$ rpki-client -vvvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft File: 0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json) Hash identifier: 8rJ8cA2UpMoXclORMwX+GcO7VV+/zbTd6BM528I+kzk= Subject key identifier: D8:6F:14:74:33:70:08:4E:9C:89:9A:95:2F:CD:21:52:D8:C1:B4:A5 Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 Certificate issuer: /CN=0CA9C32F7806470F750EC53431D4F322F0851573 Certificate serial: 15CB1C5A2C9DDDDAA4D333178DF076B521AD7336 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 12:09:41 +0000 Manifest this update: Thu 24 Sep 2026 12:04:41 +0000 Manifest next update: Fri 25 Sep 2026 15:15:41 +0000 Files and hashes: 1: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=) 2: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: 1jddJOtAon9KryaSotRLhY2nSzbrsHNtOTBeFVDTOeo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 15:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:1c:5a:2c:9d:dd:da:a4:d3:33:17:8d:f0:76:b5:21:ad:73:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573 Validity Not Before: Sep 24 12:04:41 2026 GMT Not After : Sep 25 15:15:41 2026 GMT Subject: CN=D86F14743370084E9C899A952FCD2152D8C1B4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:18:09:51:b6:eb:d4:fc:5b:d7:fd:93:52: ee:1f:f8:15:28:1b:90:dd:85:b9:4e:f8:d7:b7:69: 23:6d:3a:31:77:43:1f:8b:4a:90:00:d4:93:9c:dd: b6:44:f8:d9:db:ee:12:49:fe:f4:47:00:5d:ec:4e: 69:2a:2d:8a:88:b9:47:74:87:03:b8:5e:7e:b9:fa: cc:91:39:47:d9:46:bb:17:01:ed:74:51:e3:19:1a: 3f:92:6e:60:3f:a8:a4:50:82:8d:eb:4f:1e:d9:d9: ad:c0:3d:1b:44:4b:cd:48:de:94:b7:b8:83:4e:36: aa:41:9c:6a:bd:3c:91:b5:76:90:22:59:2f:55:86: 27:ff:63:a0:ab:ba:45:5c:b7:8e:62:65:61:61:ab: 17:12:4d:07:eb:46:a2:7e:5d:db:f8:53:7f:e3:24: 16:0e:05:df:f8:3f:05:80:b2:e4:6e:34:1c:b6:37: b7:79:1d:4c:f9:6e:72:e5:0a:1e:0f:6e:49:5e:ae: 52:89:29:29:79:1a:67:33:e9:71:6d:22:a7:b8:b8: 13:09:60:c8:85:02:bb:54:c1:09:81:bb:a5:93:11: e8:3d:77:a6:ce:a9:c5:c7:21:12:7f:f9:fa:10:d4: b0:a8:50:19:84:df:02:d4:77:17:2f:00:a2:7c:f8: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:14:74:33:70:08:4E:9C:89:9A:95:2F:CD:21:52:D8:C1:B4:A5 X509v3 Authority Key Identifier: keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:1b:7b:11:84:b0:45:27:3a:27:47:12:56:ae:9e:a1:f0:50: 37:0c:f9:6b:aa:d5:fd:0c:c4:3b:02:83:d4:de:9c:01:09:2a: b8:1b:4d:93:47:0d:cb:fa:ea:2e:dc:2e:6e:51:c5:90:8b:6f: 6a:e6:62:3d:90:c7:14:e8:46:aa:22:dd:fb:2e:71:3e:bd:15: 5a:9f:91:be:e3:d2:9c:06:75:7e:4d:7d:64:6d:8d:01:b9:68: 6b:60:19:1e:4d:2d:d3:e6:fb:4f:91:ed:78:75:79:20:23:ce: d4:75:60:3f:67:d6:44:10:fd:e0:c0:74:77:65:b8:37:b7:81: 20:d1:fd:c8:1c:d7:41:88:c5:3d:02:cd:16:06:93:ba:4c:26: 70:f6:a1:2b:da:cd:9b:8e:6a:87:93:fe:41:f8:68:61:88:69: ca:04:28:2a:78:69:68:00:60:5a:b1:ae:8b:1d:99:bd:8e:04: 78:99:60:b9:97:3f:a6:8f:da:8a:c9:db:09:12:1b:02:bb:e3: 27:3f:d1:ee:42:5b:ec:15:78:e1:16:61:e8:6f:0d:92:03:c1: da:96:05:10:e9:b4:99:8c:4f:50:f5:c3:cc:06:df:3b:93:a4: a1:1c:5c:1d:f1:5e:00:01:68:1a:dc:c7:71:39:40:6e:1b:ed: d2:db:6a:fb -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUFcscWiyd3dqk0zMXjfB2tSGtczYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBOUMzMkY3ODA2NDcwRjc1MEVDNTM0MzFENEYzMjJG MDg1MTU3MzAeFw0yNjA5MjQxMjA0NDFaFw0yNjA5MjUxNTE1NDFaMDMxMTAvBgNV BAMTKEQ4NkYxNDc0MzM3MDA4NEU5Qzg5OUE5NTJGQ0QyMTUyRDhDMUI0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oBgJUbbr1Pxb1/2TUu4f+BUo G5DdhblO+Ne3aSNtOjF3Qx+LSpAA1JOc3bZE+Nnb7hJJ/vRHAF3sTmkqLYqIuUd0 hwO4Xn65+syROUfZRrsXAe10UeMZGj+SbmA/qKRQgo3rTx7Z2a3APRtES81I3pS3 uINONqpBnGq9PJG1dpAiWS9Vhif/Y6CrukVct45iZWFhqxcSTQfrRqJ+Xdv4U3/j JBYOBd/4PwWAsuRuNBy2N7d5HUz5bnLlCh4PbklerlKJKSl5Gmcz6XFtIqe4uBMJ YMiFArtUwQmBu6WTEeg9d6bOqcXHIRJ/+foQ1LCoUBmE3wLUdxcvAKJ8+HGFAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU2G8UdDNwCE6ciZqVL80hUtjBtKUwHwYDVR0j BBgwFoAUDKnDL3gGRw91DsU0MdTzIvCFFXMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQk9PS1Mv MC8wQ0E5QzMyRjc4MDY0NzBGNzUwRUM1MzQzMUQ0RjMyMkYwODUxNTczLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzBDQTlDMzJGNzgwNjQ3MEY3NTBFQzUzNDMxRDRG MzIyRjA4NTE1NzMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CT09LUy8wLzBDQTlDMzJGNzgwNjQ3 MEY3NTBFQzUzNDMxRDRGMzIyRjA4NTE1NzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgG3sRhLBFJzon RxJWrp6h8FA3DPlrqtX9DMQ7AoPU3pwBCSq4G02TRw3L+uou3C5uUcWQi29q5mI9 kMcU6EaqIt37LnE+vRVan5G+49KcBnV+TX1kbY0BuWhrYBkeTS3T5vtPke14dXkg I87UdWA/Z9ZEEP3gwHR3Zbg3t4Eg0f3IHNdBiMU9As0WBpO6TCZw9qEr2s2bjmqH k/5B+GhhiGnKBCgqeGloAGBasa6LHZm9jgR4mWC5lz+mj9qKydsJEhsCu+MnP9Hu QlvsFXjhFmHobw2SA8HalgUQ6bSZjE9Q9cPMBt87k6ShHFwd8V4AAWga3MdxOUBu G+3S22r7 -----END CERTIFICATE-----Generated at Fri Sep 25 08:46:57 2026 by rpki-client