$ rpki-client -vvvf rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft File: 8B6578CFFA2564370C947633B4222B38FBE04787.mft (raw, json) Hash identifier: KkLfqgb+bQocnpH61c7xAp7Cg13zF5HwYU+ToUgEq7A= Subject key identifier: 12:D6:6A:7F:F3:B9:3A:64:95:0C:BF:79:7E:70:25:6A:0E:88:1D:C7 Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 Certificate issuer: /CN=8B6578CFFA2564370C947633B4222B38FBE04787 Certificate serial: 680E9FC62D3F5FCC5ED554AA34474AE150FDD71A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft Manifest number: 0103 Signing time: Sun 15 Nov 2026 17:28:40 +0000 Manifest this update: Sun 15 Nov 2026 17:23:40 +0000 Manifest next update: Mon 16 Nov 2026 19:20:40 +0000 Files and hashes: 1: 3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (hash: OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=) 2: 3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (hash: XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=) 3: 3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (hash: OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=) 4: 3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (hash: iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=) 5: 8B6578CFFA2564370C947633B4222B38FBE04787.crl (hash: oc0uC7hRmj1KFyA21I2/nI13qlEAC9RjX3qjEleuDJI=) 6: 3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (hash: h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=) 7: 3130332e3130342e3134382e302f32332d3332203d3e20313331363137.roa (hash: ptYVo8fcmKCNY0SB5M4EFl0tfitQ5lFpdJDuUwWLs1E=) 8: 3130332e3130342e3134382e302f32342d3332203d3e20313331363137.roa (hash: 3HCjGtrVeXk0xOR0uuHBiqXc7pJZ9osCCcWRgAc2u0I=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0e:9f:c6:2d:3f:5f:cc:5e:d5:54:aa:34:47:4a:e1:50:fd:d7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787 Validity Not Before: Nov 15 17:23:40 2026 GMT Not After : Nov 16 19:20:40 2026 GMT Subject: CN=12D66A7FF3B93A64950CBF797E70256A0E881DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:ab:3c:15:ea:c8:c5:09:3f:f1:3b:0c:39: b3:a8:48:54:9a:3a:89:a3:fe:83:16:02:12:b9:3d: b4:33:43:9b:e9:2f:9c:76:93:6e:2b:15:f0:90:93: 30:61:78:85:5a:46:cc:37:af:64:9f:68:79:bb:dc: 05:88:13:f3:d0:1e:f3:b3:12:4b:c5:e0:2d:e4:27: f8:4f:6f:03:b7:a4:4f:f4:b5:69:01:a4:09:1b:be: 6a:ce:c5:1e:7c:90:38:f9:ee:8f:7a:ef:09:d1:20: a0:e3:67:80:14:91:54:0a:91:6f:1b:7a:8b:93:9d: bf:b9:41:0a:f7:f0:cc:cc:99:79:4b:3f:db:d9:3d: 08:91:b4:ed:81:8b:e1:4b:42:7c:2a:bb:b9:17:bd: c9:c9:a8:e2:2a:c3:59:16:17:88:a4:23:57:a0:c0: e5:8f:36:86:43:61:11:ab:e3:11:3a:71:62:47:6f: 8a:b5:e4:e3:58:95:09:74:4c:27:b0:ce:f5:6c:c9: a3:ee:0f:85:d9:4b:f3:df:ec:31:37:7e:2a:9f:da: 86:3a:11:f6:f3:a7:88:83:eb:74:ec:47:e1:4d:fd: 1c:78:c5:99:6e:cb:d4:8d:0f:fc:2a:64:d1:98:91: c0:63:88:ce:c0:1c:69:c2:60:b4:f8:f2:f8:d9:5d: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D6:6A:7F:F3:B9:3A:64:95:0C:BF:79:7E:70:25:6A:0E:88:1D:C7 X509v3 Authority Key Identifier: keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:36:6b:57:38:a0:96:79:6d:75:c9:25:13:4e:8f:3f:d6: 93:4d:c6:05:df:0a:d7:5e:53:60:2b:22:92:61:ac:4a:10:b1: e7:a8:39:4d:1f:a8:05:84:be:60:1d:f6:3e:b1:cc:85:a3:4c: ce:66:79:75:97:a7:62:d1:b7:a1:60:d6:12:62:08:f7:6f:e1: 5a:c5:ec:6c:b0:bf:5c:7c:2b:6f:19:0d:82:8b:82:00:16:99: 96:ae:f4:0a:80:b6:dc:17:ca:67:ab:1b:54:b4:ac:40:00:d9: 23:ac:ff:42:00:8b:c4:68:d7:bc:27:b8:90:5a:8f:6e:f1:80: 99:24:32:d1:c8:1e:79:ad:f7:99:e1:89:9e:2a:4a:d7:66:24: 8f:d0:8f:f3:e4:0b:db:92:2c:13:83:36:41:05:01:51:75:73: ed:ae:c4:a1:77:2b:65:29:ab:92:46:6b:46:7e:4e:28:91:68: ff:07:44:dc:8b:bc:22:fa:88:56:df:12:43:e5:77:7a:2f:e7: 49:fa:37:75:d4:38:fd:bf:77:22:a6:9f:68:6a:d0:b2:e4:fa: f6:07:1a:da:1d:71:56:67:53:bd:fb:70:68:73:2a:74:5a:68: 00:e9:5c:dd:e5:05:9a:be:74:ef:7b:ce:24:29:15:62:e3:ba: 53:fa:0d:d7 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUaA6fxi0/X8xe1VSqNEdK4VD91xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI2NTc4Q0ZGQTI1NjQzNzBDOTQ3NjMzQjQyMjJCMzhG QkUwNDc4NzAeFw0yNjExMTUxNzIzNDBaFw0yNjExMTYxOTIwNDBaMDMxMTAvBgNV BAMTKDEyRDY2QTdGRjNCOTNBNjQ5NTBDQkY3OTdFNzAyNTZBMEU4ODFEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFas8FerIxQk/8TsMObOoSFSa Oomj/oMWAhK5PbQzQ5vpL5x2k24rFfCQkzBheIVaRsw3r2SfaHm73AWIE/PQHvOz EkvF4C3kJ/hPbwO3pE/0tWkBpAkbvmrOxR58kDj57o967wnRIKDjZ4AUkVQKkW8b eouTnb+5QQr38MzMmXlLP9vZPQiRtO2Bi+FLQnwqu7kXvcnJqOIqw1kWF4ikI1eg wOWPNoZDYRGr4xE6cWJHb4q15ONYlQl0TCewzvVsyaPuD4XZS/Pf7DE3fiqf2oY6 Efbzp4iD63TsR+FN/Rx4xZluy9SND/wqZNGYkcBjiM7AHGnCYLT48vjZXftBAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUEtZqf/O5OmSVDL95fnAlag6IHccwHwYDVR0j BBgwFoAUi2V4z/olZDcMlHYztCIrOPvgR4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJP SUQvMC84QjY1NzhDRkZBMjU2NDM3MEM5NDc2MzNCNDIyMkIzOEZCRTA0Nzg3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzhCNjU3OENGRkEyNTY0MzcwQzk0NzYzM0I0 MjIyQjM4RkJFMDQ3ODcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DRU5UUk9JRC8wLzhCNjU3OENG RkEyNTY0MzcwQzk0NzYzM0I0MjIyQjM4RkJFMDQ3ODcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoKjZr VziglnltdcklE06PP9aTTcYF3wrXXlNgKyKSYaxKELHnqDlNH6gFhL5gHfY+scyF o0zOZnl1l6di0behYNYSYgj3b+FaxexssL9cfCtvGQ2Ci4IAFpmWrvQKgLbcF8pn qxtUtKxAANkjrP9CAIvEaNe8J7iQWo9u8YCZJDLRyB55rfeZ4YmeKkrXZiSP0I/z 5AvbkiwTgzZBBQFRdXPtrsShdytlKauSRmtGfk4okWj/B0Tci7wi+ohW3xJD5Xd6 L+dJ+jd11Dj9v3cipp9oatCy5Pr2BxraHXFWZ1O9+3Bocyp0WmgA6Vzd5QWavnTv e84kKRVi47pT+g3X -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:03 2026 by rpki-client