$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json) Hash identifier: Cy8P5bF7SSzBzmdAdxzq9upxfwpJCQl9d0q5ajFt9CU= Subject key identifier: 26:A7:FA:97:27:64:8A:4C:31:D3:47:07:C2:1A:73:9B:20:23:CE:F1 Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F Certificate serial: 594E90631EDE811B323F97CCDB41A58646E8E836 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft Manifest number: BB Signing time: Sat 26 Sep 2026 22:12:13 +0000 Manifest this update: Sat 26 Sep 2026 22:07:13 +0000 Manifest next update: Mon 28 Sep 2026 00:00:13 +0000 Files and hashes: 1: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=) 2: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=) 3: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: ym9SmmbjV1XqnK9Mm8iozf6LHBBnN2JFp9Wnnc6RIMQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4e:90:63:1e:de:81:1b:32:3f:97:cc:db:41:a5:86:46:e8:e8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F Validity Not Before: Sep 26 22:07:13 2026 GMT Not After : Sep 28 00:00:13 2026 GMT Subject: CN=26A7FA9727648A4C31D34707C21A739B2023CEF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:e2:a1:ad:67:c6:67:f4:d5:91:ca:18:8e: aa:96:aa:88:39:da:71:ab:f5:4f:78:02:35:bc:c3: a7:ff:4f:45:ec:54:fc:f6:7a:61:a0:a2:a9:3c:56: 23:07:65:83:55:ae:31:db:76:11:87:29:93:5c:50: 23:3f:ef:80:fd:b1:b3:f1:0e:80:7c:94:cf:c5:5b: b9:c4:02:a3:32:86:0e:22:1f:0a:a2:5a:0a:17:5c: fa:b6:9e:78:90:7e:48:43:75:45:3a:ad:33:94:db: 02:06:fc:85:f5:b3:db:50:15:09:4d:22:d5:8e:ca: ca:c5:ea:fd:9c:bb:b1:a6:e8:8a:37:50:66:c1:ac: 22:bc:60:08:44:e8:26:34:2f:35:74:1a:25:16:59: 5d:31:f0:a1:19:63:3d:b3:a4:4b:8b:c8:d4:a5:d6: c6:27:6a:88:4e:b4:39:27:97:69:aa:9c:62:78:b1: fd:e0:92:8b:cc:00:c5:f6:14:20:6a:ae:ff:47:81: 39:e1:3f:85:31:5d:52:c3:eb:a0:76:9d:e0:d8:22: 17:7b:ff:00:b6:0b:e9:b6:db:ca:01:13:19:9d:42: 91:e9:10:98:f9:98:62:dd:e1:4e:da:f1:6f:bb:8a: 3f:5a:27:0b:7b:d9:bc:04:0e:15:43:f9:18:89:ec: 3e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A7:FA:97:27:64:8A:4C:31:D3:47:07:C2:1A:73:9B:20:23:CE:F1 X509v3 Authority Key Identifier: keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:96:94:20:1d:d2:3d:56:15:43:9f:a4:dd:d0:4c:00:c0:67: b2:e5:53:a7:dd:1f:75:18:d4:54:47:2f:aa:cf:25:d1:be:e1: 17:17:b5:29:7f:67:c5:f4:06:ff:27:5d:a1:f5:74:87:53:57: 70:bc:52:64:bb:6f:b3:36:a3:1b:26:be:58:30:28:f0:fd:70: eb:ff:8f:4c:db:72:93:ee:7a:5f:ff:e1:07:ff:6c:cc:37:c6: 87:f9:49:b6:63:e2:c4:d8:81:03:98:ce:fc:d5:e8:7c:b6:68: 97:ba:cd:eb:92:03:cb:a8:b5:47:b2:a0:ad:53:c5:8d:e3:b4: 67:4f:07:ef:5d:55:64:b7:f8:7d:35:46:93:44:5c:2b:97:ec: 64:b9:06:dd:a1:59:36:9d:f2:e0:42:81:a6:f2:a0:62:02:28: d3:43:7a:58:24:68:5e:ac:22:1a:f0:ea:f4:8a:73:84:81:c8: 80:df:15:f2:9f:83:02:cd:b7:81:a2:50:33:45:31:58:e4:d9: 1d:50:f1:bc:41:db:0e:d8:30:35:4b:ae:40:29:ea:24:05:31: ab:74:c2:af:6c:90:0a:24:5f:6d:cb:2d:0a:0d:9e:41:58:a5: 39:70:d9:3d:78:cd:63:55:b9:59:38:a5:c5:36:d6:5a:27:63: cd:00:0e:8d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUWU6QYx7egRsyP5fM20Glhkbo6DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy NTJBMjYxRjAeFw0yNjA5MjYyMjA3MTNaFw0yNjA5MjgwMDAwMTNaMDMxMTAvBgNV BAMTKDI2QTdGQTk3Mjc2NDhBNEMzMUQzNDcwN0MyMUE3MzlCMjAyM0NFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWOKhrWfGZ/TVkcoYjqqWqog5 2nGr9U94AjW8w6f/T0XsVPz2emGgoqk8ViMHZYNVrjHbdhGHKZNcUCM/74D9sbPx DoB8lM/FW7nEAqMyhg4iHwqiWgoXXPq2nniQfkhDdUU6rTOU2wIG/IX1s9tQFQlN ItWOysrF6v2cu7Gm6Io3UGbBrCK8YAhE6CY0LzV0GiUWWV0x8KEZYz2zpEuLyNSl 1sYnaohOtDknl2mqnGJ4sf3gkovMAMX2FCBqrv9HgTnhP4UxXVLD66B2neDYIhd7 /wC2C+m228oBExmdQpHpEJj5mGLd4U7a8W+7ij9aJwt72bwEDhVD+RiJ7D5BAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUJqf6lydkikwx00cHwhpzmyAjzvEwHwYDVR0j BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2 OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fpaUIB3SPVYVQ5+k3dBMAMBnsuVTp90fdRjUVEcvqs8l0b7hFxe1KX9nxfQG/ydd ofV0h1NXcLxSZLtvszajGya+WDAo8P1w6/+PTNtyk+56X//hB/9szDfGh/lJtmPi xNiBA5jO/NXofLZol7rN65IDy6i1R7KgrVPFjeO0Z08H711VZLf4fTVGk0RcK5fs ZLkG3aFZNp3y4EKBpvKgYgIo00N6WCRoXqwiGvDq9IpzhIHIgN8V8p+DAs23gaJQ M0UxWOTZHVDxvEHbDtgwNUuuQCnqJAUxq3TCr2yQCiRfbcstCg2eQVilOXDZPXjN Y1W5WTilxTbWWidjzQAOjQ== -----END CERTIFICATE-----Generated at Sun Sep 27 16:35:20 2026 by rpki-client