$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft File: yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft (raw, json) Hash identifier: t190ZaM9Fx/hTUsOl4x/dkgXDSnrLd1fZizISSxk5fo= Subject key identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B Certificate serial: 0F51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft Manifest number: 0F35 Signing time: Wed 30 Jul 2025 10:08:43 +0000 Manifest this update: Wed 30 Jul 2025 10:08:43 +0000 Manifest next update: Fri 01 Aug 2025 10:08:43 +0000 Files and hashes: 1: TC5O4BU5yifgspTLoBB-6tROqas.roa (hash: 5Z2V+asSnh0jJDO/1WCHnbOIIe8nc85aTk1atgqeHk4=) 2: bEyFLfDyPGGaE222hmgguAfkah4.roa (hash: 6kWlk6NMCJgw+qUJ8W9n1rIs/qfAK1WraQQkWjTOZ2Q=) 3: pjDSIqC07G2sc-JK1QvHVm6USe4.roa (hash: IBXNxPSvmGuAezCUvdgSujSlh2wGI05dKUepw9tjhZ4=) 4: yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl (hash: p+3eRCMD+ujeKJdDDFTl4GqMIndYxlOe0ZtQRQbjMcc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3921 (0xf51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B Validity Not Before: Jul 30 10:08:43 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2B0A22299F3D186B0FFF5D7474FC5E38D5A00AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5b:cb:71:84:7e:97:e2:d1:b0:e7:e6:76: 33:a0:6e:d9:3b:30:81:a1:46:17:2b:6d:c8:d1:91: 13:61:9e:b0:9b:c4:52:5e:7d:d7:2b:ee:a1:d1:8d: 56:f3:ca:c8:e3:37:9d:04:92:c8:43:71:df:a6:ed: 99:5e:6d:42:9b:ac:13:d5:9b:d3:78:19:36:7b:41: e2:87:db:4b:7e:cf:ea:2e:27:c9:f5:70:a2:cf:2d: 31:f6:2f:ea:a8:3a:9f:5b:c5:f5:f0:16:3c:09:76: 80:2e:09:71:ba:5c:ba:20:e4:af:e6:41:58:7c:fa: 1d:6b:ee:a6:c3:c3:7e:e1:64:fc:8f:19:71:e1:fa: 21:d2:25:b6:c3:c1:0a:4b:9f:cc:0d:fc:43:68:c8: 35:1c:f9:1a:aa:a9:8b:41:8a:e0:7d:a2:2a:0c:87: 45:23:71:f9:df:20:9a:95:4f:38:33:12:8f:5d:db: 42:89:5a:a7:be:40:87:54:88:c0:c0:9a:57:35:9a: b1:c0:d4:ce:01:e2:3f:a2:8d:20:8a:d1:d0:83:8d: 0b:99:4a:dd:a1:c3:9e:cf:aa:5f:fd:6a:eb:fd:4f: 98:72:19:78:dc:d2:fd:6b:73:2c:a4:63:31:b7:a8: 91:f0:9d:c0:5c:26:36:13:90:35:2f:7b:1b:1b:bc: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 X509v3 Authority Key Identifier: keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:03:9d:5a:7e:90:67:be:df:7f:be:21:21:3b:60:4e:66:51: ef:66:9d:53:12:c3:f6:4a:ff:43:b7:23:dc:ba:58:bc:09:8e: ac:5f:77:ee:1b:f1:59:5e:03:a0:a5:07:75:52:cd:33:dd:55: 17:20:cc:b6:7e:69:07:58:7b:00:bb:5c:64:49:d2:f6:d5:16: cc:bc:76:9f:ec:78:a7:f2:6a:4a:98:ff:52:43:e1:d9:23:cd: bf:0f:cf:ee:8d:06:48:71:68:06:3f:43:aa:c9:ce:de:b6:bf: fe:66:61:d5:c6:61:8c:0c:2b:0f:87:92:e9:0a:ce:57:7c:ef: af:4f:dc:d4:f2:ad:24:ce:31:84:6d:f9:be:c3:ce:21:3b:1d: 31:b2:bf:e5:c9:a2:ef:f2:3e:13:17:f2:50:c8:2f:f5:d8:f7: 5e:bd:b1:19:b8:c1:bd:67:3a:ea:a4:69:55:68:20:87:0a:f9: 84:42:2c:5c:59:eb:24:e0:28:7f:a4:a6:e8:a2:89:ac:a8:82: 40:f7:56:b5:0d:cb:35:3e:31:50:63:fb:0b:b9:65:6e:df:43: 99:03:83:ac:09:3d:90:a0:6e:bb:ac:4c:26:b9:71:5c:ce:81: 8f:ff:7b:9d:2f:0d:60:1c:d8:72:94:cb:07:67:4b:2b:5b:7f: 56:83:65:7b -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICD1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yNTA3MzAx MDA4NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJCMEEyMjI5OUYzRDE4 NkIwRkZGNUQ3NDc0RkM1RTM4RDVBMDBBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztVvLcYR+l+LRsOfmdjOgbtk7MIGhRhcrbcjRkRNhnrCbxFJe fdcr7qHRjVbzysjjN50EkshDcd+m7ZlebUKbrBPVm9N4GTZ7QeKH20t+z+ouJ8n1 cKLPLTH2L+qoOp9bxfXwFjwJdoAuCXG6XLog5K/mQVh8+h1r7qbDw37hZPyPGXHh +iHSJbbDwQpLn8wN/ENoyDUc+RqqqYtBiuB9oioMh0UjcfnfIJqVTzgzEo9d20KJ Wqe+QIdUiMDAmlc1mrHA1M4B4j+ijSCK0dCDjQuZSt2hw57Pql/9auv9T5hyGXjc 0v1rcyykYzG3qJHwncBcJjYTkDUvexsbvHQjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUKwoiKZ89GGsP/110dPxeONWgCtAwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS95aHR4NzZ4dmFxUXdK MkNjR0tjMG1DZGtWVXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaAOdWn6QZ77ff74hITtgTmZR72adUxLD9kr/Q7cj3LpYvAmOrF937hvxWV4D oKUHdVLNM91VFyDMtn5pB1h7ALtcZEnS9tUWzLx2n+x4p/JqSpj/UkPh2SPNvw/P 7o0GSHFoBj9DqsnO3ra//mZh1cZhjAwrD4eS6QrOV3zvr0/c1PKtJM4xhG35vsPO ITsdMbK/5cmi7/I+ExfyUMgv9dj3Xr2xGbjBvWc66qRpVWgghwr5hEIsXFnrJOAo f6Sm6KKJrKiCQPdWtQ3LNT4xUGP7C7llbt9DmQODrAk9kKBuu6xMJrlxXM6Bj/97 nS8NYBzYcpTLB2dLK1t/VoNlew== -----END CERTIFICATE-----Generated at Thu Jul 31 18:18:07 2025 by rpki-client