$ rpki-client -vvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: TKd6RzCZGpKGFWDbhRpphBpf2BTpc5Q8qcSSnKSKZ0A= Subject key identifier: ED:5A:10:BC:FA:C3:0E:20:88:CB:E1:F7:77:2A:C2:87:3E:E6:44:5E Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 3DCF2CD8642DA74AAE4ECFFBFAFDD5FE0D39D171 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 20:36:43 +0000 Manifest this update: Thu 23 Jul 2026 20:31:43 +0000 Manifest next update: Fri 24 Jul 2026 22:24:43 +0000 Files and hashes: 1: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 2: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: WX53DPaQaegsYLWr0o1VeySEPgX9pDDVVTOrq2FF/HA=) 3: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) 4: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cf:2c:d8:64:2d:a7:4a:ae:4e:cf:fb:fa:fd:d5:fe:0d:39:d1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: Jul 23 20:31:43 2026 GMT Not After : Jul 24 22:24:43 2026 GMT Subject: CN=ED5A10BCFAC30E2088CBE1F7772AC2873EE6445E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:c1:e6:9a:53:2e:6a:f5:f7:1b:8c:72:b0: 11:eb:cb:98:88:4c:93:ac:1a:77:34:2c:68:9b:ca: 7c:9b:26:53:32:43:c0:c6:6e:91:d4:c3:b1:1a:24: 83:a4:ce:82:8a:6d:a7:b1:92:fc:96:06:de:a5:af: 0e:9f:59:fb:44:32:b5:6c:ad:a9:b6:90:e8:bf:14: b1:5c:ec:f0:55:70:cd:e5:af:4b:4d:22:f6:32:76: 26:21:9a:4a:01:b6:63:39:73:eb:62:26:24:d4:a7: a1:a6:70:74:e4:98:ba:12:14:6a:e4:3c:67:6e:b3: f3:5c:5d:d3:1b:22:6b:8d:13:82:8a:09:35:f4:5f: 74:92:3d:fd:39:70:60:73:e4:0c:b0:55:1b:c2:c2: 57:69:59:74:0b:79:46:0b:81:d2:85:d6:61:9a:83: 56:c9:b5:35:af:79:5d:b8:33:0b:78:23:3e:7d:6c: f0:dd:ca:60:be:af:da:63:73:76:46:8c:11:2c:3b: 21:b9:f6:71:e1:d7:87:e2:de:a2:de:df:e4:57:ba: fc:37:aa:e1:ed:fe:22:3a:3c:6d:28:3d:d8:36:c5: c0:c1:16:06:c3:6d:4d:db:06:68:74:91:a4:31:af: 9d:2d:e1:91:df:3a:8c:37:e2:57:e8:8b:ed:dd:8a: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5A:10:BC:FA:C3:0E:20:88:CB:E1:F7:77:2A:C2:87:3E:E6:44:5E X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:63:61:ea:3a:82:34:d3:64:ca:ad:45:25:1e:2c:25:d6:f9: 2f:0f:08:b4:96:a6:f3:4b:f5:2a:b1:e3:4f:ac:79:2c:ff:f2: f9:ac:72:f2:2a:2d:a2:bb:13:f8:ca:f7:0f:22:84:b3:cc:01: e3:3b:0b:91:a7:c2:f0:60:ca:90:20:40:3b:0f:d9:16:87:a2: 69:7f:20:d9:c8:50:e3:52:bf:7b:80:28:07:43:a7:e7:b0:02: 36:e4:fc:bf:b9:7f:da:5e:bf:3a:99:e6:f6:26:b2:72:ab:38: 96:ce:1a:39:e3:df:56:d9:3a:8d:d0:0b:ff:35:d8:ee:fa:9a: 9c:81:bc:bd:20:2a:66:c1:ae:70:c4:fd:44:96:35:c1:85:35: 3e:9e:3b:7e:be:14:9e:20:0b:d5:33:f6:f4:13:47:0a:37:4c: 05:ef:1f:a6:73:7b:87:4b:a0:c8:75:b3:a2:b1:9e:56:17:50: 72:54:25:3d:09:c0:95:e4:11:b8:36:11:6d:d3:ea:73:3e:dd: 53:8c:2f:5d:78:a9:05:b9:a6:e6:45:23:24:b0:d4:8e:87:70: 34:05:f0:47:8b:4c:3b:4e:f5:33:7e:a5:1e:02:c6:14:c1:31: 98:d3:7b:1f:fa:40:1b:9e:eb:99:ce:37:46:94:85:4b:5c:43: 30:d1:f5:5a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUPc8s2GQtp0quTs/7+v3V/g050XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjA3MjMyMDMxNDNaFw0yNjA3MjQyMjI0NDNaMDMxMTAvBgNV BAMTKEVENUExMEJDRkFDMzBFMjA4OENCRTFGNzc3MkFDMjg3M0VFNjQ0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgs8HmmlMuavX3G4xysBHry5iI TJOsGnc0LGibynybJlMyQ8DGbpHUw7EaJIOkzoKKbaexkvyWBt6lrw6fWftEMrVs ram2kOi/FLFc7PBVcM3lr0tNIvYydiYhmkoBtmM5c+tiJiTUp6GmcHTkmLoSFGrk PGdus/NcXdMbImuNE4KKCTX0X3SSPf05cGBz5AywVRvCwldpWXQLeUYLgdKF1mGa g1bJtTWveV24Mwt4Iz59bPDdymC+r9pjc3ZGjBEsOyG59nHh14fi3qLe3+RXuvw3 quHt/iI6PG0oPdg2xcDBFgbDbU3bBmh0kaQxr50t4ZHfOow34lfoi+3dihuzAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU7VoQvPrDDiCIy+H3dyrChz7mRF4wHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD9jYeo6gjTTZMqtRSUe LCXW+S8PCLSWpvNL9Sqx40+seSz/8vmscvIqLaK7E/jK9w8ihLPMAeM7C5GnwvBg ypAgQDsP2RaHoml/INnIUONSv3uAKAdDp+ewAjbk/L+5f9pevzqZ5vYmsnKrOJbO Gjnj31bZOo3QC/812O76mpyBvL0gKmbBrnDE/USWNcGFNT6eO36+FJ4gC9Uz9vQT Rwo3TAXvH6Zze4dLoMh1s6KxnlYXUHJUJT0JwJXkEbg2EW3T6nM+3VOML114qQW5 puZFIySw1I6HcDQF8EeLTDtO9TN+pR4CxhTBMZjTex/6QBue65nON0aUhUtcQzDR 9Vo= -----END CERTIFICATE-----Generated at Fri Jul 24 06:57:10 2026 by rpki-client