$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft File: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json) Hash identifier: 4CGI/OJEER2HtEosx89XG3WiQXD7VCYai3muEC5esyY= Subject key identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Certificate serial: 1062 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft Manifest number: 1059 Signing time: Sun 01 Jun 2025 21:26:00 +0000 Manifest this update: Sun 01 Jun 2025 21:26:00 +0000 Manifest next update: Tue 03 Jun 2025 21:26:00 +0000 Files and hashes: 1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: yA61lvkXh1UuR7utOd2Af6IlkNcXGqRHeOTRiimNfiE=) 2: jFOAcEZVumM_2ehoJfHlpaXcShA.roa (hash: oxuZmH4tmCWLw8FxgYK0anKKOf7pIls25q1O8EEoeqI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Jun 2025 09:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4194 (0x1062) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Validity Not Before: Jun 1 21:26:00 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87: 39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec: c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b: ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f: fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92: 13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74: 15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1: 9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55: ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a: 92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68: 82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0: 99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e: 39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3: c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf: 02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29: 08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f: 80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A X509v3 Authority Key Identifier: keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:85:e0:21:14:c6:82:d4:f4:43:5a:a4:b3:9a:b9:7a:97:6c: aa:64:98:80:45:b1:be:b1:0e:dc:a9:ce:5f:c2:d1:bc:8d:dc: 9c:fb:ad:04:fb:ef:db:d5:dc:bf:13:80:44:58:d8:a3:49:ac: e9:9a:7a:44:38:1b:1e:9b:6c:7e:c8:83:f6:5d:6f:40:7a:46: 40:65:e3:fc:ed:ad:83:bf:c6:91:c4:8e:69:cd:95:e9:e4:73: c4:73:5b:23:61:26:3a:d9:26:35:65:13:17:df:9b:8f:4b:35: 49:86:8c:72:4f:73:61:3b:95:5c:1e:35:3d:85:c5:6c:d5:95: ab:6a:65:3b:36:29:0b:07:7f:d4:a6:f1:13:06:87:55:7b:2b: 93:16:85:ee:e9:18:f7:6a:1b:14:bc:85:78:1f:16:a0:a3:23: 0b:08:01:1e:1d:3a:c9:62:fb:5a:e0:10:4d:68:1d:2d:90:79: e1:68:3c:34:4f:ee:a5:49:a2:bd:c7:8c:d7:65:4c:de:b7:28: 83:33:d8:67:99:cb:2d:d9:0c:01:c9:95:c2:07:27:a4:a1:d2: 3b:d6:2d:74:55:b8:fc:3d:19:50:b4:50:15:82:d1:03:3f:fd: 06:8c:b2:ea:34:7d:53:ce:49:12:a7:aa:3a:56:95:c9:aa:d3: 84:64:6b:b5 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICEGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2 MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNTA2MDEy MTI2MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJERjVFNzRDMzI1RDRF NTM3MjA1NkNBMEVBNzMyMzhFRjQ3NDFEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4JDoSqHKDOkFjFRFShzl4xs1euKJTsxXHe8xp7MhoYGoin6uj G2blLdNdS8oRnlEN53vPCSefel3WT/2VO3QvzHg9hjYdn45nkhPURgNWAFMqUVkB p+XJdBXMOT/qvij/4qLDtsgEoZvsHwFxmSMraa+BrbWhVaz7K+Dk/cIxgG4cBBt6 epKBurnYY71fGhofgXQMaIJINkWlx4BGjnxsCGGcwJm47cLBIiz2Ox9kyDDVbjna tWXyrZ/6Ke+9b1xR88XmIAb0EiZH+PmIb6VmvwKP9Sxw5KlKz11wDpLNKQiQNUoA IYELidhTa6slf4CXxVcv7LiGLJQX7wqEbhDfAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUvfXnTDJdTlNyBWyg6nMjjvR0HRowHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWjJMZ0NrX3Z6 ZGZ3VW5Qa0ZRSVl3Nm4tRXVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD2F4CEUxoLU9ENapLOauXqXbKpkmIBFsb6xDtypzl/C0byN3Jz7rQT7 79vV3L8TgERY2KNJrOmaekQ4Gx6bbH7Ig/Zdb0B6RkBl4/ztrYO/xpHEjmnNlenk c8RzWyNhJjrZJjVlExffm49LNUmGjHJPc2E7lVweNT2FxWzVlatqZTs2KQsHf9Sm 8RMGh1V7K5MWhe7pGPdqGxS8hXgfFqCjIwsIAR4dOsli+1rgEE1oHS2QeeFoPDRP 7qVJor3HjNdlTN63KIMz2GeZyy3ZDAHJlcIHJ6Sh0jvWLXRVuPw9GVC0UBWC0QM/ /QaMsuo0fVPOSRKnqjpWlcmq04Rka7U= -----END CERTIFICATE-----Generated at Tue Jun 3 08:13:30 2025 by rpki-client