$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft File: DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json) Hash identifier: nRW4f+YmTXTsfHMH+0aeg3Ktu1PAM1uAoQ4xoJ6D/7w= Subject key identifier: 81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Certificate serial: 0C9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft Manifest number: 0C4D Signing time: Thu 21 Nov 2024 06:53:12 +0000 Manifest this update: Thu 21 Nov 2024 06:53:12 +0000 Manifest next update: Sat 23 Nov 2024 06:53:12 +0000 Files and hashes: 1: 8W89wA_E1FAc07WNOVh9LSMK6rk.roa (hash: LzV3ejAohweNfuKvcJh7dvai6ij4bNnWLI2Rpa5ud5w=) 2: 9Dn5UY0mHKVVsX1eq_33XyaUyOs.roa (hash: 8oD42nwk98BQJ9zL3y2KnaMUq0+Quen5JV/O2PoyNzk=) 3: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: J9kJwEEm7EioOIXXk1/YUKPr2nnA3ff6y938iD/f63Y=) 4: GLUJXv-XO5ux9_ZVuhuykp0nJgc.roa (hash: 73oFiu0qHP72q2FLh15Q4f3CIBHssEpnp8IcK91wi6w=) 5: H_hG3YnC4ZR5pYMDOS1JK3EWj0Q.roa (hash: v9Wc86iqvE6dkP90Pxb18YOGRBafH2h/h9opi+V5y28=) 6: KdCCZtj4HPMloeVeS7-1X4BlSh8.roa (hash: TEmjUqFQnz6jAsYWObpZnZM7GGgAMCBg1drEvKNm03g=) 7: SfMFHlx8Sb2hdY2lC_hDEhktdjI.roa (hash: ozFOeOwDe0ep87Ql83L+rvvUtQkQ2JnDLOW6sEfdts4=) 8: XFOHdkG0KSkYhJScBtPJzKCTMM0.roa (hash: Ex4/U9HZD6ywFs6L+jwb7YS01c7OQmdgengsNLphNhY=) 9: Yd4FJ-Ki-jEtx0Ab3_4SSOGRHz0.roa (hash: ON1k9xalsandXrRo73DJmzM+4eS+vDnP/egbxZMiQXI=) 10: wFuhzucHhWRV7wnKhx__aC4xIKY.roa (hash: I7SnsurlYcw9aEQVGKEJy5hvZGEB2wLN1+v6a63itzs=) 11: yASlG4QXgX64nRSF088iftqBxww.roa (hash: uJCg78nUn6D3QajHlOWhU1TCratqjN4MiBIsd8J7PdY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2 Validity Not Before: Nov 21 06:53:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1: c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d: 5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93: 7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02: f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e: 1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0: 81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36: 03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93: 60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df: 1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34: 42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2: c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39: 83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7: 96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93: 1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d: 07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85: 4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF X509v3 Authority Key Identifier: keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:31:d7:3e:49:6f:15:28:95:07:19:c6:fd:27:ea:b8:0b:45: 0c:99:e5:65:a5:45:bb:08:c1:92:db:43:f9:33:36:e3:45:59: a3:64:a3:76:e1:8f:b6:95:33:9e:7d:eb:a8:37:8c:5d:25:54: f3:cb:16:5f:ed:0c:7c:a3:38:fe:fc:8e:e1:2a:e1:a3:72:1d: b8:89:ac:9e:67:8c:65:62:c3:4b:5b:6c:35:21:fd:dc:68:10: 53:1a:4c:39:4c:21:48:ab:30:e4:6f:24:b7:5c:32:3e:54:5f: f4:2d:e7:30:4f:73:c5:13:f2:fe:d9:65:f9:6a:6f:4e:bf:67: 23:16:d0:07:77:82:c6:6b:a3:c7:0e:3a:11:d8:8c:39:f8:4c: 88:5a:cf:76:44:d0:6e:5c:29:99:b5:21:06:51:d4:f0:ed:05: b4:7a:e3:f3:02:45:b7:9a:e9:05:3f:8c:f9:49:46:9c:6d:94: 96:09:61:6c:7b:d5:17:9d:94:9e:60:f4:c5:01:2e:d4:e9:6e: fe:5d:ec:ba:0a:96:2c:a2:db:99:e0:1f:1b:4e:e6:2e:06:c8: 4b:f0:72:7f:b5:b7:f9:fc:a2:21:8e:33:3f:85:4f:70:7b:77: 91:7f:8f:d0:f4:8f:cd:5c:41:9e:8a:6b:c7:a7:53:63:7c:98: 5d:6e:11:d6 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yNDExMjEw NjUzMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgxRkE3RTk1NkFCNjNG QTEzRENBMEMxODNFNjMzRkFCNTVDOTMxRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8flJ2ouhRweers+/5ocSXL+DhYoEliDSzjWQInV20Ms0GBXSk +qP6jPn3k32G+LOROhu2s3q9pb9fAvd2euXPSRyeQyulXbudnhpTJilb+OVkPlLx RHQpoIH+uRZq/5T+LlJX14MRNgM6emenx1g890IxFA+Qk2CRrGAGQjx7bYjftDcs 3x2QFkT/Wm8onqbRk0izNEKx/yKGmlFfzKET5/x4wsjndbznb3cMBw2VFb2QOYP5 6Qo/MhHtgNTu0YBtx5Y+rs9SvbdR6aSynqCwkxpzN2JCzmdFOVPfZetVDQf7ukJm fRototeSH5OchUxyzkwoWrN/OELZGDmIv3+rAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUgfp+lWq2P6E9ygwYPmM/q1XJMe8wHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi9EZmxLc0hLTWVqakZE dzFoVlUxSjFsSHpPcUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiTHXPklvFSiVBxnG/SfquAtFDJnlZaVFuwjBkttD+TM240VZo2SjduGPtpUz nn3rqDeMXSVU88sWX+0MfKM4/vyO4Srho3IduImsnmeMZWLDS1tsNSH93GgQUxpM OUwhSKsw5G8kt1wyPlRf9C3nME9zxRPy/tll+WpvTr9nIxbQB3eCxmujxw46EdiM OfhMiFrPdkTQblwpmbUhBlHU8O0FtHrj8wJFt5rpBT+M+UlGnG2UlglhbHvVF52U nmD0xQEu1Olu/l3sugqWLKLbmeAfG07mLgbIS/Byf7W3+fyiIY4zP4VPcHt3kX+P 0PSPzVxBnoprx6dTY3yYXW4R1g== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org