$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft File: E2FEF6929D00129C0EC91DE25524363E78F319D7.mft (raw, json) Hash identifier: P38bpG/6HvnQGxZN5EwU9dv/TkAtRALmcsceej4DlGc= Subject key identifier: E5:6A:75:5C:73:77:30:FD:5D:81:8A:55:E1:AC:69:73:60:74:85:C2 Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7 Certificate issuer: /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7 Certificate serial: 3D5D08850C1E0D33CFF9F04D213074ABECB88C47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft Manifest number: C0 Signing time: Tue 29 Sep 2026 19:12:30 +0000 Manifest this update: Tue 29 Sep 2026 19:07:30 +0000 Manifest next update: Wed 30 Sep 2026 19:45:30 +0000 Files and hashes: 1: 3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa (hash: 7hhipyt4Di6KylqpdZkFLgokgRg/ZHGamIeaZ0lFOO0=) 2: 3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa (hash: De1HIXtsANXzLfuAQRrXgqC4plFB3ZURvmTwZ7qHlC8=) 3: E2FEF6929D00129C0EC91DE25524363E78F319D7.crl (hash: pkDc88mZrmCgZNDlhcxZ13DIXngnugl7ufQ1H9HajA8=) 4: 3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa (hash: nhkWWbEcHMQGryDxoH+6rKNwicNf5iRZvw6pvqc84z4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:5d:08:85:0c:1e:0d:33:cf:f9:f0:4d:21:30:74:ab:ec:b8:8c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7 Validity Not Before: Sep 29 19:07:30 2026 GMT Not After : Sep 30 19:45:30 2026 GMT Subject: CN=E56A755C737730FD5D818A55E1AC6973607485C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9a:50:36:02:9c:10:2e:18:0b:fc:3e:5c:bc: 61:b3:95:50:58:06:ba:86:17:a6:64:6a:13:4f:fe: b8:ab:3a:15:5e:cd:7e:fa:cc:d8:87:63:c6:f0:ad: 94:f5:f0:f1:02:a0:b3:7f:0e:cc:1d:ee:d8:e4:24: 94:f4:3d:ed:38:78:40:1a:38:b3:de:f3:9c:45:85: 48:aa:1f:39:7f:3a:05:5d:1d:91:2a:23:4e:ad:64: 81:6a:41:1c:20:15:ce:e7:e8:14:65:2d:38:4e:bd: 8e:1e:2b:ed:99:b5:02:6e:a9:b1:f5:3e:f8:cc:b3: 35:9f:19:87:ae:be:48:ef:b0:7c:14:08:d9:c0:0b: 09:a4:04:c6:4c:83:bc:b1:96:2a:8e:f1:68:a0:3d: 38:8d:e2:33:39:a8:e1:47:42:98:4a:bb:96:d3:ff: 0a:9b:c4:62:ee:6f:6a:0e:a4:29:72:95:9b:40:7f: e3:c1:5d:be:8f:a6:d9:12:dd:66:f9:db:5f:f1:09: a7:fd:7c:5e:7a:43:41:ea:20:f8:36:9d:02:e9:16: c3:04:34:00:72:58:a5:d7:45:54:05:cb:86:4a:10: cc:35:89:17:94:31:e4:3b:73:71:f9:01:36:1a:76: 2d:7a:26:d6:4b:91:01:2a:c2:16:c3:0f:c8:ee:12: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:75:5C:73:77:30:FD:5D:81:8A:55:E1:AC:69:73:60:74:85:C2 X509v3 Authority Key Identifier: keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:31:72:77:23:2c:37:5c:fa:80:cf:26:9f:f2:48:e8:8b:0b: f9:7d:a2:fe:49:dd:f5:39:80:61:ac:2b:c3:0d:f7:c9:b6:dd: 70:96:29:dd:0d:30:a9:b1:4c:62:73:19:e2:cf:89:0c:e7:ae: ab:07:b1:77:7b:ba:52:b2:0b:f2:1a:56:9f:6f:55:d9:49:20: 58:f5:73:55:79:9f:f9:c5:22:1f:35:e8:68:43:6a:58:7a:ec: 99:24:aa:fd:97:c8:0b:2e:80:d0:eb:b4:0a:30:1a:7a:ba:60: 08:84:a6:5f:c9:f8:bf:a5:83:6c:20:05:36:db:56:cc:d9:22: 24:f7:de:44:5c:82:17:69:fa:52:58:c0:9f:6b:1c:64:9c:a0: 1c:05:6f:d4:e3:2d:73:98:11:11:16:1e:87:cf:d6:68:83:c0: b6:15:71:c0:e0:65:6f:88:04:20:d6:7c:3a:c9:50:37:fb:85: 20:15:7d:54:8c:1f:e9:28:d9:4e:f7:a1:8b:68:4e:f3:d4:da: fb:05:3d:ff:01:4a:a4:d7:2e:b4:08:68:0a:98:5e:24:49:13: 0b:6e:55:85:77:39:4d:61:41:4e:7a:c3:35:f1:2e:30:c9:12: 62:21:87:8f:7c:fc:9b:78:65:4d:68:2a:89:7a:1e:2f:6d:cc: 66:0c:a5:98 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUPV0IhQweDTPP+fBNITB0q+y4jEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJGRUY2OTI5RDAwMTI5QzBFQzkxREUyNTUyNDM2M0U3 OEYzMTlENzAeFw0yNjA5MjkxOTA3MzBaFw0yNjA5MzAxOTQ1MzBaMDMxMTAvBgNV BAMTKEU1NkE3NTVDNzM3NzMwRkQ1RDgxOEE1NUUxQUM2OTczNjA3NDg1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmlA2ApwQLhgL/D5cvGGzlVBY BrqGF6ZkahNP/rirOhVezX76zNiHY8bwrZT18PECoLN/Dswd7tjkJJT0Pe04eEAa OLPe85xFhUiqHzl/OgVdHZEqI06tZIFqQRwgFc7n6BRlLThOvY4eK+2ZtQJuqbH1 PvjMszWfGYeuvkjvsHwUCNnACwmkBMZMg7yxliqO8WigPTiN4jM5qOFHQphKu5bT /wqbxGLub2oOpClylZtAf+PBXb6PptkS3Wb521/xCaf9fF56Q0HqIPg2nQLpFsME NAByWKXXRVQFy4ZKEMw1iReUMeQ7c3H5ATYadi16JtZLkQEqwhbDD8juEszBAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU5Wp1XHN3MP1dgYpV4axpc2B0hcIwHwYDVR0j BBgwFoAU4v72kp0AEpwOyR3iVSQ2PnjzGdcwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOVEVB U1kvMC9FMkZFRjY5MjlEMDAxMjlDMEVDOTFERTI1NTI0MzYzRTc4RjMxOUQ3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0UyRkVGNjkyOUQwMDEyOUMwRUM5MURFMjU1 MjQzNjNFNzhGMzE5RDcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5URUFTWS8wL0UyRkVGNjky OUQwMDEyOUMwRUM5MURFMjU1MjQzNjNFNzhGMzE5RDcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOMXJ3 Iyw3XPqAzyaf8kjoiwv5faL+Sd31OYBhrCvDDffJtt1wlindDTCpsUxicxniz4kM 566rB7F3e7pSsgvyGlafb1XZSSBY9XNVeZ/5xSIfNehoQ2pYeuyZJKr9l8gLLoDQ 67QKMBp6umAIhKZfyfi/pYNsIAU221bM2SIk995EXIIXafpSWMCfaxxknKAcBW/U 4y1zmBERFh6Hz9Zog8C2FXHA4GVviAQg1nw6yVA3+4UgFX1UjB/pKNlO96GLaE7z 1Nr7BT3/AUqk1y60CGgKmF4kSRMLblWFdzlNYUFOesM18S4wyRJiIYePfPybeGVN aCqJeh4vbcxmDKWY -----END CERTIFICATE-----Generated at Wed Sep 30 06:56:52 2026 by rpki-client