$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft File: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft (raw, json) Hash identifier: Pljcwc+lJe9M33CSSW2U5m+d1MDRgK36hTv7XTvsdYo= Subject key identifier: 14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9 Authority key identifier: DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF Certificate issuer: /CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF Certificate serial: 18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft Manifest number: 17 Signing time: Fri 04 Jul 2025 20:02:04 +0000 Manifest this update: Fri 04 Jul 2025 20:02:04 +0000 Manifest next update: Sat 05 Jul 2025 02:02:04 +0000 Files and hashes: 1: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl (hash: v+CEtdntXXuWCA5ArFkoa+UcZQmjLvtdV6pkiDLQ1JM=) 2: h3gM3umksJIYEAeAEiPCdJFIFto.roa (hash: P0RBcokTOeWzNU9SKVJvXJAAZk3Gv4yQBEr42Kf75Ew=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 02:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF Validity Not Before: Jul 4 20:02:04 2025 GMT Not After : Jun 30 15:30:18 2026 GMT Subject: CN=140D9413D896A12C05A4532F32C66F65F10DB6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ff:73:ee:5a:a6:e3:54:27:2b:18:34:ac:07: 9a:f9:21:e7:2e:7f:37:1f:4a:b7:05:b9:a0:ef:f3: 85:f7:6d:92:2e:9a:e9:57:b8:9a:f1:86:ea:5d:82: 6d:48:90:71:57:0b:2c:2a:06:4a:8c:aa:df:bd:ae: 9e:9b:78:1b:f1:d0:4f:c1:3a:24:50:d6:19:ed:5b: 8d:0b:0c:18:fe:f2:1e:9e:49:a5:c8:ce:fe:b1:4e: 7e:98:f6:a9:3f:6b:f2:4d:ee:9e:16:85:48:28:c3: f8:6d:12:a4:7e:17:7d:33:2e:3f:0d:01:6f:4e:52: f7:67:8c:17:1c:46:29:e3:91:6b:14:86:88:64:42: 75:7b:a0:47:b7:c6:1e:1c:96:c2:d4:b4:41:f2:73: 5a:7f:45:cb:8b:18:1b:ac:c2:51:7f:56:85:d8:3d: b5:a6:dd:d6:94:47:6d:a3:36:c0:62:66:e8:67:27: b8:18:f6:c7:89:51:62:7f:53:af:70:5b:b9:97:ca: 41:e0:4b:c1:d6:2a:b2:f2:66:ed:0a:2a:de:de:32: 01:d9:b1:e0:a8:7a:27:5a:82:82:ac:1d:dd:99:d8: 68:09:58:61:ed:cb:cf:17:de:a6:fc:31:36:be:bf: cf:6f:2b:61:15:a7:cd:78:80:d6:76:26:c3:df:02: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9 X509v3 Authority Key Identifier: keyid:DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:12:01:31:34:b4:a9:f6:05:8d:70:bc:0e:73:b7:7e:79:af: fb:db:22:a8:c4:28:68:64:47:22:3f:5a:07:e6:43:3f:8f:e2: 50:7e:fa:c4:ed:10:7f:a1:92:cf:48:53:66:5e:8e:02:d5:7c: 61:56:85:7d:35:5c:c9:1a:33:6b:db:9c:ef:1f:43:d9:46:76: b8:72:c5:49:04:7e:37:ce:9a:9e:e0:ff:ac:5e:01:2d:70:6d: bb:dc:93:d8:a5:95:f4:24:ca:b8:79:51:29:fb:0a:0f:01:0c: 29:a6:d7:7f:8a:91:2a:a9:37:33:24:b3:b6:4d:01:db:33:52: c9:96:b8:ca:ff:6a:ee:f1:85:25:67:ad:a0:4d:16:76:40:65: fb:06:c9:83:fb:18:75:19:bb:cd:dd:ad:d3:b6:d5:e6:9b:56: 10:6f:36:67:b1:25:48:ec:f0:39:5c:83:6e:03:85:8d:64:48: 52:cb:f4:a8:e5:cf:34:d6:51:17:a8:5f:52:b3:e7:8c:2d:81: 3f:b8:eb:49:bd:82:79:ae:be:eb:02:78:4e:9f:f8:12:02:a6: ee:9e:a5:8c:15:6c:db:ef:06:0d:b7:6d:ea:7b:9d:dc:30:4f: 57:9d:cc:f9:ba:a7:06:9d:12:46:e3:20:8e:22:d9:cf:00:5d: 21:12:66:af -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQ0Q0 NTZBMDlENTQxNDBEQkM0MkQzMkIwOUQ2RTc3NzhCNThBQUVGMB4XDTI1MDcwNDIw MDIwNFoXDTI2MDYzMDE1MzAxOFowMzExMC8GA1UEAxMoMTQwRDk0MTNEODk2QTEy QzA1QTQ1MzJGMzJDNjZGNjVGMTBEQjZBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANT/c+5apuNUJysYNKwHmvkh5y5/Nx9KtwW5oO/zhfdtki6a6Ve4 mvGG6l2CbUiQcVcLLCoGSoyq372unpt4G/HQT8E6JFDWGe1bjQsMGP7yHp5JpcjO /rFOfpj2qT9r8k3unhaFSCjD+G0SpH4XfTMuPw0Bb05S92eMFxxGKeORaxSGiGRC dXugR7fGHhyWwtS0QfJzWn9Fy4sYG6zCUX9Whdg9tabd1pRHbaM2wGJm6GcnuBj2 x4lRYn9Tr3BbuZfKQeBLwdYqsvJm7Qoq3t4yAdmx4Kh6J1qCgqwd3ZnYaAlYYe3L zxfepvwxNr6/z28rYRWnzXiA1nYmw98C410CAwEAAaOCAgUwggIBMB0GA1UdDgQW BBQUDZQT2JahLAWkUy8yxm9l8Q22qTAfBgNVHSMEGDAWgBTc1FagnVQUDbxC0ysJ 1ud3i1iq7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9SVUlLRS8z TlJXb0oxVUZBMjhRdE1yQ2RibmQ0dFlxdTguY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzNOUldvSjFVRkEyOFF0TXJDZGJuZDR0WXF1OC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1JVSUtFLzNOUldvSjFVRkEyOFF0TXJDZGJu ZDR0WXF1OC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcB BwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmEgEx NLSp9gWNcLwOc7d+ea/72yKoxChoZEciP1oH5kM/j+JQfvrE7RB/oZLPSFNmXo4C 1XxhVoV9NVzJGjNr25zvH0PZRna4csVJBH43zpqe4P+sXgEtcG273JPYpZX0JMq4 eVEp+woPAQwpptd/ipEqqTczJLO2TQHbM1LJlrjK/2ru8YUlZ62gTRZ2QGX7BsmD +xh1GbvN3a3TttXmm1YQbzZnsSVI7PA5XINuA4WNZEhSy/So5c801lEXqF9Ss+eM LYE/uOtJvYJ5rr7rAnhOn/gSAqbunqWMFWzb7wYNt23qe53cME9Xncz5uqcGnRJG 4yCOItnPAF0hEmav -----END CERTIFICATE-----Generated at Sat Jul 5 00:30:14 2025 by rpki-client