$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft File: sso52NF7ENl9WlHg6i-fsbxAzZA.mft (raw, json) Hash identifier: X6O6ZFoLd6QMoqscBsUOe6WSmazj4OwV1N4C8mxEPxw= Subject key identifier: A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0D29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft Manifest number: 0C8A Signing time: Sun 24 Nov 2024 07:23:39 +0000 Manifest this update: Sun 24 Nov 2024 07:23:39 +0000 Manifest next update: Tue 26 Nov 2024 07:23:39 +0000 Files and hashes: 1: -eawrmrjYN33J7NGEc4KusTBR_I.roa (hash: 84Ui1BggMc80kHQ7f1Lflu1Q7aQLRmudlwpOLnSPgDc=) 2: 4GslGHQxRFCQG1Ueq5LbKaEol6w.roa (hash: 9rU5sqxNNQ9bIy3DtAE43Blq3E1BhtjueOrgO9IMPok=) 3: 68t4hFS_0h9C2eLGgbNMLnU2Pio.roa (hash: 1quREqfJxLDe+EwO+HfDmHDvCNL3rxhaOqBptF4z5hw=) 4: CerbrUz9DQlhB2mUg7P7rP7N_oA.roa (hash: XLUyWCvONjB94AnwVgqN/gjvEkz02Ok3Yq0QrSH1pUE=) 5: Et8IBSrE0V5jSGNE3Geyo-tDA7I.roa (hash: peVEivlY7wcOvIy6uo1ySod2Xg8YHcg1iNPL5WVaIVU=) 6: F82ZclaCCyLG4rd18-KpwJvnrw8.roa (hash: 1rMBInaaF1g9WGkiW+nDn27okiJbCfqEJo5qDJUHho0=) 7: FmWNEPkXc_eaJpi8n2aLIeMVlos.roa (hash: iTdXr6XH4tcK+8AjfKvl3+qTeDRhDc048uxXZP4A6RU=) 8: Fn0SsNyNWwwxgYYfBecygcNJW0s.roa (hash: N7qDQdwANuTLoKzzpGprH4xFDjA8h1IB3QqGXx5FXs4=) 9: Ihr1H3thXhelltEdgM448IptcH0.roa (hash: X5nK1RIFJo6Q5flMeQjmMxsYWYY84YrrYN/f2NTo50A=) 10: Mex5EwY24hq7os0O_xyQmcjF1C8.roa (hash: z6AQqe2fwPny2r1cutXYtPXYbaq2/EqkFiykEX/4JjY=) 11: No27gGN9mv4y5n8bjspMZMT3XzI.roa (hash: gs+IJ9wNmQQj0EM2MiYjRAdcO94JU/NtXxSRhCYpG5w=) 12: Rvb1QgeIjCEG_9TMr9C22Awtqvc.roa (hash: on4d3muldAJQW9t2TYeJj6QRwIZYXAe7qYaDAGj6IO0=) 13: SwMkKjIgkrBN0gbcd90oRmVVKDY.roa (hash: DN8PwQKwBgkgToH8ftPBGoA8vnanpYmQJq1uIFOq8Hw=) 14: XKd5O_OAalf5oehwMnDBH2zcyys.roa (hash: HJ3cxyfP4tKFLSgXEHkQJuVKjVHYlL4q6+udqvvEbow=) 15: XjMMiN2NbUX5yBSFMUy0hxZFtEM.roa (hash: BN0PPnWJHlSbKwF+C3E09ZvjGrnRXzbFQuLucjCHKsk=) 16: Y9vMDMCihgHeC7HiRycheoQnEL0.roa (hash: HUIoJjpvrB97pOG/MpNaCY07JCgnt2fiA1IOPoPSy8k=) 17: Z14qo2pqvASTwsyuISBNDqAkpcc.roa (hash: /IPVZdi4G/utJWUg7or5KGI3sDUBroTk5dRx2bETaCc=) 18: ZhhGNJgy69TSHnBOvZgWGjS6HmY.roa (hash: sDjmTjuHgGObhb3ICqLj4/sN4+WI5n9Ict9EI/yKawA=) 19: _g2TgdGRPKjK-RaPh8zG34fdfaI.roa (hash: aE4hApUgRjT96CT+cfPHPmI5rKygQNd0YDqWuV1tTow=) 20: c4ZdmVmHSJjnCD7IuamH48fEDy0.roa (hash: CxyVC8UfhJVxqdlbS8s+YCBzS68FnxIfrr8xMmZDArI=) 21: f_Pki4y8yAu_LstnrZ9jyPI-ozg.roa (hash: ldhZKmEXuijnTTEJmVJXoDLPXZbOxNR2eV08TEcYBkA=) 22: gyGf_lopljahcfxE1olBWRARcPE.roa (hash: XkzckEeaWDbdxa7w9L5pT7odO4xSBGPRYVq2L3WtUIc=) 23: jZYbN3fQAt-R5BvqcdSCKnJNq7g.roa (hash: zF7rhza+tSExHSQf8VI2RRPD0xKdYWmCvyZIf6MZuuQ=) 24: oW3ZSL8tflLZ45cryCcVgI5Rj9M.roa (hash: C/TbAxBbt8x4ZbwJfyY8LxIY7Z9LW0jZmjOnS0dLwQw=) 25: rZZuHAyxUO0CUliKTif5suuoLZ4.roa (hash: bgGNWZ5e7NBGkRuJgdl7k2f/Qarr0Nl/OLftJg6ubfk=) 26: sso52NF7ENl9WlHg6i-fsbxAzZA.crl (hash: 8/z3TEEFVBsbtKZEBfh4ic7qmCz95CEgLQB+8G1SNyE=) 27: yLGIThA4fGCBCPoeIWt-rTJg_aQ.roa (hash: a4q0zU/OTNB/52OwlibYa+pDHeTG4QooWz7cRT81KKA=) 28: yYP6Qh6ILrbw_r-9pcEgHMhwc9E.roa (hash: EmUlJ6ljb/u+XdFwKXAgVQ4eMAGaNgzhV9jwC9+1Jw4=) 29: zU2Bd5RbW9IraJAvFPO-3pV6IA4.roa (hash: ct4JSMNSrLRQvYYVWNvMNKdmtoqkJ4F+U9D8tcWC9+w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Nov 24 07:23:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3A2941162F1547E10FB8CAFB53654C81B20D764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:dd:63:7b:0e:33:10:fb:d2:3f:31:95:91: 76:b9:90:47:e0:a9:28:26:70:32:79:c5:7a:77:42: 18:11:a8:2a:37:79:82:93:ae:bf:71:30:c8:2a:e0: e9:a4:81:ff:09:a5:95:c9:4e:b6:1f:44:98:6a:4f: ec:cd:7b:cf:b8:10:70:6d:f8:48:43:26:3c:b2:f3: ce:50:b4:7a:e2:37:13:f0:55:1a:6c:09:e2:03:1d: 66:ef:f5:56:e5:7e:7c:24:ee:5a:88:04:7c:84:d9: e4:27:e2:88:2a:52:63:9e:7b:5b:19:10:5d:4d:36: 27:d7:2c:cd:7f:fb:2f:61:96:6b:e5:9a:b5:90:27: bf:fa:f5:5c:f7:d5:39:59:b8:1c:70:35:23:66:d5: d5:1a:4b:b2:e8:6c:1e:73:f6:3d:cd:bb:b7:fa:2c: 94:ee:a7:e4:50:28:0e:98:36:55:f6:c2:ed:11:33: d8:e3:79:91:76:aa:01:7a:16:11:30:f0:fc:93:06: e5:71:d7:ec:7a:42:69:22:fe:8f:a6:cb:f7:43:67: 6b:ca:c2:d5:a1:b3:52:72:23:a3:1a:07:55:fc:7a: ae:22:62:10:6b:4d:1c:75:c8:02:20:81:1b:43:01: dc:a1:eb:72:50:f2:2c:77:1c:d4:cc:f3:cb:52:b9: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:73:3b:2c:93:83:e8:d0:e7:27:6e:f4:b2:62:b1:11:ad:2f: 95:90:d6:9d:22:64:3d:94:3e:15:f4:49:87:5a:76:c3:8f:a6: b3:c7:fb:82:1f:c2:c2:1e:b7:f6:b1:f7:38:19:6e:bc:87:a5: 45:a8:b6:3f:a5:84:e4:e5:de:90:c3:db:3e:19:a8:40:55:de: 3b:f7:b6:c2:7c:ee:b6:05:e9:d5:85:6b:57:fa:1b:4e:b0:e1: e4:ca:a9:7d:31:df:ad:07:e4:b6:ee:62:57:d6:34:27:6b:c7: 29:9d:0c:89:c6:63:9c:10:de:14:52:9d:3b:ee:d2:d2:d3:d9: 62:83:f1:5b:ea:43:a7:dd:2c:7c:64:6c:ee:75:be:c0:a5:09: da:3b:c8:e9:23:1b:a1:9a:44:d7:d7:d7:23:bc:03:91:e2:47: ea:62:aa:d4:24:e8:d4:df:4e:ff:45:7e:86:15:45:1c:58:84: cb:46:2e:17:db:1f:53:75:a3:c8:8a:01:06:5a:f7:bb:33:8d: f2:aa:96:99:61:79:50:77:d2:91:88:37:15:61:38:31:8a:e9: a2:7f:a7:06:75:f1:5c:77:79:b7:36:8f:51:bd:c2:da:20:43: 05:88:27:8a:00:85:be:8c:3b:a1:60:44:40:f7:99:e7:c1:8d: 73:a8:15:b0 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNDExMjQw NzIzMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzQTI5NDExNjJGMTU0 N0UxMEZCOENBRkI1MzY1NEM4MUIyMEQ3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC04N1jew4zEPvSPzGVkXa5kEfgqSgmcDJ5xXp3QhgRqCo3eYKT rr9xMMgq4Omkgf8JpZXJTrYfRJhqT+zNe8+4EHBt+EhDJjyy885QtHriNxPwVRps CeIDHWbv9Vblfnwk7lqIBHyE2eQn4ogqUmOee1sZEF1NNifXLM1/+y9hlmvlmrWQ J7/69Vz31TlZuBxwNSNm1dUaS7LobB5z9j3Nu7f6LJTup+RQKA6YNlX2wu0RM9jj eZF2qgF6FhEw8PyTBuVx1+x6Qmki/o+my/dDZ2vKwtWhs1JyI6MaB1X8eq4iYhBr TRx1yAIggRtDAdyh63JQ8ix3HNTM88tSufc1AgMBAAGjggITMIICDzAdBgNVHQ4E FgQUo6KUEWLxVH4Q+4yvtTZUyBsg12QwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3NzbzUy TkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQATczssk4Po0OcnbvSyYrERrS+VkNadImQ9lD4V9EmHWnbDj6az x/uCH8LCHrf2sfc4GW68h6VFqLY/pYTk5d6Qw9s+GahAVd4797bCfO62BenVhWtX +htOsOHkyql9Md+tB+S27mJX1jQna8cpnQyJxmOcEN4UUp077tLS09lig/Fb6kOn 3Sx8ZGzudb7ApQnaO8jpIxuhmkTX19cjvAOR4kfqYqrUJOjU307/RX6GFUUcWITL Ri4X2x9TdaPIigEGWve7M43yqpaZYXlQd9KRiDcVYTgxiumif6cGdfFcd3m3No9R vcLaIEMFiCeKAIW+jDuhYERA95nnwY1zqBWw -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org