$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft File: wJahbCg9FgC_MmvP68HRHQoGPZ4.mft (raw, json) Hash identifier: m1RLX/SLIuW/xw9ISO7I2jdfyMBFCTln+Zek1rRGCMM= Subject key identifier: 1B:3A:DA:B5:BB:67:F7:78:04:F1:63:57:A6:49:7C:F0:AB:0F:F9:DB Authority key identifier: C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E Certificate issuer: /CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E Certificate serial: 0214 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft Manifest number: 0212 Signing time: Tue 09 Sep 2025 09:18:04 +0000 Manifest this update: Tue 09 Sep 2025 09:18:04 +0000 Manifest next update: Thu 11 Sep 2025 09:18:04 +0000 Files and hashes: 1: wJahbCg9FgC_MmvP68HRHQoGPZ4.crl (hash: CH51Llw7T5FF2hR4y3Gx/xDNJXLUrmwo4HM75vpniX0=) 2: wTfPiLCSAdkk3FDX2ayM5ViIXck.roa (hash: mrUGXWx+6DjRhJBHQi1oUIkBO2vJiX79l5sdzNEYhNg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C096A16C283D1600BF326BCFEBC1D11D0A063D9E Validity Not Before: Sep 9 09:18:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1B3ADAB5BB67F77804F16357A6497CF0AB0FF9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:8c:0b:10:be:25:fe:df:be:81:39:71:41: f3:56:3a:1a:c0:2e:52:a6:5b:72:55:fd:4d:bd:bc: 77:7b:e1:41:86:f7:57:fa:b6:d0:c9:e4:a8:c7:32: 79:20:b3:82:48:c2:6d:17:e9:81:44:bd:92:86:4c: f1:52:e3:aa:04:24:e7:ac:c4:4b:b8:97:b0:61:26: 64:ab:ef:17:c2:76:fe:74:c8:e3:93:0a:51:c8:ab: 85:c9:de:fb:2e:17:1c:98:fd:7d:b4:f4:dc:d2:da: 58:3f:1f:2c:6c:57:d8:3d:d9:62:2e:ef:3b:45:29: 37:6c:be:9a:74:ea:d1:e0:81:9b:91:88:35:4d:06: c7:b6:c3:1d:e9:cf:3c:44:d7:eb:05:68:e4:47:32: ad:58:95:87:60:d3:a5:08:1d:e0:1c:e3:e6:a4:0f: 8e:92:8e:89:ba:95:2d:26:24:a1:c7:af:c7:ad:fb: a2:21:cb:4b:35:7c:9c:ea:57:82:8e:a2:ce:65:2f: ca:92:8e:2a:8c:42:11:27:56:cb:49:49:70:6b:4d: 75:04:fa:0a:3d:fc:bd:7f:ac:13:78:dc:05:77:ef: 22:82:12:b7:af:fe:28:d6:5e:aa:ed:c1:f6:42:46: 8d:86:fb:4e:a8:f3:f1:8d:12:8f:57:a0:c7:a7:6b: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3A:DA:B5:BB:67:F7:78:04:F1:63:57:A6:49:7C:F0:AB:0F:F9:DB X509v3 Authority Key Identifier: keyid:C0:96:A1:6C:28:3D:16:00:BF:32:6B:CF:EB:C1:D1:1D:0A:06:3D:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wJahbCg9FgC_MmvP68HRHQoGPZ4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/wJahbCg9FgC_MmvP68HRHQoGPZ4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:92:a2:00:9a:9e:62:fa:5b:c2:df:bd:6e:6e:f2:5e:80:6e: 2e:1e:4f:95:4e:62:c4:da:17:16:24:27:1a:24:57:72:2c:41: 6c:7a:d1:f2:76:7e:fd:ab:b7:4a:b4:e7:ef:c6:95:0c:32:d5: 7e:5d:a6:8b:25:37:ab:54:7d:e2:01:3e:4c:41:d6:5e:b7:34: 58:38:f9:3a:30:d9:5f:4f:60:e5:7c:bf:57:7d:f4:ed:09:45: 9f:0a:76:db:09:0e:67:04:cc:98:7a:50:8e:df:47:b2:0d:d2: 9e:32:6d:96:85:23:a9:26:4e:7a:fc:2a:ee:07:6d:83:46:3a: 9f:40:84:4b:cc:e2:8b:36:6f:e1:00:5e:39:17:86:a4:87:8e: 57:e6:55:a4:98:fc:37:8c:f8:0a:bf:ac:9c:e1:32:53:e1:bc: 57:31:a5:64:5f:89:c4:4e:8c:fc:f9:14:cf:66:e5:bf:9f:e9: 43:8e:9b:62:cb:ab:b3:18:f6:ae:0e:f8:d3:cd:43:45:f2:69: c6:5a:b2:c7:7d:82:b8:84:eb:ae:74:e3:92:7c:f3:f6:b9:b0: 14:17:58:99:5e:5b:fe:28:95:90:a6:13:07:fe:76:b9:6f:d0: 6d:10:4c:90:f2:94:bb:85:22:f2:45:5d:54:fe:bb:85:ff:21: c5:90:b5:a3 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzA5 NkExNkMyODNEMTYwMEJGMzI2QkNGRUJDMUQxMUQwQTA2M0Q5RTAeFw0yNTA5MDkw OTE4MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFCM0FEQUI1QkI2N0Y3 NzgwNEYxNjM1N0E2NDk3Q0YwQUIwRkY5REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuJYwLEL4l/t++gTlxQfNWOhrALlKmW3JV/U29vHd74UGG91f6 ttDJ5KjHMnkgs4JIwm0X6YFEvZKGTPFS46oEJOesxEu4l7BhJmSr7xfCdv50yOOT ClHIq4XJ3vsuFxyY/X209NzS2lg/HyxsV9g92WIu7ztFKTdsvpp06tHggZuRiDVN Bse2wx3pzzxE1+sFaORHMq1YlYdg06UIHeAc4+akD46Sjom6lS0mJKHHr8et+6Ih y0s1fJzqV4KOos5lL8qSjiqMQhEnVstJSXBrTXUE+go9/L1/rBN43AV37yKCErev /ijWXqrtwfZCRo2G+06o8/GNEo9XoMena0DpAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUGzratbtn93gE8WNXpkl88KsP+dswHwYDVR0jBBgwFoAUwJahbCg9FgC/MmvP 68HRHQoGPZ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENTS1kv d0phaGJDZzlGZ0NfTW12UDY4SFJIUW9HUFo0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93SmFoYkNnOUZnQ19NbXZQNjhIUkhRb0dQWjQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQ1NLWS93SmFoYkNnOUZnQ19NbXZQNjhI UkhRb0dQWjQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJKi AJqeYvpbwt+9bm7yXoBuLh5PlU5ixNoXFiQnGiRXcixBbHrR8nZ+/au3SrTn78aV DDLVfl2miyU3q1R94gE+TEHWXrc0WDj5OjDZX09g5Xy/V3307QlFnwp22wkOZwTM mHpQjt9Hsg3SnjJtloUjqSZOevwq7gdtg0Y6n0CES8ziizZv4QBeOReGpIeOV+ZV pJj8N4z4Cr+snOEyU+G8VzGlZF+JxE6M/PkUz2blv5/pQ46bYsursxj2rg74081D RfJpxlqyx32CuITrrnTjknzz9rmwFBdYmV5b/iiVkKYTB/52uW/QbRBMkPKUu4Ui 8kVdVP67hf8hxZC1ow== -----END CERTIFICATE-----Generated at Tue Sep 9 18:34:32 2025 by rpki-client