$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft File: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json) Hash identifier: W/+QKnZvAXNHOlQ7YAVCNOzxZF8GniGMRmQ+Es9fSiQ= Subject key identifier: 04:58:B0:CA:B4:8C:C6:2E:12:EA:C4:42:5E:28:B1:80:FB:AB:3C:6A Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Certificate serial: 4FDFDD6F8BF165E6FEA575E66FB09990BEF9C67F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft Manifest number: 53 Signing time: Tue 30 Jun 2026 10:23:40 +0000 Manifest this update: Tue 30 Jun 2026 10:18:40 +0000 Manifest next update: Wed 01 Jul 2026 12:32:40 +0000 Files and hashes: 1: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=) 2: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=) 3: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=) 4: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=) 5: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=) 6: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=) 7: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: c9I7kbYGmzGaUMMqpf7J4q3Qp5z301uTP5u95Teb41A=) 8: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=) 9: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=) 10: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=) 11: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=) 12: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=) 13: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=) 14: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=) 15: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=) 16: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 12:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:df:dd:6f:8b:f1:65:e6:fe:a5:75:e6:6f:b0:99:90:be:f9:c6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Validity Not Before: Jun 30 10:18:40 2026 GMT Not After : Jul 1 12:32:40 2026 GMT Subject: CN=0458B0CAB48CC62E12EAC4425E28B180FBAB3C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:2e:7e:12:2b:11:5d:42:08:5d:0c:dd:e1: 0f:26:f5:9c:a4:d9:94:89:0d:67:38:9a:17:33:f6: 23:b1:76:d0:10:d3:64:0b:30:9e:96:36:7f:13:21: e7:fa:7b:86:1f:90:da:37:c1:96:73:4f:45:a1:69: a3:11:e1:25:58:35:b4:91:db:bf:65:5a:91:16:e9: 46:58:3c:86:99:e7:21:cc:c6:68:74:16:c9:eb:3b: 22:f7:c0:39:54:52:92:c9:ba:11:78:0e:7b:ad:07: 12:74:11:4a:1f:88:70:52:e3:2d:c3:7f:73:fb:4d: 55:73:80:73:e3:de:a3:ff:e2:3d:14:60:5c:67:0c: 9f:80:d6:2c:ef:83:6d:72:f4:85:d1:8a:66:58:67: 7a:62:45:f6:9a:48:4e:83:95:e3:01:5a:92:45:e3: 46:20:0e:5a:03:ff:30:22:ac:85:95:b8:83:9b:c1: fe:c1:0d:23:cf:52:0e:18:3c:44:57:69:22:fb:31: 02:c6:1e:d0:2f:d9:f6:15:a7:e5:04:ad:0f:b3:34: d2:a2:a8:a4:e4:cb:80:f1:63:db:5a:db:0b:d1:97: a0:a9:43:c4:b8:3c:f8:28:30:f8:90:47:ef:47:9d: 9d:da:72:fb:b9:ce:0d:b6:58:e7:d7:81:1f:96:11: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:58:B0:CA:B4:8C:C6:2E:12:EA:C4:42:5E:28:B1:80:FB:AB:3C:6A X509v3 Authority Key Identifier: keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:36:13:d1:64:39:c7:7c:7c:49:4c:a5:91:5a:35:d8:96:c5: a5:b6:17:d9:7f:d7:4e:65:c2:c9:be:22:16:e9:54:aa:e0:b5: 8a:20:6a:b8:f6:d7:08:58:0a:57:6b:f1:5f:0e:5f:c1:ca:4d: fb:c5:9b:a9:1b:34:20:ec:e3:c1:6b:86:61:1b:84:03:2d:d7: 50:54:ef:dc:ab:e0:f4:87:06:75:3d:ac:4f:3a:67:d9:84:52: 1f:f9:9d:c7:32:d6:d1:e9:c3:9e:b1:b8:66:f7:f7:49:a3:c3: a3:51:48:c8:3f:09:08:20:a1:8e:02:7c:34:95:77:0a:dd:e2: c6:9a:a8:3b:fb:3d:39:10:7c:12:d7:0f:59:5a:3c:2a:08:f1: 85:ad:03:a7:1b:1e:28:03:cc:63:ad:46:19:d2:0e:56:05:5c: b8:7c:7c:56:f1:74:cc:cf:f4:ab:f0:0a:91:15:c2:74:d0:a9: 91:92:80:0a:51:f3:12:66:6a:29:05:c3:83:2e:4c:67:c8:b0: d7:cd:56:74:59:2a:e8:9b:b7:e4:fe:cb:6a:7a:1e:54:80:53: 97:db:7c:b5:d1:e1:b0:c8:dd:97:06:d2:a8:31:03:c1:90:62: fb:53:11:a9:4e:2e:0a:8b:bf:39:da:4c:c7:de:f7:4d:a5:27: 68:d0:40:89 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUT9/db4vxZeb+pXXmb7CZkL75xn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE MUY0QTlCRTAeFw0yNjA2MzAxMDE4NDBaFw0yNjA3MDExMjMyNDBaMDMxMTAvBgNV BAMTKDA0NThCMENBQjQ4Q0M2MkUxMkVBQzQ0MjVFMjhCMTgwRkJBQjNDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOC5+EisRXUIIXQzd4Q8m9Zyk 2ZSJDWc4mhcz9iOxdtAQ02QLMJ6WNn8TIef6e4YfkNo3wZZzT0WhaaMR4SVYNbSR 279lWpEW6UZYPIaZ5yHMxmh0FsnrOyL3wDlUUpLJuhF4DnutBxJ0EUofiHBS4y3D f3P7TVVzgHPj3qP/4j0UYFxnDJ+A1izvg21y9IXRimZYZ3piRfaaSE6DleMBWpJF 40YgDloD/zAirIWVuIObwf7BDSPPUg4YPERXaSL7MQLGHtAv2fYVp+UErQ+zNNKi qKTky4DxY9ta2wvRl6CpQ8S4PPgoMPiQR+9HnZ3acvu5zg22WOfXgR+WEXwrAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUBFiwyrSMxi4S6sRCXiixgPurPGowHwYDVR0j BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC QUZDOUVEMUY0QTlCRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zNDQyQTM0MzAx Q0M2MTBDRjI3MkY3NjVBQkJBRkM5RUQxRjRBOUJFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzYT0WQ5 x3x8SUylkVo12JbFpbYX2X/XTmXCyb4iFulUquC1iiBquPbXCFgKV2vxXw5fwcpN +8WbqRs0IOzjwWuGYRuEAy3XUFTv3Kvg9IcGdT2sTzpn2YRSH/mdxzLW0enDnrG4 Zvf3SaPDo1FIyD8JCCChjgJ8NJV3Ct3ixpqoO/s9ORB8EtcPWVo8Kgjxha0Dpxse KAPMY61GGdIOVgVcuHx8VvF0zM/0q/AKkRXCdNCpkZKAClHzEmZqKQXDgy5MZ8iw 181WdFkq6Ju35P7LanoeVIBTl9t8tdHhsMjdlwbSqDEDwZBi+1MRqU4uCou/OdpM x973TaUnaNBAiQ== -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:55 2026 by rpki-client