$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft File: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft (raw, json) Hash identifier: cTZEJEykiwns8pkaMYncn87XnkTsV/S2occLcz+zALg= Subject key identifier: CA:F7:3E:B8:49:7F:5A:9F:22:B8:30:93:0A:8A:A8:56:A2:93:6A:D5 Authority key identifier: E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 Certificate issuer: /CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Certificate serial: 602CEC76A338904BBFA4479F4701B867DC9BE160 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft Manifest number: A9 Signing time: Sat 26 Sep 2026 14:06:23 +0000 Manifest this update: Sat 26 Sep 2026 14:01:23 +0000 Manifest next update: Sun 27 Sep 2026 15:08:23 +0000 Files and hashes: 1: E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl (hash: y55fBnbGwL+bkir7+xnK4H99107hckLnXeeqdLU6lnM=) 2: 323430323a363432303a3a2f33322d3438203d3e20313331363330.roa (hash: oxQPGNBMj2CJJd3CtDlG2Tl/miuEDB0GkZlm0cd0pJk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 09:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2c:ec:76:a3:38:90:4b:bf:a4:47:9f:47:01:b8:67:dc:9b:e1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E68C4C103029B84142A5CAB3EFB852FDC1A39BB0 Validity Not Before: Sep 26 14:01:23 2026 GMT Not After : Sep 27 15:08:23 2026 GMT Subject: CN=CAF73EB8497F5A9F22B830930A8AA856A2936AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:89:7f:79:92:73:8a:11:81:9c:31:09:e0: 50:ab:b5:d4:8d:f2:9e:23:52:7c:4c:f1:d7:f7:89: 47:30:ab:46:41:52:a7:f7:c6:0c:86:fb:a4:16:0a: 6d:2d:e6:05:a4:a6:6c:48:32:58:68:6a:07:e1:0d: d9:ce:e7:ba:60:ba:ab:56:a1:db:37:29:ed:25:f2: 8c:57:f1:9b:da:7b:75:22:88:ea:4e:71:2a:e5:17: 51:c1:e5:ac:f7:fb:db:62:b0:a9:76:c7:b5:5b:a5: d8:c8:28:44:b4:62:67:7e:1d:a5:8d:77:29:83:77: 59:7f:4f:95:4a:db:79:88:36:a0:f3:b8:6d:c7:49: 73:70:88:8b:0e:e1:6f:fb:83:ed:e2:be:d7:86:ff: 87:ac:8f:c9:40:60:3f:ca:ec:f2:79:d7:b4:ba:f5: 8c:21:aa:49:f6:a3:dd:26:74:f2:c4:ac:89:b7:d8: eb:91:12:e0:e1:f6:08:2d:7f:44:d7:4f:81:45:b7: ac:37:c4:0b:bd:8d:0f:7c:cf:e1:f3:99:c9:be:6d: 8e:2a:89:fa:0f:6a:51:27:d2:09:75:00:55:81:6f: e4:1d:42:ab:4e:8d:f4:b6:5b:d0:fb:48:af:67:ea: 92:a1:1d:93:ed:55:0a:0d:ad:e5:06:02:0b:db:8b: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F7:3E:B8:49:7F:5A:9F:22:B8:30:93:0A:8A:A8:56:A2:93:6A:D5 X509v3 Authority Key Identifier: keyid:E6:8C:4C:10:30:29:B8:41:42:A5:CA:B3:EF:B8:52:FD:C1:A3:9B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/1/E68C4C103029B84142A5CAB3EFB852FDC1A39BB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3b:6c:53:99:f5:49:39:06:0a:13:d3:5d:57:5c:19:05:12: 36:98:07:d1:e1:9a:88:20:cc:74:ca:15:ff:0c:cd:5c:6d:35: e6:4b:21:b0:d7:71:70:62:08:4d:7f:83:79:c8:4a:95:c9:2f: c4:a4:d0:1c:88:30:dd:b9:77:50:a0:21:62:9d:9c:6b:03:f8: ad:7d:8f:1a:d6:87:20:40:70:97:12:a4:7a:b8:0c:40:85:72: dd:50:ff:6a:bf:1a:f5:67:73:50:cb:d7:34:2c:de:57:ed:ec: bc:c1:cd:56:05:b4:ce:71:08:1c:cc:26:af:99:38:b2:c5:12: ce:cd:ce:31:f8:90:91:4f:4b:7c:b3:74:e8:45:10:e2:f9:d4: 2a:2e:44:72:1a:6a:1d:43:de:62:5c:10:82:8b:1d:55:c9:7a: 38:5a:7e:bd:93:2d:bf:71:66:fe:d8:21:96:3e:8d:a1:9f:49: 76:86:b7:70:29:03:1b:47:8e:34:c1:ba:46:09:fb:a6:06:b2: 7a:13:f7:67:92:53:e9:8e:f6:38:f6:05:64:67:0b:75:2d:6c: ca:92:84:0b:02:be:9b:ef:94:e3:10:aa:37:f4:87:c6:7a:4a: 9c:a2:53:ec:49:a6:6c:91:6a:02:31:9f:a4:86:f1:95:a6:b6: c0:b6:7f:98 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUYCzsdqM4kEu/pEefRwG4Z9yb4WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRD MUEzOUJCMDAeFw0yNjA5MjYxNDAxMjNaFw0yNjA5MjcxNTA4MjNaMDMxMTAvBgNV BAMTKENBRjczRUI4NDk3RjVBOUYyMkI4MzA5MzBBOEFBODU2QTI5MzZBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgol/eZJzihGBnDEJ4FCrtdSN 8p4jUnxM8df3iUcwq0ZBUqf3xgyG+6QWCm0t5gWkpmxIMlhoagfhDdnO57pguqtW ods3Ke0l8oxX8Zvae3UiiOpOcSrlF1HB5az3+9tisKl2x7VbpdjIKES0Ymd+HaWN dymDd1l/T5VK23mINqDzuG3HSXNwiIsO4W/7g+3ivteG/4esj8lAYD/K7PJ517S6 9Ywhqkn2o90mdPLErIm32OuREuDh9ggtf0TXT4FFt6w3xAu9jQ98z+Hzmcm+bY4q ifoPalEn0gl1AFWBb+QdQqtOjfS2W9D7SK9n6pKhHZPtVQoNreUGAgvbi6clAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUyvc+uEl/Wp8iuDCTCoqoVqKTatUwHwYDVR0j BBgwFoAU5oxMEDApuEFCpcqz77hS/cGjm7AwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzEvRTY4QzRDMTAzMDI5Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FNjhDNEMxMDMwMjlCODQxNDJBNUNBQjNFRkI4 NTJGREMxQTM5QkIwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzEvRTY4QzRDMTAzMDI5 Qjg0MTQyQTVDQUIzRUZCODUyRkRDMUEzOUJCMC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJI7bFOZ9Uk5 BgoT011XXBkFEjaYB9HhmoggzHTKFf8MzVxtNeZLIbDXcXBiCE1/g3nISpXJL8Sk 0ByIMN25d1CgIWKdnGsD+K19jxrWhyBAcJcSpHq4DECFct1Q/2q/GvVnc1DL1zQs 3lft7LzBzVYFtM5xCBzMJq+ZOLLFEs7NzjH4kJFPS3yzdOhFEOL51CouRHIaah1D 3mJcEIKLHVXJejhafr2TLb9xZv7YIZY+jaGfSXaGt3ApAxtHjjTBukYJ+6YGsnoT 92eSU+mO9jj2BWRnC3UtbMqShAsCvpvvlOMQqjf0h8Z6SpyiU+xJpmyRagIxn6SG 8ZWmtsC2f5g= -----END CERTIFICATE-----Generated at Sun Sep 27 00:30:37 2026 by rpki-client