$ rpki-client -vvvf rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft File: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft (raw, json) Hash identifier: r3czny5Ko+eD001Qg2jDMhBirmz6hwAjkjR+IZsTEMo= Subject key identifier: 58:EA:69:75:C9:F3:14:49:50:A2:AA:93:C1:0D:47:5C:D4:66:C6:CF Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Certificate serial: 6714DD18E48EA352F8904188250D1ED8340D1735 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft Manifest number: CD Signing time: Tue 29 Sep 2026 20:02:38 +0000 Manifest this update: Tue 29 Sep 2026 19:57:38 +0000 Manifest next update: Wed 30 Sep 2026 21:59:38 +0000 Files and hashes: 1: 3130332e3133302e39362e302f32322d3234203d3e203138343139.roa (hash: jmiWW03d5gkshbGnGPU/JnRLFc/IWZsVf7gkk91c90A=) 2: 3130332e3132342e3134392e302f32342d3234203d3e203633313939.roa (hash: IHX6knBAbyoCMbNTiCX2cYkm03r5ZVJalgMfPgOlByo=) 3: 3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (hash: AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=) 4: 3130332e3132332e3235322e302f32322d3234203d3e203137343038.roa (hash: K11AKM5sK22jpCOO0qM2jx2kuIkROi3ckOE3FDdau4Q=) 5: 3130332e3132332e3134302e302f32342d3234203d3e203137343038.roa (hash: 9fFqGEZgCqmDZaHQYhGEG410naqEyxqFLnrF5q8mDOo=) 6: 3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (hash: mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=) 7: 3130332e3133302e302e302f32322d3234203d3e203137343038.roa (hash: MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=) 8: 3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl (hash: PVESGILjT9BtA/6P2O85gV8FomF/Hwbb6ytJlYfAcJo=) 9: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (hash: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=) 10: 3130332e3132342e3137362e302f32322d3234203d3e20313331363237.roa (hash: B76iUUauraI1kihuK+kvTleORdpwdo32DEFBdPbyoJw=) 11: 3130332e3132342e34322e302f32332d3234203d3e20313331363237.roa (hash: ahzbTn0ryIxcgtgNPBswFdM5hAnHdiiLMvDKSEOceoQ=) 12: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (hash: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=) 13: 323430333a613363303a3a2f33322d3438203d3e20313331363030.roa (hash: XCT7s3NCwXJ69S7zo+KJz8lVVlArsSIbihOeA7c8fho=) 14: 3130332e3132342e34302e302f32332d3234203d3e20313331363036.roa (hash: kJ6HcU/Qq1IqXEBiPGlvzo0MYuVJktlWTrE9zqJ5X60=) 15: 3130332e3132342e3134382e302f32342d3234203d3e20313331363136.roa (hash: E5kPA+xRb0WD5EZHBZjgrSgPglYWgXmCYwr3HzWV3pk=) 16: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (hash: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 21:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:14:dd:18:e4:8e:a3:52:f8:90:41:88:25:0d:1e:d8:34:0d:17:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Validity Not Before: Sep 29 19:57:38 2026 GMT Not After : Sep 30 21:59:38 2026 GMT Subject: CN=58EA6975C9F3144950A2AA93C10D475CD466C6CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:f0:0d:a4:37:01:68:48:1a:09:1e:be:d6: 98:75:a8:22:9c:0a:38:98:d3:29:28:01:85:15:22: b5:1b:fa:e2:ff:19:70:3c:ec:d7:f5:6d:68:90:7b: 5d:e5:c2:82:05:0c:4a:d5:ac:a0:c2:7d:37:34:32: 46:1a:64:53:a4:5b:15:a7:95:6c:25:54:54:41:11: df:7f:c7:25:8a:42:56:32:5c:89:64:f1:c4:2f:08: 1e:25:16:2d:73:e5:bc:2c:c2:8f:89:10:4a:49:40: a5:c6:24:29:f5:79:f9:c4:ea:0e:b6:5b:7c:40:39: 6f:68:75:f5:bd:37:09:4d:7b:18:8b:ad:dd:80:02: a8:c2:19:3c:7b:7c:3b:18:09:fc:72:4a:fc:e3:ef: 4b:8a:b9:d5:df:0d:53:8f:3c:7e:b5:31:b2:29:25: 5f:f7:c2:03:cf:7a:6c:42:95:77:16:e2:e4:29:c7: 0a:2e:51:75:c6:00:81:a9:8a:18:a9:61:63:2a:dd: ac:83:1a:d1:52:66:64:29:1b:03:ee:27:66:d1:96: b0:cd:0b:1c:d5:9f:e5:4d:e0:98:b1:52:6f:bb:83: ea:fa:b3:af:85:40:fa:e0:18:4c:63:43:0a:6a:c9: cc:cf:f7:eb:ac:96:d9:72:c2:60:8c:4c:51:0f:6f: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EA:69:75:C9:F3:14:49:50:A2:AA:93:C1:0D:47:5C:D4:66:C6:CF X509v3 Authority Key Identifier: keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6f:43:cb:84:a6:bd:c5:34:b4:99:98:ce:53:50:57:d1:9a: 76:d3:cd:12:86:d3:e8:ee:9b:4f:ad:4b:94:cf:2e:fc:79:42: e8:b3:98:41:a5:7d:6b:a5:67:8e:89:d2:e0:4f:ff:16:0a:80: 1c:7d:10:36:e5:37:b6:98:34:1e:43:e4:fd:30:c8:30:74:0f: cb:0e:4b:e7:b0:58:b2:3a:fe:b7:35:c4:33:6f:f1:c4:b9:c5: 30:21:94:56:58:54:00:58:a1:f2:4b:9b:ba:31:bc:ae:1e:ff: 1a:c9:e5:2a:b6:7f:e9:2c:ba:d4:ea:af:8e:9f:c1:5b:e0:57: 4b:87:85:c3:7e:b6:1d:56:9a:7c:e2:3b:6e:5e:21:e6:a0:8f: aa:5a:b2:1e:be:ab:c7:6d:a7:25:67:c7:a4:f1:80:ad:50:07: 6c:d0:c9:79:3e:d9:8b:3f:9c:d3:f8:c2:c1:55:4d:35:d0:b2: b8:b5:75:7e:df:7a:aa:a1:16:d1:aa:c4:e0:37:a7:50:60:82: 5d:ec:58:35:b7:dd:be:ea:c3:a0:ab:b7:e1:f5:a1:83:2a:c5: a9:dc:e3:27:71:bd:b9:80:34:c8:1f:c1:96:db:2c:e9:f7:5f: f6:fe:4d:26:89:51:60:0f:c8:df:52:44:aa:dd:0e:55:89:15: a7:de:37:b1 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUZxTdGOSOo1L4kEGIJQ0e2DQNFzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE MUY0QTlCRTAeFw0yNjA5MjkxOTU3MzhaFw0yNjA5MzAyMTU5MzhaMDMxMTAvBgNV BAMTKDU4RUE2OTc1QzlGMzE0NDk1MEEyQUE5M0MxMEQ0NzVDRDQ2NkM2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8vANpDcBaEgaCR6+1ph1qCKc CjiY0ykoAYUVIrUb+uL/GXA87Nf1bWiQe13lwoIFDErVrKDCfTc0MkYaZFOkWxWn lWwlVFRBEd9/xyWKQlYyXIlk8cQvCB4lFi1z5bwswo+JEEpJQKXGJCn1efnE6g62 W3xAOW9odfW9NwlNexiLrd2AAqjCGTx7fDsYCfxySvzj70uKudXfDVOPPH61MbIp JV/3wgPPemxClXcW4uQpxwouUXXGAIGpihipYWMq3ayDGtFSZmQpGwPuJ2bRlrDN CxzVn+VN4JixUm+7g+r6s6+FQPrgGExjQwpqyczP9+usltlywmCMTFEPbywdAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUWOppdcnzFElQoqqTwQ1HXNRmxs8wHwYDVR0j BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC QUZDOUVEMUY0QTlCRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zNDQyQTM0MzAx Q0M2MTBDRjI3MkY3NjVBQkJBRkM5RUQxRjRBOUJFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG9Dy4Sm vcU0tJmYzlNQV9GadtPNEobT6O6bT61LlM8u/HlC6LOYQaV9a6VnjonS4E//FgqA HH0QNuU3tpg0HkPk/TDIMHQPyw5L57BYsjr+tzXEM2/xxLnFMCGUVlhUAFih8kub ujG8rh7/GsnlKrZ/6Sy61Oqvjp/BW+BXS4eFw362HVaafOI7bl4h5qCPqlqyHr6r x22nJWfHpPGArVAHbNDJeT7Ziz+c0/jCwVVNNdCyuLV1ft96qqEW0arE4DenUGCC XexYNbfdvurDoKu34fWhgyrFqdzjJ3G9uYA0yB/Bltss6fdf9v5NJolRYA/I31JE qt0OVYkVp943sQ== -----END CERTIFICATE-----Generated at Wed Sep 30 06:56:21 2026 by rpki-client