$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft File: BA2WgwOzZPdyp1NXgiDTU34WFm4.mft (raw, json) Hash identifier: x4+yLK3uPyNGFjTx9YGIl252lQ0u6NEK0LyeaFQ86UU= Subject key identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E Certificate serial: 03D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft Manifest number: 03CD Signing time: Sun 01 Jun 2025 21:25:31 +0000 Manifest this update: Sun 01 Jun 2025 21:25:31 +0000 Manifest next update: Tue 03 Jun 2025 21:25:31 +0000 Files and hashes: 1: 2JJi-7EXsdRFhjSaEK5hj-GETe0.roa (hash: yyHc43AGh/VNn9Ig9g4oy6I4TPOMSXEjmfMXKPefsq8=) 2: BA2WgwOzZPdyp1NXgiDTU34WFm4.crl (hash: FbNMiHRI/6RtOdBMlcqDAY358dpomYk1VAmKQAJxopY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040D968303B364F772A753578220D3537E16166E Validity Not Before: Jun 1 21:25:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F1D5BB810C5131FFBE9D13696A504880E5C0D20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:bf:0e:2f:37:e4:94:08:df:59:ec:1a:78: 26:eb:b8:cd:99:22:f3:b4:66:9d:37:ad:0d:48:08: a3:9d:09:5e:a5:13:ea:85:78:a5:d7:30:75:8d:0a: 99:ef:fb:8a:54:8b:0f:fc:0e:e7:ed:cc:05:5f:2a: c3:76:4f:9e:33:53:57:62:41:eb:1e:05:0e:c9:28: 04:e6:3a:37:8d:51:26:88:b9:81:07:8e:b7:04:39: 6b:08:26:25:6f:e8:76:cd:f9:2b:44:24:9b:35:16: 0c:ae:fe:57:89:24:ab:2d:5c:eb:27:18:db:b9:ad: 2a:0f:70:c0:ce:f9:b3:49:1f:d0:72:28:55:ea:58: 93:95:ba:6b:7e:ad:39:67:7a:0c:20:f1:46:89:83: 5a:22:a8:37:db:45:26:9a:d7:95:a0:6f:2c:95:a6: 76:58:54:4a:e1:51:02:e4:f8:ba:d8:1f:fb:10:c7: f1:8f:8b:fe:10:b7:6c:8e:c4:b0:f4:d0:f2:c5:91: 74:1d:65:c2:f8:59:08:0a:bc:bf:95:80:e9:84:82: 04:36:a9:c6:cc:aa:03:0f:ac:76:6a:bf:a0:28:35: 95:b9:5f:43:91:88:f1:28:a2:2e:a8:f8:cb:ce:d8: 14:21:98:d0:5d:49:60:e0:ff:5d:ea:b1:cb:bc:96: bc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:5B:B8:10:C5:13:1F:FB:E9:D1:36:96:A5:04:88:0E:5C:0D:20 X509v3 Authority Key Identifier: keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:82:f9:a9:3b:23:86:2f:1c:84:9a:f3:0a:a1:67:a5:00:76: 3f:a5:b2:73:0b:e6:97:d8:63:45:19:a8:cb:d4:e0:c4:ff:8d: 68:2f:15:4b:ba:bd:63:16:6a:26:b9:b9:1c:c0:ab:9c:46:af: 3f:0d:bb:dc:9f:a4:7c:ff:63:52:90:e6:64:8e:c1:63:7b:f3: 1c:83:44:3b:93:28:27:f7:1e:6c:36:28:25:32:fd:8c:cf:4c: b8:a5:84:e1:b5:15:f4:1b:b2:4f:63:0c:67:fe:96:9f:71:b3: 92:16:b8:03:9f:65:6b:67:26:ac:75:a2:8e:04:14:dd:ab:25: 4a:13:9f:f1:c3:14:a9:9d:b3:39:b8:e1:c5:61:9c:e8:47:75: e9:0a:05:c7:59:6f:63:11:c5:73:01:a1:d8:8f:d4:ac:93:d2: dc:21:86:90:c1:06:9b:75:5e:51:43:2f:64:d2:49:29:7c:c7: 77:a5:c7:56:5f:7b:de:de:c2:e9:0f:28:5f:6b:f2:2d:4f:be: 8a:b3:ab:c2:33:29:3e:97:5a:07:da:6b:61:91:5d:ea:35:4e: dc:f6:36:c9:d0:30:11:60:99:ed:38:39:eb:10:5d:ba:df:8d: 37:ba:a8:59:11:95:42:e7:b3:24:00:37:3b:a9:40:5c:97:1d: 9d:7d:db:b7 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQw RDk2ODMwM0IzNjRGNzcyQTc1MzU3ODIyMEQzNTM3RTE2MTY2RTAeFw0yNTA2MDEy MTI1MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGMUQ1QkI4MTBDNTEz MUZGQkU5RDEzNjk2QTUwNDg4MEU1QzBEMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1o78OLzfklAjfWewaeCbruM2ZIvO0Zp03rQ1ICKOdCV6lE+qF eKXXMHWNCpnv+4pUiw/8DuftzAVfKsN2T54zU1diQeseBQ7JKATmOjeNUSaIuYEH jrcEOWsIJiVv6HbN+StEJJs1Fgyu/leJJKstXOsnGNu5rSoPcMDO+bNJH9ByKFXq WJOVumt+rTlnegwg8UaJg1oiqDfbRSaa15WgbyyVpnZYVErhUQLk+LrYH/sQx/GP i/4Qt2yOxLD00PLFkXQdZcL4WQgKvL+VgOmEggQ2qcbMqgMPrHZqv6AoNZW5X0OR iPEooi6o+MvO2BQhmNBdSWDg/13qscu8lrxnAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUXx1buBDFEx/76dE2lqUEiA5cDSAwHwYDVR0jBBgwFoAUBA2WgwOzZPdyp1NX giDTU34WFm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ VS9CQTJXZ3dPelpQZHlwMU5YZ2lEVFUzNFdGbTQuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0JBMldnd096WlBkeXAxTlhnaURUVTM0V0ZtNC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NJQU5HWVUvQkEyV2d3T3paUGR5cDFO WGdpRFRVMzRXRm00Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AHqC+ak7I4YvHISa8wqhZ6UAdj+lsnML5pfYY0UZqMvU4MT/jWgvFUu6vWMWaia5 uRzAq5xGrz8Nu9yfpHz/Y1KQ5mSOwWN78xyDRDuTKCf3Hmw2KCUy/YzPTLilhOG1 FfQbsk9jDGf+lp9xs5IWuAOfZWtnJqx1oo4EFN2rJUoTn/HDFKmdszm44cVhnOhH dekKBcdZb2MRxXMBodiP1KyT0twhhpDBBpt1XlFDL2TSSSl8x3elx1Zfe97ewukP KF9r8i1Pvoqzq8IzKT6XWgfaa2GRXeo1Ttz2NsnQMBFgme04OesQXbrfjTe6qFkR lULnsyQANzupQFyXHZ1927c= -----END CERTIFICATE-----Generated at Tue Jun 3 08:16:19 2025 by rpki-client