$ rpki-client -vvvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json) Hash identifier: FTA+8C/AyaU7/DJF1QyP7s2sxgf38+X8SBD1oAXqrrI= Subject key identifier: A2:42:DF:BA:8B:50:CB:CF:E8:9D:17:5F:C0:9F:6C:B5:1A:15:37:7D Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 4C7FA132C9BC671470F0CFCC16DAA80D87C8C9D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft Manifest number: FC Signing time: Sat 14 Nov 2026 19:34:45 +0000 Manifest this update: Sat 14 Nov 2026 19:29:45 +0000 Manifest next update: Sun 15 Nov 2026 21:23:45 +0000 Files and hashes: 1: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: HGxWjADmtEDEUtcOWAK1aa4UPlgzKc8zuZW3oAb66bQ=) 2: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=) 3: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=) 4: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=) 5: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7f:a1:32:c9:bc:67:14:70:f0:cf:cc:16:da:a8:0d:87:c8:c9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: Nov 14 19:29:45 2026 GMT Not After : Nov 15 21:23:45 2026 GMT Subject: CN=A242DFBA8B50CBCFE89D175FC09F6CB51A15377D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:48:1b:44:62:cc:a5:57:a4:6c:d3:b0:c2: 3a:d6:f2:24:cb:93:7f:af:ad:ad:99:92:1e:b9:b5: a7:40:ad:0d:71:be:df:56:59:d8:c8:a9:a4:cc:0f: e0:67:50:a3:9d:66:62:68:cf:02:8c:0d:6d:f9:65: de:e2:85:23:b4:86:29:c1:19:2e:b4:da:6f:15:e0: 0a:68:5f:6d:af:95:6e:cd:ee:85:80:ed:eb:59:1d: 8e:e6:9d:e7:d4:b3:1f:b5:a6:0d:57:21:f9:ca:d7: a8:4a:f8:20:a0:94:42:56:2a:0a:fa:51:33:90:ee: c8:39:45:74:2c:94:a8:f3:b2:cf:c8:1d:84:ba:2e: ae:30:63:71:df:bc:67:e5:eb:55:ca:74:a2:da:08: 7b:51:55:2a:3e:1d:23:d5:c1:8a:02:6b:86:3f:90: 30:72:de:12:bd:00:08:48:b9:a2:db:a3:f7:d2:ad: 66:11:0f:3c:b2:c9:4e:7e:51:36:bb:dc:70:7e:70: a9:ae:1c:77:86:85:1a:ff:ed:4a:cf:5f:6c:38:05: ec:8c:24:68:cd:e8:29:01:82:75:f5:ef:eb:e5:51: 26:29:3e:c8:58:82:2a:f2:61:8c:ac:11:08:f2:97: 79:53:c2:82:a3:41:db:37:a7:77:8e:12:43:7b:fa: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:42:DF:BA:8B:50:CB:CF:E8:9D:17:5F:C0:9F:6C:B5:1A:15:37:7D X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:d2:7e:d2:46:8c:e4:0d:14:22:1c:c5:d1:83:17:af:75: 59:5f:9d:04:17:7a:26:06:7b:67:fd:49:43:5a:6e:5c:5a:7f: 06:1c:d2:85:d8:7f:52:b1:0e:67:13:0b:e9:5e:2a:51:59:40: 9e:44:3c:27:aa:3e:0d:8b:ed:b3:b8:95:1f:de:d0:4b:56:48: 40:bd:13:d6:36:fd:92:5e:b4:9e:20:cb:96:3f:33:4d:c3:0e: 4a:71:ad:55:89:33:3b:af:f9:fe:15:1c:f9:b4:08:45:04:43: 07:a7:08:b8:7d:8e:e3:b0:b7:74:b2:2d:c5:02:a1:9b:76:1b: ee:a2:36:a8:b3:f8:85:41:d1:a5:96:7f:f2:cb:71:70:87:5a: a4:bb:50:40:e1:95:c6:f9:9d:39:bd:7e:ca:00:06:b6:1e:77: 7f:61:7f:63:08:06:46:32:4b:d4:49:e7:05:b4:7e:7a:73:59: 99:6b:61:c0:01:36:f0:85:4c:2e:f2:ff:81:4b:78:f2:d1:46: 5b:23:f4:72:3d:3a:ae:ee:9a:af:c4:5c:87:a1:d3:1a:08:89: ae:46:80:53:96:94:bc:a9:f7:80:e5:12:b4:b3:d3:86:34:39: 9a:cc:1c:fe:87:82:16:91:5e:c6:b7:73:24:7c:a9:bb:b5:ca: c1:ac:c0:0b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUTH+hMsm8ZxRw8M/MFtqoDYfIydMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjExMTQxOTI5NDVaFw0yNjExMTUyMTIzNDVaMDMxMTAvBgNV BAMTKEEyNDJERkJBOEI1MENCQ0ZFODlEMTc1RkMwOUY2Q0I1MUExNTM3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedkgbRGLMpVekbNOwwjrW8iTL k3+vra2Zkh65tadArQ1xvt9WWdjIqaTMD+BnUKOdZmJozwKMDW35Zd7ihSO0hinB GS602m8V4ApoX22vlW7N7oWA7etZHY7mnefUsx+1pg1XIfnK16hK+CCglEJWKgr6 UTOQ7sg5RXQslKjzss/IHYS6Lq4wY3HfvGfl61XKdKLaCHtRVSo+HSPVwYoCa4Y/ kDBy3hK9AAhIuaLbo/fSrWYRDzyyyU5+UTa73HB+cKmuHHeGhRr/7UrPX2w4BeyM JGjN6CkBgnX17+vlUSYpPshYgiryYYysEQjyl3lTwoKjQds3p3eOEkN7+l59AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUokLfuotQy8/onRdfwJ9stRoVN30wHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzRDQjNBQkIxQjRBMDI0 QTcwMTIyM0NENzE1OTExRDk5NjcwNkUzQUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAncdJ+0kaM5A0U IhzF0YMXr3VZX50EF3omBntn/UlDWm5cWn8GHNKF2H9SsQ5nEwvpXipRWUCeRDwn qj4Ni+2zuJUf3tBLVkhAvRPWNv2SXrSeIMuWPzNNww5Kca1ViTM7r/n+FRz5tAhF BEMHpwi4fY7jsLd0si3FAqGbdhvuojaos/iFQdGlln/yy3Fwh1qku1BA4ZXG+Z05 vX7KAAa2Hnd/YX9jCAZGMkvUSecFtH56c1mZa2HAATbwhUwu8v+BS3jy0UZbI/Ry PTqu7pqvxFyHodMaCImuRoBTlpS8qfeA5RK0s9OGNDmazBz+h4IWkV7Gt3MkfKm7 tcrBrMAL -----END CERTIFICATE-----Generated at Sat Nov 14 22:44:46 2026 by rpki-client