$ rpki-client -vvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json) Hash identifier: Ujqif5AIu8EJ6h5q9C2ZjEtqLNe9hlkrRYazCdlNFfs= Subject key identifier: D8:03:84:AD:0A:20:3B:BC:7F:10:92:C1:CA:CF:CC:A9:AA:06:17:BC Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 Certificate issuer: /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Certificate serial: 0230FF5D7851A4BD9D3867101CAB385B0E6B3383 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 11:02:16 +0000 Manifest this update: Thu 23 Jul 2026 10:57:16 +0000 Manifest next update: Fri 24 Jul 2026 11:23:16 +0000 Files and hashes: 1: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: MChPzsf+m/BY3C6/oq8Yn/9z6ns+EsVJbRIS9DOWtDM=) 2: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=) 3: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:30:ff:5d:78:51:a4:bd:9d:38:67:10:1c:ab:38:5b:0e:6b:33:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Validity Not Before: Jul 23 10:57:16 2026 GMT Not After : Jul 24 11:23:16 2026 GMT Subject: CN=D80384AD0A203BBC7F1092C1CACFCCA9AA0617BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:47:13:3d:f7:86:00:9a:82:f2:c8:3c:bf:96: 4e:52:f5:d9:86:60:3b:b7:1b:24:3c:1d:3d:c8:a5: 90:ca:68:c0:37:37:df:04:3a:41:d8:b3:08:6e:ae: 91:b8:f8:35:f1:69:4a:1a:f9:48:f5:f8:b9:f4:a3: 44:27:e2:62:96:5f:bc:5b:d0:e8:2d:a5:16:35:b8: 4b:7a:67:f9:5f:90:8d:60:1e:67:02:d4:80:38:fd: fc:bd:39:f2:d7:b6:9c:e4:42:c1:74:4d:76:1e:e8: de:ce:cf:11:c1:f9:20:54:9f:aa:24:01:1d:d5:05: 65:5b:1f:72:4d:c7:c2:5e:b0:46:f0:99:bd:df:e3: 26:98:7e:8b:9f:9d:85:a7:a0:4d:21:62:d0:dd:fb: 9e:63:ee:93:b3:91:cd:5e:5d:2c:13:a2:29:2b:be: a4:5e:fb:8e:37:b1:62:ef:1c:f8:2d:d7:c5:2d:90: 49:5a:98:24:61:dc:fd:80:74:a9:0b:fa:5b:67:1a: 9a:2e:1b:32:0f:42:84:ac:e0:ab:c1:63:e0:2f:cc: 2e:a4:e1:59:52:8a:41:a6:b6:3d:d6:47:00:d3:e5: 13:c7:91:cb:de:5f:f1:ce:2a:e3:81:fc:68:68:63: bd:6e:0e:67:37:95:6f:df:f9:5b:30:b4:48:a1:a4: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:84:AD:0A:20:3B:BC:7F:10:92:C1:CA:CF:CC:A9:AA:06:17:BC X509v3 Authority Key Identifier: keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:73:97:6c:8c:90:e6:1f:cd:df:6f:e6:ab:78:07:c7:02: 33:9a:e5:2a:70:21:cc:79:19:4b:43:ac:ec:cd:ef:b7:8a:04: 3e:04:a7:7e:fe:10:78:56:e0:e6:cf:fc:92:e3:05:29:b5:36: da:8f:be:83:07:7a:5c:76:b7:5d:8a:3b:68:bc:8d:10:8c:22: 85:3b:f4:04:87:72:94:e9:98:0b:d9:f6:e1:94:a0:d7:6c:4c: ff:fc:95:81:58:16:14:eb:eb:f8:ff:77:8d:65:fb:b3:62:95: a6:f3:a3:df:e3:4f:1f:eb:ec:3e:d6:71:68:e8:c2:b9:e1:a9: dc:ef:28:33:07:2b:29:9f:1d:1e:1a:54:39:e9:a9:5c:d6:7c: b1:0d:36:2d:f4:c6:8f:a7:43:ff:b1:7d:fd:ef:ba:f1:65:af: 55:b8:e0:9c:77:91:81:de:96:82:72:f1:7a:07:94:70:af:24: 6a:95:9e:ab:44:86:fa:ba:1b:6b:3d:76:08:e3:6c:3f:0b:27: ee:8a:76:93:52:27:bc:1d:4e:fd:3d:7c:b9:42:d6:f0:3f:e8: cd:0c:88:06:52:3e:94:c0:41:0f:47:59:fd:51:61:84:8e:25: c6:0c:01:f0:4f:b6:4d:4c:4e:b6:aa:6c:85:2c:72:96:1f:b6: fe:dd:e3:1d -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUAjD/XXhRpL2dOGcQHKs4Ww5rM4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4NkMyMzE3MURGRkFG NUFEN0REODAeFw0yNjA3MjMxMDU3MTZaFw0yNjA3MjQxMTIzMTZaMDMxMTAvBgNV BAMTKEQ4MDM4NEFEMEEyMDNCQkM3RjEwOTJDMUNBQ0ZDQ0E5QUEwNjE3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCERxM994YAmoLyyDy/lk5S9dmG YDu3GyQ8HT3IpZDKaMA3N98EOkHYswhurpG4+DXxaUoa+Uj1+Ln0o0Qn4mKWX7xb 0OgtpRY1uEt6Z/lfkI1gHmcC1IA4/fy9OfLXtpzkQsF0TXYe6N7OzxHB+SBUn6ok AR3VBWVbH3JNx8JesEbwmb3f4yaYfoufnYWnoE0hYtDd+55j7pOzkc1eXSwToikr vqRe+443sWLvHPgt18UtkElamCRh3P2AdKkL+ltnGpouGzIPQoSs4KvBY+AvzC6k 4VlSikGmtj3WRwDT5RPHkcveX/HOKuOB/GhoY71uDmc3lW/f+VswtEihpKWfAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU2AOErQogO7x/EJLBys/MqaoGF7wwHwYDVR0j BBgwFoAUNtqRQt4dyAnvAIbCMXHf+vWtfdgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hBUk1X QVkvMC8zNkRBOTE0MkRFMURDODA5RUYwMDg2QzIzMTcxREZGQUY1QUQ3REQ4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMx NzFERkZBRjVBRDdERDguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8wLzM2REE5MTQy REUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf7HOX bIyQ5h/N32/mq3gHxwIzmuUqcCHMeRlLQ6zsze+3igQ+BKd+/hB4VuDmz/yS4wUp tTbaj76DB3pcdrddijtovI0QjCKFO/QEh3KU6ZgL2fbhlKDXbEz//JWBWBYU6+v4 /3eNZfuzYpWm86Pf408f6+w+1nFo6MK54anc7ygzByspnx0eGlQ56alc1nyxDTYt 9MaPp0P/sX3977rxZa9VuOCcd5GB3paCcvF6B5RwryRqlZ6rRIb6uhtrPXYI42w/ CyfuinaTUie8HU79PXy5QtbwP+jNDIgGUj6UwEEPR1n9UWGEjiXGDAHwT7ZNTE62 qmyFLHKWH7b+3eMd -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:10 2026 by rpki-client