$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft File: sso52NF7ENl9WlHg6i-fsbxAzZA.mft (raw, json) Hash identifier: 9CRlIZCPJT6uGml9+dLqKi6nYfxjbKIPqIzdwwKLnZo= Subject key identifier: A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E8C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft Manifest number: 0DB5 Signing time: Sun 07 Sep 2025 21:16:37 +0000 Manifest this update: Sun 07 Sep 2025 21:16:37 +0000 Manifest next update: Tue 09 Sep 2025 21:16:37 +0000 Files and hashes: 1: 1M8XrsPQ7_UoB-5HXeE4v6C53tA.roa (hash: cJUt2nvbb/BSj6oCQY6Wue+mtmCZGtc+vkFISvTm/Ss=) 2: 4vxHRREJWNpi9vjz_CapmDGulWI.roa (hash: gl9yRRmraCp5SGJ5C8tKmurBQPpqQEsQE9JzJBgCxXg=) 3: 7neqAmTpPom0HTAGMY9NCvaDJIM.roa (hash: IjBrCIXGEFdDani+QvJtH5Hc+A/jPsnaYj/jBDDqf3M=) 4: DfUyHdZjjCZNikalitillbRExvY.roa (hash: 0OtlcCA/c6MRDxtJW1CTLuevfR5xp4o1r7QgZ7DYk9A=) 5: EpZF6ajuzIv0k7_dpiwu4FRiu-I.roa (hash: i/p9fhRhjnAQxmjh4klJG+b1VXl2E1plABNeKCf9yy4=) 6: FlTNjDGoO49tQ1Yb-qw5tYjBhLs.roa (hash: djD8UAarhzHKavzTIlKWY0AvkjkpqYqjqPGa5/2qHgg=) 7: GebhNwDUicHnTykceMKO0c9t92o.roa (hash: PYHKJT0j7RkG5QuSgeJK9DeXGWerWT4870BHDsSeVCs=) 8: H0TFJ28RvayVeC41mvi25wMdqc0.roa (hash: CJHJ8NLNHC47h2MGnbLw4Xk5QVSdRbIl/HX/9Ff9r5g=) 9: L7ooTkthLSQ099qVgVIbvOW189w.roa (hash: 0QA0YKtld+Zgj008W2ubvK0FfhdNUOu8e2bOYYoRK0g=) 10: N2vBFlZJu2yyc4L2EMwLtCN4wkE.roa (hash: D9846Ps/3qHt8UtTs6axKoOu73r/qUr/c6tbvQ2tDaA=) 11: OuXWb26C5YX__8HWvJAEDlUt3lQ.roa (hash: KGfZIxcIq5ODG+8puxvCZCj3QQR/6Saal+VwTXgZ6iQ=) 12: PVeeBJLovo9co2_VoYc0vBbbKIE.roa (hash: okHVRv/5tXfT3fG6yX7lHlmf4y+HQL8MHTAzPMNOjc8=) 13: Q9SBASj2UVFEFOJglG_xbgyqgGg.roa (hash: KNndLOoVuF9Yikal31W8GCHxNxFGDHgaLbYeyxwS8yw=) 14: XoKfkGiWBOl29SKC3TZKVZaIQ4U.roa (hash: J8EMtLItr7qFqEf6EqybR+0OnUkPmodK0NNdti/5jIw=) 15: Z-0friyJRa-GxHzPG6sUnthP2mg.roa (hash: riBnRXY50d88LkatPddbE9M/AcdKbYsUxrqJTTkSv6I=) 16: ZOu-6cdrouoB5ZZeu4bREpyb8BY.roa (hash: KfEe1BQeCKj1MAOtiC53QW7pPQgMQKFvtEb3NV5SGH8=) 17: bS63T15VKi8z3jI7Pzy-1ztaYIE.roa (hash: g83MthDDU96AnaQiMvlQy4TnxFShlMzjmV8Sqke4bVE=) 18: dU9nxreEUwX3Fak37F91AyVI4TY.roa (hash: wo/4qQmV9QLqqvux+b4EMYrLsfPaGymYe09+rSqZ9eA=) 19: dciPjex1zpZHM9esKFLkRcRsIvI.roa (hash: wftzWbgtLgveCLU/lG6+E+cTS6nwo95C38nJIT1zU+A=) 20: f7c4CoTsA82c7sKbrU0_MN4RBVk.roa (hash: Cyv8mG1vtl5BjV8/tSAUJAvKTkQeu7lD/Y3lATxvDtk=) 21: j5JU0hK9Yyc0pIapJbEh_dT2aJg.roa (hash: ipkldVWOSizOfqXmtdjlaT52RoVuDW+6K37ZUy+knx8=) 22: jghlrHBKsoI23SnieYV6XWAU13Y.roa (hash: QWv1vdhhe9v/NgEmumkV8FCmbv0+rSsg2Jd6EUXazRg=) 23: o1TbZl2MQsAYh3UB0ZtNvYVgMik.roa (hash: lFXxS3ZgEAakywivFh4pKw7buJ/zfEAzRWRNvn6j91U=) 24: sso52NF7ENl9WlHg6i-fsbxAzZA.crl (hash: g18JmExUOaus86J9NS44P8loBLd1TIQTjgSBVvcHOik=) 25: tOZrbf10ur2vZNWR3LNqmpwSa9E.roa (hash: B2/J7ZrvLwPjtHkXlmtWIAOR7rhUiuzcf/fIhF2MXF0=) 26: tzhwZffEdsd3wrhbJDIH77ppfjw.roa (hash: sM6+c7i25LD7G/2EWyS7zuxtuH1ThU8/z/eP/8AnJmM=) 27: u-zvHfCO56zdczzjnCIO6FYe_vk.roa (hash: eAAgCwn7LWbCGH9e6xx1y1o8tiK4ot7Y1B7MfzY5VbM=) 28: xaZpfjEY94U4uz5NJCaJ8rF2uAU.roa (hash: C5zZGUT29SFkUccfWpXhsuI4nFJfxGtSdByD47v++1A=) 29: zvx1USsK3b4G6ipC56ATK-hoOXk.roa (hash: Pt1PP+KOeka1jFQE3ry7S8LLCIew98HnoowFfJspBsk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Sep 7 21:16:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A3A2941162F1547E10FB8CAFB53654C81B20D764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:dd:63:7b:0e:33:10:fb:d2:3f:31:95:91: 76:b9:90:47:e0:a9:28:26:70:32:79:c5:7a:77:42: 18:11:a8:2a:37:79:82:93:ae:bf:71:30:c8:2a:e0: e9:a4:81:ff:09:a5:95:c9:4e:b6:1f:44:98:6a:4f: ec:cd:7b:cf:b8:10:70:6d:f8:48:43:26:3c:b2:f3: ce:50:b4:7a:e2:37:13:f0:55:1a:6c:09:e2:03:1d: 66:ef:f5:56:e5:7e:7c:24:ee:5a:88:04:7c:84:d9: e4:27:e2:88:2a:52:63:9e:7b:5b:19:10:5d:4d:36: 27:d7:2c:cd:7f:fb:2f:61:96:6b:e5:9a:b5:90:27: bf:fa:f5:5c:f7:d5:39:59:b8:1c:70:35:23:66:d5: d5:1a:4b:b2:e8:6c:1e:73:f6:3d:cd:bb:b7:fa:2c: 94:ee:a7:e4:50:28:0e:98:36:55:f6:c2:ed:11:33: d8:e3:79:91:76:aa:01:7a:16:11:30:f0:fc:93:06: e5:71:d7:ec:7a:42:69:22:fe:8f:a6:cb:f7:43:67: 6b:ca:c2:d5:a1:b3:52:72:23:a3:1a:07:55:fc:7a: ae:22:62:10:6b:4d:1c:75:c8:02:20:81:1b:43:01: dc:a1:eb:72:50:f2:2c:77:1c:d4:cc:f3:cb:52:b9: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4b:bc:2a:99:0c:df:bb:de:77:3c:c0:47:65:ca:6c:c6:78: 26:db:f9:8a:76:58:14:06:96:79:3d:dc:09:24:56:67:8c:65: 84:0c:9b:57:0a:b9:4a:3a:e0:aa:5d:44:83:ce:54:93:ff:5a: 02:85:82:1f:b7:0d:39:12:b8:3d:88:85:7b:ad:b4:4a:65:74: 9d:cc:b4:02:6c:3f:a3:e3:29:b6:7f:e7:9b:8c:7e:3d:6d:b2: d0:e9:2c:b3:31:3e:be:c6:49:f3:9e:76:72:66:94:f0:42:b0: c2:97:72:db:6f:99:e3:c8:a4:f2:50:d7:ad:9c:fe:5b:45:fa: 9b:18:c2:03:eb:dc:1d:45:27:a2:71:9b:5f:85:45:79:18:35: b6:c6:a8:3f:97:94:d3:3b:09:a2:df:cf:89:16:5d:95:c7:a8: 6b:04:c6:c1:7f:5f:de:75:dc:39:ce:bc:b7:d2:ec:e5:21:d1: 3f:26:72:07:89:14:4e:a5:f2:62:74:42:4a:0e:62:5c:f9:6f: 52:07:84:14:f2:e2:60:d5:ee:58:fa:bc:e2:f7:05:5a:c7:d4: 02:be:02:70:db:cb:d1:a9:5f:fb:5e:d6:65:74:03:9c:6b:e7: 37:9f:00:4f:c7:c7:e1:fc:1c:7b:2b:72:36:ef:f9:ed:63:ab: 4b:d7:a5:9e -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgICDowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA5MDcy MTE2MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEzQTI5NDExNjJGMTU0 N0UxMEZCOENBRkI1MzY1NEM4MUIyMEQ3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC04N1jew4zEPvSPzGVkXa5kEfgqSgmcDJ5xXp3QhgRqCo3eYKT rr9xMMgq4Omkgf8JpZXJTrYfRJhqT+zNe8+4EHBt+EhDJjyy885QtHriNxPwVRps CeIDHWbv9Vblfnwk7lqIBHyE2eQn4ogqUmOee1sZEF1NNifXLM1/+y9hlmvlmrWQ J7/69Vz31TlZuBxwNSNm1dUaS7LobB5z9j3Nu7f6LJTup+RQKA6YNlX2wu0RM9jj eZF2qgF6FhEw8PyTBuVx1+x6Qmki/o+my/dDZ2vKwtWhs1JyI6MaB1X8eq4iYhBr TRx1yAIggRtDAdyh63JQ8ix3HNTM88tSufc1AgMBAAGjggITMIICDzAdBgNVHQ4E FgQUo6KUEWLxVH4Q+4yvtTZUyBsg12QwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3NzbzUy TkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAaS7wqmQzfu953PMBHZcpsxngm2/mKdlgUBpZ5PdwJJFZnjGWE DJtXCrlKOuCqXUSDzlST/1oChYIftw05Erg9iIV7rbRKZXSdzLQCbD+j4ym2f+eb jH49bbLQ6SyzMT6+xknznnZyZpTwQrDCl3Lbb5njyKTyUNetnP5bRfqbGMID69wd RSeicZtfhUV5GDW2xqg/l5TTOwmi38+JFl2Vx6hrBMbBf1/eddw5zry30uzlIdE/ JnIHiRROpfJidEJKDmJc+W9SB4QU8uJg1e5Y+rzi9wVax9QCvgJw28vRqV/7XtZl dAOca+c3nwBPx8fh/Bx7K3I27/ntY6tL16We -----END CERTIFICATE-----Generated at Mon Sep 8 22:05:59 2025 by rpki-client