$ rpki-client -vvvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft File: A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json) Hash identifier: ZtJUU9HYcCydlk7JSi9J7AvvArNviw0GztKrhGhzlvs= Subject key identifier: 9F:1D:29:72:49:68:36:7B:8B:4B:2C:1B:EE:E5:8C:FA:AA:D4:6B:AD Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 Certificate issuer: /CN=A67F7A72FC031B1A33774C937883F79C7342B848 Certificate serial: 2099DF395A505579B820CDA2DA818A2C384A1DFF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft Manifest number: B6 Signing time: Wed 23 Sep 2026 22:03:20 +0000 Manifest this update: Wed 23 Sep 2026 21:58:20 +0000 Manifest next update: Fri 25 Sep 2026 00:51:20 +0000 Files and hashes: 1: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=) 2: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: 1ZOuw5rcl+QAjkV25/HPKfMSzht+sOSKxbSWiZ8EYFo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:99:df:39:5a:50:55:79:b8:20:cd:a2:da:81:8a:2c:38:4a:1d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848 Validity Not Before: Sep 23 21:58:20 2026 GMT Not After : Sep 25 00:51:20 2026 GMT Subject: CN=9F1D29724968367B8B4B2C1BEEE58CFAAAD46BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1b:13:cf:05:bb:97:f6:8a:8b:90:86:c6:6e: 5d:e1:ba:f9:da:39:9a:e9:49:3c:1f:21:2f:a7:99: de:7d:a4:99:88:e8:09:09:22:f0:9f:cb:47:3a:d4: 55:f4:33:f8:02:66:be:70:e9:e7:61:1a:b2:64:57: b9:5f:35:53:4e:05:25:e0:e5:0e:12:36:f2:a9:c3: de:bf:a9:c1:f9:a5:40:1e:dc:ab:a8:af:1d:77:fa: 38:37:7f:7d:a8:14:cd:99:a6:f8:f5:81:2c:65:ad: f3:69:80:13:aa:5a:c2:ae:4b:85:da:e7:c9:20:88: 31:f7:31:51:9a:46:cb:00:90:06:0d:9d:66:d9:44: 90:2a:af:f4:2f:25:cb:b3:f3:c1:f1:66:c0:83:dd: b0:9e:23:79:c1:ce:3f:c9:68:8b:7c:d8:b2:85:e6: e7:ca:02:27:3a:f4:11:ec:a8:41:3e:d7:d9:50:fb: 6b:45:85:65:d4:70:83:2a:ab:50:78:0f:04:85:c1: ec:38:0b:8e:a2:24:f9:0b:b1:51:a4:a9:c7:56:34: ec:d4:1d:6d:11:a3:73:78:7e:70:db:f2:db:fc:1c: a8:31:2f:1a:38:9c:e5:fc:07:62:07:b5:c8:4d:9c: 87:99:de:fb:f4:34:1b:69:7a:24:59:78:ed:40:d9: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:29:72:49:68:36:7B:8B:4B:2C:1B:EE:E5:8C:FA:AA:D4:6B:AD X509v3 Authority Key Identifier: keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:66:f1:05:e0:ec:61:7b:ac:67:e1:a8:f6:24:df:7b:d6:39: 85:a6:fa:a1:87:6f:80:0d:02:a6:20:f1:80:82:f1:10:71:5a: fb:b8:b0:68:01:76:5b:e9:35:31:10:12:1c:c1:8d:ea:4c:aa: 14:ab:ba:01:c9:0a:65:69:56:cc:e8:14:e5:86:78:44:97:0b: ab:c1:69:5c:88:a9:6b:d2:e4:24:74:9e:44:d1:44:7c:6d:41: 12:17:30:6d:5d:ec:64:e7:3c:f9:56:2b:f7:0a:fd:28:11:82: f8:bb:25:3b:32:08:e3:d7:67:27:cd:ed:66:37:fc:56:59:96: 39:78:2f:20:a9:bc:8b:1f:52:1f:7b:66:d8:e8:b3:5f:9c:18: 52:9a:55:e8:94:79:4d:e8:bc:ea:9b:34:3b:e7:a3:fa:3a:08: 1e:3a:07:33:a0:b5:92:14:79:1c:14:8d:5f:bc:4a:16:66:be: d7:fa:cc:81:f9:87:0c:60:31:ee:e4:db:3c:35:91:82:b5:b1: cc:df:17:a5:42:29:5a:88:cf:2f:42:dc:f9:24:b5:78:de:f8: 22:3e:d4:98:c2:2f:df:20:78:5c:d3:c0:87:1a:cc:a4:06:36: 6d:02:84:89:23:d9:d6:55:7f:0a:2c:99:a3:f1:74:dc:b6:65: 75:3e:10:8b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUIJnfOVpQVXm4IM2i2oGKLDhKHf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY3RjdBNzJGQzAzMUIxQTMzNzc0QzkzNzg4M0Y3OUM3 MzQyQjg0ODAeFw0yNjA5MjMyMTU4MjBaFw0yNjA5MjUwMDUxMjBaMDMxMTAvBgNV BAMTKDlGMUQyOTcyNDk2ODM2N0I4QjRCMkMxQkVFRTU4Q0ZBQUFENDZCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGxPPBbuX9oqLkIbGbl3huvna OZrpSTwfIS+nmd59pJmI6AkJIvCfy0c61FX0M/gCZr5w6edhGrJkV7lfNVNOBSXg 5Q4SNvKpw96/qcH5pUAe3Kuorx13+jg3f32oFM2Zpvj1gSxlrfNpgBOqWsKuS4Xa 58kgiDH3MVGaRssAkAYNnWbZRJAqr/QvJcuz88HxZsCD3bCeI3nBzj/JaIt82LKF 5ufKAic69BHsqEE+19lQ+2tFhWXUcIMqq1B4DwSFwew4C46iJPkLsVGkqcdWNOzU HW0Ro3N4fnDb8tv8HKgxLxo4nOX8B2IHtchNnIeZ3vv0NBtpeiRZeO1A2SiZAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUnx0pckloNnuLSywb7uWM+qrUa60wHwYDVR0j BBgwFoAUpn96cvwDGxozd0yTeIP3nHNCuEgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NORVQv MC9BNjdGN0E3MkZDMDMxQjFBMzM3NzRDOTM3ODgzRjc5QzczNDJCODQ4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E2N0Y3QTcyRkMwMzFCMUEzMzc3NEM5Mzc4ODNG NzlDNzM0MkI4NDguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HU05FVC8wL0E2N0Y3QTcyRkMwMzFC MUEzMzc3NEM5Mzc4ODNGNzlDNzM0MkI4NDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDCZvEF4Oxhe6xn 4aj2JN971jmFpvqhh2+ADQKmIPGAgvEQcVr7uLBoAXZb6TUxEBIcwY3qTKoUq7oB yQplaVbM6BTlhnhElwurwWlciKlr0uQkdJ5E0UR8bUESFzBtXexk5zz5Viv3Cv0o EYL4uyU7Mgjj12cnze1mN/xWWZY5eC8gqbyLH1Ife2bY6LNfnBhSmlXolHlN6Lzq mzQ756P6OggeOgczoLWSFHkcFI1fvEoWZr7X+syB+YcMYDHu5Ns8NZGCtbHM3xel QilaiM8vQtz5JLV43vgiPtSYwi/fIHhc08CHGsykBjZtAoSJI9nWVX8KLJmj8XTc tmV1PhCL -----END CERTIFICATE-----Generated at Thu Sep 24 17:09:42 2026 by rpki-client