$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft File: P04GOIatNR_4IoBa-NVplEuN5Rc.mft (raw, json) Hash identifier: Q69L8n4+OSEPmr1lRjoMWce6E0Ymd7DWbBA3uKqAjD0= Subject key identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 029A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft Manifest number: 0291 Signing time: Tue 09 Sep 2025 09:19:49 +0000 Manifest this update: Tue 09 Sep 2025 09:19:49 +0000 Manifest next update: Thu 11 Sep 2025 09:19:49 +0000 Files and hashes: 1: JsAYgxSc8wz45s57f1ODWua2gcM.roa (hash: tRVPlTbZrwBang2sPRfphixHfY6mm7uudt97WhfWs7M=) 2: P04GOIatNR_4IoBa-NVplEuN5Rc.crl (hash: 4TgKXm4hVXxZaQfJmDlhO1Wxa3a/sWSz/JTTk3PNTHw=) 3: pzJy9coSmEodcw0_CUtKiYpWAAY.roa (hash: gAT9Tx4aDFmLf9e3m2nL9sLbGWrhkJhczZyYdsaEHeo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: Sep 9 09:19:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DDE10A410D30FDFE36576E1F8CA356BD6923E1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:93:d0:10:8a:73:44:e5:2d:d9:04:d8:ee: f5:2c:b7:28:7d:1a:3b:13:d4:11:6c:d0:32:40:48: c7:14:56:f8:4e:c6:27:9c:6f:70:33:1c:52:69:df: 65:b6:7c:f8:9c:22:c4:ca:56:16:d5:c3:76:89:ec: b7:04:39:0e:93:44:51:00:b9:8b:81:bf:be:6d:2b: 81:03:dc:99:35:99:85:c7:62:06:01:d2:3f:81:76: 0c:c3:fb:f0:c2:9f:f6:a2:0d:13:b3:a6:d9:8a:56: cb:45:6e:c1:8f:95:64:1d:ac:bb:be:dd:55:40:04: 95:7d:74:b3:76:cc:73:18:dc:06:e7:8e:dd:f1:bc: 25:fc:eb:73:85:bf:0b:80:7a:49:24:d3:a1:d8:37: ad:56:77:d0:bf:5f:1c:cb:f1:3b:b9:36:31:b6:d5: b8:0e:c1:79:ac:4b:49:53:5f:76:33:65:33:e1:9c: f5:89:0d:76:2b:24:f4:72:15:93:3c:6b:f5:56:2c: 34:05:93:d5:d4:e8:bc:57:b6:51:fe:3a:02:87:c0: 07:7b:ce:9b:17:36:30:46:57:95:22:13:ff:90:2b: 75:1e:f1:d9:3c:60:4c:f2:12:00:34:71:5e:17:cd: a6:e9:74:6f:85:84:c1:6d:35:2e:05:73:de:82:2e: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:bd:fc:7a:a9:ae:a6:dc:05:a2:0d:3a:c8:39:22:d4:5c:ad: 35:6c:ff:90:c0:0e:db:47:98:ed:c7:77:50:c4:d7:e0:45:db: b8:b1:ab:37:d5:07:85:c0:a6:a5:bb:bb:63:3a:1c:23:60:9e: a0:95:96:0a:04:1d:f9:84:fc:0b:77:36:8e:84:57:53:c7:af: 74:f2:e1:f6:ad:14:73:41:bb:de:92:4e:ca:fd:a6:69:74:0b: ab:c7:8a:ef:ce:80:a5:f2:5a:ff:1d:8d:73:4f:a3:0f:73:54: c5:df:af:f1:90:16:69:06:bd:0e:48:8b:62:35:4d:67:0b:2c: fc:33:1f:89:6a:38:0f:f1:b3:cb:34:7b:ee:6c:f8:c9:0e:17: b8:df:32:46:7b:d0:6b:96:a5:76:47:b7:de:9b:10:75:ae:56: 09:fb:3c:97:f9:12:91:8c:95:49:67:5c:be:26:76:3b:67:9c: fb:f5:fc:4e:2d:a4:1f:32:fd:4f:eb:48:df:6e:a5:b9:a8:1f: 4b:dd:86:3b:df:58:72:94:6c:b7:25:34:e7:bc:8a:ab:10:77: fa:f9:20:6d:7f:1e:b3:fe:12:a4:7d:a1:11:fb:10:73:eb:b1: 50:a6:a1:34:1f:8f:dc:ee:13:4d:0b:9e:ba:45:6a:ec:71:01: 20:b8:d9:47 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICApowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNTA5MDkw OTE5NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERERTEwQTQxMEQzMEZE RkUzNjU3NkUxRjhDQTM1NkJENjkyM0UxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2fpPQEIpzROUt2QTY7vUstyh9GjsT1BFs0DJASMcUVvhOxiec b3AzHFJp32W2fPicIsTKVhbVw3aJ7LcEOQ6TRFEAuYuBv75tK4ED3Jk1mYXHYgYB 0j+BdgzD+/DCn/aiDROzptmKVstFbsGPlWQdrLu+3VVABJV9dLN2zHMY3Abnjt3x vCX863OFvwuAekkk06HYN61Wd9C/XxzL8Tu5NjG21bgOwXmsS0lTX3YzZTPhnPWJ DXYrJPRyFZM8a/VWLDQFk9XU6LxXtlH+OgKHwAd7zpsXNjBGV5UiE/+QK3Ue8dk8 YEzyEgA0cV4XzabpdG+FhMFtNS4Fc96CLguRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU3eEKQQ0w/f42V24fjKNWvWkj4fMwHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvUDA0R09JYXROUl80SW9C YS1OVnBsRXVONVJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ADS9/HqprqbcBaINOsg5ItRcrTVs/5DADttHmO3Hd1DE1+BF27ixqzfVB4XApqW7 u2M6HCNgnqCVlgoEHfmE/At3No6EV1PHr3Ty4fatFHNBu96STsr9pml0C6vHiu/O gKXyWv8djXNPow9zVMXfr/GQFmkGvQ5Ii2I1TWcLLPwzH4lqOA/xs8s0e+5s+MkO F7jfMkZ70GuWpXZHt96bEHWuVgn7PJf5EpGMlUlnXL4mdjtnnPv1/E4tpB8y/U/r SN9upbmoH0vdhjvfWHKUbLclNOe8iqsQd/r5IG1/HrP+EqR9oRH7EHPrsVCmoTQf j9zuE00LnrpFauxxASC42Uc= -----END CERTIFICATE-----Generated at Tue Sep 9 13:41:31 2025 by rpki-client