$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft File: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json) Hash identifier: 844EHlWRggu8iaYCdyCbOhXVF4WQXhvw6AjycCrBny4= Subject key identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 0542 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft Manifest number: 053F Signing time: Mon 27 Apr 2026 06:04:58 +0000 Manifest this update: Mon 27 Apr 2026 06:04:58 +0000 Manifest next update: Mon 27 Apr 2026 12:04:58 +0000 Files and hashes: 1: 2bTqYrZys3Fogts7Fv5vjncOvIc.roa (hash: qnYX1Y1VBdTSxMV61i74UZEIUai9LUqwtA41ObRO5LM=) 2: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: z0Ov8FfdPiTLRQv6/zo545k5aztaQIFoBiRMqJgZLaY=) 3: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 12:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Apr 27 06:04:58 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a: 99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9: fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8: 54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5: d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4: a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3: f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03: 3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d: f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc: 0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e: 51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50: 25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78: 4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85: b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8: b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21: 91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2: bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3f:fc:ee:3d:f2:e9:92:54:22:e8:e5:a1:ed:8e:02:15:a5: cf:ee:a5:57:a7:2a:e7:12:ef:95:9c:b5:c3:6f:66:0d:59:cb: 76:c5:0a:b5:cf:0c:67:83:2d:24:c5:65:c4:b1:53:74:ad:88: 1e:c9:38:a1:10:7d:05:5d:18:89:95:4e:c9:74:9a:5b:2c:0d: d5:9f:7a:bc:c2:27:bc:65:a6:b7:d6:29:69:d2:3f:f9:fd:17: b5:17:d3:71:1d:30:fb:15:8c:61:a2:d5:4b:c0:6a:82:6b:c6: 0b:32:72:b3:21:b1:41:3c:06:18:56:e6:f1:03:93:b3:6a:a6: 67:b4:8c:7f:ab:74:8e:9a:b6:ea:61:84:dd:f5:69:5a:f1:8e: 60:ea:93:98:c7:68:f4:fe:b4:0e:fa:a3:d8:e7:20:7a:46:1a: 21:07:38:e9:b6:60:53:96:56:d4:12:fa:4c:32:cd:9d:bd:84: 45:20:07:36:0d:b8:f2:83:a6:f3:7e:de:10:3e:10:84:e4:be: fc:48:84:e2:39:9e:1c:f7:02:77:82:f3:ff:f4:99:87:dc:15: db:7e:16:43:f4:e1:34:cf:16:d8:7a:bc:f1:c9:4c:dd:fa:c7: af:33:b7:2a:23:c6:af:f4:d9:ce:df:87:56:5b:1a:31:3b:66: 12:75:3c:cf -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjAy MEVBRjZEMjRCNzRFRUE1NEE4NDRGNzAyMzREQ0EyNTVBNkJDMTAeFw0yNjA0Mjcw NjA0NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4M0E1QTIyQzlGQUNB RDYxODQzMDgyNjNBNUQzNDRBOTZDRERGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9imOVgdoQ9jhHHDtwipkL4U71W/on19Xs29ss+f1ZXikBvrrs YLSzvfNgqFSgbxAeRvwrUJfQg4WZ5dhp32X8IK+hqsBZx4pB1Kji0Q5OIzKsp3dY 8DCQ4/QumQ2L6CSuOshfHRNyAz4wWPT6y5AZpKII37X1XfmdnpH9W4T+1GV9EvID vA0qfhtuQOuIKwZ59Y+rTlH0zTglycAiMyov7s+3UCWvrd38CMVJlUd6VkpEeEtr 33zj07E20/BsYYGuhbRNWXPeSRpJVsVZ/p5/6LNG65FRqw8N1rv/n6HzIZHV7MUh vadjVxcY7XDs0r9aeFsb+mJd/RqEPeorBIjjAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUWDpaIsn6ytYYQwgmOl00SpbN32YwHwYDVR0jBBgwFoAU8CDq9tJLdO6lSoRP cCNNyiVaa8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNI LzhDRHE5dEpMZE82bFNvUlBjQ05OeWlWYWE4RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvOENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNILzhDRHE5dEpMZE82bFNvUlBj Q05OeWlWYWE4RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBr P/zuPfLpklQi6OWh7Y4CFaXP7qVXpyrnEu+VnLXDb2YNWct2xQq1zwxngy0kxWXE sVN0rYgeyTihEH0FXRiJlU7JdJpbLA3Vn3q8wie8Zaa31ilp0j/5/Re1F9NxHTD7 FYxhotVLwGqCa8YLMnKzIbFBPAYYVubxA5OzaqZntIx/q3SOmrbqYYTd9Wla8Y5g 6pOYx2j0/rQO+qPY5yB6RhohBzjptmBTllbUEvpMMs2dvYRFIAc2Dbjyg6bzft4Q PhCE5L78SITiOZ4c9wJ3gvP/9JmH3BXbfhZD9OE0zxbYerzxyUzd+sevM7cqI8av 9NnO34dWWxoxO2YSdTzP -----END CERTIFICATE-----Generated at Mon Apr 27 08:26:17 2026 by rpki-client