$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft File: KRuvagwXbOCjJCNma854-dkYJMs.mft (raw, json) Hash identifier: Drb9+qzKH8bJZRg7utfI/WgPr4nvn5/yU1CKZ+s1NhE= Subject key identifier: D7:FA:53:70:0F:DA:DB:08:F4:94:33:EA:80:94:6F:E3:0A:4E:B8:CC Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB Certificate issuer: /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Certificate serial: 09B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft Manifest number: 0996 Signing time: Fri 26 Jul 2024 05:38:52 +0000 Manifest this update: Fri 26 Jul 2024 05:38:52 +0000 Manifest next update: Sun 28 Jul 2024 05:38:52 +0000 Files and hashes: 1: 00ClcGI5eHFYxNPfjStR_XWHwSQ.roa (hash: tU6n9pvSPjjxi/Pum70gfMgVWAQ1zy6uX5RepG+AyCU=) 2: FXbrfhBeRWzrcvq0DstGuA9mP54.roa (hash: SOJiPc1bflIVxuz1zW8DzOstraYMWtZ9/zW+aKJYdrE=) 3: KRuvagwXbOCjJCNma854-dkYJMs.crl (hash: nQJtrpy4ZfTFEHUb8y8V/JOrqtLuqXL+aWzJjZnHTHs=) 4: _Eu0QVjsRtaEkhcxXXXoqKvWpvQ.roa (hash: OScsdmAxtsyJ2IujWkagKPoJ3qh3XL23QCxE7mtY/eo=) 5: z8lvMEmJ_x7StsJ925ukdSVsPo8.roa (hash: dAmhwW3wosrpMnBMReLM+Oi1eS5IJy6Vhkkc3ZbVn6k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jul 2024 02:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB Validity Not Before: Jul 26 05:38:52 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D7FA53700FDADB08F49433EA80946FE30A4EB8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:63:b7:7d:ab:61:c5:b5:73:b8:4f:2e:23: fb:53:bf:f0:8c:d7:93:f2:94:b2:55:e5:c6:21:e4: 7a:ed:4c:33:6e:64:c4:0f:3f:27:67:7e:e8:6f:7a: e2:3b:5d:3c:e9:a3:d8:bd:fb:b0:03:88:fa:55:e6: 70:99:3a:ee:86:96:8e:19:22:b8:ed:d9:4c:ff:bb: f3:45:15:5e:ea:f1:67:bf:15:25:78:26:69:78:99: b2:9d:50:5b:af:93:e5:2d:2f:5d:fb:a5:d2:01:8c: 15:9a:7d:fe:7e:83:71:6f:68:13:24:c0:85:80:0b: 61:94:df:d2:0d:61:d6:34:36:b3:d8:84:11:aa:e4: 54:8b:53:1a:dd:e6:73:55:71:3b:92:76:83:b1:56: 8b:8a:9c:62:d2:83:6e:38:b8:58:f9:92:7b:89:ba: c9:c4:22:86:fd:32:48:9f:89:92:96:ef:10:80:ce: 89:7e:86:b0:4c:3d:68:8f:28:d4:1a:24:0f:c3:a0: a2:9f:f6:f5:6b:17:ea:f6:58:48:34:98:3c:f5:41: 4e:7a:09:ed:7f:76:99:90:01:14:17:17:c6:b7:17: 50:2f:aa:c3:0b:8a:5c:a6:50:15:9d:00:9d:ed:08: f5:1e:bb:bf:fc:33:00:6e:81:d7:e6:17:76:44:6e: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:53:70:0F:DA:DB:08:F4:94:33:EA:80:94:6F:E3:0A:4E:B8:CC X509v3 Authority Key Identifier: keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:69:d0:9a:17:11:3c:5e:22:d3:cf:8b:4d:37:db:99:7a:9d: 41:86:20:01:07:3d:9b:dc:cf:b9:a6:b7:44:ed:ce:44:aa:b1: 5d:92:03:6d:f6:79:b5:48:35:c9:7b:73:87:e7:4d:94:be:61: 47:9b:6e:b9:9d:92:71:32:85:99:61:a6:46:f1:55:5a:a0:3c: d7:5f:8c:2a:46:2b:58:b0:b4:6f:9f:f9:d2:4f:4f:10:3a:94: aa:0a:c7:24:7a:e4:c4:dc:e3:ee:6c:b6:58:ad:3c:56:4b:f7: cd:03:6b:02:6f:4b:41:18:8b:07:e6:c4:e7:13:61:ac:4f:ad: cb:1a:74:1b:f6:56:53:50:9e:c0:a7:49:18:e2:ca:c6:c6:ad: b9:48:1d:ad:fe:e5:14:a9:76:0f:79:6e:a4:7f:60:4f:85:33: 77:b7:a9:0b:01:33:d8:2a:9b:bb:95:19:77:65:35:2f:dc:9c: 72:2f:f6:1b:49:31:91:85:0e:26:c2:7a:22:2e:8c:bf:b3:ac: 76:da:38:c1:49:e0:76:2d:2b:3e:f7:b9:35:13:c1:05:df:98: 45:2c:b8:be:16:98:75:9a:95:09:10:bc:76:c0:20:65:fe:ba: e6:08:66:fe:04:1b:43:cf:0a:6b:67:d8:13:70:87:7b:87:dd: 5e:34:2d:25 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkx QkFGNkEwQzE3NkNFMEEzMjQyMzY2NkJDRTc4RjlEOTE4MjRDQjAeFw0yNDA3MjYw NTM4NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ3RkE1MzcwMEZEQURC MDhGNDk0MzNFQTgwOTQ2RkUzMEE0RUI4Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIrmO3fathxbVzuE8uI/tTv/CM15PylLJV5cYh5HrtTDNuZMQP PydnfuhveuI7XTzpo9i9+7ADiPpV5nCZOu6Glo4ZIrjt2Uz/u/NFFV7q8We/FSV4 Jml4mbKdUFuvk+UtL137pdIBjBWaff5+g3FvaBMkwIWAC2GU39INYdY0NrPYhBGq 5FSLUxrd5nNVcTuSdoOxVouKnGLSg244uFj5knuJusnEIob9MkifiZKW7xCAzol+ hrBMPWiPKNQaJA/DoKKf9vVrF+r2WEg0mDz1QU56Ce1/dpmQARQXF8a3F1AvqsML ilymUBWdAJ3tCPUeu7/8MwBugdfmF3ZEbltXAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQU1/pTcA/a2wj0lDPqgJRv4wpOuMwwHwYDVR0jBBgwFoAUKRuvagwXbOCjJCNm a854+dkYJMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdEUy9L UnV2YWd3WGJPQ2pKQ05tYTg1NC1ka1lKTXMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L0tSdXZhZ3dYYk9DakpDTm1hODU0LWRrWUpNcy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RXRFMvS1J1dmFnd1hiT0NqSkNObWE4NTQt ZGtZSk1zLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAL9p0JoX ETxeItPPi00325l6nUGGIAEHPZvcz7mmt0TtzkSqsV2SA232ebVINcl7c4fnTZS+ YUebbrmdknEyhZlhpkbxVVqgPNdfjCpGK1iwtG+f+dJPTxA6lKoKxyR65MTc4+5s tlitPFZL980DawJvS0EYiwfmxOcTYaxPrcsadBv2VlNQnsCnSRjiysbGrblIHa3+ 5RSpdg95bqR/YE+FM3e3qQsBM9gqm7uVGXdlNS/cnHIv9htJMZGFDibCeiIujL+z rHbaOMFJ4HYtKz73uTUTwQXfmEUsuL4WmHWalQkQvHbAIGX+uuYIZv4EG0PPCmtn 2BNwh3uH3V40LSU= -----END CERTIFICATE-----Generated at Fri Jul 26 23:25:43 2024 by rpki-client on console-ams.rpki-client.org