$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft File: 1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft (raw, json) Hash identifier: jPItQ+LuyDk/w9eYIFh60JrxgQcSIKaQMdvlFV1kQL4= Subject key identifier: 5C:12:3A:32:7A:CB:D7:0C:AB:89:33:C2:19:93:1E:2C:F0:65:4F:40 Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05 Certificate issuer: /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05 Certificate serial: 74542DA980DAF6D827A4610518DEC71BD3C80296 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft Manifest number: BF Signing time: Wed 23 Sep 2026 21:58:18 +0000 Manifest this update: Wed 23 Sep 2026 21:53:18 +0000 Manifest next update: Thu 24 Sep 2026 22:01:18 +0000 Files and hashes: 1: 3130312e302e3233322e302f32312d3234203d3e2034373830.roa (hash: p/2qKe2s8P3nmylPfxc8kutCsitWJsWvlniVw9VDejs=) 2: 1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl (hash: 38eeJ191njSx5FuqjKdxc8gSbURwrsgvrqkAaWNEn+o=) 3: 3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa (hash: Auax/gFiunbHxNkQOS/4xGo2FY/JkqSoOSclCXMaFXY=) 4: 3135302e3132392e33362e302f32342d3234203d3e203234313639.roa (hash: 1x3JW/n5yEJ9Al/HV4/ndcGjkhxq3EQC0ZG6t2rkuyE=) 5: 3130312e302e3232342e302f32312d3234203d3e203138303436.roa (hash: PDX/dgh26U+Jh027gHT88wZj3/PahBSo9laTaUqIs+A=) 6: 3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa (hash: UUvZcZF1n2KebH1VxdmjDiegAC00F4y9dKmC0BIQVng=) 7: 3132312e35302e3137362e302f32302d3234203d3e203138303436.roa (hash: 9JvrqSBwAwknxYqvUROESlm5m4ENNCpvVVFLkVRKsf4=) 8: 3130312e302e3234302e302f32302d3234203d3e2034373830.roa (hash: okb0kGB+LekHYwOuGLyVCb+I6qh5V5+WzdEBzvXO6X4=) 9: 3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa (hash: kMJ1vhXoM5lWsAtGby2N4NBOQOtOqqWYBMf/MDrw46E=) 10: 3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa (hash: O5tH6+rHeF/CzyKscBEL7/Pd/t5Mq5TOsy/0NVKpiIo=) 11: 3135302e3132392e33362e302f32322d3234203d3e203138303436.roa (hash: UE/EqJRMqDkGYTPyGerIkl/YVM1eQMkiSKfKtGup4uk=) 12: 3130312e302e3232342e302f31392d3234203d3e203138303436.roa (hash: k/+ga+vpCPibtMDN9kfqTV2mcmYqsE3mkZm7QgeNBac=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:54:2d:a9:80:da:f6:d8:27:a4:61:05:18:de:c7:1b:d3:c8:02:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05 Validity Not Before: Sep 23 21:53:18 2026 GMT Not After : Sep 24 22:01:18 2026 GMT Subject: CN=5C123A327ACBD70CAB8933C219931E2CF0654F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:d3:b1:a1:4f:89:d8:e0:1f:f8:56:4c:2b: ec:a7:a8:5f:d4:42:53:78:63:7e:8b:4c:26:f3:88: 9c:4a:07:4d:ce:3d:d3:f8:2c:3a:c4:dd:cb:c5:8d: ea:22:70:82:f6:65:17:57:ae:e1:25:03:43:c1:29: 73:29:94:7c:ab:c6:cf:88:d8:0b:a7:ba:5b:51:bd: bb:b5:f2:d5:67:46:e6:43:7b:fe:27:e8:19:85:f0: 41:ab:a7:93:3b:78:86:26:9b:49:16:19:7e:6c:b7: ee:97:e9:81:a6:a9:53:ad:54:2a:10:b2:92:09:6f: b1:9b:ca:bf:9f:3a:0b:28:af:93:69:c3:de:7c:bb: 75:f9:69:c4:49:bf:ae:1e:6b:9c:23:66:61:cd:f4: db:3b:d0:64:73:42:80:df:69:10:56:32:1e:2f:08: 2c:5b:10:e6:2d:ec:05:f7:fa:28:ee:a4:04:e6:d1: 89:6e:33:c2:2d:0f:6c:99:84:2c:22:f5:91:1d:56: 32:19:89:93:de:af:b7:72:ba:5e:73:2b:c9:15:b9: b7:cf:c4:a4:38:e1:89:fe:b9:46:40:93:f6:22:22: 0a:28:5a:d4:f1:83:fc:54:f4:3d:7e:0d:97:0c:11: eb:66:0b:ad:63:00:4c:4e:6f:8e:e8:a5:d9:f2:2a: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:3A:32:7A:CB:D7:0C:AB:89:33:C2:19:93:1E:2C:F0:65:4F:40 X509v3 Authority Key Identifier: keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:bf:24:f0:50:db:c4:2c:3f:b9:9e:a9:c5:02:66:30:08:a1: 06:c5:70:39:7a:c9:91:0a:a3:36:ab:4b:b1:42:f6:2a:e5:2a: 7d:1d:08:ae:f5:ce:ed:a5:41:80:16:32:83:f5:68:d2:c1:16: 26:0d:68:0d:8d:87:8e:91:c8:ff:2a:f4:70:51:83:05:18:c6: 04:94:96:00:43:25:44:d6:db:cb:71:e0:77:63:06:91:56:af: 7c:4d:3f:cf:67:bd:05:32:83:42:e0:93:67:c2:1a:3b:ed:44: 4c:23:4e:41:ae:4f:fe:46:f3:62:72:00:d0:91:0d:f4:fb:70: 55:17:d2:6c:1c:a2:f2:72:cc:b1:94:47:7b:0d:8b:31:73:5c: 3b:39:2f:40:bb:f7:1c:49:58:6d:61:f8:71:cd:44:21:89:36: a8:e4:b1:e8:f6:0b:b9:03:e3:27:2c:3b:f2:6b:0f:77:72:4d: 5a:88:4b:45:a6:47:f0:be:bd:74:ae:5b:5a:3d:f2:a4:19:c5: 8d:08:5a:49:e1:45:47:f8:c4:75:70:a2:5b:70:86:22:97:26: f5:8f:21:f7:27:e1:df:13:ed:1f:dd:76:76:a8:38:00:14:71: 28:04:b8:55:e4:a5:1a:fe:81:b5:55:eb:85:c0:ef:53:a4:b5: f7:d4:61:ac -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUdFQtqYDa9tgnpGEFGN7HG9PIApYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1RjlBNDVBNzI1 QkM1RUMwNTAeFw0yNjA5MjMyMTUzMThaFw0yNjA5MjQyMjAxMThaMDMxMTAvBgNV BAMTKDVDMTIzQTMyN0FDQkQ3MENBQjg5MzNDMjE5OTMxRTJDRjA2NTRGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPCtOxoU+J2OAf+FZMK+ynqF/U QlN4Y36LTCbziJxKB03OPdP4LDrE3cvFjeoicIL2ZRdXruElA0PBKXMplHyrxs+I 2AunultRvbu18tVnRuZDe/4n6BmF8EGrp5M7eIYmm0kWGX5st+6X6YGmqVOtVCoQ spIJb7Gbyr+fOgsor5Npw958u3X5acRJv64ea5wjZmHN9Ns70GRzQoDfaRBWMh4v CCxbEOYt7AX3+ijupATm0YluM8ItD2yZhCwi9ZEdVjIZiZPer7dyul5zK8kVubfP xKQ44Yn+uUZAk/YiIgooWtTxg/xU9D1+DZcMEetmC61jAExOb47opdnyKgqbAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUXBI6MnrL1wyriTPCGZMeLPBlT0AwHwYDVR0j BBgwFoAUHMt4B8qDINZGyslF+aRaclvF7AUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t Q0hBTi8wLzFDQ0I3ODA3Q0E4MzIwRDY0NkNBQzk0NUY5QTQ1QTcyNUJDNUVDMDUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1 RjlBNDVBNzI1QkM1RUMwNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMC8xQ0NC NzgwN0NBODMyMEQ2NDZDQUM5NDVGOUE0NUE3MjVCQzVFQzA1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA aL8k8FDbxCw/uZ6pxQJmMAihBsVwOXrJkQqjNqtLsUL2KuUqfR0IrvXO7aVBgBYy g/Vo0sEWJg1oDY2HjpHI/yr0cFGDBRjGBJSWAEMlRNbby3Hgd2MGkVavfE0/z2e9 BTKDQuCTZ8IaO+1ETCNOQa5P/kbzYnIA0JEN9PtwVRfSbByi8nLMsZRHew2LMXNc OzkvQLv3HElYbWH4cc1EIYk2qOSx6PYLuQPjJyw78msPd3JNWohLRaZH8L69dK5b Wj3ypBnFjQhaSeFFR/jEdXCiW3CGIpcm9Y8h9yfh3xPtH912dqg4ABRxKAS4VeSl Gv6BtVXrhcDvU6S199RhrA== -----END CERTIFICATE-----Generated at Thu Sep 24 15:17:02 2026 by rpki-client