$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json) Hash identifier: Ca/3EQ8ynGbo5v4GRCZ2zUQhQiGhQz9NUkqYuL/VTNU= Subject key identifier: 00:B8:87:FF:78:B0:92:81:D9:3D:C1:35:3D:A8:8E:FD:66:90:5D:6D Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Certificate serial: 10BFB02DCD0F7E16D2490F788C8338CDAD154920 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 04:42:22 +0000 Manifest this update: Thu 24 Sep 2026 04:37:22 +0000 Manifest next update: Fri 25 Sep 2026 06:52:22 +0000 Files and hashes: 1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: jaYwkkwDkytsomdM7cMqeKQ/ApnCykX7RiOecnwluhE=) 2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bf:b0:2d:cd:0f:7e:16:d2:49:0f:78:8c:83:38:cd:ad:15:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C Validity Not Before: Sep 24 04:37:22 2026 GMT Not After : Sep 25 06:52:22 2026 GMT Subject: CN=00B887FF78B09281D93DC1353DA88EFD66905D6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:84:10:e0:dc:29:df:f6:90:cd:7d:a6:5b:25: 86:57:0a:ea:14:63:ec:6c:d1:2d:9b:aa:ca:20:63: 9f:a6:35:40:8c:b5:b7:8c:81:4f:02:e0:48:d3:c9: bb:d4:c2:9d:c2:82:3d:61:2a:23:a1:94:a0:19:3d: ca:9e:a2:50:8c:58:0c:71:d5:d8:48:72:af:2f:91: 43:74:e3:08:6f:06:55:ef:e0:67:9e:f5:2f:6e:3b: 48:81:33:6b:fa:fa:36:6b:a6:f1:57:a7:52:4c:b5: 10:c9:d8:84:ae:52:58:49:f5:38:38:0a:ab:d7:82: 48:6a:fd:62:4b:34:e9:99:7a:73:1f:21:88:a8:65: 02:42:b3:9d:d1:58:a4:a2:41:90:1d:1b:69:86:75: e8:30:9c:73:e2:c6:91:81:f4:38:4c:d7:2c:3e:21: 03:d4:bc:db:6d:da:49:2e:8f:60:82:bb:69:43:87: 97:b4:6a:5c:62:59:ca:2a:b8:98:08:bc:6a:b4:c3: f6:71:07:ae:a4:a0:20:7f:f2:2e:33:cd:11:aa:8f: 47:ec:c4:60:12:e4:e2:ef:5f:e8:af:9a:96:e2:2c: e2:ec:2b:38:46:6e:11:54:2a:28:43:ac:86:43:d7: cc:f1:a4:b5:c1:1a:92:10:15:55:7e:d6:86:91:2a: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:87:FF:78:B0:92:81:D9:3D:C1:35:3D:A8:8E:FD:66:90:5D:6D X509v3 Authority Key Identifier: keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8d:93:8e:ee:f3:a0:34:ee:71:6c:80:3c:69:e4:f9:fe:7e: 45:21:3d:cf:a8:85:d8:b3:de:4f:17:c9:bf:8e:87:f7:d2:e5: e1:ce:24:79:e4:02:68:71:b4:34:4d:40:b9:f3:a1:ff:ee:45: 6c:25:7b:47:7e:2b:61:07:38:aa:59:2b:7c:a0:dd:8c:94:8c: 8c:af:76:d4:d2:72:a2:a2:ae:79:99:8c:ee:d1:1c:45:32:1e: fd:08:f8:7d:a1:b0:35:bf:9d:f1:59:11:3e:3b:69:4c:16:ae: 6b:c8:c3:a6:c4:3b:4b:c6:91:cd:ed:8e:49:51:8b:a9:c3:c8: a7:b3:03:ae:33:42:41:dc:1f:9f:97:bb:03:2f:00:b4:df:21: fe:5e:01:d7:45:68:40:11:fa:6b:63:d4:41:26:27:c9:bd:a6: 18:39:58:8c:e3:fa:1b:50:34:28:06:81:23:9e:77:02:96:65: 3b:30:fa:f2:55:9e:5e:d1:ba:74:bd:3f:68:ec:3c:66:c1:08: c8:c5:85:b4:d3:d7:47:cb:5e:36:d3:cb:c9:cc:c2:20:4b:61: 31:10:c6:c3:21:ed:26:8c:bb:82:9f:a2:79:a3:15:91:6d:23: b3:be:e5:ad:43:ae:99:0e:c6:3b:51:6e:f6:eb:73:1b:da:69: 1d:31:31:a7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEL+wLc0PfhbSSQ94jIM4za0VSSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYz RkYyREEwQzAeFw0yNjA5MjQwNDM3MjJaFw0yNjA5MjUwNjUyMjJaMDMxMTAvBgNV BAMTKDAwQjg4N0ZGNzhCMDkyODFEOTNEQzEzNTNEQTg4RUZENjY5MDVENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrhBDg3Cnf9pDNfaZbJYZXCuoU Y+xs0S2bqsogY5+mNUCMtbeMgU8C4EjTybvUwp3Cgj1hKiOhlKAZPcqeolCMWAxx 1dhIcq8vkUN04whvBlXv4Gee9S9uO0iBM2v6+jZrpvFXp1JMtRDJ2ISuUlhJ9Tg4 CqvXgkhq/WJLNOmZenMfIYioZQJCs53RWKSiQZAdG2mGdegwnHPixpGB9DhM1yw+ IQPUvNtt2kkuj2CCu2lDh5e0alxiWcoquJgIvGq0w/ZxB66koCB/8i4zzRGqj0fs xGAS5OLvX+ivmpbiLOLsKzhGbhFUKihDrIZD18zxpLXBGpIQFVV+1oaRKvuBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUALiH/3iwkoHZPcE1PaiO/WaQXW0wHwYDVR0j BBgwFoAUWdmOjLur3N97Ii2lAPXN5j/y2gwwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19I Q0VCLzEvNTlEOThFOENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC81OUQ5OEU4Q0JCQUJEQ0RGN0IyMjJEQTUw MEY1Q0RFNjNGRjJEQTBDLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSENDR19IQ0VCLzEvNTlEOThF OENCQkFCRENERjdCMjIyREE1MDBGNUNERTYzRkYyREEwQy5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI2N k47u86A07nFsgDxp5Pn+fkUhPc+ohdiz3k8Xyb+Oh/fS5eHOJHnkAmhxtDRNQLnz of/uRWwle0d+K2EHOKpZK3yg3YyUjIyvdtTScqKirnmZjO7RHEUyHv0I+H2hsDW/ nfFZET47aUwWrmvIw6bEO0vGkc3tjklRi6nDyKezA64zQkHcH5+XuwMvALTfIf5e AddFaEAR+mtj1EEmJ8m9phg5WIzj+htQNCgGgSOedwKWZTsw+vJVnl7RunS9P2js PGbBCMjFhbTT10fLXjbTy8nMwiBLYTEQxsMh7SaMu4KfonmjFZFtI7O+5a1DrpkO xjtRbvbrcxvaaR0xMac= -----END CERTIFICATE-----Generated at Thu Sep 24 08:36:29 2026 by rpki-client