$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft File: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json) Hash identifier: W4i8Ssj0YwToC3Ylru7U/TIPlXGZTtlH6Z78++BLi3U= Subject key identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 12 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft Manifest number: 11 Signing time: Wed 20 Aug 2025 18:41:52 +0000 Manifest this update: Wed 20 Aug 2025 18:41:52 +0000 Manifest next update: Thu 21 Aug 2025 00:41:52 +0000 Files and hashes: 1: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: FN64pZliRdxKh2JLhBf07j1Zn4Cb0FZu7MsGyN5cx4Q=) 2: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 Aug 2025 00:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Aug 20 18:41:52 2025 GMT Not After : Jul 31 15:30:22 2026 GMT Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a: 99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9: fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8: 54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5: d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4: a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3: f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03: 3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d: f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc: 0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e: 51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50: 25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78: 4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85: b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8: b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21: 91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2: bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:29:0b:74:eb:72:a0:96:ac:9b:19:b0:55:ed:d6:0c:57:18: 7c:22:69:2e:0b:ee:41:28:33:de:63:d0:a1:59:45:6c:99:13: 12:09:8e:ee:bb:9c:54:ed:cf:e7:b3:cc:e7:6e:13:6c:e6:7e: 59:87:b2:5f:8f:b1:68:c7:e9:8a:d5:81:df:07:4a:93:71:0f: 2b:19:27:30:3a:76:2e:4c:14:8e:e6:10:5c:9b:18:d2:65:53: 0a:ae:0b:d9:98:57:d5:7a:3d:a6:a9:c4:71:e9:fd:a8:ef:39: 81:38:21:2f:35:39:c0:b0:a2:51:0d:ac:0b:dc:ba:31:e4:03: b6:ee:97:7f:d8:86:a4:cc:fd:12:a9:6d:37:62:19:55:e6:be: 38:eb:97:f5:bc:ee:d2:1a:c2:7a:6a:fa:3d:1d:f1:59:d8:80: a1:2c:7d:18:9e:c2:ce:b9:6c:6a:cc:3c:5c:27:ec:f4:e6:13: 10:6e:e0:76:cc:f8:37:cf:e5:cb:d8:08:73:8e:8b:92:56:30: b9:58:74:0d:89:6c:d3:24:21:ba:32:81:c8:72:56:e9:0f:65: 6f:72:3b:3a:c2:76:c3:fa:96:e3:93:ca:1a:37:c7:ec:0e:b6: cb:61:21:36:fe:34:ce:d6:86:76:a6:ea:cc:34:88:75:6e:dd: 05:45:38:9b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDIw RUFGNkQyNEI3NEVFQTU0QTg0NEY3MDIzNERDQTI1NUE2QkMxMB4XDTI1MDgyMDE4 NDE1MloXDTI2MDczMTE1MzAyMlowMzExMC8GA1UEAxMoNTgzQTVBMjJDOUZBQ0FE NjE4NDMwODI2M0E1RDM0NEE5NkNEREY2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2KY5WB2hD2OEccO3CKmQvhTvVb+ifX1ezb2yz5/VleKQG+uuxg tLO982CoVKBvEB5G/CtQl9CDhZnl2GnfZfwgr6GqwFnHikHUqOLRDk4jMqynd1jw MJDj9C6ZDYvoJK46yF8dE3IDPjBY9PrLkBmkogjftfVd+Z2ekf1bhP7UZX0S8gO8 DSp+G25A64grBnn1j6tOUfTNOCXJwCIzKi/uz7dQJa+t3fwIxUmVR3pWSkR4S2vf fOPTsTbT8Gxhga6FtE1Zc95JGklWxVn+nn/os0brkVGrDw3Wu/+fofMhkdXsxSG9 p2NXFxjtcOzSv1p4Wxv6Yl39GoQ96isEiOMCAwEAAaOCAgcwggIDMB0GA1UdDgQW BBRYOloiyfrK1hhDCCY6XTRKls3fZjAfBgNVHSMEGDAWgBTwIOr20kt07qVKhE9w I03KJVprwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QUFRFQ0gv OENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS84Q0RxOXRKTGRPNmxTb1JQY0NOTnlpVmFhOEUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QUFRFQ0gvOENEcTl0SkxkTzZsU29SUGND Tk55aVZhYThFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBACcp C3TrcqCWrJsZsFXt1gxXGHwiaS4L7kEoM95j0KFZRWyZExIJju67nFTtz+ezzOdu E2zmflmHsl+PsWjH6YrVgd8HSpNxDysZJzA6di5MFI7mEFybGNJlUwquC9mYV9V6 PaapxHHp/ajvOYE4IS81OcCwolENrAvcujHkA7bul3/YhqTM/RKpbTdiGVXmvjjr l/W87tIawnpq+j0d8VnYgKEsfRiews65bGrMPFwn7PTmExBu4HbM+DfP5cvYCHOO i5JWMLlYdA2JbNMkIboygchyVukPZW9yOzrCdsP6luOTyho3x+wOtsthITb+NM7W hnam6sw0iHVu3QVFOJs= -----END CERTIFICATE-----Generated at Wed Aug 20 23:38:21 2025 by rpki-client