$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCC/-g1hLg_3LrzUilOdl7yi5VgbeIQ.mft File: -g1hLg_3LrzUilOdl7yi5VgbeIQ.mft (raw, json) Hash identifier: +adQm1YGb6BWvhlt9AYDjm6vVFsBSZ/a2sFtKxKK5BQ= Subject key identifier: 08:4F:2E:95:0E:CC:0B:DD:09:9B:52:CB:9C:99:EA:84:AB:2C:A8:EF Authority key identifier: FA:0D:61:2E:0F:F7:2E:BC:D4:8A:53:9D:97:BC:A2:E5:58:1B:78:84 Certificate issuer: /CN=FA0D612E0FF72EBCD48A539D97BCA2E5581B7884 Certificate serial: 0CF5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-g1hLg_3LrzUilOdl7yi5VgbeIQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCC/-g1hLg_3LrzUilOdl7yi5VgbeIQ.mft Manifest number: 0CF5 Signing time: Sun 01 Jun 2025 21:56:55 +0000 Manifest this update: Sun 01 Jun 2025 21:56:55 +0000 Manifest next update: Tue 03 Jun 2025 21:56:55 +0000 Files and hashes: 1: -g1hLg_3LrzUilOdl7yi5VgbeIQ.crl (hash: Lsud8K4bnb73ezfjlQjCqGAATW+3tnGTHDGO5jDyR5w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCC/-g1hLg_3LrzUilOdl7yi5VgbeIQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCC/-g1hLg_3LrzUilOdl7yi5VgbeIQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-g1hLg_3LrzUilOdl7yi5VgbeIQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA0D612E0FF72EBCD48A539D97BCA2E5581B7884 Validity Not Before: Jun 1 21:56:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=084F2E950ECC0BDD099B52CB9C99EA84AB2CA8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:04:f7:95:56:42:52:ed:24:0b:6c:9e:f6:4f: fc:20:e9:b6:6d:da:34:9a:3c:53:9e:72:c7:e5:bf: 70:5b:0a:61:d2:2e:9c:95:90:07:e1:a0:18:51:fc: 1f:da:5a:42:6e:21:59:62:e7:d1:aa:7e:f6:9f:12: 48:0a:f5:7e:6b:80:15:7c:92:48:a8:69:5d:a0:b2: 0d:47:d9:a7:17:51:e0:ac:0b:19:a7:eb:fc:fc:c5: 68:3c:ed:65:62:90:37:21:13:6a:33:5f:ff:e9:9f: 81:94:99:5b:65:b5:c4:c5:a6:91:6a:f1:01:ae:92: ef:79:b7:d3:80:49:98:95:02:62:16:95:15:bc:c5: fd:8a:ca:ed:e1:be:d2:79:1f:3a:d6:b0:03:44:82: 28:82:30:b9:38:8e:87:99:b0:f7:a3:29:f2:c1:8b: af:f2:93:c7:c6:bf:7f:d8:e8:d6:e5:43:be:a9:37: 01:30:48:6b:6f:92:a2:8c:36:25:d5:b6:ea:47:c7: 0d:63:16:94:a5:a7:2d:73:78:71:73:52:ac:f2:0d: ad:a1:e8:03:5e:06:34:db:00:81:91:5c:3c:f7:00: 99:11:f2:84:9a:6e:b7:35:13:5e:16:d3:cd:de:f8: a1:6a:3c:ae:71:f5:36:f5:68:e8:8f:ca:89:69:b2: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:2E:95:0E:CC:0B:DD:09:9B:52:CB:9C:99:EA:84:AB:2C:A8:EF X509v3 Authority Key Identifier: keyid:FA:0D:61:2E:0F:F7:2E:BC:D4:8A:53:9D:97:BC:A2:E5:58:1B:78:84 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCC/-g1hLg_3LrzUilOdl7yi5VgbeIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-g1hLg_3LrzUilOdl7yi5VgbeIQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCC/-g1hLg_3LrzUilOdl7yi5VgbeIQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ce:0a:33:ce:06:0b:0f:ea:b8:7a:05:20:9d:42:1e:2a:ba: ca:ab:f6:d7:42:5a:be:42:63:58:32:f5:68:5f:c3:69:fc:70: b7:e0:b5:6e:6d:f4:1b:c0:ec:ac:9d:cc:cc:3b:54:86:ef:5f: 91:01:cf:db:c4:9f:5c:7c:01:06:27:6a:4d:27:bc:15:11:67: a3:23:32:0d:6f:1b:d1:e6:f5:37:4c:fc:c8:a0:d8:47:47:50: a4:b7:49:05:42:27:f7:1d:45:e7:9d:80:bc:88:28:00:13:cf: d1:c9:3c:55:67:da:74:13:5f:bc:06:6f:d0:0c:36:fb:14:ab: 2b:d3:a6:64:56:3d:d7:27:c2:48:94:93:c7:9f:5f:41:43:49: 4c:35:7c:62:47:27:70:76:d5:16:89:7c:83:b7:e0:63:56:5b: 2c:9b:e2:40:20:a5:d0:ae:04:9a:4c:8b:19:c2:42:0c:8b:be: 8b:f2:c1:4f:ca:25:e3:95:58:cb:25:f7:fb:c2:c5:d9:1d:88: 1b:53:48:40:1c:86:1e:28:0f:6e:51:c9:44:fe:18:aa:ad:d0: 45:6a:10:a6:6e:1d:c0:88:a6:a1:80:df:46:f1:bb:ae:01:22: 87:42:e0:ba:53:87:05:13:00:d6:45:1a:36:4c:e8:17:b2:99: 43:f1:9e:6a -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkEw RDYxMkUwRkY3MkVCQ0Q0OEE1MzlEOTdCQ0EyRTU1ODFCNzg4NDAeFw0yNTA2MDEy MTU2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA4NEYyRTk1MEVDQzBC REQwOTlCNTJDQjlDOTlFQTg0QUIyQ0E4RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnBPeVVkJS7SQLbJ72T/wg6bZt2jSaPFOecsflv3BbCmHSLpyV kAfhoBhR/B/aWkJuIVli59GqfvafEkgK9X5rgBV8kkioaV2gsg1H2acXUeCsCxmn 6/z8xWg87WVikDchE2ozX//pn4GUmVtltcTFppFq8QGuku95t9OASZiVAmIWlRW8 xf2Kyu3hvtJ5HzrWsANEgiiCMLk4joeZsPejKfLBi6/yk8fGv3/Y6NblQ76pNwEw SGtvkqKMNiXVtupHxw1jFpSlpy1zeHFzUqzyDa2h6ANeBjTbAIGRXDz3AJkR8oSa brc1E14W083e+KFqPK5x9Tb1aOiPyolpst8PAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUCE8ulQ7MC90Jm1LLnJnqhKssqO8wHwYDVR0jBBgwFoAU+g1hLg/3LrzUilOd l7yi5VgbeIQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENDLy1n MWhMZ18zTHJ6VWlsT2RsN3lpNVZnYmVJUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev LWcxaExnXzNMcnpVaWxPZGw3eWk1VmdiZUlRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVENDLy1nMWhMZ18zTHJ6VWlsT2RsN3lpNVZn YmVJUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1zgozzgYL D+q4egUgnUIeKrrKq/bXQlq+QmNYMvVoX8Np/HC34LVubfQbwOysnczMO1SG71+R Ac/bxJ9cfAEGJ2pNJ7wVEWejIzINbxvR5vU3TPzIoNhHR1Ckt0kFQif3HUXnnYC8 iCgAE8/RyTxVZ9p0E1+8Bm/QDDb7FKsr06ZkVj3XJ8JIlJPHn19BQ0lMNXxiRydw dtUWiXyDt+BjVlssm+JAIKXQrgSaTIsZwkIMi76L8sFPyiXjlVjLJff7wsXZHYgb U0hAHIYeKA9uUclE/hiqrdBFahCmbh3AiKahgN9G8buuASKHQuC6U4cFEwDWRRo2 TOgXsplD8Z5q -----END CERTIFICATE-----Generated at Tue Jun 3 08:16:32 2025 by rpki-client