$ rpki-client -vvvf rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft File: EED0E4E138A33B7827F8D6020B736557137C89A1.mft (raw, json) Hash identifier: pGHShnxw+U+7zMMq+XYvAq2qD4UaXZUsPm5Fv2M8LDA= Subject key identifier: CE:11:D3:EA:A7:A9:3C:BF:63:E8:D8:D2:0F:5A:8C:CF:75:DC:CE:80 Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1 Certificate issuer: /CN=EED0E4E138A33B7827F8D6020B736557137C89A1 Certificate serial: 1943E87B398CC4878F07C29FCE7341EBBB093BCF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft Manifest number: B8 Signing time: Fri 25 Sep 2026 01:14:56 +0000 Manifest this update: Fri 25 Sep 2026 01:09:56 +0000 Manifest next update: Sat 26 Sep 2026 04:23:56 +0000 Files and hashes: 1: 3231312e37362e38302e302f32302d3234203d3e2039363736.roa (hash: AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=) 2: EED0E4E138A33B7827F8D6020B736557137C89A1.crl (hash: ims1sylUx1k1+eMp3iONrb1+8w3JD8DIlpdGac6IuHQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:43:e8:7b:39:8c:c4:87:8f:07:c2:9f:ce:73:41:eb:bb:09:3b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1 Validity Not Before: Sep 25 01:09:56 2026 GMT Not After : Sep 26 04:23:56 2026 GMT Subject: CN=CE11D3EAA7A93CBF63E8D8D20F5A8CCF75DCCE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:3e:e7:2a:62:98:6f:0e:20:f5:ae:db:1b: 42:b4:27:18:d7:ff:9c:c2:10:74:30:09:a1:d7:ea: cf:c3:f1:b4:24:2e:88:be:a2:2d:cb:de:e8:6c:b7: 69:38:ab:4b:a2:4b:c6:af:59:a8:7f:33:ab:0d:65: 4d:51:39:fb:ab:8b:62:b9:6f:77:23:4c:0e:ca:44: 76:34:b1:f0:a8:e3:86:db:96:87:98:8d:73:cc:c5: 16:f6:a6:4c:d3:01:62:62:db:1f:74:37:3b:f4:36: 8b:3c:97:a0:78:0c:8c:36:7f:2b:da:f9:56:bb:dc: d0:d7:ef:ee:f7:62:96:b3:2f:3f:79:78:d9:06:5c: a8:99:32:02:d5:70:cd:86:82:92:b1:a6:df:4a:3b: 89:f6:22:06:93:85:b9:5c:5c:84:7f:77:de:d9:c4: cc:4c:e9:cb:fd:79:91:50:6a:da:78:44:bc:15:64: 4b:9a:2d:85:db:99:d8:8e:58:dc:fd:fd:c2:0f:aa: 23:64:fa:6c:68:04:30:da:e3:a8:d1:23:79:13:67: 4d:43:0b:a9:e3:78:ea:51:3e:2e:cc:e0:12:f1:0e: 3a:3d:47:40:38:26:a6:f9:90:85:25:eb:67:a3:0c: 48:c7:85:9d:71:4d:8a:15:d4:02:a0:8b:d2:56:60: 26:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:D3:EA:A7:A9:3C:BF:63:E8:D8:D2:0F:5A:8C:CF:75:DC:CE:80 X509v3 Authority Key Identifier: keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:27:33:e9:85:c1:08:b6:1e:46:0d:80:78:8d:b1:64:1c:52: 35:c2:b7:78:dc:98:ee:b5:39:ae:54:88:30:e5:39:76:28:ca: 7f:fa:0b:ec:b5:46:03:d7:f4:47:40:80:a5:e4:76:56:00:96: b1:2b:85:d1:d5:61:47:65:22:df:75:a2:44:98:5d:53:1d:44: 55:b7:38:dd:b8:20:67:0c:38:f0:88:f1:6b:b8:f8:7c:56:f2: 68:16:ed:64:a9:c6:b0:3a:84:6d:82:57:17:b4:a5:ba:e0:54: dd:3f:47:54:2b:9c:a1:27:10:17:d6:94:7f:9e:84:f7:48:25: 57:d9:ec:3d:34:2a:96:3a:f0:68:61:1f:86:dc:b3:a7:25:bd: b4:33:49:97:06:39:ea:d3:a5:63:05:47:42:3a:10:2b:9c:cb: bd:2e:ae:fc:4d:3d:2a:47:49:29:cd:0e:5b:bb:0d:60:da:46: 08:ed:11:aa:6d:d1:90:d7:cd:fe:79:7e:06:db:cd:e2:e5:20: e4:54:8e:e5:73:90:23:99:e3:a3:94:11:8c:93:5f:e7:7b:22: 8b:a9:b3:13:88:48:09:1e:21:b6:bc:f0:1f:2d:a8:71:4e:b9: 02:b6:23:4b:ab:c5:5a:c8:6c:c7:4f:b9:8a:ac:c8:ff:78:ae: 3b:af:8b:78 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUGUPoezmMxIePB8KfznNB67sJO88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVEMEU0RTEzOEEzM0I3ODI3RjhENjAyMEI3MzY1NTcx MzdDODlBMTAeFw0yNjA5MjUwMTA5NTZaFw0yNjA5MjYwNDIzNTZaMDMxMTAvBgNV BAMTKENFMTFEM0VBQTdBOTNDQkY2M0U4RDhEMjBGNUE4Q0NGNzVEQ0NFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIRT7nKmKYbw4g9a7bG0K0JxjX /5zCEHQwCaHX6s/D8bQkLoi+oi3L3uhst2k4q0uiS8avWah/M6sNZU1ROfuri2K5 b3cjTA7KRHY0sfCo44bbloeYjXPMxRb2pkzTAWJi2x90Nzv0Nos8l6B4DIw2fyva +Va73NDX7+73YpazLz95eNkGXKiZMgLVcM2GgpKxpt9KO4n2IgaThblcXIR/d97Z xMxM6cv9eZFQatp4RLwVZEuaLYXbmdiOWNz9/cIPqiNk+mxoBDDa46jRI3kTZ01D C6njeOpRPi7M4BLxDjo9R0A4Jqb5kIUl62ejDEjHhZ1xTYoV1AKgi9JWYCYXAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUzhHT6qepPL9j6NjSD1qMz3XczoAwHwYDVR0j BBgwFoAU7tDk4TijO3gn+NYCC3NlVxN8iaEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSExDQVRW LzAvRUVEMEU0RTEzOEEzM0I3ODI3RjhENjAyMEI3MzY1NTcxMzdDODlBMS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9FRUQwRTRFMTM4QTMzQjc4MjdGOEQ2MDIwQjcz NjU1NzEzN0M4OUExLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSExDQVRWLzAvRUVEMEU0RTEzOEEz M0I3ODI3RjhENjAyMEI3MzY1NTcxMzdDODlBMS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEQnM+mFwQi2 HkYNgHiNsWQcUjXCt3jcmO61Oa5UiDDlOXYoyn/6C+y1RgPX9EdAgKXkdlYAlrEr hdHVYUdlIt91okSYXVMdRFW3ON24IGcMOPCI8Wu4+HxW8mgW7WSpxrA6hG2CVxe0 pbrgVN0/R1QrnKEnEBfWlH+ehPdIJVfZ7D00KpY68GhhH4bcs6clvbQzSZcGOerT pWMFR0I6ECucy70urvxNPSpHSSnNDlu7DWDaRgjtEapt0ZDXzf55fgbbzeLlIORU juVzkCOZ46OUEYyTX+d7IoupsxOISAkeIba88B8tqHFOuQK2I0urxVrIbMdPuYqs yP94rjuvi3g= -----END CERTIFICATE-----Generated at Fri Sep 25 22:30:36 2026 by rpki-client