$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft File: 4DC8A0E80696AD1A2419ACE881334BE812506228.mft (raw, json) Hash identifier: n5meFhXyAhAF3zk/v5uPPkDjJ3WFRXigmutRaQ4zCAY= Subject key identifier: 31:C1:AD:B9:8E:47:6A:46:3F:87:A5:5D:66:C8:86:43:7A:8F:28:81 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 1A2F8C863A44E874C18E3590EE13525B9F2ED33A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft Manifest number: A6 Signing time: Wed 23 Sep 2026 23:08:58 +0000 Manifest this update: Wed 23 Sep 2026 23:03:58 +0000 Manifest next update: Fri 25 Sep 2026 00:59:58 +0000 Files and hashes: 1: 3136322e342e3233372e302f32342d3234203d3e20313331363531.roa (hash: tMr8ixZh2K6SpaPqReDJg4BecbXaqw7Rmztiq3kVMJk=) 2: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (hash: rkewqH+q2MmefgvP9xLiHPbeb7043RwX6NEiRy6AeiQ=) 3: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (hash: t0sxX/J7DHyA7+RMNuIhT3/1j3L5qbFI7k7wb/onnz8=) 4: 4DC8A0E80696AD1A2419ACE881334BE812506228.crl (hash: 5WSnV6ttLBDC8fPKp99XByw3mkv951HiN6CweWmOh2Y=) 5: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (hash: rqIFLfCYjTacr84/afinxLOCwaaiUV1aCFWFsa89OVU=) 6: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (hash: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2f:8c:86:3a:44:e8:74:c1:8e:35:90:ee:13:52:5b:9f:2e:d3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Sep 23 23:03:58 2026 GMT Not After : Sep 25 00:59:58 2026 GMT Subject: CN=31C1ADB98E476A463F87A55D66C886437A8F2881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:e2:78:72:26:3e:a7:bb:f5:c6:99:18:a9: 3b:c5:74:cc:6e:9c:e7:e8:6b:53:be:0a:17:1d:24: 01:e6:19:88:c6:be:95:96:af:96:c9:b8:d3:51:17: 00:62:26:9b:8f:43:4f:6a:f7:cd:a1:1b:49:81:b5: d9:55:f5:02:40:b0:ea:7c:e4:83:fd:3e:8a:6e:56: 8d:35:30:61:00:96:5f:20:b6:8b:e1:74:6c:08:fa: 16:aa:55:31:ad:6e:3c:1c:47:74:4b:b4:65:37:94: 89:87:42:c7:1a:e5:f5:ab:20:39:52:90:49:78:e5: f0:87:0b:d3:9a:e9:2d:1b:68:66:18:5a:a3:da:d5: 33:af:dd:6a:2b:59:e8:ba:61:19:a5:01:4b:c4:aa: 52:e2:1c:8a:a6:68:46:15:4b:65:53:55:ad:5f:14: ea:77:2c:d5:78:a4:bd:15:3d:db:08:1a:af:c7:05: 76:41:f5:13:8f:bf:d3:0f:dd:df:47:a4:20:f9:22: ff:10:67:c3:95:1b:f0:19:db:60:65:32:90:07:1f: d4:b7:12:50:25:29:25:70:6b:7b:20:e2:dd:a2:26: c2:f0:de:71:f1:e7:80:67:bc:3a:d5:3b:ad:53:a0: a3:f6:03:72:f5:70:9a:34:f5:af:68:72:ce:57:1d: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C1:AD:B9:8E:47:6A:46:3F:87:A5:5D:66:C8:86:43:7A:8F:28:81 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0c:8a:35:bc:8b:21:8d:51:e4:e7:9d:5d:c2:01:92:d0:8f: 00:56:51:a3:e1:c3:cf:61:cd:c8:d9:13:68:9a:a9:07:c2:a6: e5:bb:d7:2c:f0:11:16:1c:43:bf:52:4d:f2:00:64:a3:02:30: 75:a4:75:69:f5:97:51:c6:16:ee:e3:f3:30:7e:d9:89:a6:5b: a8:d5:cd:88:ec:4b:6c:c6:2d:11:70:6b:ea:11:67:fd:df:85: 4a:d9:a7:85:68:f2:da:49:e9:33:5c:5a:65:b8:93:60:16:ff: ac:5b:b6:ad:bb:f0:33:c7:35:20:19:3b:6e:87:60:55:92:11: 3d:d2:08:fc:ec:f2:94:d8:36:df:9c:de:7f:6a:ed:27:fa:2a: 21:d6:c9:f5:3c:20:fe:a0:41:6a:1c:38:97:33:4f:48:88:86: ff:3e:63:20:4e:7f:6d:4e:f1:c8:e0:b5:71:d0:df:a5:bd:9f: 65:89:11:11:82:7f:b2:04:93:83:b1:c3:57:d6:74:e1:5c:69: ab:24:5b:38:dc:85:3d:13:78:39:95:70:3d:d7:f4:62:74:a7: 5b:63:99:79:3a:f1:a3:1c:2e:ba:15:3f:69:2b:ee:35:99:6c: ca:bc:c8:81:f8:07:14:1c:cf:d4:ec:70:34:d6:ca:11:67:ad: 9d:04:e3:a4 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUGi+MhjpE6HTBjjWQ7hNSW58u0zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA5MjMyMzAzNThaFw0yNjA5MjUwMDU5NThaMDMxMTAvBgNV BAMTKDMxQzFBREI5OEU0NzZBNDYzRjg3QTU1RDY2Qzg4NjQzN0E4RjI4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KuJ4ciY+p7v1xpkYqTvFdMxu nOfoa1O+ChcdJAHmGYjGvpWWr5bJuNNRFwBiJpuPQ09q982hG0mBtdlV9QJAsOp8 5IP9PopuVo01MGEAll8gtovhdGwI+haqVTGtbjwcR3RLtGU3lImHQsca5fWrIDlS kEl45fCHC9Oa6S0baGYYWqPa1TOv3WorWei6YRmlAUvEqlLiHIqmaEYVS2VTVa1f FOp3LNV4pL0VPdsIGq/HBXZB9ROPv9MP3d9HpCD5Iv8QZ8OVG/AZ22BlMpAHH9S3 ElAlKSVwa3sg4t2iJsLw3nHx54BnvDrVO61ToKP2A3L1cJo09a9ocs5XHa2JAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUMcGtuY5HakY/h6VdZsiGQ3qPKIEwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvNERDOEEwRTgwNjk2 QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJcMijW8iyGN UeTnnV3CAZLQjwBWUaPhw89hzcjZE2iaqQfCpuW71yzwERYcQ79STfIAZKMCMHWk dWn1l1HGFu7j8zB+2YmmW6jVzYjsS2zGLRFwa+oRZ/3fhUrZp4Vo8tpJ6TNcWmW4 k2AW/6xbtq278DPHNSAZO26HYFWSET3SCPzs8pTYNt+c3n9q7Sf6KiHWyfU8IP6g QWocOJczT0iIhv8+YyBOf21O8cjgtXHQ36W9n2WJERGCf7IEk4Oxw1fWdOFcaask WzjchT0TeDmVcD3X9GJ0p1tjmXk68aMcLroVP2kr7jWZbMq8yIH4BxQcz9TscDTW yhFnrZ0E46Q= -----END CERTIFICATE-----Generated at Thu Sep 24 18:26:59 2026 by rpki-client