$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft File: P04GOIatNR_4IoBa-NVplEuN5Rc.mft (raw, json) Hash identifier: ue//mutt5O35Te+KjwdBmTUrGpUzrUKU9vsA2HlnblA= Subject key identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 02BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft Manifest number: 02B1 Signing time: Sun 26 Oct 2025 05:57:12 +0000 Manifest this update: Sun 26 Oct 2025 05:57:12 +0000 Manifest next update: Tue 28 Oct 2025 05:57:12 +0000 Files and hashes: 1: 7GK80XOyaI6ZZ6Gx8J2mpgUlIew.roa (hash: LiH4AmuXgxqphNLRHW25tXH8VQ+KiIAFd6QEKzGfsV4=) 2: JsAYgxSc8wz45s57f1ODWua2gcM.roa (hash: tRVPlTbZrwBang2sPRfphixHfY6mm7uudt97WhfWs7M=) 3: P04GOIatNR_4IoBa-NVplEuN5Rc.crl (hash: JUVEwfzVU+MRjTa1t/+1HF/VR5yGmyz2MxSHMu6z9Z4=) 4: pzJy9coSmEodcw0_CUtKiYpWAAY.roa (hash: gAT9Tx4aDFmLf9e3m2nL9sLbGWrhkJhczZyYdsaEHeo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 06:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: Oct 26 05:57:12 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DDE10A410D30FDFE36576E1F8CA356BD6923E1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:93:d0:10:8a:73:44:e5:2d:d9:04:d8:ee: f5:2c:b7:28:7d:1a:3b:13:d4:11:6c:d0:32:40:48: c7:14:56:f8:4e:c6:27:9c:6f:70:33:1c:52:69:df: 65:b6:7c:f8:9c:22:c4:ca:56:16:d5:c3:76:89:ec: b7:04:39:0e:93:44:51:00:b9:8b:81:bf:be:6d:2b: 81:03:dc:99:35:99:85:c7:62:06:01:d2:3f:81:76: 0c:c3:fb:f0:c2:9f:f6:a2:0d:13:b3:a6:d9:8a:56: cb:45:6e:c1:8f:95:64:1d:ac:bb:be:dd:55:40:04: 95:7d:74:b3:76:cc:73:18:dc:06:e7:8e:dd:f1:bc: 25:fc:eb:73:85:bf:0b:80:7a:49:24:d3:a1:d8:37: ad:56:77:d0:bf:5f:1c:cb:f1:3b:b9:36:31:b6:d5: b8:0e:c1:79:ac:4b:49:53:5f:76:33:65:33:e1:9c: f5:89:0d:76:2b:24:f4:72:15:93:3c:6b:f5:56:2c: 34:05:93:d5:d4:e8:bc:57:b6:51:fe:3a:02:87:c0: 07:7b:ce:9b:17:36:30:46:57:95:22:13:ff:90:2b: 75:1e:f1:d9:3c:60:4c:f2:12:00:34:71:5e:17:cd: a6:e9:74:6f:85:84:c1:6d:35:2e:05:73:de:82:2e: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:33:ae:77:d2:d7:c2:50:cd:fd:5f:84:6b:a6:a4:eb:54:2a: 7a:6a:db:02:5c:00:0d:27:e0:84:a9:67:66:1a:7c:f8:19:0c: e9:d9:e8:1c:dd:4b:e2:c6:e0:0b:a6:d0:3b:ca:d4:df:25:28: 5a:14:ab:df:11:75:e0:bd:0d:f9:48:bf:d3:b3:39:33:35:84: 60:5d:d1:70:a5:4b:6f:4d:d3:11:77:60:e6:8e:74:4d:c1:74: 59:9b:8f:27:fd:3a:f7:b2:67:f6:24:4a:9c:24:87:46:b5:34: 23:47:b9:76:f9:b4:2a:68:9e:e6:eb:61:a0:a0:55:a1:c5:c2: c8:fd:0f:6e:47:7a:7b:ce:45:8a:86:7b:55:77:4d:02:c1:b7: 87:b2:14:31:23:df:7c:90:39:c5:1a:ae:2d:e8:10:e6:a8:43: 51:78:44:4b:66:5f:44:58:d1:aa:b9:11:68:96:88:e4:e6:6d: 1d:2f:b8:1c:d0:79:ec:63:87:6a:5a:ba:3e:e7:1d:04:ed:1f: e5:64:b9:da:e5:42:c7:9f:01:6a:13:b4:fc:ba:a3:80:0d:07: e5:e6:9f:aa:05:79:fd:5b:ce:7a:2c:7e:07:2d:9e:30:a3:6a: 4a:76:1e:fe:3a:63:ab:46:c2:3b:00:1f:eb:27:8f:de:79:33: b6:68:5e:ed -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICArswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNTEwMjYw NTU3MTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERERTEwQTQxMEQzMEZE RkUzNjU3NkUxRjhDQTM1NkJENjkyM0UxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2fpPQEIpzROUt2QTY7vUstyh9GjsT1BFs0DJASMcUVvhOxiec b3AzHFJp32W2fPicIsTKVhbVw3aJ7LcEOQ6TRFEAuYuBv75tK4ED3Jk1mYXHYgYB 0j+BdgzD+/DCn/aiDROzptmKVstFbsGPlWQdrLu+3VVABJV9dLN2zHMY3Abnjt3x vCX863OFvwuAekkk06HYN61Wd9C/XxzL8Tu5NjG21bgOwXmsS0lTX3YzZTPhnPWJ DXYrJPRyFZM8a/VWLDQFk9XU6LxXtlH+OgKHwAd7zpsXNjBGV5UiE/+QK3Ue8dk8 YEzyEgA0cV4XzabpdG+FhMFtNS4Fc96CLguRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU3eEKQQ0w/f42V24fjKNWvWkj4fMwHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvUDA0R09JYXROUl80SW9C YS1OVnBsRXVONVJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AKQzrnfS18JQzf1fhGumpOtUKnpq2wJcAA0n4ISpZ2YafPgZDOnZ6BzdS+LG4Aum 0DvK1N8lKFoUq98RdeC9DflIv9OzOTM1hGBd0XClS29N0xF3YOaOdE3BdFmbjyf9 OveyZ/YkSpwkh0a1NCNHuXb5tCponubrYaCgVaHFwsj9D25HenvORYqGe1V3TQLB t4eyFDEj33yQOcUari3oEOaoQ1F4REtmX0RY0aq5EWiWiOTmbR0vuBzQeexjh2pa uj7nHQTtH+VkudrlQsefAWoTtPy6o4ANB+Xmn6oFef1bznosfgctnjCjakp2Hv46 Y6tGwjsAH+snj955M7ZoXu0= -----END CERTIFICATE-----Generated at Mon Oct 27 05:23:24 2025 by rpki-client