$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft File: tjCfg3WsbYZ88UyV8np05NLfGb0.mft (raw, json) Hash identifier: dx7o8YLPSWjOmc2Iq61DfGYJLDKSk4o2aE0TsiJf7Rs= Subject key identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Certificate serial: 04DC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft Manifest number: 04DC Signing time: Sat 05 Apr 2025 21:05:18 +0000 Manifest this update: Sat 05 Apr 2025 21:05:18 +0000 Manifest next update: Mon 07 Apr 2025 21:05:18 +0000 Files and hashes: 1: tjCfg3WsbYZ88UyV8np05NLfGb0.crl (hash: TXwwxi+YKpBfxaMVmS1jS+o+B3HjalWyPBVQs0nJGs0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD Validity Not Before: Apr 5 21:05:18 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C5EF9C725E95C29704CCAED7A098FD4BB2EFDF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:eb:3a:02:86:9d:8f:41:ff:1b:a5:e0:12: c7:85:90:52:6d:29:d7:2c:2e:9e:0b:8d:ad:ad:8c: 3e:4c:4d:eb:42:76:ec:4d:c9:c5:71:cd:5e:f6:8c: 38:fd:1e:84:5b:58:78:1e:e0:a0:fb:dd:c4:7b:71: 02:ba:8b:f3:97:5d:ad:0b:d5:6e:fa:3d:6e:de:dc: 6e:ba:e8:a5:c1:31:f5:cf:5c:cb:67:8b:bf:ba:c7: b2:d9:26:31:14:d7:2d:dd:c7:0f:c3:90:1e:d5:18: ab:97:12:b7:fa:62:50:10:91:5a:a7:c0:7f:c8:36: 94:4e:58:95:ae:da:af:22:26:8e:35:fe:e5:2b:1a: 02:eb:17:78:ac:7e:3f:75:98:11:bd:3e:63:c7:e5: dc:ca:7d:c2:65:06:0c:d2:0d:c0:55:ec:dc:5a:3d: 64:17:52:eb:63:ba:66:c9:40:0e:f5:4b:48:39:b3: 05:fa:93:10:a0:77:65:bd:bf:8a:49:41:92:0e:6b: 9a:71:43:5e:04:59:cd:f6:b7:60:cd:7c:88:88:72: 71:36:bf:7d:c8:aa:83:fb:ce:57:24:03:85:70:54: d2:b0:26:34:66:db:47:c7:80:68:e2:c1:f5:98:5d: 3e:9f:af:a3:ee:e2:10:45:ad:65:e7:43:ef:05:be: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EF:9C:72:5E:95:C2:97:04:CC:AE:D7:A0:98:FD:4B:B2:EF:DF:16 X509v3 Authority Key Identifier: keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:d8:d0:e9:dc:fd:1d:8e:aa:01:31:1e:8e:5c:7f:b8:75:32: 40:a2:17:40:72:c9:e6:22:7c:1b:c5:de:10:0d:f0:9a:d1:2a: 23:73:80:5e:0e:b9:28:01:a7:e8:09:b4:0d:f8:f2:18:3a:ca: ca:f2:2d:61:f8:9a:bf:fb:94:14:31:21:b2:1c:48:2f:12:74: cd:c8:33:cc:b2:79:a1:80:d2:ce:bd:d2:26:18:28:85:84:21: e2:d4:1d:04:93:ac:ec:c0:da:d7:50:eb:43:dc:25:8c:42:77: ce:cf:8a:f6:4b:1c:17:b6:86:ce:54:57:bf:f4:95:cc:62:fa: 2c:38:b5:5b:95:6e:fe:d8:bb:0f:1d:83:4c:ee:fd:e5:86:70: 0a:52:3b:77:1c:89:ef:e3:20:c8:ae:7d:d4:49:af:c9:a6:2b: 03:b0:a6:57:2e:1b:b3:80:3b:c5:77:86:90:65:d8:ea:ed:99: a5:82:19:f8:e3:4a:33:1a:b4:ba:72:56:44:af:f0:bb:32:0e: 7e:08:dd:61:4d:79:9c:c7:5b:f5:11:9a:a5:5e:78:2e:77:b9: 9e:f2:9e:7f:4e:ee:02:5a:5a:f4:d4:dd:e2:ee:fd:4b:a4:32: 57:d2:59:1e:e5:0c:b5:cf:d0:b7:50:a4:52:95:5d:c6:a2:4c: 03:20:a4:2a -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjYz MDlGODM3NUFDNkQ4NjdDRjE0Qzk1RjI3QTc0RTREMkRGMTlCRDAeFw0yNTA0MDUy MTA1MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM1RUY5QzcyNUU5NUMy OTcwNENDQUVEN0EwOThGRDRCQjJFRkRGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxYus6Aoadj0H/G6XgEseFkFJtKdcsLp4Lja2tjD5MTetCduxN ycVxzV72jDj9HoRbWHge4KD73cR7cQK6i/OXXa0L1W76PW7e3G666KXBMfXPXMtn i7+6x7LZJjEU1y3dxw/DkB7VGKuXErf6YlAQkVqnwH/INpROWJWu2q8iJo41/uUr GgLrF3isfj91mBG9PmPH5dzKfcJlBgzSDcBV7NxaPWQXUutjumbJQA71S0g5swX6 kxCgd2W9v4pJQZIOa5pxQ14EWc32t2DNfIiIcnE2v33IqoP7zlckA4VwVNKwJjRm 20fHgGjiwfWYXT6fr6Pu4hBFrWXnQ+8Fvh3ZAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUxe+ccl6VwpcEzK7XoJj9S7Lv3xYwHwYDVR0jBBgwFoAUtjCfg3WsbYZ88UyV 8np05NLfGb0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvdGpDZmczV3NiWVo4OFV5VjhucDA1TkxmR2IwLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS90akNmZzNXc2JZWjg4VXlWOG5wMDVOTGZHYjAuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC90akNmZzNXc2JZWjg4 VXlWOG5wMDVOTGZHYjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAudjQ6dz9HY6qATEejlx/uHUyQKIXQHLJ5iJ8G8XeEA3wmtEqI3OAXg65KAGn 6Am0DfjyGDrKyvItYfiav/uUFDEhshxILxJ0zcgzzLJ5oYDSzr3SJhgohYQh4tQd BJOs7MDa11DrQ9wljEJ3zs+K9kscF7aGzlRXv/SVzGL6LDi1W5Vu/ti7Dx2DTO79 5YZwClI7dxyJ7+MgyK591EmvyaYrA7CmVy4bs4A7xXeGkGXY6u2ZpYIZ+ONKMxq0 unJWRK/wuzIOfgjdYU15nMdb9RGapV54Lne5nvKef07uAlpa9NTd4u79S6QyV9JZ HuUMtc/Qt1CkUpVdxqJMAyCkKg== -----END CERTIFICATE-----Generated at Mon Apr 7 02:02:54 2025 by rpki-client