$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft File: gycg6wvqAFw-3ldOMcCrdWP6DMc.mft (raw, json) Hash identifier: heRZmGOwdn/4kv8u7dX+IZJ/fNjd5zlTdTBW5hoOdnM= Subject key identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0D1D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft Manifest number: 0C73 Signing time: Sun 24 Nov 2024 07:24:41 +0000 Manifest this update: Sun 24 Nov 2024 07:24:41 +0000 Manifest next update: Tue 26 Nov 2024 07:24:41 +0000 Files and hashes: 1: 18uduxJ0U5tddhgaOumnTBD1SzA.roa (hash: KxzkssAnKkZuKj70Q3EiJPq2rCaoJVuRRwjAJXgRuFg=) 2: 3H1ezdnXRaHRKopXyIiXwqslTeQ.roa (hash: vPxXHx/Xfb5akpHDO5J7iAnonkJ4luOdQAArt+oN8H0=) 3: 6H39Kf7ihhQOk3kDAFrw4-BmsSg.roa (hash: cAzderQ391eWM4rqkrgvN3bykFkI2jPKdyGHFb1HvqQ=) 4: 6NkK2uxw-XiwFbgy7HpnIxndtO4.roa (hash: 9aa8DXmFpznxS41jsQGbm+nc80QK+/b2vGzaPvk2jBo=) 5: 7AdeiEO1uds2BWMxmwHbiSQz860.roa (hash: uHbcfkDUKdiJoQhRQ5jvGbiStEisf5dK6z3oyuMxn70=) 6: 887uLjYROkWU3MJ8BV5JDvvjPvY.roa (hash: 72BeQJkJ/GC/DVVBQjLh7h1xi88E51pGUIqC0VCRnhc=) 7: Fm01gh4_8FLGpeUnKmGmTO3N3LY.roa (hash: VzZiA1+Z1QX/UyeB0efrZ4veYMrzM1CiHGgsWm+H1oM=) 8: G2tPV_3yZuAnW2bd0pZGgJJVMrs.roa (hash: Tz4asyRNAFaJeODbnUctNKbgJoS52BtiCngYXfgT4AQ=) 9: IEiMQeM3eKvtYKP3iMqVrLhu3a4.roa (hash: Ndo3IH3JddbJUP5n3ZOJ2pjO3XRrZFa5FB7OeOX6744=) 10: KJLGHmugtrtC6MOXPPOxh_9Rs5U.roa (hash: 8fl3IR9EZ1wM9l4xWg/sZIR8k59K38E+qL+rL7pTrEc=) 11: OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa (hash: OCd7KXMnzAY5+rUmzu8LEnNMeGMO0eTBO1z21RzHeA0=) 12: PmSElShvUmiGHKh7Yp9w72w8ank.roa (hash: LXRcO0bN1azuMxuUp6TuBCcT4wm6CDGTZW+9r/LRWzI=) 13: RfD6G8iJXl4wCBeztSsI0xG83rw.roa (hash: EhFYqMjqgtMtWH32U2PU7ugBrQ3QDUf04tqQ5iOrnms=) 14: VNYzzmBtsrOw6g9zt_mtiMcri0Y.roa (hash: PhvXSjGzN2Rb0fN5iM0nIkIRGobn7Z6zBzvwsaLSJ10=) 15: WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa (hash: IGMn8AtEOznJqwPynoAcLbfgkAi9OBzPq17IFOaWzJg=) 16: YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa (hash: /qT20B61u7BugZW8Ye9ykR/aqQBy4UFvp4aah6rXNAs=) 17: Yve_0Bz2i5I9nPePbbey-fIR0-0.roa (hash: U+SzWuQVAiBSdbq3hj44hWWdvyVsTEtYnPrQ4zN/rJY=) 18: ZleLLb06h1I70QfOm8N-do4LahU.roa (hash: iLzPTcQl1RbR6kvZNPq9DMOJnp1h6hzXXyx032d8OKY=) 19: _QGT4snSWdHPps-175mtgNLl3LQ.roa (hash: EapBBGLqd9sx1hrheF9O6O8qsd4d/s/7srAOpPuk+GY=) 20: a3KugHgC4LQICkzAjpMwvJtBOZs.roa (hash: zKOYGqOKu9wZ2puiBkKusE3QjKIK7ov9GA4hU+56TBM=) 21: eTcSoGbQHCn0pc6WkyKfV-EdVGA.roa (hash: +Mh9xJH7Is+ymLVbpEQ+bWVEi3Yf8G8moMJxkEQKEcc=) 22: gdtPr5G6Yco6eTjkw4vrodM1C8I.roa (hash: mPAWP1FVI6vk0zQ7c7h7yJ/Bi7tZg9BSNQ1ULCSblBY=) 23: gycg6wvqAFw-3ldOMcCrdWP6DMc.crl (hash: Fy4ODntEHqgfyz4DD/3LH5SFMC6Pn1UMkeGt7NW0xxY=) 24: hDqkOqa4TVKrztQoRNbpXMLHnG0.roa (hash: TjtnmUPk/k3zocrq3d1QHYjPhetL+r3i6aNf1v+xj+Y=) 25: hKqzF_IYxpPK4ROHuKYsKIESl-U.roa (hash: DE4TlaaCoKRmfWsLzRXQhcfdZV15LjGiosv+aIsvyEo=) 26: ig4xiRB08mFJzI_BJ_mOVZDfvLE.roa (hash: 3xiWsWIRWFQRA5vksY5nVhxJxcm0D8m19FggkGdoIUU=) 27: ol80CvLjTz5gxFPq8yUa9LCqHlI.roa (hash: FCYh0AOCGlc9vlfDkQYu3wOUICB9v+JK3in06ixlsW0=) 28: qn22_14iHQf5yT4pmqj2w2oPeIs.roa (hash: 483Xb2Gw/llU7n3HwBQUhIR3gqahVGkY4Zr7f8lCi38=) 29: rAJQAKorLGBtRfuRX394GiNLJyM.roa (hash: TitXfCjv2ihGxgJLCDdY/2DvO3SFLz6YP/r8k+jU3N0=) 30: rUsU6UiCcgGYGzwgLCIRRsIBVY0.roa (hash: 3YwIxmicFeH0GFAOBdBNdpywltID5pw/4FuFDTcLRD8=) 31: sTu8zYaLtU8VSPbysn1HklB9Qb0.roa (hash: C6YPjCEyICmSg25iEBcg9ot0P8IWTyWeibR6Slk9HaA=) 32: yhsZQ7jWSEHF-OUtKOnGLF8tX88.roa (hash: ORU7yVMQ2T6ipHm36gagEeVvnWxMopq9HfXDWUD3yv0=) 33: zS0Fj-ZbC46XOKzbcwIwm6RAHp8.roa (hash: +IKpopS1es4OXOHjPP2+B2qLs9Cmqtlp2XANYPOwY3k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3357 (0xd1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Nov 24 07:24:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D50E33A0753C45A73A48403E61BB5977C890FC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:3d:04:37:8d:ae:2d:d7:c8:3d:8f:38:55: 81:4a:b6:1e:0a:48:99:01:e3:57:1a:a3:4e:9d:40: 82:73:f5:9b:53:e9:9e:d1:d5:e3:34:d8:75:e5:68: 66:7c:ec:00:f7:73:57:64:af:61:23:74:2f:41:1f: 8e:84:bc:6d:2b:a3:22:a4:a3:3d:a5:e0:35:f0:84: 0b:41:32:05:09:41:2e:17:30:38:69:17:15:84:46: 08:cd:52:bb:49:a4:2a:0f:82:03:47:c0:8a:a4:63: 17:d1:da:b7:01:8d:cf:62:c3:f5:70:83:68:5c:00: 71:25:60:a9:3c:60:50:76:65:a2:1e:b0:33:38:b1: 67:06:3d:aa:3e:ce:dd:8b:cf:ed:57:92:cb:1e:f7: 25:69:ee:e2:e5:97:36:ac:74:77:4f:7b:22:3e:ba: 99:38:e9:bf:82:b6:d4:2c:da:8a:6e:27:d4:5c:f2: 1a:e4:3d:bd:5c:f0:a6:53:f1:b7:19:3f:66:25:94: ab:4b:80:d0:a6:09:31:64:2b:5c:55:09:2f:c6:3a: 15:bf:14:91:20:a5:97:dc:91:34:9d:1f:6d:df:a6: 7c:ed:e2:a9:4c:b5:dd:3b:ab:e8:6f:3f:a8:54:53: d8:04:39:cc:c8:cf:ff:04:0e:57:e8:af:d6:04:e6: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:95:f2:9d:c6:d2:0c:d9:15:bf:17:92:c3:c8:a6:41:96:09: 05:08:0f:7c:8a:c6:71:ca:0e:1e:10:0f:32:14:5b:61:23:b3: cb:eb:10:34:f8:fa:fa:ca:53:21:4e:5f:04:26:ac:a7:ef:23: a0:ee:d5:76:ce:99:fd:47:6a:ee:47:ab:ba:a2:b7:89:b1:31: d9:07:2e:9f:3e:0f:b0:17:11:b5:61:b3:b7:b4:4f:8e:e4:d6: d8:ce:79:42:97:e8:84:92:32:a0:fa:8e:7e:c7:e6:25:63:98: 1b:64:de:f2:14:eb:fa:45:e1:db:cc:d9:5e:85:41:27:26:16: 81:08:f3:6e:7a:33:f3:5f:9b:a7:da:3b:37:98:80:f0:a7:52: 86:de:0a:93:65:b6:04:63:6c:35:26:6f:a8:d5:9d:68:04:3c: 02:03:4c:15:3f:b3:18:f8:3b:91:d6:00:29:98:97:eb:e6:e7: cc:bb:b2:8b:bb:52:d0:80:0f:fc:71:45:79:dc:5b:e8:15:5d: e3:44:15:e2:7f:14:eb:00:df:9b:03:8b:74:32:7c:d3:ce:e1: 1b:fa:e8:c2:d6:df:97:d3:7b:2f:35:e8:3d:6e:bd:a5:92:b1: b8:c6:00:e7:5a:f0:47:b8:a8:91:c4:49:3a:74:c9:9a:c8:cb: 18:fd:3d:df -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDExMjQw NzI0NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1MEUzM0EwNzUzQzQ1 QTczQTQ4NDAzRTYxQkI1OTc3Qzg5MEZDNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs8j0EN42uLdfIPY84VYFKth4KSJkB41cao06dQIJz9ZtT6Z7R 1eM02HXlaGZ87AD3c1dkr2EjdC9BH46EvG0royKkoz2l4DXwhAtBMgUJQS4XMDhp FxWERgjNUrtJpCoPggNHwIqkYxfR2rcBjc9iw/Vwg2hcAHElYKk8YFB2ZaIesDM4 sWcGPao+zt2Lz+1Xksse9yVp7uLllzasdHdPeyI+upk46b+CttQs2opuJ9Rc8hrk Pb1c8KZT8bcZP2YllKtLgNCmCTFkK1xVCS/GOhW/FJEgpZfckTSdH23fpnzt4qlM td07q+hvP6hUU9gEOczIz/8EDlfor9YE5on9AgMBAAGjggIFMIICATAdBgNVHQ4E FgQU1Q4zoHU8Rac6SEA+YbtZd8iQ/FwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9neWNnNnd2cUFGdy0zbGRPTWND cmRXUDZETWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5Xy ncbSDNkVvxeSw8imQZYJBQgPfIrGccoOHhAPMhRbYSOzy+sQNPj6+spTIU5fBCas p+8joO7Vds6Z/Udq7keruqK3ibEx2Qcunz4PsBcRtWGzt7RPjuTW2M55QpfohJIy oPqOfsfmJWOYG2Te8hTr+kXh28zZXoVBJyYWgQjzbnoz81+bp9o7N5iA8KdSht4K k2W2BGNsNSZvqNWdaAQ8AgNMFT+zGPg7kdYAKZiX6+bnzLuyi7tS0IAP/HFFedxb 6BVd40QV4n8U6wDfmwOLdDJ8087hG/rowtbfl9N7LzXoPW69pZKxuMYA51rwR7io kcRJOnTJmsjLGP093w== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:45 2024 by rpki-client on console-fra.rpki-client.org