$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft File: P04GOIatNR_4IoBa-NVplEuN5Rc.mft (raw, json) Hash identifier: wX8fmB4R0oLHVQrJ5O/EjkeoiVcE+z7nxWaWYcfd9+g= Subject key identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 016A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft Manifest number: 0165 Signing time: Thu 21 Nov 2024 18:53:58 +0000 Manifest this update: Thu 21 Nov 2024 18:53:58 +0000 Manifest next update: Sat 23 Nov 2024 18:53:58 +0000 Files and hashes: 1: P04GOIatNR_4IoBa-NVplEuN5Rc.crl (hash: G+8Fa4enpzbuUkIkgqyvYhliXi1fvVz9Oqn12UYxLvg=) 2: Ss00zURaX6Bg-GRCM3F6DcY8iI0.roa (hash: VH1aYsw/qkvTYW/9/fOKO0gu99ZD3sYtffcaTPFhJ0A=) 3: tueEFUJTOsBXyfZtmd0U103vDg4.roa (hash: jO5qlWk6cSVqUBpOTWmIks2TpIBcJ+/2qx0h7nvMW8I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: Nov 21 18:53:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DDE10A410D30FDFE36576E1F8CA356BD6923E1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:93:d0:10:8a:73:44:e5:2d:d9:04:d8:ee: f5:2c:b7:28:7d:1a:3b:13:d4:11:6c:d0:32:40:48: c7:14:56:f8:4e:c6:27:9c:6f:70:33:1c:52:69:df: 65:b6:7c:f8:9c:22:c4:ca:56:16:d5:c3:76:89:ec: b7:04:39:0e:93:44:51:00:b9:8b:81:bf:be:6d:2b: 81:03:dc:99:35:99:85:c7:62:06:01:d2:3f:81:76: 0c:c3:fb:f0:c2:9f:f6:a2:0d:13:b3:a6:d9:8a:56: cb:45:6e:c1:8f:95:64:1d:ac:bb:be:dd:55:40:04: 95:7d:74:b3:76:cc:73:18:dc:06:e7:8e:dd:f1:bc: 25:fc:eb:73:85:bf:0b:80:7a:49:24:d3:a1:d8:37: ad:56:77:d0:bf:5f:1c:cb:f1:3b:b9:36:31:b6:d5: b8:0e:c1:79:ac:4b:49:53:5f:76:33:65:33:e1:9c: f5:89:0d:76:2b:24:f4:72:15:93:3c:6b:f5:56:2c: 34:05:93:d5:d4:e8:bc:57:b6:51:fe:3a:02:87:c0: 07:7b:ce:9b:17:36:30:46:57:95:22:13:ff:90:2b: 75:1e:f1:d9:3c:60:4c:f2:12:00:34:71:5e:17:cd: a6:e9:74:6f:85:84:c1:6d:35:2e:05:73:de:82:2e: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:7d:70:10:10:e6:ab:02:14:ed:4b:ff:14:ad:89:e5:d2:c5: 76:43:a7:64:71:06:10:95:a0:bc:ea:7d:46:0d:6c:ba:92:d1: 55:28:a3:e1:f7:9b:ff:d4:a7:76:15:e8:66:7f:ea:6f:d0:33: 92:9b:13:db:3b:52:df:8a:ac:40:41:25:0f:bd:43:09:d0:d2: 7a:15:12:46:c6:fc:f0:a5:83:01:fd:6c:4a:ff:e7:33:80:69: 9a:e6:88:f0:46:11:d8:1b:20:58:29:c7:e1:43:23:83:65:95: 21:90:a2:49:84:77:92:68:a9:35:da:4a:d7:9c:9a:c6:75:8a: 42:42:e3:78:8b:5d:47:b7:24:d5:18:ec:0c:75:4c:43:5b:58: 5f:7c:b9:2a:75:26:ec:a4:2b:3f:62:9b:e6:63:89:8a:ad:7e: 07:74:51:97:61:a3:db:37:42:8b:65:dc:5b:a0:30:80:ea:b1: 46:c7:15:2d:70:36:43:d9:b4:ce:31:83:89:9a:e2:1b:7e:66: 0a:47:9e:5e:2b:2b:bf:e0:36:7b:89:6b:ba:55:2f:ba:ef:8c: 35:db:e2:0e:5d:47:f5:a7:c2:6b:77:35:af:5a:b7:45:64:a8: ea:7e:74:a1:38:0c:51:d3:31:bb:fa:2f:97:75:a1:15:84:8d: 05:d2:c8:b3 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNDExMjEx ODUzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERERTEwQTQxMEQzMEZE RkUzNjU3NkUxRjhDQTM1NkJENjkyM0UxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2fpPQEIpzROUt2QTY7vUstyh9GjsT1BFs0DJASMcUVvhOxiec b3AzHFJp32W2fPicIsTKVhbVw3aJ7LcEOQ6TRFEAuYuBv75tK4ED3Jk1mYXHYgYB 0j+BdgzD+/DCn/aiDROzptmKVstFbsGPlWQdrLu+3VVABJV9dLN2zHMY3Abnjt3x vCX863OFvwuAekkk06HYN61Wd9C/XxzL8Tu5NjG21bgOwXmsS0lTX3YzZTPhnPWJ DXYrJPRyFZM8a/VWLDQFk9XU6LxXtlH+OgKHwAd7zpsXNjBGV5UiE/+QK3Ue8dk8 YEzyEgA0cV4XzabpdG+FhMFtNS4Fc96CLguRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU3eEKQQ0w/f42V24fjKNWvWkj4fMwHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvUDA0R09JYXROUl80SW9C YS1OVnBsRXVONVJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AGJ9cBAQ5qsCFO1L/xStieXSxXZDp2RxBhCVoLzqfUYNbLqS0VUoo+H3m//Up3YV 6GZ/6m/QM5KbE9s7Ut+KrEBBJQ+9QwnQ0noVEkbG/PClgwH9bEr/5zOAaZrmiPBG EdgbIFgpx+FDI4NllSGQokmEd5JoqTXaStecmsZ1ikJC43iLXUe3JNUY7Ax1TENb WF98uSp1JuykKz9im+ZjiYqtfgd0UZdho9s3Qotl3FugMIDqsUbHFS1wNkPZtM4x g4ma4ht+ZgpHnl4rK7/gNnuJa7pVL7rvjDXb4g5dR/Wnwmt3Na9at0VkqOp+dKE4 DFHTMbv6L5d1oRWEjQXSyLM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org