$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft File: gycg6wvqAFw-3ldOMcCrdWP6DMc.mft (raw, json) Hash identifier: tL7HbTBZiWmP1HILPgDDLnm2ayNsutR38+h0MOnL7gE= Subject key identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0E25 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft Manifest number: 0D5B Signing time: Sun 01 Jun 2025 21:57:16 +0000 Manifest this update: Sun 01 Jun 2025 21:57:16 +0000 Manifest next update: Tue 03 Jun 2025 21:57:16 +0000 Files and hashes: 1: 0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa (hash: b/wXCHIYDDlWv9EFqk1bQUIbOb17PE4pGzX95Atyjek=) 2: 1aYcfAcNLwgui-N2n8M3DSBTVc8.roa (hash: VDm+H/fJyntt5kDa1r6/bPB/8ivGjrUVug56cxBqe/o=) 3: 2hSF_tSTX6o_hA2GZa69uSr7aYw.roa (hash: 0xknZb1nBEpcxkczaNUmnA6PAHuKCYYJg2j36YRP5+Q=) 4: 3S_Wg0Wwe4wOBPgIyxz_matljRo.roa (hash: RwoqadB7SccFCKH4W664FNOOvNBYL50kkTDujjQfEz8=) 5: 3aLbZG2Y1RSVO7u0W0hr4S9qUY8.roa (hash: jRyl4WeeeWP98fPFMqRBdVRyuKcIkaU8RhSWHO1TefI=) 6: 5P8Iu6qzJrhSwHbjLxz10nouHIU.roa (hash: 2dfrqoOnOnCT2TIwoNpFKqeUidXHK9N7jnYiTE80oNg=) 7: 8BknVL_JZq9EMf0SPwoNjMwXPc4.roa (hash: NAHVsiphkdN3glcsiwhrQ+mW3MMwmiXrrDapeqWRE8g=) 8: 9LNbBTGKkWhZIAFZefop1k8xGYc.roa (hash: Lc2NSLg9tzioJQhrpinsLwIfYjJ0aG1uR7NsG8oBzYI=) 9: Dd0pmsWqtDA6TmIglHrQEIWOXwM.roa (hash: z/SOYGL3Io5NxgC2bwd1hJ4jVXcPUjv+sRshbeMYoZE=) 10: GdMiKceMFJcEGsOX7v8JvvfeuK0.roa (hash: PeIUMFRwKo99vQiyahzZ3lcGyUanjj4p1KLRs8OizcU=) 11: HLxDLhmdHKkZg38vs4lKIUO1uGw.roa (hash: ba0TYIxxAqvWYpSyUzPahMyOJjYKRcLdw/7fcGVerLk=) 12: KFWXAlZ3CqJzTnK7DGSYBBdfdT8.roa (hash: y1TeEWAuGDo2ULut3IisdkE4pt3kC1CDTOV5ullTfm0=) 13: LRFAtIgSxA2dhA3JozBenD8Ae-Q.roa (hash: xnCRZHvlNMCo4zw8mTD4wMlBhDLk3wLbKjjo3VEk4Lo=) 14: N4zTMLr_TdZu5ErHrChE76sUc5E.roa (hash: 01gsXsqHIpNaP0Xi8ecTMIElifmFbVuPD4B4RSJYtbk=) 15: RYKudM5ng4YAEw8SOt5VIttRPFM.roa (hash: IIEniaW1uCybS3xEGSMWNy3xeKQxrLL2dKDvFkgmHj8=) 16: SodZISI9CTwnIRrBalQcBC1d6Xo.roa (hash: kHabac7o2JdKCfK8gTJpMMwwp0oczA3U2wKk1ADHWNk=) 17: V20FQeMvJK1-T0La1dmmNHJ0-Zs.roa (hash: 2JjeoZtgoRaY8PKoqjC4QEQfG62pfk0NhfUwAP7HkNQ=) 18: VE9LWoK3JP5BV-xnNCMwXruNJf0.roa (hash: MqGU7zCdDPc9gUcakaqgTfhtv5T5BXRfkTkOV3YKz2k=) 19: ZwVr2caNFUw7KbzkNKqxxcvKiuo.roa (hash: GRw7IoQYyQsB+bQUgyj9ZZhSx7qtaIv00dZ62o1wf/E=) 20: _a5_rsTZQmTRFEQX8zb9fFZL-HE.roa (hash: lkleLGg/Pwlvcxxncw2jks3Mp2GuaCsZ2LE4yKQf5Ws=) 21: cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa (hash: Dj1i/1AdRA13RqX/WNcmJpj3+Me1MKHAw1Uy9nuNGQc=) 22: ciru1rpoutQlXOtJdiM27oK93fs.roa (hash: WMIxprQ2XFLPzgvC22DVbXoBQnCPjO96rJoPA3pdlPk=) 23: g5lqS9gh2jdNy4-gBlkXqkNlb20.roa (hash: 64WxhEbotKoRJOtgxVyQWdTtLid8/n3q0EeTEMYuEnA=) 24: gycg6wvqAFw-3ldOMcCrdWP6DMc.crl (hash: wguxTj5HY91yFxgSROwCCPmdxq0XlJclumXRNnC1n/M=) 25: hYyepMDIpBY-JHorYEhIMB-ANW4.roa (hash: 3WB6jlJPGMPg7wIcwtP7oU3R9Bwxw/9ND8vEnS2H624=) 26: icJfYpIQH2DbBMM4UrAQ9cGoOhA.roa (hash: CDsd8sCsUoopPDwo6FQuvBqfiV3V9errSwsfa30pSyw=) 27: ixbMn-cB0RySdpn3AhNWw7OrVS8.roa (hash: Dy3msUluRFSYGGOa551tQkuUTUvvjpMzPyxHAwx/Z6E=) 28: mSTL50iIgvS692ofhwIVFRbv-14.roa (hash: 8ZOkULwx6k2NokqJ+pQE3L5fiuF1dtpuPmtAVBatI5I=) 29: q9tQ-jxNkGfoVAFwFVLi41xkgvM.roa (hash: 9yLHoxIPXahVXXJ8Fq+h0Ykk4ONrpDHU2IV4s9jMl+g=) 30: sIB1YfG9KJwlSa7L_HKqR1uKapg.roa (hash: j2w2tl9RXyWKvCyO0ipDhK9OPLKNEPRR6gP+rOlQ8Fc=) 31: tqbxU1vAja7QeseNFY_9hEUO4q8.roa (hash: 2QOrwYiBWBafR6qXAnc1EhdLVO9vSwce00JY4UHzNb0=) 32: uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa (hash: dxLIcgK0A7a9fn+Aob8yBRSXqWBU9XFVGD28LWsncXk=) 33: urrFJWzReN7Zl4rTxMF9DwnMTr0.roa (hash: 9r7smf2QkYfXGKNv5qNfEAWEojBQkT1wsP34ypO7oYA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3621 (0xe25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Jun 1 21:57:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D50E33A0753C45A73A48403E61BB5977C890FC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:3d:04:37:8d:ae:2d:d7:c8:3d:8f:38:55: 81:4a:b6:1e:0a:48:99:01:e3:57:1a:a3:4e:9d:40: 82:73:f5:9b:53:e9:9e:d1:d5:e3:34:d8:75:e5:68: 66:7c:ec:00:f7:73:57:64:af:61:23:74:2f:41:1f: 8e:84:bc:6d:2b:a3:22:a4:a3:3d:a5:e0:35:f0:84: 0b:41:32:05:09:41:2e:17:30:38:69:17:15:84:46: 08:cd:52:bb:49:a4:2a:0f:82:03:47:c0:8a:a4:63: 17:d1:da:b7:01:8d:cf:62:c3:f5:70:83:68:5c:00: 71:25:60:a9:3c:60:50:76:65:a2:1e:b0:33:38:b1: 67:06:3d:aa:3e:ce:dd:8b:cf:ed:57:92:cb:1e:f7: 25:69:ee:e2:e5:97:36:ac:74:77:4f:7b:22:3e:ba: 99:38:e9:bf:82:b6:d4:2c:da:8a:6e:27:d4:5c:f2: 1a:e4:3d:bd:5c:f0:a6:53:f1:b7:19:3f:66:25:94: ab:4b:80:d0:a6:09:31:64:2b:5c:55:09:2f:c6:3a: 15:bf:14:91:20:a5:97:dc:91:34:9d:1f:6d:df:a6: 7c:ed:e2:a9:4c:b5:dd:3b:ab:e8:6f:3f:a8:54:53: d8:04:39:cc:c8:cf:ff:04:0e:57:e8:af:d6:04:e6: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:14:54:26:42:9d:91:51:b6:88:54:1e:6d:97:09:a0:eb:32: 0c:74:56:17:65:17:47:6c:bf:30:18:e1:84:79:4b:11:4e:17: 9a:20:2a:81:41:62:0e:4c:81:04:f3:71:88:e4:a5:ef:b6:82: 74:e1:33:98:4e:38:c4:20:23:87:71:6d:51:88:3d:d9:80:75: 29:73:29:0c:ad:e9:17:ab:28:1b:35:b8:7d:2d:3b:86:12:ef: 6b:28:a7:27:e2:13:9d:14:ea:d6:c8:b0:c4:1d:70:5b:e7:31: 8e:94:20:65:f5:a7:72:15:d9:07:ff:49:57:03:2a:0e:84:9e: d0:0f:7b:ff:52:23:df:fc:60:6b:92:71:0f:60:14:81:f6:da: 02:62:47:f7:b9:2a:c0:40:8b:6b:07:50:9d:d9:01:99:f7:b3: ae:42:db:a9:88:54:2d:35:c5:eb:89:83:02:07:0f:50:d0:7a: 18:4b:e0:29:8a:bf:96:22:0b:28:3b:ff:06:d5:b2:d5:04:92: 84:60:05:c3:1b:c2:99:b0:14:91:23:6b:4d:36:68:aa:39:35: 06:d1:04:bd:ef:5b:e4:bf:a7:b0:0e:dd:47:9f:37:83:81:1c: b6:d3:f8:32:6b:f7:d1:96:9d:91:2a:4e:df:c5:cb:7c:6b:bc: cd:19:92:0a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNTA2MDEy MTU3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1MEUzM0EwNzUzQzQ1 QTczQTQ4NDAzRTYxQkI1OTc3Qzg5MEZDNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs8j0EN42uLdfIPY84VYFKth4KSJkB41cao06dQIJz9ZtT6Z7R 1eM02HXlaGZ87AD3c1dkr2EjdC9BH46EvG0royKkoz2l4DXwhAtBMgUJQS4XMDhp FxWERgjNUrtJpCoPggNHwIqkYxfR2rcBjc9iw/Vwg2hcAHElYKk8YFB2ZaIesDM4 sWcGPao+zt2Lz+1Xksse9yVp7uLllzasdHdPeyI+upk46b+CttQs2opuJ9Rc8hrk Pb1c8KZT8bcZP2YllKtLgNCmCTFkK1xVCS/GOhW/FJEgpZfckTSdH23fpnzt4qlM td07q+hvP6hUU9gEOczIz/8EDlfor9YE5on9AgMBAAGjggIFMIICATAdBgNVHQ4E FgQU1Q4zoHU8Rac6SEA+YbtZd8iQ/FwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9neWNnNnd2cUFGdy0zbGRPTWND cmRXUDZETWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihRU JkKdkVG2iFQebZcJoOsyDHRWF2UXR2y/MBjhhHlLEU4XmiAqgUFiDkyBBPNxiOSl 77aCdOEzmE44xCAjh3FtUYg92YB1KXMpDK3pF6soGzW4fS07hhLvayinJ+ITnRTq 1siwxB1wW+cxjpQgZfWnchXZB/9JVwMqDoSe0A97/1Ij3/xga5JxD2AUgfbaAmJH 97kqwECLawdQndkBmfezrkLbqYhULTXF64mDAgcPUNB6GEvgKYq/liILKDv/BtWy 1QSShGAFwxvCmbAUkSNrTTZoqjk1BtEEve9b5L+nsA7dR583g4EcttP4Mmv30Zad kSpO38XLfGu8zRmSCg== -----END CERTIFICATE-----Generated at Tue Jun 3 08:13:45 2025 by rpki-client