$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft File: 36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json) Hash identifier: IWSRom5G5o92QpJJL6YRoUS5FSs+fgjP9xXN/1ulm+o= Subject key identifier: E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 14AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft Manifest number: 11EA Signing time: Wed 22 Oct 2025 07:55:27 +0000 Manifest this update: Wed 22 Oct 2025 07:55:27 +0000 Manifest next update: Fri 24 Oct 2025 07:55:27 +0000 Files and hashes: 1: 0EV9Waq_8Cf2qfNaIc6o1Ce1S7U.roa (hash: sYZtEfovuYI6eGXv2fre/IamCcA0mP3GieUs/1LghjE=) 2: 0f_-NuP5tkMNqydkxFRz-2kSLAE.roa (hash: qUkbl1kgH0GjE0cskLl2GwkscNyeE9C2Txp6pxLQpas=) 3: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: SUemYfLXT/z+9l3qJAKecnWC8Gm7xon3GifUV4+ARJg=) 4: 3hmGqCK4MfQ8p--8Knz4PLEsf4I.roa (hash: Nr/0iXAvSXdC3uAy1eKOiiSrzdWZjWoevPteFP22oDA=) 5: 45QmnsqdWOqNKxUfS08P7N5eAaw.roa (hash: FLKv90LqqAqfzW4ka4s7u8EQzLV4bNEoQgjjXQI2gvk=) 6: 4XfHzwZwVYmznZ5CCJNJ3lOjuEI.roa (hash: bR4SxyCJGeiJnHEswyFDofE+8/L6j5PhW5a8nMPotCE=) 7: 4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa (hash: rr8ai+tHPGty5BupOyE9DelxO6iE+XyM3irun6Qw408=) 8: 5lDuntK7WIoZk0sgHBscqc9RL6w.roa (hash: JX4YhXuPQCIu5bsUWEJxrMbMu1FR56LLIvAcdHfMem0=) 9: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (hash: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg=) 10: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (hash: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY=) 11: AFcm7pM8j5ejCMlAh-5j8-sOEbc.roa (hash: rW1JSOnwV0njBGop5mlA7nJRWoQdJziVa3ds1Te44jo=) 12: AY_50U5vPMRrl8HUUZiPEYGKnto.roa (hash: YyY5kyPyrcgvMnbVZJIfrN9oOpX8/EgZ0i89QU4P1aY=) 13: Dx2ApvEhn7PxJ8IY8VenEsVr7YI.roa (hash: 3g2bJet15OC8Qg5HZXjqPHP6jDy1Kz4czkgcw+OAwUE=) 14: IS2LrxQcXYojyogdnit3pCUydBw.roa (hash: Tm+olkR0aKGzvS4I3+QR4fxXgoLKRa9UwrX3bgTbZEU=) 15: IVibC69SMkVPpFh5VWNu00soZzc.roa (hash: 4mj7nxLKJP4DJj4m3Jnj5IvmoJabF77XGRvFCH7i908=) 16: J50ylXuhdas2KjTervlhvK74aq4.roa (hash: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I=) 17: O7EZ6j9V8cFiV9bX-EKBNkNR4Z0.roa (hash: 6gvliBqdvkpnm0vNb3P2yjHmVmhuLehtXWxM0187/5s=) 18: SbMnpJykKnyhfqRzZl_0BM-hFZs.roa (hash: 7rwtW35hihjLl/meUt1h7x94RGg2ejnRblaYIEqj3Ws=) 19: VPB09wxEXC4KnKhZaK6kgG661Nc.roa (hash: KuU6jWQ8Q2obz6ui/H5nMGWvB/CcAJ5QzqLfteaezWk=) 20: W75m8ClI26gr6u2_zu3FGxiwYc0.roa (hash: rW2O/DwhtBIHzeC1v1EuOht5gYqq1jj3/MARe13l5jU=) 21: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (hash: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI=) 22: YRHxiXt805LQZ1d8Y2knw4hnN54.roa (hash: NISqLBuTIae3loWvUIDNUzIZtFP30DLGraPTFixxuSo=) 23: ZAiGeVD6b-J66tqwkFsZu7Vj4os.roa (hash: X0Wzw79OqatqPrnFcGfAjOJKu6KRgTGGpZArjlzvW0g=) 24: izVRQ7JLPoikKp5m-2SqYrAutUQ.roa (hash: HBf6u6pm8Xxecg4TSXECUcvkRPQipEAyoXUxPHY1K2M=) 25: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (hash: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI=) 26: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (hash: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0=) 27: t-6GfITkRkCZ0DXF1cPUbmXyp-o.roa (hash: 0dRYHzwpqJViiMUMNEZdGm56VlcO6Z1ptTcdyNhGmmc=) 28: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (hash: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0=) 29: yzyNApNJEI49g97BvptpQk2LDZ4.roa (hash: TxxKBZ0glxRQ9j0CWLC8FZvuWkUNUyHuLNRZ5LUHCcQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5294 (0x14ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Oct 22 07:55:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9: 37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af: 53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e: 06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2: 28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46: 43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a: 65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7: bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1: 79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f: b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8: c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d: 7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69: eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b: 60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03: 56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0: 91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae: 21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3a:6c:d9:11:6d:b8:9a:dd:ae:c2:c8:3d:b9:a7:73:b3:35: dc:ee:2a:21:85:d9:bf:87:e5:71:63:f6:60:03:58:ef:f3:65: 10:81:b7:75:d8:17:21:51:7c:8c:c6:5f:a6:01:d9:89:7f:b6: e0:72:e6:d1:ba:4f:42:cf:ed:a4:3f:51:58:61:9f:39:fd:80: 01:da:fb:1e:9b:4e:38:4e:b1:f1:77:67:fa:b6:07:50:b7:ab: 28:b1:40:fc:84:8f:2c:73:cd:ed:3b:77:4e:3c:7c:35:e2:76: 57:0a:7b:c6:3d:87:15:a9:7c:46:b1:99:d1:38:1c:de:e4:4f: 43:cf:6f:41:e4:77:d0:e2:06:59:41:62:8a:d4:d3:aa:b2:18: b2:a8:f6:96:9e:93:07:8b:ad:54:d3:a4:de:1e:61:f8:9c:4e: 65:1f:32:43:6a:98:71:5f:a4:02:fc:4e:d7:88:4c:31:df:1f: 2c:fa:25:2a:8e:80:f0:04:0d:6c:1c:10:f9:d3:a2:4a:75:f6: 2d:19:06:1e:c9:41:db:62:df:84:3c:b4:ed:ae:86:92:23:25: 02:7a:30:6e:87:12:69:fd:da:b6:c4:0f:18:d7:68:94:fd:ac: 6f:03:28:fe:df:0a:5f:54:8c:da:b3:b1:d2:80:e7:58:a3:05: ef:33:76:4f -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNTEwMjIw NzU1MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUzRDhBMEZCQ0ZGQjMw MzlFOUE4MUFGNjA2QTY3MDczRTExNTg1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4bUyWnZBWHhc6fa3RyTdM6Ll0Ob5d4pxGCgamr1NXuMkYYGeb oVYryyRNDgb9pV73TqvELXfRVYwywihQlSWjUceo7PJmaRsvRkOzZC5vM3bPRSMs VRvbSmWR+PDRHBagVXMlugf+97t9vmeQPdW/TpXGs2SN0XkzOrQFBF/s37rFEgob P7W/7fqA1xdyLyXhAs846MRT8rcgCXosQ9/gsflAfXrQta2Hco0/Gx0WmiKHaevm KKCKEn/PacCD71wQi2BSi5qnL4xq8hHvn2YVA1bB5zBuzEFC9hs/spVnsJFpu8P2 qy9jr7JfIw83riF0oHaqt70TnZVitpDX5c2RAgMBAAGjggIFMIICATAdBgNVHQ4E FgQU49ig+8/7MDnpqBr2BqZwc+EVhV8wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy8zNmpFVklGY01CZEZicU8wcDlB Q0U3dUZ5V1UubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDps 2RFtuJrdrsLIPbmnc7M13O4qIYXZv4flcWP2YANY7/NlEIG3ddgXIVF8jMZfpgHZ iX+24HLm0bpPQs/tpD9RWGGfOf2AAdr7HptOOE6x8Xdn+rYHULerKLFA/ISPLHPN 7Tt3Tjx8NeJ2Vwp7xj2HFal8RrGZ0Tgc3uRPQ89vQeR30OIGWUFiitTTqrIYsqj2 lp6TB4utVNOk3h5h+JxOZR8yQ2qYcV+kAvxO14hMMd8fLPolKo6A8AQNbBwQ+dOi SnX2LRkGHslB22LfhDy07a6GkiMlAnowbocSaf3atsQPGNdolP2sbwMo/t8KX1SM 2rOx0oDnWKMF7zN2Tw== -----END CERTIFICATE-----Generated at Wed Oct 22 10:32:15 2025 by rpki-client