$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft File: uU530OicbkiYh7m6MhYTTB-VamQ.mft (raw, json) Hash identifier: 8+wOJEvgr+ZObnTDQTrpy4XZB1PW9e3s121mrj/f24E= Subject key identifier: AA:C1:5D:BB:7B:E3:F2:6F:64:EB:2E:5F:F3:E1:57:92:E8:35:28:53 Authority key identifier: B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64 Certificate issuer: /CN=B94E77D0E89C6E489887B9BA3216134C1F956A64 Certificate serial: 0BFC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft Manifest number: 0BFC Signing time: Mon 25 Nov 2024 16:53:49 +0000 Manifest this update: Mon 25 Nov 2024 16:53:49 +0000 Manifest next update: Wed 27 Nov 2024 16:53:49 +0000 Files and hashes: 1: uU530OicbkiYh7m6MhYTTB-VamQ.crl (hash: VaM/Kw3O0xO7vyNBsSL+pMscE9LJf4zPcCmcK+AKGLw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B94E77D0E89C6E489887B9BA3216134C1F956A64 Validity Not Before: Nov 25 16:53:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AAC15DBB7BE3F26F64EB2E5FF3E15792E8352853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:b5:3f:8a:9c:11:22:96:fb:54:4c:67:9d: 54:5b:8b:1d:85:c5:57:e4:5a:9f:a0:1b:d3:eb:9e: 81:04:26:ce:16:f8:be:50:c8:3a:d7:f3:6d:03:0b: be:3e:dd:e7:a4:18:17:f8:e9:0a:6f:69:70:e2:69: a5:d9:16:4e:d4:9d:19:d4:bd:46:86:eb:9f:d5:bf: f8:12:2e:50:01:42:71:bc:ae:93:c9:71:e8:82:f9: 31:e2:91:62:09:e2:15:47:cd:ce:41:ff:0c:88:02: 7d:83:34:b6:22:94:c8:c2:cd:cd:64:f0:13:75:06: 48:49:55:62:0f:3d:6c:ec:85:1d:e5:db:90:64:44: 86:ad:0b:f9:19:b6:98:58:58:44:94:31:41:34:df: b8:17:e6:48:af:dd:d9:d8:d2:c8:7d:23:1b:fc:fa: 7f:0d:1b:6b:09:be:43:e5:f7:29:ea:d7:84:e4:6e: c3:76:c6:2e:a1:87:75:1a:03:b7:6e:2f:1f:72:54: b2:6a:36:41:e0:92:6b:09:37:dd:27:39:2d:e8:b7: 8c:82:ea:20:06:3a:78:fe:7b:70:04:82:2f:8c:d0: 26:a3:fe:bc:d3:1a:56:b1:68:a0:16:91:29:29:65: c3:51:a9:07:cb:83:e0:f4:04:ee:e1:b9:90:c7:44: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C1:5D:BB:7B:E3:F2:6F:64:EB:2E:5F:F3:E1:57:92:E8:35:28:53 X509v3 Authority Key Identifier: keyid:B9:4E:77:D0:E8:9C:6E:48:98:87:B9:BA:32:16:13:4C:1F:95:6A:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/uU530OicbkiYh7m6MhYTTB-VamQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIGC/uU530OicbkiYh7m6MhYTTB-VamQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:db:e1:fb:d9:c1:91:a9:06:98:73:a5:da:02:9c:8d:5c:97: 56:0b:68:a3:98:f0:c7:7a:49:32:3c:8f:fe:32:9f:37:7e:84: f6:e4:26:4e:fe:a6:3a:95:17:7c:84:b8:8c:7c:0a:78:a2:8b: a4:8a:6c:1d:f3:9a:45:06:2b:3a:c2:f8:4f:43:2b:da:9e:f1: 7e:a7:cc:26:59:c1:1d:35:92:5c:bf:1d:8e:77:87:9d:54:84: fc:8f:95:a2:3c:2c:18:2c:37:b7:21:fa:de:ac:1e:c5:3b:8c: fa:38:31:68:a3:96:8e:f9:f7:59:ee:e2:f9:2b:9c:d3:fb:67: 45:49:da:a7:95:e3:0c:a7:35:b4:b2:56:1a:a8:d2:44:79:c3: db:29:52:ff:bf:31:8c:8b:b2:bc:a1:9a:f5:28:02:ef:da:fb: ea:ab:30:eb:c9:5b:1b:cc:3c:ea:5f:89:22:d2:cb:d9:13:10: 01:54:34:ca:dc:2d:02:b9:39:0c:e4:50:32:08:ad:fa:d6:d4: 8e:0a:fe:4a:48:e7:26:78:9c:32:ca:fe:4c:cb:a9:98:0b:e2: 61:1d:61:03:c3:5a:3f:c4:fe:04:b7:09:7e:11:86:66:c8:6f: ac:e2:36:43:7a:3c:95:0f:4f:33:df:b2:38:94:c6:15:53:24: cd:71:0c:69 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjk0 RTc3RDBFODlDNkU0ODk4ODdCOUJBMzIxNjEzNEMxRjk1NkE2NDAeFw0yNDExMjUx NjUzNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBQzE1REJCN0JFM0Yy NkY2NEVCMkU1RkYzRTE1NzkyRTgzNTI4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnKrU/ipwRIpb7VExnnVRbix2FxVfkWp+gG9PrnoEEJs4W+L5Q yDrX820DC74+3eekGBf46QpvaXDiaaXZFk7UnRnUvUaG65/Vv/gSLlABQnG8rpPJ ceiC+THikWIJ4hVHzc5B/wyIAn2DNLYilMjCzc1k8BN1BkhJVWIPPWzshR3l25Bk RIatC/kZtphYWESUMUE037gX5kiv3dnY0sh9Ixv8+n8NG2sJvkPl9ynq14TkbsN2 xi6hh3UaA7duLx9yVLJqNkHgkmsJN90nOS3ot4yC6iAGOnj+e3AEgi+M0Caj/rzT GlaxaKAWkSkpZcNRqQfLg+D0BO7huZDHRO0NAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUqsFdu3vj8m9k6y5f8+FXkug1KFMwHwYDVR0jBBgwFoAUuU530OicbkiYh7m6 MhYTTB+VamQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElHQy91 VTUzME9pY2JraVloN202TWhZVFRCLVZhbVEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3VVNTMwT2ljYmtpWWg3bTZNaFlUVEItVmFtUS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJR0MvdVU1MzBPaWNia2lZaDdtNk1oWVRU Qi1WYW1RLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBACfb4fvZ wZGpBphzpdoCnI1cl1YLaKOY8Md6STI8j/4ynzd+hPbkJk7+pjqVF3yEuIx8Cnii i6SKbB3zmkUGKzrC+E9DK9qe8X6nzCZZwR01kly/HY53h51UhPyPlaI8LBgsN7ch +t6sHsU7jPo4MWijlo7591nu4vkrnNP7Z0VJ2qeV4wynNbSyVhqo0kR5w9spUv+/ MYyLsryhmvUoAu/a++qrMOvJWxvMPOpfiSLSy9kTEAFUNMrcLQK5OQzkUDIIrfrW 1I4K/kpI5yZ4nDLK/kzLqZgL4mEdYQPDWj/E/gS3CX4RhmbIb6ziNkN6PJUPTzPf sjiUxhVTJM1xDGk= -----END CERTIFICATE-----Generated at Mon Nov 25 18:39:34 2024 by rpki-client on console-fra.rpki-client.org