$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft File: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft (raw, json) Hash identifier: 5NUFn0oXsoIKb2UL8wdv9HoV6T1XHQ3yqiTM+PNyRtw= Subject key identifier: 14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9 Authority key identifier: DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF Certificate issuer: /CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF Certificate serial: 0270 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft Manifest number: 026E Signing time: Sat 25 Oct 2025 16:26:29 +0000 Manifest this update: Sat 25 Oct 2025 16:26:29 +0000 Manifest next update: Sat 25 Oct 2025 22:26:29 +0000 Files and hashes: 1: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl (hash: /VlTGwVsc3VylxvbBwUWZclPU/UOZwHZmiY35dY1n+8=) 2: EOtjY12nXNnenB16AIWc3Jh3NF4.roa (hash: Dd6iulKgytlJlVAbqdWg8yiBukB823mXx4bredXWnlI=) 3: h3gM3umksJIYEAeAEiPCdJFIFto.roa (hash: P0RBcokTOeWzNU9SKVJvXJAAZk3Gv4yQBEr42Kf75Ew=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF Validity Not Before: Oct 25 16:26:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=140D9413D896A12C05A4532F32C66F65F10DB6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:73:ee:5a:a6:e3:54:27:2b:18:34:ac:07: 9a:f9:21:e7:2e:7f:37:1f:4a:b7:05:b9:a0:ef:f3: 85:f7:6d:92:2e:9a:e9:57:b8:9a:f1:86:ea:5d:82: 6d:48:90:71:57:0b:2c:2a:06:4a:8c:aa:df:bd:ae: 9e:9b:78:1b:f1:d0:4f:c1:3a:24:50:d6:19:ed:5b: 8d:0b:0c:18:fe:f2:1e:9e:49:a5:c8:ce:fe:b1:4e: 7e:98:f6:a9:3f:6b:f2:4d:ee:9e:16:85:48:28:c3: f8:6d:12:a4:7e:17:7d:33:2e:3f:0d:01:6f:4e:52: f7:67:8c:17:1c:46:29:e3:91:6b:14:86:88:64:42: 75:7b:a0:47:b7:c6:1e:1c:96:c2:d4:b4:41:f2:73: 5a:7f:45:cb:8b:18:1b:ac:c2:51:7f:56:85:d8:3d: b5:a6:dd:d6:94:47:6d:a3:36:c0:62:66:e8:67:27: b8:18:f6:c7:89:51:62:7f:53:af:70:5b:b9:97:ca: 41:e0:4b:c1:d6:2a:b2:f2:66:ed:0a:2a:de:de:32: 01:d9:b1:e0:a8:7a:27:5a:82:82:ac:1d:dd:99:d8: 68:09:58:61:ed:cb:cf:17:de:a6:fc:31:36:be:bf: cf:6f:2b:61:15:a7:cd:78:80:d6:76:26:c3:df:02: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9 X509v3 Authority Key Identifier: keyid:DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:70:e8:ef:16:2e:81:3c:4b:8c:f3:aa:2b:43:bb:51:fa:76: 7e:8d:ee:55:6e:81:12:df:c2:48:6e:13:b3:6d:d3:87:51:6b: cc:4f:6a:6f:d2:9b:a9:19:f6:ce:5e:84:52:9a:6b:cb:5c:29: 8d:6d:76:3e:6a:fa:69:a6:4b:d2:2a:70:7a:9d:42:01:1d:ff: 8c:7f:44:07:c0:76:36:26:bf:25:06:16:7c:e7:36:01:ce:dd: 72:d1:0a:93:42:a7:b8:1d:0c:47:f6:ed:76:fb:9a:16:6c:9a: 08:da:7e:64:8d:dd:b5:8f:3b:00:6d:6e:54:18:25:38:ba:7c: 28:0e:a2:2c:ef:61:98:c0:76:81:0a:6b:5a:6e:25:8d:5a:3e: 1a:ca:a7:9b:46:f7:90:05:6b:ea:6f:61:7e:af:81:6e:7e:60: 13:2f:be:8d:be:e4:d4:e0:02:9e:8c:a3:f8:bd:43:35:24:a6: d9:02:eb:e8:a5:d8:4c:75:88:2f:04:61:be:ec:c9:b7:06:d2: 69:76:cb:08:52:2c:1b:dc:ff:9e:01:15:28:6a:68:2f:b2:fa: c1:97:1d:f8:81:9b:48:c4:15:2b:a2:d8:4e:3d:51:9c:6c:6f: 48:12:71:b2:60:a7:be:e7:46:01:1a:17:fc:65:0f:8a:6c:9c: bd:2c:29:1a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRENE NDU2QTA5RDU0MTQwREJDNDJEMzJCMDlENkU3Nzc4QjU4QUFFRjAeFw0yNTEwMjUx NjI2MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE0MEQ5NDEzRDg5NkEx MkMwNUE0NTMyRjMyQzY2RjY1RjEwREI2QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU/3PuWqbjVCcrGDSsB5r5IecufzcfSrcFuaDv84X3bZIumulX uJrxhupdgm1IkHFXCywqBkqMqt+9rp6beBvx0E/BOiRQ1hntW40LDBj+8h6eSaXI zv6xTn6Y9qk/a/JN7p4WhUgow/htEqR+F30zLj8NAW9OUvdnjBccRinjkWsUhohk QnV7oEe3xh4clsLUtEHyc1p/RcuLGBuswlF/VoXYPbWm3daUR22jNsBiZuhnJ7gY 9seJUWJ/U69wW7mXykHgS8HWKrLyZu0KKt7eMgHZseCoeidagoKsHd2Z2GgJWGHt y88X3qb8MTa+v89vK2EVp814gNZ2JsPfAuNdAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUFA2UE9iWoSwFpFMvMsZvZfENtqkwHwYDVR0jBBgwFoAU3NRWoJ1UFA28QtMr Cdbnd4tYqu8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUlVJS0Uv M05SV29KMVVGQTI4UXRNckNkYm5kNHRZcXU4LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zTlJXb0oxVUZBMjhRdE1yQ2RibmQ0dFlxdTguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9SVUlLRS8zTlJXb0oxVUZBMjhRdE1yQ2Ri bmQ0dFlxdTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnDo 7xYugTxLjPOqK0O7Ufp2fo3uVW6BEt/CSG4Ts23Th1FrzE9qb9KbqRn2zl6EUppr y1wpjW12Pmr6aaZL0ipwep1CAR3/jH9EB8B2Nia/JQYWfOc2Ac7dctEKk0KnuB0M R/btdvuaFmyaCNp+ZI3dtY87AG1uVBglOLp8KA6iLO9hmMB2gQprWm4ljVo+Gsqn m0b3kAVr6m9hfq+Bbn5gEy++jb7k1OACnoyj+L1DNSSm2QLr6KXYTHWILwRhvuzJ twbSaXbLCFIsG9z/ngEVKGpoL7L6wZcd+IGbSMQVK6LYTj1RnGxvSBJxsmCnvudG ARoX/GUPimycvSwpGg== -----END CERTIFICATE-----Generated at Sat Oct 25 22:11:59 2025 by rpki-client