54sQPiB4gYB0fyJiEWUZZvmaE.roa (hash: ICO+TzStFo/9EFH0wKVSpxm3u6LEkwQyhL+KqtCeyyM=) 15: zgASGa_ImAN3cqAHkCXfgCzfeVU.roa (hash: b46XTIYgEfz4j0XYoksec8WebNnN5LcpeH4bSXmGjVI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Nov 21 07:52:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FEAD3529A599ED7B16CFC4443C03E1439377561F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:72:70:3c:c0:6e:bb:a7:f6:b9:c6:30:2e: 3c:ba:79:5c:0b:c2:60:e1:c4:21:51:16:88:8c:50: 6d:d1:e3:11:b6:cf:d1:3a:e7:ff:7a:6e:56:d2:65: cb:9c:f0:15:33:83:a3:e9:7f:b5:13:33:43:f8:8b: 54:92:3c:8d:b8:0f:a9:47:01:39:7e:3e:10:92:1a: 88:5e:72:c4:fd:ab:8a:3d:1e:7c:07:44:fc:bd:f9: 8a:b3:45:12:2f:57:a4:6b:ca:e4:f9:f6:30:a2:ce: ec:2b:42:ed:11:77:53:1c:f0:e0:5e:1e:0c:2c:b2: 6c:d7:01:87:3b:69:08:02:bb:f2:8b:88:e3:19:a3: 4e:6c:ab:b9:33:85:5d:e7:9a:98:d4:08:95:5b:35: d2:30:37:30:f7:9b:ab:46:1a:e1:4f:2f:2d:1a:b9: 5e:ef:18:b1:61:2f:43:91:1d:0e:7a:ac:a6:38:4f: 42:ff:be:65:de:bd:fc:91:c7:6c:a0:32:ea:d9:6f: ec:7b:b9:8c:a3:25:b5:0d:a8:04:a4:ba:ba:35:30: d8:be:99:20:d2:89:9f:24:69:23:7f:f3:de:77:71: 72:15:e8:97:a5:3b:3a:69:84:00:92:28:08:ed:ad: b4:cb:ef:3c:fe:1a:4a:90:99:6b:2a:1f:97:59:c0: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:35:29:A5:99:ED:7B:16:CF:C4:44:3C:03:E1:43:93:77:56:1F X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a9:45:7d:41:a3:1c:da:6f:f8:0a:99:56:79:85:0d:c3:27: e1:4e:17:3e:ff:25:af:a8:b3:2b:ed:39:dc:ac:fd:df:dc:e6: a0:c3:19:e3:f8:f6:28:fb:43:c4:11:b9:84:d9:e9:8d:ab:0d: 74:22:77:6f:c9:49:6a:50:6a:69:f8:76:cf:c7:34:4f:31:fc: 79:f4:4b:8f:1b:10:15:6e:40:56:bb:05:e5:77:9d:a1:ce:cc: 28:58:37:18:4f:4f:15:40:4e:d8:61:77:5c:2d:b3:e5:8f:ae: 49:2b:c6:52:38:8c:d7:fb:2d:14:52:ea:39:95:1a:0a:34:d8: b5:3f:f8:27:ec:90:b4:1c:b4:e2:9b:85:0b:bd:3e:8e:23:69: ec:b0:9e:ec:32:b9:ba:54:2c:d5:b7:24:f0:eb:fd:34:d7:57: 6c:8d:c6:14:46:d8:e2:06:f1:91:49:59:82:ab:f5:5b:fd:0d: fe:1b:e0:c2:6c:ee:10:f4:f4:79:09:fa:df:04:23:0b:4c:57: 33:59:03:ac:08:09:1e:3a:5a:07:65:75:a4:bd:10:ab:55:86: c5:69:80:c2:62:d7:d6:e3:f2:c1:f6:c5:3e:be:e9:76:07:0b: 09:1c:87:36:5a:1c:87:e9:f5:7e:6d:d7:da:fb:ad:94:f3:6a: 08:ec:59:7d -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNDExMjEw NzUyNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZFQUQzNTI5QTU5OUVE N0IxNkNGQzQ0NDNDMDNFMTQzOTM3NzU2MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/qXJwPMBuu6f2ucYwLjy6eVwLwmDhxCFRFoiMUG3R4xG2z9E6 5/96blbSZcuc8BUzg6Ppf7UTM0P4i1SSPI24D6lHATl+PhCSGohecsT9q4o9HnwH RPy9+YqzRRIvV6RryuT59jCizuwrQu0Rd1Mc8OBeHgwssmzXAYc7aQgCu/KLiOMZ o05sq7kzhV3nmpjUCJVbNdIwNzD3m6tGGuFPLy0auV7vGLFhL0ORHQ56rKY4T0L/ vmXevfyRx2ygMurZb+x7uYyjJbUNqASkuro1MNi+mSDSiZ8kaSN/8953cXIV6Jel OzpphACSKAjtrbTL7zz+GkqQmWsqH5dZwCpPAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU/q01KaWZ7XsWz8REPAPhQ5N3Vh8wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9VcHRnYmJoaWc3MUtDSzktc3o3 emlpVm1NYnMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkalF fUGjHNpv+AqZVnmFDcMn4U4XPv8lr6izK+053Kz939zmoMMZ4/j2KPtDxBG5hNnp jasNdCJ3b8lJalBqafh2z8c0TzH8efRLjxsQFW5AVrsF5Xedoc7MKFg3GE9PFUBO 2GF3XC2z5Y+uSSvGUjiM1/stFFLqOZUaCjTYtT/4J+yQtBy04puFC70+jiNp7LCe 7DK5ulQs1bck8Ov9NNdXbI3GFEbY4gbxkUlZgqv1W/0N/hvgwmzuEPT0eQn63wQj C0xXM1kDrAgJHjpaB2V1pL0Qq1WGxWmAwmLX1uPywfbFPr7pdgcLCRyHNloch+n1 fm3X2vutlPNqCOxZfQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org