$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft File: 9F397B838061280C2F2A887AC9D64012310492D8.mft (raw, json) Hash identifier: dRCX0WG/cjvdx0rJl5TtwkDuFljc3Ti3ClKJs+AT2OA= Subject key identifier: B4:F0:46:40:AD:C3:4F:C1:06:17:55:76:F9:29:D5:F0:15:BB:47:0A Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 58B39CE9CFF0621470A2D3283C187949107EE794 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft Manifest number: 0101 Signing time: Sat 14 Nov 2026 16:34:13 +0000 Manifest this update: Sat 14 Nov 2026 16:29:13 +0000 Manifest next update: Sun 15 Nov 2026 18:23:13 +0000 Files and hashes: 1: 3135312e3135382e362e302f32332d3234203d3e20313532363136.roa (hash: i1SCJ8GhyQLw1P2Ps8s9Plw8FCUopeJLu1mfg5xNyLQ=) 2: 9F397B838061280C2F2A887AC9D64012310492D8.crl (hash: KACbienChNNYsawsFvTkEd36EIE86spq8QxXGVcXpxc=) 3: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (hash: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc=) 4: 3135312e3135382e362e302f32332d3234203d3e20323132393639.roa (hash: g66apYgbNhFQA/s/Xvj16zu4hXDJuL5Fa8ux6Zav1qQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b3:9c:e9:cf:f0:62:14:70:a2:d3:28:3c:18:79:49:10:7e:e7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Nov 14 16:29:13 2026 GMT Not After : Nov 15 18:23:13 2026 GMT Subject: CN=B4F04640ADC34FC106175576F929D5F015BB470A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:d1:fe:4f:38:df:cb:7c:c4:c9:c8:54:7a: 38:be:1d:85:58:d2:87:70:0c:d5:5f:10:2a:02:ab: 1e:39:e6:77:e0:83:52:8d:51:61:2e:f3:18:2e:3d: 14:5d:39:41:d4:d9:32:47:4e:df:73:c5:9d:db:c2: 6f:87:f7:24:98:5e:b8:07:41:9a:de:a9:c4:7d:bb: 8c:20:4b:63:95:f8:e7:32:90:36:32:5f:27:b8:2e: 77:ca:1c:ae:85:cb:2d:79:65:42:5f:ea:91:a0:38: 79:7c:67:05:ed:77:89:b5:a8:7c:e5:3d:18:9c:ad: 75:15:a5:3a:79:65:b3:af:55:87:04:fd:d0:e5:0e: b7:23:06:46:23:61:2e:d1:64:ba:44:b4:74:08:77: 11:45:b8:1f:59:4b:3f:1e:46:34:7d:91:fa:98:48: 37:56:cd:84:6b:c1:07:4b:c6:4c:8f:d8:8e:0c:43: 61:88:b6:f1:96:99:db:01:6b:e9:ec:04:36:7a:01: 9b:47:e3:a5:2c:a1:c8:00:59:93:64:f1:85:19:3e: 42:7a:65:25:7a:b8:1a:e5:5f:ed:0f:50:5b:23:ea: 96:18:ed:05:b3:a3:36:c3:e6:23:66:9c:e5:8f:a5: 12:17:58:89:57:d0:f4:ea:d3:a4:0c:e7:ed:4f:31: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F0:46:40:AD:C3:4F:C1:06:17:55:76:F9:29:D5:F0:15:BB:47:0A X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5e:7f:42:0b:6c:cb:07:20:36:9f:49:be:ba:0c:0e:33:a7: 8e:8d:93:fb:15:27:c4:91:e0:06:8b:6e:d0:43:da:cb:e3:73: 6e:05:09:27:47:85:c8:e2:e1:eb:fe:7e:e1:e0:09:44:8a:50: 8a:60:27:2a:a1:85:3b:ba:a7:78:5e:ed:a4:15:dc:f6:50:0d: c4:bc:3a:ce:f3:93:2c:da:b1:1a:18:a6:f6:db:ef:b0:aa:a9: b8:60:d2:dd:8f:0c:a3:8d:79:f9:2f:4d:24:91:14:c4:d2:01: b5:98:a2:5e:68:1c:5c:be:16:8e:5a:2b:3c:54:ed:c3:12:d1: d4:ba:72:1c:ac:dc:6a:ab:6c:61:e5:95:43:eb:5a:79:4a:d6: d3:ea:d5:44:8d:9d:d3:b8:61:65:58:ef:1f:e4:24:a1:a9:0e: f6:81:d8:c8:62:96:a2:0e:1a:39:8d:f0:9d:e7:e6:b7:c5:d3: bc:98:24:77:1e:af:86:41:84:b1:92:00:79:48:06:17:7a:03: a1:94:00:3b:c5:0f:a6:6f:9b:54:86:3a:d8:36:89:07:5a:97: 27:61:76:5b:2c:4c:8f:4e:08:ab:30:d4:6b:40:23:a2:aa:d4: b5:dc:77:81:a9:6d:5e:a0:72:9c:3e:3b:0c:ea:fc:b4:86:dd: 26:40:73:21 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWLOc6c/wYhRwotMoPBh5SRB+55QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjExMTQxNjI5MTNaFw0yNjExMTUxODIzMTNaMDMxMTAvBgNV BAMTKEI0RjA0NjQwQURDMzRGQzEwNjE3NTU3NkY5MjlENUYwMTVCQjQ3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPldH+Tzjfy3zEychUeji+HYVY 0odwDNVfECoCqx455nfgg1KNUWEu8xguPRRdOUHU2TJHTt9zxZ3bwm+H9ySYXrgH QZreqcR9u4wgS2OV+OcykDYyXye4LnfKHK6Fyy15ZUJf6pGgOHl8ZwXtd4m1qHzl PRicrXUVpTp5ZbOvVYcE/dDlDrcjBkYjYS7RZLpEtHQIdxFFuB9ZSz8eRjR9kfqY SDdWzYRrwQdLxkyP2I4MQ2GItvGWmdsBa+nsBDZ6AZtH46UsocgAWZNk8YUZPkJ6 ZSV6uBrlX+0PUFsj6pYY7QWzozbD5iNmnOWPpRIXWIlX0PTq06QM5+1PMcUrAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUtPBGQK3DT8EGF1V2+SnV8BW7RwowHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS85RjM5N0I4MzgwNjEyODBD MkYyQTg4N0FDOUQ2NDAxMjMxMDQ5MkQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnV5/QgtsywcgNp9J vroMDjOnjo2T+xUnxJHgBotu0EPay+NzbgUJJ0eFyOLh6/5+4eAJRIpQimAnKqGF O7qneF7tpBXc9lANxLw6zvOTLNqxGhim9tvvsKqpuGDS3Y8Mo415+S9NJJEUxNIB tZiiXmgcXL4WjlorPFTtwxLR1LpyHKzcaqtsYeWVQ+taeUrW0+rVRI2d07hhZVjv H+QkoakO9oHYyGKWog4aOY3wnefmt8XTvJgkdx6vhkGEsZIAeUgGF3oDoZQAO8UP pm+bVIY62DaJB1qXJ2F2WyxMj04IqzDUa0AjoqrUtdx3galtXqBynD47DOr8tIbd JkBzIQ== -----END CERTIFICATE-----Generated at Sun Nov 15 00:05:31 2026 by rpki-client