$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft File: AaUyYbIAH6frV3k-LlebcyL452o.mft (raw, json) Hash identifier: ISoQ/kZAPR1k4v1hFX53ElEUbZ1zayoVX9xg0HX1ha0= Subject key identifier: C7:01:BF:6C:77:DF:67:12:0A:BF:8D:99:F4:30:58:7B:AB:7F:7A:2D Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Certificate serial: 0D23 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft Manifest number: 0C83 Signing time: Sun 24 Nov 2024 07:25:23 +0000 Manifest this update: Sun 24 Nov 2024 07:25:23 +0000 Manifest next update: Tue 26 Nov 2024 07:25:23 +0000 Files and hashes: 1: 1bY3JtpMibm1TT65jFRqfHVebEk.roa (hash: fdK+nCVMFZgXl/6rFb0MpQpbnRvRQe9OwgsR6j7pqNw=) 2: 30Tx98IVQRawOaTDKDwzA4qmFhw.roa (hash: hVssyFotaBfe6MN7504Se5oExbDsqgL9zQO7yF4Qa3k=) 3: 6L3NsAMT96HD4dOz552pmJMd_Qw.roa (hash: 3Tb8XMHDPq9h9m6L273AidOz2F7v0lMERUVeHcH36tA=) 4: 7loQ2UGWNIGNCoSIZ8icwld4p_I.roa (hash: ivNj5nuZQhUupij2B4/jULf3TN7LfuasavbR1J2rtb8=) 5: 83rc0f0cGvX1HguRKfFBBeTCTi8.roa (hash: 4eTmRVDfkWuKJkcCxF3Fs7mBNqUNgS+9Agmn9Pf7Gss=) 6: 8ee4Mpg5jSY-613nmMFs804n32Y.roa (hash: shKqDrD6kM0iXscb0wGGmGWW1PSbLkSjJ9+/MzheiQQ=) 7: 9XfHTjXSwQkpn1mnHFc5GbB8Foc.roa (hash: mu30MPREg4bgF8QZJki7N6f8ZbjMw5GRkXLI0kcnMYo=) 8: AaUyYbIAH6frV3k-LlebcyL452o.crl (hash: dsbfTzV3kOZ7se28WtulSAzkoe1vzNG5DFYLRzNMAgo=) 9: D_3D6nEILQNHmp37IJZL1RiJChk.roa (hash: oU7l+A/MGSCndTFXtbDaUz9sNtc8bWyElvgkhyAPjR4=) 10: SsukmPPYalA4Rl0ngK8cc5Uh9hU.roa (hash: ZHcICfKV9lm9/MeivD9INNiPdKl3On72bnRqa8l2xZA=) 11: UGUxQSjEUOX0zX4tdal828s1sA0.roa (hash: fOI4uLBhW1RKRXnyZuuYY9bWIwgpCx4r4jLJ4Buc17Y=) 12: Ye-4DZYoNIh3ctEvedTHum1Vm9E.roa (hash: GiAyBkKbItNk4C2J342WCI9jUX6XCXOZl5/FkW0hcII=) 13: ZNgInzhkvmaBXOPUFzNULR62ZiY.roa (hash: KOI3Grq1S9cydc+G2AvjCluAFzKYnlWuKDObaCN+ooY=) 14: cGUhsYNA8vwOtxAALcRexlu3X3M.roa (hash: tbNqYeqT5kWPfezegm1QuQJdKDETRgqFIfhzxkc+/Iw=) 15: hqfyDisbcCYY-ieXomLokKivHCU.roa (hash: HSaHqvVxHaAGgN95JJ3fj44tzFkidXhe4uapXtftfgM=) 16: j-R6pt9Fdx7Wa_33O9sI58M_JJo.roa (hash: AeXpSoe0hoxi23XnZExWDcWDuzvKp8z3E3mcSt/o3NM=) 17: tflV6q0sI8Wgl06RPPDcwUEK7kY.roa (hash: 6fhLzowVSonVSKTRKCPIPyA1O0AO8OaJw5O+uq706Rg=) 18: vY6pC_Y0kIqeSKKg-DwXPECCM1Y.roa (hash: ptMo7HdChQP997g/77BemXMfJKQSP+tmbmTehxoKDiE=) 19: w_BDTeT-UNaAY5JyPQRhLC99tgc.roa (hash: 9YKSGx6KsvL9iRpFVkSMNhg7FpKdTsONqJl/D+/3Szc=) 20: wxFk3a3La5AET1UN7wiBYiPpb_o.roa (hash: Gos1SaoBdsOGdCOLNW9bsGHfhrLszBD4f81q/Tdrxow=) 21: ytYpztTa07bmV1huWncKqtyW8zQ.roa (hash: bBnQAsqv5C+hmCGMrFNifpObddIzjO9NDvaUulrhyos=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A Validity Not Before: Nov 24 07:25:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C701BF6C77DF67120ABF8D99F430587BAB7F7A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:99:08:bc:a5:93:d1:04:94:85:0d:43:66: cd:80:d9:ff:77:f9:9c:a2:6b:d8:7f:85:3c:41:66: 82:cd:12:d0:d9:2c:e5:da:0e:d6:c3:80:8c:63:69: 02:fd:03:fb:93:7b:ca:00:7e:68:d7:e2:20:4a:a5: c4:65:f4:78:66:4a:3e:70:f2:53:4b:71:63:45:c5: e8:43:7a:98:d5:29:13:46:87:cb:8d:66:fd:a3:1d: cb:a0:85:8d:36:21:ff:64:c9:f4:76:62:5b:39:4e: 6d:2d:b5:04:5b:98:b2:64:79:6a:e5:e8:ed:aa:0f: fb:73:aa:3c:92:3f:d4:47:4b:77:7b:69:d2:4b:61: 55:13:d6:4f:2b:3f:77:0c:cd:9e:17:59:56:bf:a6: b5:b9:e2:b2:54:65:6b:db:fe:cd:05:eb:33:e4:bf: 2a:e6:c2:2e:02:d1:b8:ff:9a:6e:10:c9:3c:e8:4c: 36:c0:1f:17:37:eb:1f:e5:df:33:42:4d:da:6c:91: d0:d6:90:b9:39:d7:90:0f:85:f3:1e:1d:b8:25:72: 25:6e:bd:c5:45:4a:2d:07:12:32:5d:d6:ea:24:02: 76:4c:d1:85:17:67:06:e3:2e:df:97:3f:98:6e:71: ba:0c:25:61:a6:dc:ec:2f:bd:65:93:c7:09:08:de: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:01:BF:6C:77:DF:67:12:0A:BF:8D:99:F4:30:58:7B:AB:7F:7A:2D X509v3 Authority Key Identifier: keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3a:e7:46:b7:44:88:b7:f1:6a:19:10:22:b8:52:ee:c6:a6: 29:ab:c5:be:96:ee:a4:44:8b:0d:2d:ab:93:c2:5a:e3:35:9c: 24:3e:f9:31:43:07:9f:a4:59:b7:c3:52:99:b7:af:4e:21:73: 0c:4b:c7:28:01:8a:08:9a:5b:56:e1:2a:74:be:f6:7c:5a:62: 7b:18:93:a7:a4:dc:5d:5a:c0:be:3e:74:c5:91:eb:c1:a4:ac: fd:79:1c:14:32:2f:34:29:b2:65:e7:76:a3:1d:9e:4b:01:f0: 38:14:88:ae:5a:78:19:1b:c6:b6:8b:5c:9f:d3:3c:24:a0:cc: cf:cb:14:d5:89:41:58:79:05:07:49:5d:2d:a7:8e:ea:68:0a: 1c:32:0b:f6:46:05:7c:81:43:34:43:b7:7a:67:73:a0:f0:cc: 07:33:db:06:5b:20:49:29:8b:f1:92:7d:93:b0:81:82:bc:b0: b5:fa:23:2c:8c:0e:3e:fd:f9:d6:0e:25:9a:fb:ce:49:42:98: cb:34:45:58:5f:ff:2e:a0:8b:16:32:b2:e2:bf:83:30:ee:97: 75:40:02:51:e5:aa:0a:f4:7f:ec:9a:ad:4c:36:3d:e3:0d:a8: 10:4f:2b:9d:2a:70:7a:dd:b8:e4:ab:be:8d:4a:7b:56:c4:d2: 94:7e:80:66 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yNDExMjQw NzI1MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3MDFCRjZDNzdERjY3 MTIwQUJGOEQ5OUY0MzA1ODdCQUI3RjdBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGX5kIvKWT0QSUhQ1DZs2A2f93+Zyia9h/hTxBZoLNEtDZLOXa DtbDgIxjaQL9A/uTe8oAfmjX4iBKpcRl9HhmSj5w8lNLcWNFxehDepjVKRNGh8uN Zv2jHcughY02If9kyfR2Yls5Tm0ttQRbmLJkeWrl6O2qD/tzqjySP9RHS3d7adJL YVUT1k8rP3cMzZ4XWVa/prW54rJUZWvb/s0F6zPkvyrmwi4C0bj/mm4QyTzoTDbA Hxc36x/l3zNCTdpskdDWkLk515APhfMeHbglciVuvcVFSi0HEjJd1uokAnZM0YUX ZwbjLt+XP5hucboMJWGm3OwvvWWTxwkI3tnxAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUxwG/bHffZxIKv42Z9DBYe6t/ei0wHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+ LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vQWFVeVliSUFINmZyVjNr LUxsZWJjeUw0NTJvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ACE650a3RIi38WoZECK4Uu7Gpimrxb6W7qREiw0tq5PCWuM1nCQ++TFDB5+kWbfD Upm3r04hcwxLxygBigiaW1bhKnS+9nxaYnsYk6ek3F1awL4+dMWR68GkrP15HBQy LzQpsmXndqMdnksB8DgUiK5aeBkbxraLXJ/TPCSgzM/LFNWJQVh5BQdJXS2njupo ChwyC/ZGBXyBQzRDt3pnc6DwzAcz2wZbIEkpi/GSfZOwgYK8sLX6IyyMDj79+dYO JZr7zklCmMs0RVhf/y6gixYysuK/gzDul3VAAlHlqgr0f+yarUw2PeMNqBBPK50q cHrduOSrvo1Ke1bE0pR+gGY= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org