$ rpki-client -vvvf rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft File: 8F1212A19454D2A49786359CAC45368F821417D6.mft (raw, json) Hash identifier: BkgeISot3Z9Z03DRRUT51O3CoWZCR6VZRIkJl6VNBzk= Subject key identifier: E4:6F:E2:06:EF:BF:B2:9C:E2:EC:39:0F:41:85:2D:CD:B7:2B:ED:F5 Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 3CC0C8A3D0FE2F2286A8F98809213614387087A7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft Manifest number: FF Signing time: Sun 15 Nov 2026 02:34:27 +0000 Manifest this update: Sun 15 Nov 2026 02:29:27 +0000 Manifest next update: Mon 16 Nov 2026 06:09:27 +0000 Files and hashes: 1: 323430363a643763303a3a2f33322d3438203d3e203338383339.roa (hash: Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=) 2: 8F1212A19454D2A49786359CAC45368F821417D6.crl (hash: VPMYjJNrLSwRuZqqNKnq29omKIXhZZi5Jm8Pmdvin98=) 3: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (hash: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA=) 4: 323430363a643763303a3a2f33322d3438203d3e203338303038.roa (hash: uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c0:c8:a3:d0:fe:2f:22:86:a8:f9:88:09:21:36:14:38:70:87:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: Nov 15 02:29:27 2026 GMT Not After : Nov 16 06:09:27 2026 GMT Subject: CN=E46FE206EFBFB29CE2EC390F41852DCDB72BEDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:26:ae:44:e7:22:19:00:ea:39:37:6e:93: bd:91:86:6d:45:12:06:97:47:c7:a0:0c:2a:75:15: f1:65:f8:df:78:bb:e0:15:2b:bf:63:d6:6b:e1:19: 73:86:9d:b8:04:1f:b7:4b:98:ab:17:b0:4e:e9:29: f7:23:d7:d6:fd:3f:c4:65:9a:ac:59:e1:81:2d:ef: b1:40:bc:b2:18:93:b2:c7:12:4c:50:05:7c:90:de: 81:6f:18:50:72:2b:67:9b:f4:79:f5:00:1f:46:65: 0e:91:0e:eb:95:e2:4e:ef:34:1d:cb:d4:2e:b3:0e: 31:bb:6e:16:03:1d:9c:bb:2a:28:8c:a9:34:85:b3: f5:a5:dc:c1:07:20:00:7b:71:dd:df:54:4d:de:05: 91:9d:98:f3:39:b6:2c:68:01:0d:d6:81:6d:b9:de: f0:19:14:ab:33:a4:9b:c1:89:a3:7d:ca:81:49:21: 79:12:51:f2:fc:56:2f:1a:b4:70:66:40:63:9e:ca: 02:22:de:d2:10:e2:25:42:b3:1a:86:87:93:35:24: ae:93:cc:5d:33:1d:34:a6:1c:31:77:34:fc:e8:d3: 33:fb:f9:ec:7d:1a:5f:bd:6f:8b:29:5b:8d:a8:ec: 51:df:a6:5d:de:d0:c1:c7:bb:4b:a0:2d:a5:6b:bc: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6F:E2:06:EF:BF:B2:9C:E2:EC:39:0F:41:85:2D:CD:B7:2B:ED:F5 X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0f:a6:bb:ad:3a:1a:5e:dd:fd:b3:a7:7b:f7:16:38:eb:16: 19:91:38:8b:b5:0a:77:54:ce:9c:21:93:f5:15:e5:4f:c9:80: a0:5c:fe:0e:28:03:bd:0b:99:a0:21:ae:7a:b4:ca:fb:30:4b: 62:4d:1b:03:21:54:5e:7d:ac:68:f8:cf:c6:92:19:45:52:86: 1b:97:b4:f1:33:52:3c:86:a9:8f:51:2d:8d:40:57:64:3e:04: b5:eb:3f:7a:4f:ea:a8:c4:36:0a:2e:a0:5d:ee:92:4f:6b:ea: 37:20:c5:06:b3:b4:d5:0f:66:68:e8:92:82:87:3d:9f:ec:bc: 18:b9:55:8b:6a:28:d2:2f:98:b8:45:e3:8c:8d:66:44:c3:9e: c7:f8:07:2c:48:58:61:4e:2c:81:e8:aa:09:6d:c5:50:2e:51: f8:a7:c6:20:09:99:52:e5:2b:6d:55:fb:81:d5:2b:1e:b6:67: a8:11:e6:9e:42:d4:24:77:f1:e5:f2:26:4d:1b:90:62:55:d3: cd:e8:4d:b2:9d:e1:4a:ff:99:5a:5a:bf:ec:a1:46:59:f4:83: 74:14:80:6a:47:c8:2f:39:a2:1a:17:d6:f6:65:73:18:7b:24: 99:d8:5a:b9:d2:dd:03:36:5a:93:80:4e:fa:37:05:68:a5:fd: d2:61:71:2d -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUPMDIo9D+LyKGqPmICSE2FDhwh6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjExMTUwMjI5MjdaFw0yNjExMTYwNjA5MjdaMDMxMTAvBgNV BAMTKEU0NkZFMjA2RUZCRkIyOUNFMkVDMzkwRjQxODUyRENEQjcyQkVERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNziauROciGQDqOTduk72Rhm1F EgaXR8egDCp1FfFl+N94u+AVK79j1mvhGXOGnbgEH7dLmKsXsE7pKfcj19b9P8Rl mqxZ4YEt77FAvLIYk7LHEkxQBXyQ3oFvGFByK2eb9Hn1AB9GZQ6RDuuV4k7vNB3L 1C6zDjG7bhYDHZy7KiiMqTSFs/Wl3MEHIAB7cd3fVE3eBZGdmPM5tixoAQ3WgW25 3vAZFKszpJvBiaN9yoFJIXkSUfL8Vi8atHBmQGOeygIi3tIQ4iVCsxqGh5M1JK6T zF0zHTSmHDF3NPzo0zP7+ex9Gl+9b4spW42o7FHfpl3e0MHHu0ugLaVrvKTDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU5G/iBu+/spzi7DkPQYUtzbcr7fUwHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvOEYxMjEyQTE5NDU0 RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI4PprutOhpe 3f2zp3v3FjjrFhmROIu1CndUzpwhk/UV5U/JgKBc/g4oA70LmaAhrnq0yvswS2JN GwMhVF59rGj4z8aSGUVShhuXtPEzUjyGqY9RLY1AV2Q+BLXrP3pP6qjENgouoF3u kk9r6jcgxQaztNUPZmjokoKHPZ/svBi5VYtqKNIvmLhF44yNZkTDnsf4ByxIWGFO LIHoqgltxVAuUfinxiAJmVLlK21V+4HVKx62Z6gR5p5C1CR38eXyJk0bkGJV083o TbKd4Ur/mVpav+yhRln0g3QUgGpHyC85ohoX1vZlcxh7JJnYWrnS3QM2WpOATvo3 BWil/dJhcS0= -----END CERTIFICATE-----Generated at Sun Nov 15 12:13:34 2026 by rpki-client