$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft File: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft (raw, json) Hash identifier: W79+t4L45MX9uyd/RlYU7Nv5V9N4Q+uDCkfqFTF8aQo= Subject key identifier: 70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38 Authority key identifier: 1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9 Certificate issuer: /CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9 Certificate serial: 0C39 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft Manifest number: 0C27 Signing time: Thu 21 Nov 2024 07:23:17 +0000 Manifest this update: Thu 21 Nov 2024 07:23:17 +0000 Manifest next update: Sat 23 Nov 2024 07:23:17 +0000 Files and hashes: 1: HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl (hash: MQPNZ+seHMM9dzxM5M+qo+W5pgUFCRcPPYiq4p+jS/Y=) 2: KgxK8MobaRd4UMQIFbfEi4GKv94.roa (hash: +bPoKcjnplhpjEn8QLy5sv4OEscwIrW7XBHpyfN5Y14=) 3: KwpuvmaJP6u6DEB9j_dkMZGXX2Q.roa (hash: LTsNhpewHr8yvGZSQWlCZuomLRlcuQh6L3iikROCEOQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D92BE0ACF9887B1A8192875CFE732238DE322A9 Validity Not Before: Nov 21 07:23:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=704A3696F22835EA5A0B27271E18C2E98E9AD438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:c5:a6:90:83:ba:c9:33:73:e8:69:43:f8: bb:83:eb:a6:a2:4a:28:ce:b5:e4:27:a2:bb:07:2a: 49:83:99:dd:f9:1b:95:6d:13:a9:90:73:56:f8:81: c5:bd:c3:b0:6c:18:54:d3:e6:64:20:84:17:a6:28: 7f:ab:4c:7b:33:a5:16:48:5b:83:a8:ba:17:9c:28: 33:bc:43:92:f7:f2:04:68:1e:f4:aa:4c:0d:d4:5d: 6a:35:02:99:3c:d1:93:2c:f2:4e:e7:d6:ea:82:ee: 93:fc:6c:65:da:9b:c4:3a:53:e9:11:4f:7b:30:09: 37:34:85:48:eb:34:e2:16:40:c0:a7:33:71:eb:98: 1a:73:75:d7:1a:f3:29:5b:6d:4d:6d:c9:43:00:4e: 12:72:9d:0a:0b:a5:82:31:0c:3e:0a:69:0d:df:54: 83:e7:ca:d8:96:e9:c9:1f:05:09:8d:b2:4b:3b:a8: be:de:8d:2c:35:58:6e:37:05:08:d5:f7:b8:e8:f1: c9:16:11:1e:a4:79:08:1f:19:74:47:ba:6e:1e:b1: 6d:fe:7c:c0:e7:23:cf:27:7d:cc:9d:b4:bc:cc:90: ee:52:f1:1b:e2:49:27:77:22:2b:7f:c0:d0:a1:ef: 63:b8:cf:40:3b:69:0b:24:48:31:9a:db:1e:29:c3: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4A:36:96:F2:28:35:EA:5A:0B:27:27:1E:18:C2:E9:8E:9A:D4:38 X509v3 Authority Key Identifier: keyid:1D:92:BE:0A:CF:98:87:B1:A8:19:28:75:CF:E7:32:23:8D:E3:22:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNCTU/HZK-Cs-Yh7GoGSh1z-cyI43jIqk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:0a:21:c9:c9:25:54:63:66:89:dc:5e:bd:6c:26:bd:21: 27:1c:6d:a9:bb:87:12:40:c9:ad:8f:b1:b7:05:18:b3:df:6d: 1c:19:43:e5:49:b6:8e:61:71:46:50:11:73:41:54:e5:32:27: 9d:e2:b0:e0:81:02:1e:86:23:ec:8e:94:9e:d4:67:4b:73:1f: b4:f5:09:39:2f:96:6f:ef:96:96:41:12:17:2e:54:7d:07:10: 4b:5e:f2:e7:c6:ef:a1:2c:c7:a6:8a:f0:89:bb:f9:c6:17:22: 82:98:24:55:ea:e2:53:2f:de:42:f6:1e:15:53:3a:01:4b:e5: d4:2a:49:a9:ec:14:a3:8b:cd:7e:20:c8:8c:b5:e3:17:ba:5f: 60:71:f2:5f:c7:d5:9e:f7:a3:ea:21:58:23:59:a6:bb:a3:e6: 1d:15:15:76:46:af:d5:1e:92:87:e0:ff:bd:37:1f:96:dd:04: 9e:05:bb:f9:b3:28:82:ff:07:0a:a9:2b:33:19:2a:2c:ed:40: 7a:15:5a:92:45:b8:d3:8d:f0:a9:1c:e2:a6:2d:26:dc:1a:46: 9f:35:08:7b:d2:74:8a:fe:0d:f9:16:c4:26:37:fa:e6:03:42: 9b:86:7d:a7:d6:5d:be:bf:fa:9d:1a:03:31:9f:0e:c2:26:f9: ec:25:59:87 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ5 MkJFMEFDRjk4ODdCMUE4MTkyODc1Q0ZFNzMyMjM4REUzMjJBOTAeFw0yNDExMjEw NzIzMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwNEEzNjk2RjIyODM1 RUE1QTBCMjcyNzFFMThDMkU5OEU5QUQ0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY6sWmkIO6yTNz6GlD+LuD66aiSijOteQnorsHKkmDmd35G5Vt E6mQc1b4gcW9w7BsGFTT5mQghBemKH+rTHszpRZIW4OouhecKDO8Q5L38gRoHvSq TA3UXWo1Apk80ZMs8k7n1uqC7pP8bGXam8Q6U+kRT3swCTc0hUjrNOIWQMCnM3Hr mBpzddca8ylbbU1tyUMAThJynQoLpYIxDD4KaQ3fVIPnytiW6ckfBQmNsks7qL7e jSw1WG43BQjV97jo8ckWER6keQgfGXRHum4esW3+fMDnI88nfcydtLzMkO5S8Rvi SSd3Iit/wNCh72O4z0A7aQskSDGa2x4pwwvHAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUcEo2lvIoNepaCycnHhjC6Y6a1DgwHwYDVR0jBBgwFoAUHZK+Cs+Yh7GoGSh1 z+cyI43jIqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RV L0haSy1Dcy1ZaDdHb0dTaDF6LWN5STQzaklxay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSFpLLUNzLVloN0dvR1NoMXotY3lJNDNqSXFrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOQ1RVL0haSy1Dcy1ZaDdHb0dTaDF6 LWN5STQzaklxay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV KQohycklVGNmidxevWwmvSEnHG2pu4cSQMmtj7G3BRiz320cGUPlSbaOYXFGUBFz QVTlMied4rDggQIehiPsjpSe1GdLcx+09Qk5L5Zv75aWQRIXLlR9BxBLXvLnxu+h LMemivCJu/nGFyKCmCRV6uJTL95C9h4VUzoBS+XUKkmp7BSji81+IMiMteMXul9g cfJfx9We96PqIVgjWaa7o+YdFRV2Rq/VHpKH4P+9Nx+W3QSeBbv5syiC/wcKqSsz GSos7UB6FVqSRbjTjfCpHOKmLSbcGkafNQh70nSK/g35FsQmN/rmA0Kbhn2n1l2+ v/qdGgMxnw7CJvnsJVmH -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:59 2024 by rpki-client on console-fra.rpki-client.org