$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json) Hash identifier: jFuYMgVcNkxUZHPecURCCOtDi2rPcvGMrPud65e1yw4= Subject key identifier: 98:55:CE:52:E5:58:1D:DF:5F:D8:A8:93:9D:F9:B5:9E:C1:DF:47:6F Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 7FB7BECC478B03DAE3A39648C5F8994C570A8601 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft Manifest number: 71 Signing time: Thu 23 Jul 2026 17:11:13 +0000 Manifest this update: Thu 23 Jul 2026 17:06:13 +0000 Manifest next update: Fri 24 Jul 2026 21:02:13 +0000 Files and hashes: 1: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=) 2: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=) 3: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=) 4: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=) 5: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=) 6: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: si8ojipTt01Wuf2RXmuTJSx4TENSJQMq1Ttko6+Pr18=) 7: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=) 8: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=) 9: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=) 10: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=) 11: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=) 12: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=) 13: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=) 14: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=) 15: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=) 16: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=) 17: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:be:cc:47:8b:03:da:e3:a3:96:48:c5:f8:99:4c:57:0a:86:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: Jul 23 17:06:13 2026 GMT Not After : Jul 24 21:02:13 2026 GMT Subject: CN=9855CE52E5581DDF5FD8A8939DF9B59EC1DF476F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:46:33:72:8f:70:1c:88:47:23:f0:27:05: a3:42:ff:e5:ba:aa:59:9b:4e:63:2a:79:3b:c6:51: ce:c2:36:b0:c5:5b:5b:16:82:20:07:3f:ff:f1:44: e3:bb:3e:e2:f9:51:3f:30:8c:1f:38:bf:16:c9:8b: e8:4f:8a:90:77:a6:e5:d4:be:c8:34:d5:c8:57:c2: 9d:81:c0:a8:45:93:21:87:3a:df:5a:7f:61:6b:77: 8d:35:99:b8:d8:84:81:98:67:88:8f:4a:42:5d:05: 62:6d:b0:b5:b5:97:a9:84:7d:bc:05:72:9d:7b:5d: 36:9b:b6:66:71:1f:a2:bc:cb:45:a3:d0:bc:38:ff: 14:5a:b7:9a:63:86:d0:c1:7c:6f:c6:98:50:f0:b0: 84:4c:66:87:7f:14:d4:c8:d8:cf:43:b9:7b:e8:b5: 04:78:22:7f:f1:3d:81:e2:f9:0f:23:e0:9e:d8:2a: fa:1c:1f:6e:d7:4f:e8:ad:f9:fb:f8:53:d8:25:36: b0:74:b7:84:e5:d0:03:ba:fb:41:b0:08:05:c5:fe: aa:23:99:4d:16:7c:5b:02:cc:2a:a7:80:32:20:8d: 69:2e:72:1b:f2:70:cb:ae:2b:a2:61:dc:90:62:13: e5:47:89:97:5b:34:91:7b:ad:7e:22:80:2b:b8:2d: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:CE:52:E5:58:1D:DF:5F:D8:A8:93:9D:F9:B5:9E:C1:DF:47:6F X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:03:7e:76:46:a2:39:ce:b3:1b:e9:0d:0a:03:0a:6b:73:5d: 76:1d:e3:c2:6b:b9:d5:ae:f1:a0:37:bf:da:42:54:1a:fc:2b: eb:30:13:54:16:79:c1:18:9a:6d:14:4c:92:22:d9:62:fa:b0: 52:ba:52:90:d4:4c:63:ab:06:20:7c:83:41:c8:9d:d8:4d:6c: 09:c0:70:0d:df:52:43:09:df:3c:8a:54:67:f4:95:c7:81:8a: ae:d9:ce:7f:57:4b:e7:a8:fb:ee:ef:88:ca:c3:df:6a:aa:90: 82:bb:98:7a:58:dd:e8:78:31:66:42:d7:cf:6a:3c:05:6d:b6: a8:61:73:8c:bb:37:68:26:59:43:7f:26:2a:eb:f9:1d:5b:af: f0:48:86:3a:54:cb:65:17:0c:fa:55:a2:50:49:cd:6f:15:90: 4f:59:07:d6:ba:55:da:a9:a8:b5:20:79:81:1d:50:ae:b0:33: 52:45:49:86:a4:8c:11:b4:5e:71:9c:5f:d3:a6:0e:5a:e5:fe: 72:55:03:65:6f:0f:5f:a1:f4:56:42:5d:46:16:1b:f7:14:b7: f6:69:7f:de:ab:c2:45:6e:19:1d:60:c3:dd:09:eb:c9:f9:e5: 75:58:3e:95:14:b0:74:1f:3c:9f:16:d6:a9:40:2c:64:a5:15: 65:1b:cb:e8 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUf7e+zEeLA9rjo5ZIxfiZTFcKhgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA3MjMxNzA2MTNaFw0yNjA3MjQyMTAyMTNaMDMxMTAvBgNV BAMTKDk4NTVDRTUyRTU1ODFEREY1RkQ4QTg5MzlERjlCNTlFQzFERjQ3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQe0Yzco9wHIhHI/AnBaNC/+W6 qlmbTmMqeTvGUc7CNrDFW1sWgiAHP//xROO7PuL5UT8wjB84vxbJi+hPipB3puXU vsg01chXwp2BwKhFkyGHOt9af2Frd401mbjYhIGYZ4iPSkJdBWJtsLW1l6mEfbwF cp17XTabtmZxH6K8y0Wj0Lw4/xRat5pjhtDBfG/GmFDwsIRMZod/FNTI2M9DuXvo tQR4In/xPYHi+Q8j4J7YKvocH27XT+it+fv4U9glNrB0t4Tl0AO6+0GwCAXF/qoj mU0WfFsCzCqngDIgjWkuchvycMuuK6Jh3JBiE+VHiZdbNJF7rX4igCu4LdiBAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUmFXOUuVYHd9f2KiTnfm1nsHfR28wHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvQzAzNEJEOUM3MjM1REMyRDJD QzFGRDdFMjFENDNERDA2QUZEQzM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIEDfnZGojnOsxvpDQoD CmtzXXYd48JrudWu8aA3v9pCVBr8K+swE1QWecEYmm0UTJIi2WL6sFK6UpDUTGOr BiB8g0HIndhNbAnAcA3fUkMJ3zyKVGf0lceBiq7Zzn9XS+eo++7viMrD32qqkIK7 mHpY3eh4MWZC189qPAVttqhhc4y7N2gmWUN/Jirr+R1br/BIhjpUy2UXDPpVolBJ zW8VkE9ZB9a6VdqpqLUgeYEdUK6wM1JFSYakjBG0XnGcX9OmDlrl/nJVA2VvD1+h 9FZCXUYWG/cUt/Zpf96rwkVuGR1gw90J68n55XVYPpUUsHQfPJ8W1qlALGSlFWUb y+g= -----END CERTIFICATE-----Generated at Fri Jul 24 02:29:24 2026 by rpki-client