$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft File: S0bOj4AxurdTZNpb2YHoiFBPtBE.mft (raw, json) Hash identifier: MnoCMKbOz2RPWP3cVg1TMmRt/UWPmA4zVCA9CP/9ASA= Subject key identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 Authority key identifier: 4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 Certificate issuer: /CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Certificate serial: 0351 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft Manifest number: 034B Signing time: Wed 04 Jun 2025 21:56:11 +0000 Manifest this update: Wed 04 Jun 2025 21:56:11 +0000 Manifest next update: Fri 06 Jun 2025 21:56:11 +0000 Files and hashes: 1: 0RiPsY5FYj3RHk7B_mS9wZ09mqE.roa (hash: ea8m34CBH0ZOqRWPKR7+MF7SGmP1lQ8LqYox08FFlfA=) 2: S0bOj4AxurdTZNpb2YHoiFBPtBE.crl (hash: g+n7xe1PlqfZpUfIkWPIS1qcyscn0JKNeATGC41o13k=) 3: gvuqU97BQh8iwwrzBihAHZnbh0w.roa (hash: zjQUcdJH2EqejRdU27C+2gZzas7q3Yci19ATSpT17y8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Validity Not Before: Jun 4 21:56:11 2025 GMT Not After : Oct 8 15:30:28 2025 GMT Subject: CN=7D808F522FB8E9CA40671093E5880F17BE181866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:a1:14:ae:2d:4e:58:84:39:95:79:9b:95: dd:c8:e6:2b:a8:6d:4d:b1:42:88:6c:e1:4e:6b:c2: 68:b1:25:df:5b:e1:db:49:5b:42:0c:9c:3c:d7:34: 1d:2f:ba:2a:be:b1:c7:96:56:8d:45:3e:07:11:e4: 14:89:2f:d8:7e:c4:80:dd:4a:d3:c5:43:25:e1:cb: 5f:37:1c:61:b3:02:36:0f:3f:d8:81:0d:34:6d:e1: e1:c3:70:cc:6e:b8:57:7b:53:7f:d9:6a:0b:ee:19: ac:c2:81:b8:9f:e2:a9:85:9d:ad:ff:9d:9d:9b:4f: ab:8b:34:23:34:a1:8e:0a:ed:2a:ac:c0:0f:7b:58: e8:a2:02:b1:ed:01:81:ce:16:dc:ac:7e:fd:b6:90: ca:d8:b3:b0:8a:e5:07:b0:f2:23:15:9c:c0:2b:b4: a8:67:15:18:b4:d7:8c:86:6d:0d:b9:75:54:b0:99: 39:d2:83:c3:85:b2:a2:6b:f7:ef:71:42:b0:05:61: 11:b8:42:b1:7a:78:48:20:64:82:26:7d:bb:c4:3a: 91:62:54:1a:eb:c5:43:50:ba:cb:48:59:8c:0b:60: 54:3c:03:e4:d4:0d:4c:2a:27:29:ce:7c:06:6f:1e: e7:00:c6:ff:e3:34:fa:b8:81:f5:b3:20:50:e8:49: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 X509v3 Authority Key Identifier: keyid:4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f1:f2:e8:58:d6:97:27:b7:4b:35:9f:88:31:0a:72:a2:85: f0:6c:11:dc:97:0d:c6:cd:5e:86:7e:39:91:25:e8:8d:50:32: a7:6f:0e:30:5e:49:d8:d3:da:85:62:d7:41:07:ff:b2:94:33: 35:2b:50:47:fb:82:98:83:78:4f:41:de:fb:5a:33:9a:2d:e5: 0d:d9:54:30:17:08:47:55:ea:96:9e:b6:f9:f7:3d:e5:8d:66: 9f:fc:b5:27:0a:21:fd:89:36:5f:91:86:1a:ab:4d:8c:8f:0d: 26:1e:c6:d2:03:a3:db:b3:1a:6a:5d:ab:8c:2e:21:e3:e3:a6: a4:eb:22:ec:46:00:4f:3e:40:29:9a:66:d8:92:99:f2:63:52: 80:ef:61:76:e3:91:93:3e:a9:d5:d5:f5:fd:94:84:b6:37:65: 1e:08:90:86:2b:60:cb:21:91:4c:3f:0f:36:da:5a:2f:f1:33: 4c:34:d5:9f:98:c4:13:52:d8:90:9e:8c:4a:8a:eb:a3:e5:1d: eb:80:aa:da:7b:fa:1c:df:bb:1e:64:42:0b:f4:e7:3e:80:af: 8e:1e:3d:28:1b:14:1d:f5:70:44:0b:86:44:bc:63:65:f9:e0: 65:40:71:46:2e:df:ba:de:38:03:cd:32:37:1b:d3:36:b5:5d: ab:fc:f1:eb -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI0 NkNFOEY4MDMxQkFCNzUzNjREQTVCRDk4MUU4ODg1MDRGQjQxMTAeFw0yNTA2MDQy MTU2MTFaFw0yNTEwMDgxNTMwMjhaMDMxMTAvBgNVBAMTKDdEODA4RjUyMkZCOEU5 Q0E0MDY3MTA5M0U1ODgwRjE3QkUxODE4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3aEUri1OWIQ5lXmbld3I5iuobU2xQohs4U5rwmixJd9b4dtJ W0IMnDzXNB0vuiq+sceWVo1FPgcR5BSJL9h+xIDdStPFQyXhy183HGGzAjYPP9iB DTRt4eHDcMxuuFd7U3/ZagvuGazCgbif4qmFna3/nZ2bT6uLNCM0oY4K7SqswA97 WOiiArHtAYHOFtysfv22kMrYs7CK5Qew8iMVnMArtKhnFRi014yGbQ25dVSwmTnS g8OFsqJr9+9xQrAFYRG4QrF6eEggZIImfbvEOpFiVBrrxUNQustIWYwLYFQ8A+TU DUwqJynOfAZvHucAxv/jNPq4gfWzIFDoSVDDAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUfYCPUi+46cpAZxCT5YgPF74YGGYwHwYDVR0jBBgwFoAUS0bOj4AxurdTZNpb 2YHoiFBPtBEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO X05PMS9TMGJPajRBeHVyZFRaTnBiMllIb2lGQlB0QkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1MwYk9qNEF4dXJkVFpOcGIyWUhvaUZCUHRCRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RBSVdBTl9OTzEvUzBiT2o0QXh1 cmRUWk5wYjJZSG9pRkJQdEJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABbx8uhY1pcnt0s1n4gxCnKihfBsEdyXDcbNXoZ+OZEl6I1QMqdvDjBe SdjT2oVi10EH/7KUMzUrUEf7gpiDeE9B3vtaM5ot5Q3ZVDAXCEdV6paetvn3PeWN Zp/8tScKIf2JNl+RhhqrTYyPDSYextIDo9uzGmpdq4wuIePjpqTrIuxGAE8+QCma ZtiSmfJjUoDvYXbjkZM+qdXV9f2UhLY3ZR4IkIYrYMshkUw/DzbaWi/xM0w01Z+Y xBNS2JCejEqK66PlHeuAqtp7+hzfux5kQgv05z6Ar44ePSgbFB31cEQLhkS8Y2X5 4GVAcUYu37reOAPNMjcb0za1Xav88es= -----END CERTIFICATE-----Generated at Thu Jun 5 19:23:11 2025 by rpki-client