$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft File: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json) Hash identifier: vHKzBI4TusXw0LViOHcvm7HclyPNvl+HZIHipJ1dWqE= Subject key identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 0176 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft Manifest number: 0173 Signing time: Sat 25 Oct 2025 18:26:23 +0000 Manifest this update: Sat 25 Oct 2025 18:26:23 +0000 Manifest next update: Sun 26 Oct 2025 00:26:23 +0000 Files and hashes: 1: 2bTqYrZys3Fogts7Fv5vjncOvIc.roa (hash: qnYX1Y1VBdTSxMV61i74UZEIUai9LUqwtA41ObRO5LM=) 2: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: EEe3GUGgsJq+OF1FNJm4MvEkmFQU2AvdU/eBLjVDee8=) 3: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Oct 25 18:26:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a: 99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9: fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8: 54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5: d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4: a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3: f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03: 3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d: f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc: 0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e: 51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50: 25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78: 4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85: b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8: b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21: 91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2: bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:6d:41:80:f0:c0:ef:40:36:ab:3b:46:e6:d3:f6:09:73: 7b:b2:9b:df:ff:a5:6d:55:aa:71:c1:be:82:9a:c3:5c:12:59: 9b:09:4e:52:4f:19:7f:72:d8:99:2f:8e:77:b8:d2:7d:04:7d: 8c:4e:ee:a1:59:f7:4a:30:da:cf:19:0f:ce:47:cc:eb:7f:03: b1:50:4f:ac:13:13:22:8d:aa:2b:a1:cf:1d:f3:6f:e0:87:c8: 99:e7:34:39:50:c3:fd:16:1a:a1:cb:29:51:91:e1:cc:47:f6: 99:d9:8c:8c:cf:4c:51:4d:5e:df:bb:fe:41:fb:d7:11:5c:0f: 9c:b3:6c:dd:a5:fc:4e:41:d8:28:97:21:4f:b4:f6:95:9f:d3: 5f:e5:34:f9:21:96:b7:77:e0:37:ed:90:30:1a:6f:90:10:25: 75:3d:f8:3c:0c:5a:5e:4f:91:c0:e6:a8:59:7f:62:be:3b:30: a1:e9:15:81:7a:3c:95:b5:dc:dc:10:1c:a2:3f:9a:77:3f:e7: b3:ad:73:2a:54:27:ac:f7:e7:e7:08:33:75:d8:68:cf:1a:56: 3f:a7:32:92:28:fe:84:0e:ba:96:d9:00:cd:0c:29:62:ca:59: c0:56:b0:ce:93:2a:67:03:41:34:aa:7d:22:78:c8:82:39:a9: 69:ca:6e:9f -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjAy MEVBRjZEMjRCNzRFRUE1NEE4NDRGNzAyMzREQ0EyNTVBNkJDMTAeFw0yNTEwMjUx ODI2MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4M0E1QTIyQzlGQUNB RDYxODQzMDgyNjNBNUQzNDRBOTZDRERGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9imOVgdoQ9jhHHDtwipkL4U71W/on19Xs29ss+f1ZXikBvrrs YLSzvfNgqFSgbxAeRvwrUJfQg4WZ5dhp32X8IK+hqsBZx4pB1Kji0Q5OIzKsp3dY 8DCQ4/QumQ2L6CSuOshfHRNyAz4wWPT6y5AZpKII37X1XfmdnpH9W4T+1GV9EvID vA0qfhtuQOuIKwZ59Y+rTlH0zTglycAiMyov7s+3UCWvrd38CMVJlUd6VkpEeEtr 33zj07E20/BsYYGuhbRNWXPeSRpJVsVZ/p5/6LNG65FRqw8N1rv/n6HzIZHV7MUh vadjVxcY7XDs0r9aeFsb+mJd/RqEPeorBIjjAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUWDpaIsn6ytYYQwgmOl00SpbN32YwHwYDVR0jBBgwFoAU8CDq9tJLdO6lSoRP cCNNyiVaa8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNI LzhDRHE5dEpMZE82bFNvUlBjQ05OeWlWYWE4RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvOENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNILzhDRHE5dEpMZE82bFNvUlBj Q05OeWlWYWE4RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAF Km1BgPDA70A2qztG5tP2CXN7spvf/6VtVapxwb6CmsNcElmbCU5STxl/ctiZL453 uNJ9BH2MTu6hWfdKMNrPGQ/OR8zrfwOxUE+sExMijaoroc8d82/gh8iZ5zQ5UMP9 FhqhyylRkeHMR/aZ2YyMz0xRTV7fu/5B+9cRXA+cs2zdpfxOQdgolyFPtPaVn9Nf 5TT5IZa3d+A37ZAwGm+QECV1Pfg8DFpeT5HA5qhZf2K+OzCh6RWBejyVtdzcEByi P5p3P+ezrXMqVCes9+fnCDN12GjPGlY/pzKSKP6EDrqW2QDNDCliylnAVrDOkypn A0E0qn0ieMiCOalpym6f -----END CERTIFICATE-----Generated at Sat Oct 25 22:11:58 2025 by rpki-client