$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft File: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft (raw, json) Hash identifier: IULiqKL5aQmKkDvqOgdswBeMjCn54EMAnllSS1FfYRo= Subject key identifier: 5D:0D:2F:EA:26:5F:15:4A:8E:AD:2D:8C:FA:99:57:79:AC:99:E5:D5 Authority key identifier: 36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 Certificate issuer: /CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Certificate serial: 7D13A64E5A05FE5957F5138EE55BCE75449340AA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft Manifest number: BB Signing time: Sun 27 Sep 2026 01:42:43 +0000 Manifest this update: Sun 27 Sep 2026 01:37:43 +0000 Manifest next update: Mon 28 Sep 2026 03:52:43 +0000 Files and hashes: 1: 3130332e3138352e32382e302f32342d3234203d3e203633383935.roa (hash: JS4Qm1OsdepukGMz5KolWYvDOAevkg4p1IuH05xaB/o=) 2: 36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl (hash: B4IjXcAdagWLLkFdCQPqMVPyyq5v014n1gwyvY+1BE8=) 3: 3130332e3138352e32392e302f32342d3234203d3e203633383935.roa (hash: LV1cVMdSN5eWpmAc939ufzrprX2eQC54dQxdplIInEo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:13:a6:4e:5a:05:fe:59:57:f5:13:8e:e5:5b:ce:75:44:93:40:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8 Validity Not Before: Sep 27 01:37:43 2026 GMT Not After : Sep 28 03:52:43 2026 GMT Subject: CN=5D0D2FEA265F154A8EAD2D8CFA995779AC99E5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:28:9b:19:1f:14:14:a2:7a:5c:e2:41:f2: 1e:76:d9:19:22:60:9b:f4:e6:a0:92:e3:93:06:6c: 67:ec:dc:b7:02:15:82:48:5a:71:30:95:b7:cc:82: 52:78:4b:8f:d7:a9:54:65:c4:55:f7:1c:6a:6e:e8: 3a:6b:f3:36:74:aa:ee:14:b7:83:1f:4e:02:94:fc: dc:e0:77:4b:1c:e7:99:4a:ac:8b:75:e1:b4:86:f0: a9:f8:fc:4f:cf:34:2a:64:fe:97:41:25:0a:e2:b3: c0:e4:be:83:c2:aa:4d:4e:e5:ab:65:e9:bf:46:7a: f4:c0:4a:04:8c:ba:99:28:1f:8d:38:a3:0f:97:4d: ad:1a:a7:87:29:0b:7d:71:1c:9a:73:34:0f:3e:64: e3:24:28:6d:1e:80:bd:3d:6b:09:fa:e4:cf:79:ac: a1:85:ff:36:9f:b6:f2:21:7d:ad:e3:87:46:92:b2: 73:ea:31:ed:d9:08:e0:cc:d5:59:d8:11:99:fd:e9: 69:78:96:1d:74:6a:94:d5:1b:ad:70:1a:82:8d:05: eb:92:7f:87:05:f7:11:9d:8e:be:9e:fb:e7:23:4a: cd:20:10:c3:b7:a9:96:65:a5:0a:d4:0d:db:ed:71: 4e:8c:6a:f2:82:93:4e:82:dd:d0:a3:91:78:ef:24: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:2F:EA:26:5F:15:4A:8E:AD:2D:8C:FA:99:57:79:AC:99:E5:D5 X509v3 Authority Key Identifier: keyid:36:DA:91:42:DE:1D:C8:09:EF:00:86:C2:31:71:DF:FA:F5:AD:7D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHARMWAY/0/36DA9142DE1DC809EF0086C23171DFFAF5AD7DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5d:ad:31:4b:7b:0b:64:a1:5a:93:eb:a6:6f:88:9a:d6:0a: 48:ba:89:88:5b:f2:a9:74:8f:b5:f2:e5:8e:15:85:bf:bd:bf: 4d:51:2c:14:89:c0:e7:a2:46:49:d4:87:45:9d:aa:5f:2a:be: 73:e5:1f:dc:10:81:25:a0:e5:21:8b:86:b1:8e:f6:9b:fe:38: 29:3a:1a:b9:4d:b2:9a:c2:f8:7c:fa:2d:d5:6d:21:3f:3c:6c: ac:5f:4e:11:d9:f9:b2:a6:1d:c0:72:30:05:21:71:ca:37:58: d2:ca:9e:80:e1:d4:2f:ec:13:20:1a:b3:7f:26:14:80:25:a0: 71:6f:90:13:5f:72:17:4c:71:b7:28:63:d7:b8:4d:52:21:5a: be:92:d8:00:87:4c:70:3b:c4:85:38:20:55:14:53:41:cd:11: a2:2c:2f:bd:b0:a5:37:0e:3b:85:1b:e5:c0:d0:8f:39:03:9b: 42:03:97:d3:c4:be:93:73:1b:f9:53:7c:df:0e:90:4c:73:55: ea:40:b9:3a:1d:5c:bd:66:22:59:67:f1:a6:7f:82:a2:a5:f6: f3:38:56:33:11:72:12:bb:12:f3:97:ef:4a:e6:59:12:a4:8a: fa:9c:28:e3:11:c7:2d:bf:8b:19:18:4f:ad:1e:1e:a4:09:84: d4:74:bf:f7 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUfROmTloF/llX9ROO5VvOdUSTQKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZEQTkxNDJERTFEQzgwOUVGMDA4NkMyMzE3MURGRkFG NUFEN0REODAeFw0yNjA5MjcwMTM3NDNaFw0yNjA5MjgwMzUyNDNaMDMxMTAvBgNV BAMTKDVEMEQyRkVBMjY1RjE1NEE4RUFEMkQ4Q0ZBOTk1Nzc5QUM5OUU1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFCibGR8UFKJ6XOJB8h522Rki YJv05qCS45MGbGfs3LcCFYJIWnEwlbfMglJ4S4/XqVRlxFX3HGpu6Dpr8zZ0qu4U t4MfTgKU/Nzgd0sc55lKrIt14bSG8Kn4/E/PNCpk/pdBJQris8DkvoPCqk1O5atl 6b9GevTASgSMupkoH404ow+XTa0ap4cpC31xHJpzNA8+ZOMkKG0egL09awn65M95 rKGF/zaftvIhfa3jh0aSsnPqMe3ZCODM1VnYEZn96Wl4lh10apTVG61wGoKNBeuS f4cF9xGdjr6e++cjSs0gEMO3qZZlpQrUDdvtcU6MavKCk06C3dCjkXjvJCoNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUXQ0v6iZfFUqOrS2M+plXeayZ5dUwHwYDVR0j BBgwFoAUNtqRQt4dyAnvAIbCMXHf+vWtfdgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hBUk1X QVkvMC8zNkRBOTE0MkRFMURDODA5RUYwMDg2QzIzMTcxREZGQUY1QUQ3REQ4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzM2REE5MTQyREUxREM4MDlFRjAwODZDMjMx NzFERkZBRjVBRDdERDguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSEFSTVdBWS8wLzM2REE5MTQy REUxREM4MDlFRjAwODZDMjMxNzFERkZBRjVBRDdERDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATXa0x S3sLZKFak+umb4ia1gpIuomIW/KpdI+18uWOFYW/vb9NUSwUicDnokZJ1IdFnapf Kr5z5R/cEIEloOUhi4axjvab/jgpOhq5TbKawvh8+i3VbSE/PGysX04R2fmyph3A cjAFIXHKN1jSyp6A4dQv7BMgGrN/JhSAJaBxb5ATX3IXTHG3KGPXuE1SIVq+ktgA h0xwO8SFOCBVFFNBzRGiLC+9sKU3DjuFG+XA0I85A5tCA5fTxL6Tcxv5U3zfDpBM c1XqQLk6HVy9ZiJZZ/Gmf4KipfbzOFYzEXISuxLzl+9K5lkSpIr6nCjjEcctv4sZ GE+tHh6kCYTUdL/3 -----END CERTIFICATE-----Generated at Sun Sep 27 16:23:54 2026 by rpki-client