$ rpki-client -vvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft File: 0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json) Hash identifier: C6ZGDZjaI6RtvkfEOPbtoPXT6J536dV1/TdWZ2eWAaU= Subject key identifier: 74:04:DE:16:AA:F3:FC:CB:71:DD:AA:E3:19:DB:33:85:0E:F4:EC:1E Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 Certificate issuer: /CN=0CA9C32F7806470F750EC53431D4F322F0851573 Certificate serial: 74705FA99AADAE055F5A7D65FCFD00376B20EAB7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 03:02:24 +0000 Manifest this update: Fri 24 Jul 2026 02:57:24 +0000 Manifest next update: Sat 25 Jul 2026 06:53:24 +0000 Files and hashes: 1: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: U53yNcN2VdQ/eZKrZOVxv1ohpBNiO8u7DtrHMh5oRlI=) 2: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:70:5f:a9:9a:ad:ae:05:5f:5a:7d:65:fc:fd:00:37:6b:20:ea:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573 Validity Not Before: Jul 24 02:57:24 2026 GMT Not After : Jul 25 06:53:24 2026 GMT Subject: CN=7404DE16AAF3FCCB71DDAAE319DB33850EF4EC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:ee:01:11:cd:f4:70:a6:2a:ae:b0:37:1c: 2f:7d:11:ea:01:bc:49:cf:48:39:3c:16:2c:25:c9: 93:b5:24:90:9f:1e:21:0a:25:47:32:28:cc:be:17: 09:04:20:18:19:56:3d:ad:4d:13:95:1e:04:ed:fc: 93:38:07:77:4e:cc:ee:96:32:31:6b:b2:c7:fa:6f: 6a:6f:7e:f4:9d:2f:1c:b2:cd:1f:f4:ad:a5:14:7d: e1:a2:01:eb:40:06:bf:2b:c6:a2:8d:b4:b5:fa:05: 10:ec:bc:c9:93:6a:84:a2:d6:12:73:46:6f:4b:cd: 05:76:c0:9e:00:89:54:47:bd:2c:d9:db:1c:80:e6: 04:da:a0:fc:21:5a:c3:52:f7:68:e6:14:dd:e9:76: b3:13:42:19:fd:f4:e9:a5:96:49:00:ba:96:24:08: f7:47:76:2c:97:4f:d8:ad:54:c2:54:19:d9:e9:52: 22:9d:90:00:13:a2:1a:af:d8:dc:55:5e:ab:a4:a4: a8:24:29:dc:89:34:db:69:68:14:92:71:06:d0:f6: c8:55:a5:ca:af:21:ff:f2:c8:f0:b4:85:a4:cb:dc: 9c:28:85:cb:ff:a9:9a:e3:74:d1:32:f3:b2:e5:8c: a2:31:8b:82:07:04:44:f4:1b:5d:39:56:cd:9a:ae: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:DE:16:AA:F3:FC:CB:71:DD:AA:E3:19:DB:33:85:0E:F4:EC:1E X509v3 Authority Key Identifier: keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0b:5a:89:20:d9:1b:f1:4a:55:c8:c9:8f:7e:d4:b6:ce:39: 4a:31:d0:a8:01:83:da:1f:06:5a:01:3f:74:ac:fb:3f:19:6d: 95:17:e5:4d:79:a4:0e:49:ad:d5:9c:fb:ae:8f:1c:f9:9a:88: a4:6f:19:58:c7:82:da:a2:ff:97:71:28:51:e7:20:00:b5:34: a4:bd:c5:41:72:48:d4:6f:5d:52:a6:db:e2:3d:de:d8:e4:73: 2c:75:56:f1:5d:77:60:2a:29:99:87:5e:be:60:7f:2c:70:92: f4:8c:2b:be:80:59:7b:6b:d4:e0:dd:e5:54:54:17:ae:52:c8: 7f:40:7e:a8:d5:80:60:81:4c:6f:df:44:bf:5d:d5:ec:42:a1: e8:62:e6:45:bd:ae:60:a1:47:6d:26:ed:76:d4:ca:5c:1b:77: 14:78:af:05:65:64:d5:25:5f:c5:a4:1b:ce:1d:73:50:20:c1: a6:52:fe:50:71:5e:8d:a3:d8:6d:60:5e:77:df:cb:69:ad:d2: ef:af:06:e3:59:e8:f7:c3:2f:43:85:bb:2a:c8:fe:86:f2:d3: e0:df:6b:3b:f6:4c:84:ff:56:3d:19:1b:4d:f9:45:06:ad:57: 60:94:31:e1:ab:88:13:3a:e6:95:bd:18:4a:eb:98:cd:00:fd: 10:2e:60:28 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUdHBfqZqtrgVfWn1l/P0AN2sg6rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBOUMzMkY3ODA2NDcwRjc1MEVDNTM0MzFENEYzMjJG MDg1MTU3MzAeFw0yNjA3MjQwMjU3MjRaFw0yNjA3MjUwNjUzMjRaMDMxMTAvBgNV BAMTKDc0MDRERTE2QUFGM0ZDQ0I3MUREQUFFMzE5REIzMzg1MEVGNEVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNi+4BEc30cKYqrrA3HC99EeoB vEnPSDk8FiwlyZO1JJCfHiEKJUcyKMy+FwkEIBgZVj2tTROVHgTt/JM4B3dOzO6W MjFrssf6b2pvfvSdLxyyzR/0raUUfeGiAetABr8rxqKNtLX6BRDsvMmTaoSi1hJz Rm9LzQV2wJ4AiVRHvSzZ2xyA5gTaoPwhWsNS92jmFN3pdrMTQhn99OmllkkAupYk CPdHdiyXT9itVMJUGdnpUiKdkAATohqv2NxVXqukpKgkKdyJNNtpaBSScQbQ9shV pcqvIf/yyPC0haTL3Jwohcv/qZrjdNEy87LljKIxi4IHBET0G105Vs2artuLAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUdATeFqrz/Mtx3arjGdszhQ707B4wHwYDVR0j BBgwFoAUDKnDL3gGRw91DsU0MdTzIvCFFXMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQk9PS1Mv MC8wQ0E5QzMyRjc4MDY0NzBGNzUwRUM1MzQzMUQ0RjMyMkYwODUxNTczLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzBDQTlDMzJGNzgwNjQ3MEY3NTBFQzUzNDMxRDRG MzIyRjA4NTE1NzMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9CT09LUy8wLzBDQTlDMzJGNzgwNjQ3 MEY3NTBFQzUzNDMxRDRGMzIyRjA4NTE1NzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtC1qJINkb8UpV yMmPftS2zjlKMdCoAYPaHwZaAT90rPs/GW2VF+VNeaQOSa3VnPuujxz5moikbxlY x4Laov+XcShR5yAAtTSkvcVBckjUb11SptviPd7Y5HMsdVbxXXdgKimZh16+YH8s cJL0jCu+gFl7a9Tg3eVUVBeuUsh/QH6o1YBggUxv30S/XdXsQqHoYuZFva5goUdt Ju121MpcG3cUeK8FZWTVJV/FpBvOHXNQIMGmUv5QcV6No9htYF5338tprdLvrwbj Wej3wy9DhbsqyP6G8tPg32s79kyE/1Y9GRtN+UUGrVdglDHhq4gTOuaVvRhK65jN AP0QLmAo -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:29 2026 by rpki-client