$ rpki-client -vvf rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft File: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft (raw, json) Hash identifier: ULooPqlaC2oTAdYXOpv9LDj86c2ZfmHXVLxRGrp+4+c= Subject key identifier: A1:31:E4:65:E8:06:08:F7:B3:F3:7B:0D:E6:DD:F4:38:B8:0C:BB:81 Authority key identifier: 6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 Certificate issuer: /CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Certificate serial: 08A8623CF79774D3DC897B95CBAC231996CC2887 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 14:47:43 +0000 Manifest this update: Thu 23 Jul 2026 14:42:43 +0000 Manifest next update: Fri 24 Jul 2026 17:04:43 +0000 Files and hashes: 1: 3130332e3136312e362e302f32332d3234203d3e203231383539.roa (hash: uWZD4+YbW51xLCVpXbXAANNn4P9xs+4KtJrLiouzkvQ=) 2: 6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl (hash: wxeocJvB6X6lzk+eTqISfCjd/QlxdxSGXbq+G18x7P0=) 3: 3130332e3136312e362e302f32332d3234203d3e20313331363138.roa (hash: HW3fNW9yAqboou7jAhk1cKMCcOPZDWYktjmxy1gjfvo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a8:62:3c:f7:97:74:d3:dc:89:7b:95:cb:ac:23:19:96:cc:28:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A8F810EB0BF683DFCA74C403A7B03D37E16F268 Validity Not Before: Jul 23 14:42:43 2026 GMT Not After : Jul 24 17:04:43 2026 GMT Subject: CN=A131E465E80608F7B3F37B0DE6DDF438B80CBB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:8d:84:75:49:70:7e:82:b3:8f:f5:ba:18: 06:b2:fe:86:65:cd:f2:1c:cd:20:a6:b9:24:c8:ff: 20:3f:b3:89:da:3d:f3:94:d0:b5:f4:4f:8f:f4:cc: 95:fa:52:59:2a:54:e7:ba:19:3b:30:fc:94:c6:1d: 7b:6b:f4:99:e6:14:73:65:33:5c:b3:e7:6c:99:40: 16:6e:45:da:dc:87:e1:19:a3:92:0e:78:21:3d:bb: 31:1a:2e:8c:b6:13:1b:ef:8d:82:d2:55:16:fc:c2: 90:b1:e3:ee:a4:cd:a3:62:e4:d6:b4:a8:6f:58:70: 6e:81:70:2c:84:61:97:04:9a:d4:2c:31:fd:9a:80: 41:c0:59:f5:dc:ef:21:ff:29:52:2c:d0:a6:b4:91: 5c:3f:5c:d4:65:57:ed:15:cf:22:2f:d4:33:aa:d9: a8:6e:a6:d3:c0:35:a9:d3:5b:a6:98:d1:d5:e9:93: 3e:fa:2f:75:d9:cc:9c:ea:ec:57:25:79:16:fa:2e: da:27:dc:fe:6f:90:9b:69:4a:7c:31:59:13:16:88: 35:e9:61:a9:ba:ae:24:2d:92:d8:0b:1a:71:fd:68: e5:69:90:f5:b4:c5:38:0a:4f:cc:b0:cb:c3:19:3f: b1:3f:d4:2c:93:14:a0:8e:b2:27:51:3c:bc:4a:b7: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:E4:65:E8:06:08:F7:B3:F3:7B:0D:E6:DD:F4:38:B8:0C:BB:81 X509v3 Authority Key Identifier: keyid:6A:8F:81:0E:B0:BF:68:3D:FC:A7:4C:40:3A:7B:03:D3:7E:16:F2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARLWATCH/0/6A8F810EB0BF683DFCA74C403A7B03D37E16F268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:77:ea:17:be:94:65:56:eb:4e:8b:97:a5:d7:77:2c:07:f0: fd:8b:45:7e:ea:49:20:3c:45:93:e6:9e:eb:b7:d0:3d:6c:3b: 06:4b:1e:bf:07:c6:d0:ae:c0:98:7a:69:77:de:94:82:79:42: 48:a9:24:56:71:15:dd:39:b4:ae:d8:69:03:49:c7:ae:c0:27: 77:17:84:a8:c6:68:cc:38:08:f6:ab:6d:d5:a1:9e:72:2f:7c: 67:0a:5b:81:81:ba:cf:53:3c:b1:a9:d1:ab:0f:f3:da:59:0e: 18:f1:fd:56:d6:77:62:fe:dc:77:95:4d:de:a7:ee:79:d9:08: 6a:66:e5:4c:dd:31:32:ec:a6:44:86:18:cd:38:27:1c:4b:ec: d3:13:16:9f:dd:71:b4:c7:76:85:10:33:18:fa:2a:93:f1:72: de:1c:8b:2d:68:c6:24:20:e3:a2:e0:06:aa:d3:26:25:87:eb: c2:2b:f1:a2:b0:63:d1:8a:8b:9b:a2:40:05:a7:da:17:9f:af: 6c:17:8c:5f:b5:89:46:09:28:55:1c:09:2d:35:bb:2b:cc:31: 52:cc:b0:ac:d1:ce:76:6b:68:e1:e9:6e:b4:e0:c9:74:b5:0b: 95:20:28:2e:d0:fb:ba:56:89:97:13:9b:e3:e0:04:9c:ed:49: 02:bf:1d:62 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCKhiPPeXdNPciXuVy6wjGZbMKIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3 RTE2RjI2ODAeFw0yNjA3MjMxNDQyNDNaFw0yNjA3MjQxNzA0NDNaMDMxMTAvBgNV BAMTKEExMzFFNDY1RTgwNjA4RjdCM0YzN0IwREU2RERGNDM4QjgwQ0JCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6go2EdUlwfoKzj/W6GAay/oZl zfIczSCmuSTI/yA/s4naPfOU0LX0T4/0zJX6UlkqVOe6GTsw/JTGHXtr9JnmFHNl M1yz52yZQBZuRdrch+EZo5IOeCE9uzEaLoy2ExvvjYLSVRb8wpCx4+6kzaNi5Na0 qG9YcG6BcCyEYZcEmtQsMf2agEHAWfXc7yH/KVIs0Ka0kVw/XNRlV+0VzyIv1DOq 2ahuptPANanTW6aY0dXpkz76L3XZzJzq7FcleRb6Lton3P5vkJtpSnwxWRMWiDXp Yam6riQtktgLGnH9aOVpkPW0xTgKT8ywy8MZP7E/1CyTFKCOsidRPLxKt775AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUoTHkZegGCPez83sN5t30OLgMu4EwHwYDVR0j BBgwFoAUao+BDrC/aD38p0xAOnsD034W8mgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdB VENILzAvNkE4RjgxMEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS82QThGODEwRUIwQkY2ODNERkNBNzRDNDAz QTdCMDNEMzdFMTZGMjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FSTFdBVENILzAvNkE4Rjgx MEVCMEJGNjgzREZDQTc0QzQwM0E3QjAzRDM3RTE2RjI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG13 6he+lGVW606Ll6XXdywH8P2LRX7qSSA8RZPmnuu30D1sOwZLHr8HxtCuwJh6aXfe lIJ5QkipJFZxFd05tK7YaQNJx67AJ3cXhKjGaMw4CParbdWhnnIvfGcKW4GBus9T PLGp0asP89pZDhjx/VbWd2L+3HeVTd6n7nnZCGpm5UzdMTLspkSGGM04JxxL7NMT Fp/dcbTHdoUQMxj6KpPxct4ciy1oxiQg46LgBqrTJiWH68Ir8aKwY9GKi5uiQAWn 2hefr2wXjF+1iUYJKFUcCS01uyvMMVLMsKzRznZraOHpbrTgyXS1C5UgKC7Q+7pW iZcTm+PgBJztSQK/HWI= -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:49 2026 by rpki-client