$ rpki-client -vvf rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft File: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft (raw, json) Hash identifier: /d5Du0nRXryODZwsNCw1IHUmgWbuGo6ftv5G79xcEq0= Subject key identifier: 06:94:0F:33:DE:6C:FB:82:A5:0F:59:52:E3:0D:40:20:17:3F:8C:BB Authority key identifier: 71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11 Certificate issuer: /CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911 Certificate serial: 194878E461FB1E1920DA75886CC297B04928C6B8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft Manifest number: 63 Signing time: Thu 23 Jul 2026 12:52:29 +0000 Manifest this update: Thu 23 Jul 2026 12:47:29 +0000 Manifest next update: Fri 24 Jul 2026 14:08:29 +0000 Files and hashes: 1: 71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl (hash: 0ofZSD5D1YdtvlMtuo9uguwI13f1sQ4HlMH+Cmnhzyo=) 2: 36312e35372e3234302e302f32302d3234203d3e203138343135.roa (hash: dB5hiO5nyANYzeAWgeX1ND73H/9m/AUcozE5q3e2mrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:48:78:e4:61:fb:1e:19:20:da:75:88:6c:c2:97:b0:49:28:c6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911 Validity Not Before: Jul 23 12:47:29 2026 GMT Not After : Jul 24 14:08:29 2026 GMT Subject: CN=06940F33DE6CFB82A50F5952E30D4020173F8CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:93:97:de:82:a1:ea:e8:e4:da:28:78:9d: 48:4b:cf:3c:b0:a4:28:ca:d9:e0:05:1b:7e:cb:b7: b7:4b:8c:0d:ea:fa:4d:03:b8:7d:43:15:18:ff:e7: 28:a2:7b:5f:b2:7a:77:4e:df:31:54:7a:c7:d0:3e: 9e:89:35:95:31:98:15:49:81:6f:6f:51:26:9f:3e: 13:44:67:b0:3d:c3:4b:72:d5:33:8c:f6:b7:3a:2b: 73:39:f0:86:86:06:eb:b2:ca:4c:ac:ad:d6:cd:43: 0c:d2:07:a4:e0:71:c0:a7:7d:ba:93:b4:c2:1a:71: 02:9d:fc:34:fd:02:5c:da:f3:49:46:c3:23:39:50: 13:0e:ef:25:a6:77:b8:21:9e:6d:35:2c:5f:33:c3: 8a:20:98:f7:05:5e:48:1f:e4:cc:05:80:b7:77:7c: d0:bf:1e:7b:b0:e3:9f:d9:14:14:8e:b0:32:9f:71: 31:1f:48:f6:57:27:de:0f:3d:ce:8e:29:58:79:4d: b0:08:3b:fa:ce:ca:c5:d2:d3:35:06:dc:5a:43:b5: 39:0b:6e:f3:8a:78:1b:49:72:22:56:6d:cd:b8:c2: 7c:eb:3e:1f:f6:99:b4:0a:c2:44:fe:31:c7:d7:4a: 78:3b:72:a9:59:02:91:fa:e4:6d:58:2f:09:2b:1b: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:0F:33:DE:6C:FB:82:A5:0F:59:52:E3:0D:40:20:17:3F:8C:BB X509v3 Authority Key Identifier: keyid:71:CD:DF:62:3A:BC:E3:9F:41:FB:6A:AC:19:F8:1E:91:F9:AD:69:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BWIZ/0/71CDDF623ABCE39F41FB6AAC19F81E91F9AD6911.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4a:82:2e:23:25:e7:54:8e:e0:c7:ed:e0:38:7d:b3:20:53: 7b:de:e0:a9:b8:15:54:33:05:12:96:ae:c3:b2:cd:9d:a8:28: 48:41:38:43:07:c1:5e:13:ab:43:23:0e:e6:fa:6e:1f:98:9b: 31:0e:1a:0a:cf:59:57:a8:68:a4:84:6c:60:74:34:ec:10:74: a3:fc:d3:f7:42:73:e9:eb:36:99:d8:2e:d8:6c:03:fb:13:45: 4d:80:24:af:ba:f2:ed:9c:f8:b2:8b:73:92:8c:8b:95:37:14: 10:9c:1e:c8:f3:1d:78:10:95:d0:02:5a:54:5a:d7:6b:3f:ac: 65:54:f7:13:b0:23:ff:10:d1:88:e0:c2:38:cf:4d:0a:79:84: 5b:b6:8f:68:9a:68:b1:e0:e8:ed:c8:39:7a:fd:b3:96:4d:1c: a2:44:11:59:e3:62:c7:dd:e9:39:06:ea:48:16:e7:0e:8c:22: 2d:73:5a:56:10:5a:37:c5:f1:38:a2:eb:d5:0b:18:94:14:b2: db:ff:a9:23:99:a4:62:0d:a5:8c:f6:bf:eb:34:62:06:6b:85: bb:ed:a7:53:c7:4e:a3:88:c9:ba:29:98:c9:34:42:43:5f:30: 5c:58:4b:54:b0:e8:53:4c:df:31:88:36:ad:24:78:fc:d6:b0: b7:d6:93:1e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUGUh45GH7Hhkg2nWIbMKXsEkoxrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDRERGNjIzQUJDRTM5RjQxRkI2QUFDMTlGODFFOTFG OUFENjkxMTAeFw0yNjA3MjMxMjQ3MjlaFw0yNjA3MjQxNDA4MjlaMDMxMTAvBgNV BAMTKDA2OTQwRjMzREU2Q0ZCODJBNTBGNTk1MkUzMEQ0MDIwMTczRjhDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxJOX3oKh6ujk2ih4nUhLzzyw pCjK2eAFG37Lt7dLjA3q+k0DuH1DFRj/5yiie1+yendO3zFUesfQPp6JNZUxmBVJ gW9vUSafPhNEZ7A9w0ty1TOM9rc6K3M58IaGBuuyykysrdbNQwzSB6TgccCnfbqT tMIacQKd/DT9Alza80lGwyM5UBMO7yWmd7ghnm01LF8zw4ogmPcFXkgf5MwFgLd3 fNC/Hnuw45/ZFBSOsDKfcTEfSPZXJ94PPc6OKVh5TbAIO/rOysXS0zUG3FpDtTkL bvOKeBtJciJWbc24wnzrPh/2mbQKwkT+McfXSng7cqlZApH65G1YLwkrG+FxAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUBpQPM95s+4KlD1lS4w1AIBc/jLswHwYDVR0j BBgwFoAUcc3fYjq8459B+2qsGfgekfmtaREwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQldJWi8w LzcxQ0RERjYyM0FCQ0UzOUY0MUZCNkFBQzE5RjgxRTkxRjlBRDY5MTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNzFDRERGNjIzQUJDRTM5RjQxRkI2QUFDMTlGODFF OTFGOUFENjkxMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JXSVovMC83MUNEREY2MjNBQkNFMzlG NDFGQjZBQUMxOUY4MUU5MUY5QUQ2OTExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkqCLiMl51SO4Mft 4Dh9syBTe97gqbgVVDMFEpauw7LNnagoSEE4QwfBXhOrQyMO5vpuH5ibMQ4aCs9Z V6hopIRsYHQ07BB0o/zT90Jz6es2mdgu2GwD+xNFTYAkr7ry7Zz4sotzkoyLlTcU EJweyPMdeBCV0AJaVFrXaz+sZVT3E7Aj/xDRiODCOM9NCnmEW7aPaJposeDo7cg5 ev2zlk0cokQRWeNix93pOQbqSBbnDowiLXNaVhBaN8XxOKLr1QsYlBSy2/+pI5mk Yg2ljPa/6zRiBmuFu+2nU8dOo4jJuimYyTRCQ18wXFhLVLDoU0zfMYg2rSR4/Naw t9aTHg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:13:59 2026 by rpki-client