$ rpki-client -vvvf rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft File: 3E0842CB09173FD62797099AF95D837AFF05C8C1.mft (raw, json) Hash identifier: 4m2BbIYBCtj5zahcaDR5goJgZ/iU3YKWqvBXpIXpVDQ= Subject key identifier: DF:7B:C6:E5:3D:9F:3A:C9:C9:E0:34:B2:8B:97:84:9A:17:3C:FC:11 Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 Certificate issuer: /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Certificate serial: 47201836DDD3C7887B8294702F12FBBABFC17C05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 07:29:08 +0000 Manifest this update: Thu 24 Sep 2026 07:24:08 +0000 Manifest next update: Fri 25 Sep 2026 09:05:08 +0000 Files and hashes: 1: 3E0842CB09173FD62797099AF95D837AFF05C8C1.crl (hash: mk16szXfa84UO3IRzkQZAbJMy8yBhyg+NTSSOp54dO8=) 2: 3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (hash: dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=) 3: 323430313a353565303a3a2f33322d3332203d3e203138303431.roa (hash: qBti13dNoJJvS8VN2rEdP5+tGcjEGWujArPyCZdW53g=) 4: 3231302e37392e3135342e302f32332d3234203d3e203138303431.roa (hash: 6gHJfiK63fKOqTCfE1ImEP6HSow+veqBLLBJ8NhAMVM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:20:18:36:dd:d3:c7:88:7b:82:94:70:2f:12:fb:ba:bf:c1:7c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1 Validity Not Before: Sep 24 07:24:08 2026 GMT Not After : Sep 25 09:05:08 2026 GMT Subject: CN=DF7BC6E53D9F3AC9C9E034B28B97849A173CFC11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:65:83:f1:5c:61:d6:08:75:4d:18:15:aa: 17:82:30:65:85:57:53:5c:c1:db:aa:6b:f3:48:b4: 46:ca:7c:c6:80:1f:c2:b6:5d:01:66:d9:af:f7:78: 00:35:6e:67:ef:57:10:75:d5:79:5c:b9:15:83:44: 69:3c:ed:fa:99:96:11:88:ed:6b:64:c3:1d:15:54: bb:d5:ca:13:30:61:8e:6d:d2:5a:34:06:6a:07:ba: ed:10:a1:fe:f3:6f:e0:69:d1:a8:f0:5e:61:c5:23: aa:6a:1b:f5:2d:f4:9a:ec:ea:44:93:b9:90:36:fd: 1a:d6:7a:af:1c:c5:e9:67:4f:4b:04:f6:c2:8b:3e: 83:6f:e6:e6:d2:b3:24:73:1e:02:6e:b0:11:9b:26: b0:cc:0e:8c:75:08:e7:5c:4d:0f:60:a6:49:3c:da: db:12:0a:00:e6:e7:21:79:98:9e:c7:b0:d8:eb:98: ac:2e:07:18:84:18:2c:46:77:18:2a:2c:7a:a5:2b: fd:01:32:e3:af:9a:c0:33:af:9e:a4:7f:09:05:b2: 0d:a2:fa:65:d9:1f:0d:f8:1c:83:f9:c2:21:96:4d: f4:14:22:ab:92:60:13:ed:8d:0e:54:aa:75:0d:3b: 32:51:1f:12:93:04:ce:a9:4b:57:16:5f:64:68:87: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7B:C6:E5:3D:9F:3A:C9:C9:E0:34:B2:8B:97:84:9A:17:3C:FC:11 X509v3 Authority Key Identifier: keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2b:64:89:ae:0e:fb:4f:52:68:0a:5b:18:6a:27:00:a2:27: 32:d4:ae:12:50:c8:2a:55:12:bd:cc:bd:60:4f:e3:de:88:0d: 71:26:1e:b8:02:0c:c1:cf:44:a3:a7:50:1b:30:84:c3:e5:36: 3c:33:13:b4:d1:7c:74:ba:aa:e8:4a:2c:d6:52:26:2c:1b:e0: d5:b1:60:ae:21:f3:f0:eb:6f:08:23:53:eb:2b:58:7b:02:a5: b1:e9:c2:18:e5:be:5e:70:ca:fc:98:13:ba:72:62:8f:29:0d: 49:5f:68:b4:ab:6b:7e:ee:b5:15:a0:c1:10:b1:85:c4:9a:38: d7:ac:53:58:33:de:66:30:9b:e9:33:86:45:69:8d:2b:88:4e: 51:0d:79:c8:0d:d8:5c:dd:36:d6:e2:07:23:80:ea:56:ad:c1: 07:ee:95:4b:0c:e8:26:97:a9:44:ca:5c:de:1d:7d:b3:a9:88: 97:06:fa:d3:13:30:f1:26:47:6c:54:f2:9c:6a:f6:8d:9e:97: 6d:a1:dd:f9:3c:2a:bf:e1:94:e7:15:20:5b:5b:7c:56:e1:3f: e1:17:8c:1d:52:98:8f:0b:38:6e:aa:f0:81:bf:db:53:da:84: fb:45:f1:2c:94:9d:c4:78:91:2a:e8:3d:0e:3f:e2:bd:d2:35: 74:46:d8:ff -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIURyAYNt3Tx4h7gpRwLxL7ur/BfAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FG RjA1QzhDMTAeFw0yNjA5MjQwNzI0MDhaFw0yNjA5MjUwOTA1MDhaMDMxMTAvBgNV BAMTKERGN0JDNkU1M0Q5RjNBQzlDOUUwMzRCMjhCOTc4NDlBMTczQ0ZDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpv2WD8Vxh1gh1TRgVqheCMGWF V1Ncwduqa/NItEbKfMaAH8K2XQFm2a/3eAA1bmfvVxB11XlcuRWDRGk87fqZlhGI 7Wtkwx0VVLvVyhMwYY5t0lo0BmoHuu0Qof7zb+Bp0ajwXmHFI6pqG/Ut9Jrs6kST uZA2/RrWeq8cxelnT0sE9sKLPoNv5ubSsyRzHgJusBGbJrDMDox1COdcTQ9gpkk8 2tsSCgDm5yF5mJ7HsNjrmKwuBxiEGCxGdxgqLHqlK/0BMuOvmsAzr56kfwkFsg2i +mXZHw34HIP5wiGWTfQUIquSYBPtjQ5UqnUNOzJRHxKTBM6pS1cWX2Roh3v1AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU33vG5T2fOsnJ4DSyi5eEmhc8/BEwHwYDVR0j BBgwFoAUPghCywkXP9Ynlwma+V2Dev8FyMEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAv M0UwODQyQ0IwOTE3M0ZENjI3OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zRTA4NDJDQjA5MTczRkQ2Mjc5NzA5OUFGOTVEODM3 QUZGMDVDOEMxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkRBLzAvM0UwODQyQ0IwOTE3M0ZENjI3 OTcwOTlBRjk1RDgzN0FGRjA1QzhDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH8rZImuDvtPUmgKWxhq JwCiJzLUrhJQyCpVEr3MvWBP496IDXEmHrgCDMHPRKOnUBswhMPlNjwzE7TRfHS6 quhKLNZSJiwb4NWxYK4h8/DrbwgjU+srWHsCpbHpwhjlvl5wyvyYE7pyYo8pDUlf aLSra37utRWgwRCxhcSaONesU1gz3mYwm+kzhkVpjSuITlENecgN2FzdNtbiByOA 6latwQfulUsM6CaXqUTKXN4dfbOpiJcG+tMTMPEmR2xU8pxq9o2el22h3fk8Kr/h lOcVIFtbfFbhP+EXjB1SmI8LOG6q8IG/21PahPtF8SyUncR4kSroPQ4/4r3SNXRG 2P8= -----END CERTIFICATE-----Generated at Fri Sep 25 01:04:07 2026 by rpki-client