$ rpki-client -vvvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: f/1vYxn7nUnyLcrgNwZPmzpcNMX9jDRSQsgq8lGmw7Q= Subject key identifier: F7:8A:0B:43:37:50:FE:C8:7D:60:E6:D2:BE:D4:8A:13:E6:49:8D:3D Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 234F8D052789365A8C60B89BBFDB3FF63B8CD9C0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: FF Signing time: Sun 15 Nov 2026 08:12:42 +0000 Manifest this update: Sun 15 Nov 2026 08:07:42 +0000 Manifest next update: Mon 16 Nov 2026 09:39:42 +0000 Files and hashes: 1: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: k/0ca8+6pngh6dD6Ll907BXzVCRESi5UMHyFYvCwuDA=) 2: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) 3: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 4: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:8d:05:27:89:36:5a:8c:60:b8:9b:bf:db:3f:f6:3b:8c:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: Nov 15 08:07:42 2026 GMT Not After : Nov 16 09:39:42 2026 GMT Subject: CN=F78A0B433750FEC87D60E6D2BED48A13E6498D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5c:f4:50:13:a4:89:e8:67:48:b6:9a:47:79: 66:75:a0:5c:62:24:4f:c4:8b:68:c5:f2:72:87:bc: 6a:89:1d:1d:6d:11:a4:dc:16:0d:1f:c8:07:a3:18: 9b:d3:81:d8:24:2e:e9:72:49:1b:57:e9:bb:e9:e0: b6:52:c0:14:13:57:7d:df:cf:f2:35:b4:80:78:86: f1:48:01:df:ba:89:84:0f:b6:fa:eb:b1:21:68:d2: 8a:b9:e8:8d:34:8e:8b:13:d9:68:a2:de:75:4e:87: 34:ca:24:4c:19:d7:12:d8:da:4e:9f:d3:ff:8b:b1: 6f:bc:76:30:f1:db:8e:85:87:7e:09:28:09:a9:17: 3c:97:64:7a:0e:2e:12:da:9e:2d:c6:ef:f6:3d:da: 1e:52:22:ca:32:14:38:c0:3a:36:fd:fc:fb:38:99: 7e:1c:1b:02:ad:aa:32:1e:c8:dc:6a:75:c8:ae:04: a3:3b:af:b1:19:6f:24:fd:4c:28:e7:48:61:6f:ac: 8f:77:71:a3:76:2a:37:ee:91:1c:9c:51:97:71:93: 06:01:4c:2d:20:80:58:9a:ae:0f:f9:af:b1:ea:5f: df:0f:0f:5a:45:60:48:94:d8:fe:74:e9:c7:08:c7: 06:71:b4:05:72:d1:4e:49:e5:20:68:74:a8:f3:5e: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8A:0B:43:37:50:FE:C8:7D:60:E6:D2:BE:D4:8A:13:E6:49:8D:3D X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0d:2e:61:e1:eb:3f:12:85:cf:ed:87:65:b2:d5:93:a8:9a: a3:ac:72:87:d9:43:a2:d2:81:a5:1b:6d:c1:20:0f:4a:af:c3: 15:48:61:0a:12:9b:97:40:0f:02:34:61:06:84:6c:59:41:2b: e0:2d:4d:b5:2a:13:3e:81:39:73:65:16:a8:1f:cb:bf:52:c5: fa:99:f4:04:5b:51:86:f0:5c:50:ff:ce:26:37:84:47:c0:15: 2b:14:31:61:2b:4b:28:ad:69:ed:d8:94:b5:df:63:1e:e3:0e: 0a:96:b5:eb:b3:57:6b:47:f8:48:1e:2c:f7:9a:5c:f2:02:de: 8c:46:e8:ff:a6:3c:65:80:4f:78:66:01:1e:c6:08:eb:6c:c7: 7f:c0:53:82:5f:36:5f:88:75:a3:89:18:43:18:13:4f:c4:c4: 90:b8:7a:ac:f4:01:93:07:99:82:09:89:34:a3:b9:76:a9:0a: fa:e8:0c:ae:7e:9d:5f:d0:a1:8b:99:80:8f:7a:68:1a:1e:1f: 87:59:a1:38:76:61:3d:41:c7:d6:94:de:2f:f1:11:4c:c3:06: 8e:96:fd:e6:03:ec:be:32:1a:5a:c2:ec:11:db:c6:cb:0f:e2: 6b:d7:80:59:a2:4d:73:2d:f7:d4:de:51:40:d1:ec:4a:0e:12: 1c:f1:d3:22 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUI0+NBSeJNlqMYLibv9s/9juM2cAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjExMTUwODA3NDJaFw0yNjExMTYwOTM5NDJaMDMxMTAvBgNV BAMTKEY3OEEwQjQzMzc1MEZFQzg3RDYwRTZEMkJFRDQ4QTEzRTY0OThEM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXPRQE6SJ6GdItppHeWZ1oFxi JE/Ei2jF8nKHvGqJHR1tEaTcFg0fyAejGJvTgdgkLulySRtX6bvp4LZSwBQTV33f z/I1tIB4hvFIAd+6iYQPtvrrsSFo0oq56I00josT2Wii3nVOhzTKJEwZ1xLY2k6f 0/+LsW+8djDx246Fh34JKAmpFzyXZHoOLhLani3G7/Y92h5SIsoyFDjAOjb9/Ps4 mX4cGwKtqjIeyNxqdciuBKM7r7EZbyT9TCjnSGFvrI93caN2KjfukRycUZdxkwYB TC0ggFiarg/5r7HqX98PD1pFYEiU2P506ccIxwZxtAVy0U5J5SBodKjzXgWNAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU94oLQzdQ/sh9YObSvtSKE+ZJjT0wHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKsNLmHh6z8Shc/th2Wy 1ZOomqOscofZQ6LSgaUbbcEgD0qvwxVIYQoSm5dADwI0YQaEbFlBK+AtTbUqEz6B OXNlFqgfy79SxfqZ9ARbUYbwXFD/ziY3hEfAFSsUMWErSyitae3YlLXfYx7jDgqW teuzV2tH+EgeLPeaXPIC3oxG6P+mPGWAT3hmAR7GCOtsx3/AU4JfNl+IdaOJGEMY E0/ExJC4eqz0AZMHmYIJiTSjuXapCvroDK5+nV/QoYuZgI96aBoeH4dZoTh2YT1B x9aU3i/xEUzDBo6W/eYD7L4yGlrC7BHbxssP4mvXgFmiTXMt99TeUUDR7EoOEhzx 0yI= -----END CERTIFICATE-----Generated at Sun Nov 15 10:35:26 2026 by rpki-client