$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft File: rCox8PS9dOdD4i_qMwTVw1CCB7w.mft (raw, json) Hash identifier: +bBFnxao+HQQfUfIbdlNqlVV1jvgam8fMCbxPQn3HvQ= Subject key identifier: AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C Authority key identifier: AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC Certificate issuer: /CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC Certificate serial: 013B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft Manifest number: 0139 Signing time: Mon 14 Apr 2025 21:37:43 +0000 Manifest this update: Mon 14 Apr 2025 21:37:43 +0000 Manifest next update: Wed 16 Apr 2025 21:37:43 +0000 Files and hashes: 1: rCox8PS9dOdD4i_qMwTVw1CCB7w.crl (hash: VVC9JkxtEa8o5yLsZJ15PF+IW9o148LDzsBY1d5GElM=) 2: rzHCWHG0SKkTfaWXYVMMbC96TsQ.roa (hash: ePWVI1lN1bSC+uP+AhM9XKjKitzl5przDVKy65TDDEA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC Validity Not Before: Apr 14 21:37:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AFA363A84E8BB55D392D2C36ECE11A8D43CB908C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:f3:8f:ef:74:cd:ae:8a:0a:ad:07:a5:fa: 2c:23:7f:20:22:63:2a:5c:8f:ca:c5:6f:ca:dd:ab: 15:aa:7a:70:28:b2:49:27:06:d8:45:48:c3:99:c5: 7e:7e:2f:8b:c7:06:4d:95:ce:10:8e:90:15:18:f2: c6:be:94:f8:6a:56:aa:c6:3f:d5:87:de:43:3e:e1: 89:b2:c7:4d:d2:4f:c0:f7:e0:2b:18:1b:d2:f9:bd: 27:41:7d:f7:1b:48:55:cb:2e:44:bb:3e:c5:cd:3a: 0e:e0:78:db:a9:9f:dc:1d:f4:48:32:ba:cb:c9:9c: c3:66:ab:c3:71:00:89:25:e5:3e:5c:9d:e8:3c:14: 85:25:46:1c:22:30:e8:b1:45:94:5d:49:b7:a4:e2: d0:2f:77:82:eb:d4:2a:2b:92:e5:04:2c:f4:83:9b: ba:48:53:5f:48:e7:2e:33:11:41:e5:91:3c:04:84: f1:96:8c:23:da:74:db:4d:dc:e0:9a:9b:33:04:95: 76:58:be:6f:23:69:05:58:63:c1:a0:6f:eb:a5:04: 8c:3d:a9:4c:5e:84:f9:6d:4f:56:50:83:7b:93:86: 2e:ee:2b:5d:a4:64:97:58:bc:43:6d:31:ee:6d:77: 40:0e:62:6b:0a:d5:ef:f4:4d:ba:bc:13:f3:93:b8: cf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C X509v3 Authority Key Identifier: keyid:AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:4a:21:95:10:38:8e:74:37:d8:a9:99:ba:0b:8c:20:d6: 01:c5:a7:68:ee:89:da:d8:5a:b2:9a:3e:56:b2:a1:57:2a:89: a2:ad:95:d3:31:72:9c:17:13:41:1e:cb:65:c9:ab:72:60:f6: ab:c1:1a:39:48:81:a1:08:e5:26:37:05:5e:00:84:85:7e:b8: d1:3a:a6:57:f0:30:87:d4:24:cb:a8:f7:30:fb:a7:5b:e3:93: 13:6d:ce:4f:ae:15:a0:50:c4:8d:7c:4e:07:e9:13:3d:f7:89: a3:88:aa:53:2a:9d:4b:3d:36:32:4c:57:17:1b:46:5c:17:db: a8:1e:44:0d:f4:61:f3:84:eb:6d:20:be:23:74:82:35:f8:92: 12:75:e5:fb:73:43:8b:8b:49:e9:6e:7a:3d:f4:ea:58:90:6e: 00:6f:8b:90:ce:8f:cd:c7:3b:57:c2:c6:22:2e:e6:df:c3:64: a0:c4:f8:cd:c7:a4:9a:f3:36:12:5d:a5:74:80:63:47:f6:ca: b3:0e:4b:2f:29:4b:01:a7:df:73:4a:4b:e1:c1:05:54:29:7e: 2e:c9:29:1c:e5:3d:21:a5:74:1c:58:9c:33:a4:4a:29:63:02: 24:be:2d:29:42:31:9c:d0:44:14:ad:d9:cb:4a:5f:06:ae:6a: c8:66:b5:c2 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICATswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUMy QTMxRjBGNEJENzRFNzQzRTIyRkVBMzMwNEQ1QzM1MDgyMDdCQzAeFw0yNTA0MTQy MTM3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFGQTM2M0E4NEU4QkI1 NUQzOTJEMkMzNkVDRTExQThENDNDQjkwOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzHfOP73TNrooKrQel+iwjfyAiYypcj8rFb8rdqxWqenAoskkn BthFSMOZxX5+L4vHBk2VzhCOkBUY8sa+lPhqVqrGP9WH3kM+4Ymyx03ST8D34CsY G9L5vSdBffcbSFXLLkS7PsXNOg7geNupn9wd9EgyusvJnMNmq8NxAIkl5T5cneg8 FIUlRhwiMOixRZRdSbek4tAvd4Lr1CorkuUELPSDm7pIU19I5y4zEUHlkTwEhPGW jCPadNtN3OCamzMElXZYvm8jaQVYY8Ggb+ulBIw9qUxehPltT1ZQg3uThi7uK12k ZJdYvENtMe5td0AOYmsK1e/0Tbq8E/OTuM9VAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUr6NjqE6LtV05LSw27OEajUPLkIwwHwYDVR0jBBgwFoAUrCox8PS9dOdD4i/q MwTVw1CCB7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FFTFcv ckNveDhQUzlkT2RENGlfcU13VFZ3MUNDQjd3LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9yQ294OFBTOWRPZEQ0aV9xTXdUVncxQ0NCN3cuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQUVMVy9yQ294OFBTOWRPZEQ0aV9xTXdU VncxQ0NCN3cubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6tK IZUQOI50N9ipmboLjCDWAcWnaO6J2thaspo+VrKhVyqJoq2V0zFynBcTQR7LZcmr cmD2q8EaOUiBoQjlJjcFXgCEhX640TqmV/Awh9Qky6j3MPunW+OTE23OT64VoFDE jXxOB+kTPfeJo4iqUyqdSz02MkxXFxtGXBfbqB5EDfRh84TrbSC+I3SCNfiSEnXl +3NDi4tJ6W56PfTqWJBuAG+LkM6Pzcc7V8LGIi7m38NkoMT4zcekmvM2El2ldIBj R/bKsw5LLylLAaffc0pL4cEFVCl+LskpHOU9IaV0HFicM6RKKWMCJL4tKUIxnNBE FK3Zy0pfBq5qyGa1wg== -----END CERTIFICATE-----Generated at Wed Apr 16 08:38:51 2025 by rpki-client