$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft File: rCox8PS9dOdD4i_qMwTVw1CCB7w.mft (raw, json) Hash identifier: 60ODuj3AvRwi1GIMQ8Y9LjEcA8kwpA/NKgAa5ReYZCM= Subject key identifier: AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C Authority key identifier: AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC Certificate issuer: /CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC Certificate serial: 44 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft Manifest number: 43 Signing time: Mon 16 Sep 2024 02:50:22 +0000 Manifest this update: Mon 16 Sep 2024 02:50:21 +0000 Manifest next update: Wed 18 Sep 2024 02:50:21 +0000 Files and hashes: 1: ZTqOcEILRqvwIJ9sAYqPaYjOkJA.roa (hash: cu9KPVw++Wb+F8T0O6bS/1Nal014D1P56sN7MGNOV9o=) 2: rCox8PS9dOdD4i_qMwTVw1CCB7w.crl (hash: W3sK2ogOJyeF+BBkM2eWSdo+S1Y3hnTFihZ8YdnEnjs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Sep 2024 19:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC Validity Not Before: Sep 16 02:50:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AFA363A84E8BB55D392D2C36ECE11A8D43CB908C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:f3:8f:ef:74:cd:ae:8a:0a:ad:07:a5:fa: 2c:23:7f:20:22:63:2a:5c:8f:ca:c5:6f:ca:dd:ab: 15:aa:7a:70:28:b2:49:27:06:d8:45:48:c3:99:c5: 7e:7e:2f:8b:c7:06:4d:95:ce:10:8e:90:15:18:f2: c6:be:94:f8:6a:56:aa:c6:3f:d5:87:de:43:3e:e1: 89:b2:c7:4d:d2:4f:c0:f7:e0:2b:18:1b:d2:f9:bd: 27:41:7d:f7:1b:48:55:cb:2e:44:bb:3e:c5:cd:3a: 0e:e0:78:db:a9:9f:dc:1d:f4:48:32:ba:cb:c9:9c: c3:66:ab:c3:71:00:89:25:e5:3e:5c:9d:e8:3c:14: 85:25:46:1c:22:30:e8:b1:45:94:5d:49:b7:a4:e2: d0:2f:77:82:eb:d4:2a:2b:92:e5:04:2c:f4:83:9b: ba:48:53:5f:48:e7:2e:33:11:41:e5:91:3c:04:84: f1:96:8c:23:da:74:db:4d:dc:e0:9a:9b:33:04:95: 76:58:be:6f:23:69:05:58:63:c1:a0:6f:eb:a5:04: 8c:3d:a9:4c:5e:84:f9:6d:4f:56:50:83:7b:93:86: 2e:ee:2b:5d:a4:64:97:58:bc:43:6d:31:ee:6d:77: 40:0e:62:6b:0a:d5:ef:f4:4d:ba:bc:13:f3:93:b8: cf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C X509v3 Authority Key Identifier: keyid:AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:77:47:df:e8:e4:0e:d1:8f:c6:60:dd:1a:6d:7d:37:1c:eb: 01:f8:f2:33:37:50:ed:a3:42:73:c6:40:8f:0d:9e:68:0b:95: 92:e4:b8:f3:21:90:a8:24:e7:82:d9:f7:bc:31:4a:fd:a2:05: 79:b5:d6:3e:dc:67:14:7d:44:a8:c6:c4:be:cd:b7:09:43:0b: 35:54:a3:02:6d:d0:ec:88:b0:21:5a:bf:c2:cb:c8:15:75:6b: a4:3a:4a:45:46:e9:0b:c7:81:15:07:8e:17:86:aa:12:a6:88: 8e:4c:23:d9:f1:67:d0:bb:fd:dc:03:f0:4c:21:87:79:71:ea: 34:76:73:a8:53:bf:5c:21:6d:4f:6d:5e:99:b2:89:e4:2f:6b: ed:08:7e:16:9a:0f:cc:67:db:df:2b:e3:ed:c1:cc:96:6a:36: 27:88:b2:54:91:37:f3:b0:d6:12:06:17:57:ec:eb:4a:50:a5: db:3f:31:da:73:48:43:ca:4b:04:d0:1d:2e:6e:82:94:cb:49: 10:04:38:bd:f4:bc:61:f3:4b:ac:9c:6e:e1:1f:b2:46:0b:25: 4e:89:e4:3e:0c:96:f0:74:29:2f:eb:6a:a4:ef:6a:af:5c:f2: 07:94:c1:a0:3f:c5:e5:c3:7f:e4:44:4a:f4:e0:4c:74:e4:f3: a6:82:37:87 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQzJB MzFGMEY0QkQ3NEU3NDNFMjJGRUEzMzA0RDVDMzUwODIwN0JDMB4XDTI0MDkxNjAy NTAyMVoXDTI1MDgyNjAxNTcwM1owMzExMC8GA1UEAxMoQUZBMzYzQTg0RThCQjU1 RDM5MkQyQzM2RUNFMTFBOEQ0M0NCOTA4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALMd84/vdM2uigqtB6X6LCN/ICJjKlyPysVvyt2rFap6cCiySScG 2EVIw5nFfn4vi8cGTZXOEI6QFRjyxr6U+GpWqsY/1YfeQz7hibLHTdJPwPfgKxgb 0vm9J0F99xtIVcsuRLs+xc06DuB426mf3B30SDK6y8mcw2arw3EAiSXlPlyd6DwU hSVGHCIw6LFFlF1Jt6Ti0C93guvUKiuS5QQs9IObukhTX0jnLjMRQeWRPASE8ZaM I9p0203c4JqbMwSVdli+byNpBVhjwaBv66UEjD2pTF6E+W1PVlCDe5OGLu4rXaRk l1i8Q20x7m13QA5iawrV7/RNurwT85O4z1UCAwEAAaOCAgUwggIBMB0GA1UdDgQW BBSvo2OoTou1XTktLDbs4RqNQ8uQjDAfBgNVHSMEGDAWgBSsKjHw9L1050PiL+oz BNXDUIIHvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQUVMVy9y Q294OFBTOWRPZEQ0aV9xTXdUVncxQ0NCN3cuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3JDb3g4UFM5ZE9kRDRpX3FNd1RWdzFDQ0I3dy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1NBRUxXL3JDb3g4UFM5ZE9kRDRpX3FNd1RW dzFDQ0I3dy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcB BwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMd0ff 6OQO0Y/GYN0abX03HOsB+PIzN1Dto0JzxkCPDZ5oC5WS5LjzIZCoJOeC2fe8MUr9 ogV5tdY+3GcUfUSoxsS+zbcJQws1VKMCbdDsiLAhWr/Cy8gVdWukOkpFRukLx4EV B44XhqoSpoiOTCPZ8WfQu/3cA/BMIYd5ceo0dnOoU79cIW1PbV6ZsonkL2vtCH4W mg/MZ9vfK+PtwcyWajYniLJUkTfzsNYSBhdX7OtKUKXbPzHac0hDyksE0B0uboKU y0kQBDi99Lxh80usnG7hH7JGCyVOieQ+DJbwdCkv62qk72qvXPIHlMGgP8Xlw3/k REr04Ex05POmgjeH -----END CERTIFICATE-----Generated at Mon Sep 16 16:37:06 2024 by rpki-client on console-fra.rpki-client.org