$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json) Hash identifier: LZzcJPnLTXab+QpBRyzzPA5d4fhUUI3a+FdthBdMj3Q= Subject key identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Certificate serial: 33 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft Manifest number: 32 Signing time: Tue 03 Jun 2025 20:26:31 +0000 Manifest this update: Tue 03 Jun 2025 20:26:31 +0000 Manifest next update: Wed 04 Jun 2025 02:26:31 +0000 Files and hashes: 1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: JK9GyTC12aUGJcc4jjaPxbDOA3pM4QbywXWVJXLh1/4=) 2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 02:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Validity Not Before: Jun 3 20:26:31 2025 GMT Not After : May 23 15:30:20 2026 GMT Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69: 98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81: 2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d: d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7: 8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63: 3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58: ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43: 86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71: 32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69: 71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10: 3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82: e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c: 8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b: 6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa: 6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef: bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7: 04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B X509v3 Authority Key Identifier: keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:9d:3b:44:f8:ca:dd:c4:27:42:68:9d:00:62:5e:10:b2:23: 98:0f:60:7a:9b:45:19:ef:1b:e7:a7:9e:ee:c6:e5:df:37:81: df:65:49:3f:e4:72:fb:30:04:b1:f2:33:ce:be:3f:18:e3:a2: 85:b2:f4:ca:63:51:19:4d:36:bc:af:68:dd:8e:df:d6:75:b9: b1:05:7a:e9:85:82:e1:de:e2:8a:b5:19:b6:da:63:c8:d3:6e: 97:37:e3:ea:a7:be:44:de:7c:44:56:ab:86:26:53:a0:01:10: 7f:ae:d4:f6:c7:5e:b8:10:82:47:b7:12:ad:56:1b:4d:13:4f: be:f9:79:a0:c5:ad:8c:24:3c:a2:09:ee:d3:56:32:d1:fa:89: 7a:79:80:98:38:5b:c2:84:cf:d7:bd:9e:b9:f7:92:76:fe:91: 40:4b:4d:95:5d:c6:e9:e8:17:ba:c1:68:ba:25:50:a5:c1:8d: 87:e8:ca:72:3d:18:c0:44:36:6d:40:3f:d1:18:60:a6:87:7b: aa:c0:7e:37:d7:a0:15:53:b4:ca:7f:74:3d:a6:2e:0f:2c:39: 29:6b:3d:29:b8:3f:18:cf:76:c1:8a:3d:0a:0e:28:12:eb:1e: 20:03:9b:cd:cc:c5:4e:e4:03:65:05:85:44:fc:56:aa:1a:01: e4:6a:a4:93 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOUM2 MkRDMTZBMzI1OTQxNTY2NDE0MkM5Mjc4QzVEREM0RDgyOTlEMB4XDTI1MDYwMzIw MjYzMVoXDTI2MDUyMzE1MzAyMFowMzExMC8GA1UEAxMoOEU4RDMzOTlGMTdFQ0M0 RkIwRUZEMzkyOUY2NDgyMkY1RURGRUUzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWIbbf5dE/fN1M9859pmMcKk6c6vx57s4g2zqiBK59q/2O7bJnE 2cx6vHuN2Q1sw5iJwDvxpFtP81j3jrHXVTlnZKIH2+Cz5OhjOxeLOzPi7pb99tbp YYZYyoK5GHwh+PAS9/tVm75DhksQc0ErIWpRgFROa31xMiPctj80uV0GWtx3+DBp cdmpHiqt6xZvojgKpSUQPyQnDwlzhosx3NQW1i2C5qSEf1T+kAzU4FV7UU0Mjxbm vAKtMdNFrKAvUMubblpq0qX3BsHxTRTuQciqbF3fYT6foB2SJ+GQyU7vu1WBuYg1 jCe6ibMUhKL3BHUvsFxwnEBBZzhdt0/uuPkCAwEAAaOCAgcwggIDMB0GA1UdDgQW BBSOjTOZ8X7MT7Dv05KfZIIvXt/uOzAfBgNVHSMEGDAWgBT5xi3BajJZQVZkFCyS eMXdxNgpnTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9VV0FZSU8v LWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8tY1l0d1dveVdVRldaQlFza25qRjNjVFlLWjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9VV0FZSU8vLWNZdHdXb3lXVUZXWkJRc2tu akYzY1RZS1owLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBABOd O0T4yt3EJ0JonQBiXhCyI5gPYHqbRRnvG+ennu7G5d83gd9lST/kcvswBLHyM86+ PxjjooWy9MpjURlNNryvaN2O39Z1ubEFeumFguHe4oq1GbbaY8jTbpc34+qnvkTe fERWq4YmU6ABEH+u1PbHXrgQgke3Eq1WG00TT775eaDFrYwkPKIJ7tNWMtH6iXp5 gJg4W8KEz9e9nrn3knb+kUBLTZVdxunoF7rBaLolUKXBjYfoynI9GMBENm1AP9EY YKaHe6rAfjfXoBVTtMp/dD2mLg8sOSlrPSm4PxjPdsGKPQoOKBLrHiADm83MxU7k A2UFhUT8VqoaAeRqpJM= -----END CERTIFICATE-----Generated at Wed Jun 4 01:30:57 2025 by rpki-client