$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft File: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft (raw, json) Hash identifier: gKjvwUslMDreGzuPqjhK9uBCAgEVF6ci0lgCXkkFTI4= Subject key identifier: 2C:A4:38:74:F4:72:E9:B5:D8:2F:86:D2:AA:50:D6:F2:04:61:50:6C Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Certificate serial: 0FCC1E47907EF58450B751E922B406457869971B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft Manifest number: BA Signing time: Fri 25 Sep 2026 06:12:07 +0000 Manifest this update: Fri 25 Sep 2026 06:07:07 +0000 Manifest next update: Sat 26 Sep 2026 08:22:07 +0000 Files and hashes: 1: 3230322e3132332e3132362e302f32332d3234203d3e20313331363435.roa (hash: X5pJ+pB5W852b19TEIzFlXBOz+DsW3q2s1s2BmWLs78=) 2: 3130332e3133342e3132302e302f32322d3234203d3e20313331363435.roa (hash: 5YtP4S/SL4qMiPP6SO95f1XxJCbpmMediEjct/tVRs0=) 3: 3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa (hash: G2OLOqYyK8DpocEbNmGZNRoqNscoouK3uCmhiiODaHA=) 4: 1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl (hash: jTcCus9sILwllZXrEe72KFl7e0trEBLJTAyE0K9eQsQ=) 5: 323430343a363363303a3a2f33322d3438203d3e20313331363435.roa (hash: IKYmTXcs/sxSdeZ8soPiKcin23Vsg+QkfcjhBMnj+D8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cc:1e:47:90:7e:f5:84:50:b7:51:e9:22:b4:06:45:78:69:97:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Validity Not Before: Sep 25 06:07:07 2026 GMT Not After : Sep 26 08:22:07 2026 GMT Subject: CN=2CA43874F472E9B5D82F86D2AA50D6F20461506C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:15:1f:1d:cb:61:13:40:f4:6a:ce:df:92: 42:26:38:6e:5c:68:93:0f:51:cc:d6:55:41:89:79: ca:46:97:ef:47:97:01:50:68:c2:1e:00:93:59:28: 30:f5:dc:c0:e3:9d:14:f3:d8:52:5c:fb:24:20:50: 02:69:c6:2f:03:c6:d4:78:52:38:41:b5:59:07:d3: 06:5a:87:58:db:a3:a4:d0:e5:51:c9:d1:3b:f3:ad: dd:a0:bf:96:55:0d:e4:02:01:1c:22:6f:12:70:6c: 70:49:28:2c:20:33:e8:42:ec:ee:ec:9d:11:90:0e: 28:f3:d3:e6:78:63:d6:23:4a:e8:cb:31:92:fc:6f: bb:f9:ca:fc:58:7c:80:0b:22:e9:49:4b:a6:a2:63: 8b:2f:89:4d:53:7a:f9:0b:56:47:8f:71:5d:10:3d: 5a:c8:f0:47:bc:5e:2f:23:09:74:47:64:32:48:f0: 9f:97:ee:50:ed:3b:cc:1f:0a:08:fc:44:51:82:ce: 62:1d:a0:b3:70:16:4e:1d:e4:f1:11:77:81:04:7e: c9:cb:bb:a6:de:f5:ab:0f:16:b6:a0:88:49:15:39: a8:a6:7b:87:0a:6c:07:03:54:97:92:c9:9a:6e:49: 15:ec:fa:0d:1e:1b:01:11:d2:3f:1c:00:70:66:ae: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:38:74:F4:72:E9:B5:D8:2F:86:D2:AA:50:D6:F2:04:61:50:6C X509v3 Authority Key Identifier: keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7b:ba:5a:04:19:5b:b8:ca:7d:2a:05:28:8f:9e:bb:6a:38: bb:61:57:cf:5a:3a:5e:65:92:92:50:92:79:d3:0e:99:1f:53: 92:e3:74:96:83:a8:6e:fa:44:0b:65:83:58:8a:45:1e:9f:73: 8b:43:51:4a:8d:08:84:2e:07:cb:22:56:d1:bf:38:14:ba:40: 31:6d:e1:52:d0:79:66:11:7e:a0:1d:46:8b:ba:96:82:88:a9: ae:95:65:06:6b:c3:2f:01:80:ee:ef:06:b3:d6:8d:fc:93:27: fe:36:1b:24:ae:23:91:7a:32:ec:ec:b8:69:9d:32:a2:1b:69: ac:d4:33:b5:77:59:be:c3:74:58:c9:5c:81:4c:95:cd:d6:12: a7:31:4e:b9:8f:15:a2:ff:dc:1d:02:bf:59:e8:ce:3f:49:7e: e3:c2:dd:ac:65:18:ca:8c:34:06:13:7f:30:5e:10:8f:d6:12: f8:88:c4:a0:88:77:fd:4a:df:1d:31:15:db:ce:c6:68:c3:d9: d5:db:f2:ee:a7:12:86:b4:76:4d:7c:30:7c:85:88:a9:b6:b6: ec:89:5d:36:6b:a4:95:87:a2:c6:f9:0d:4e:96:13:49:cd:25: ee:29:2f:96:47:3a:8e:8f:60:7d:99:56:7e:81:7c:15:84:36: 42:69:c7:fa -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUD8weR5B+9YRQt1HpIrQGRXhplxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERCRUY3 NEFCOTY5NDAeFw0yNjA5MjUwNjA3MDdaFw0yNjA5MjYwODIyMDdaMDMxMTAvBgNV BAMTKDJDQTQzODc0RjQ3MkU5QjVEODJGODZEMkFBNTBENkYyMDQ2MTUwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj5hUfHcthE0D0as7fkkImOG5c aJMPUczWVUGJecpGl+9HlwFQaMIeAJNZKDD13MDjnRTz2FJc+yQgUAJpxi8DxtR4 UjhBtVkH0wZah1jbo6TQ5VHJ0Tvzrd2gv5ZVDeQCARwibxJwbHBJKCwgM+hC7O7s nRGQDijz0+Z4Y9YjSujLMZL8b7v5yvxYfIALIulJS6aiY4sviU1TevkLVkePcV0Q PVrI8Ee8Xi8jCXRHZDJI8J+X7lDtO8wfCgj8RFGCzmIdoLNwFk4d5PERd4EEfsnL u6be9asPFragiEkVOaime4cKbAcDVJeSyZpuSRXs+g0eGwER0j8cAHBmri0PAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQULKQ4dPRy6bXYL4bSqlDW8gRhUGwwHwYDVR0j BBgwFoAUG/QZdz0eFe79bKK7TlDb73SrlpQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tDTy8w LzFCRjQxOTc3M0QxRTE1RUVGRDZDQTJCQjRFNTBEQkVGNzRBQjk2OTQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERC RUY3NEFCOTY5NC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLQ08vMC8xQkY0MTk3NzNEMUUxNUVF RkQ2Q0EyQkI0RTUwREJFRjc0QUI5Njk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnu6WgQZW7jKfSoF KI+eu2o4u2FXz1o6XmWSklCSedMOmR9TkuN0loOobvpEC2WDWIpFHp9zi0NRSo0I hC4HyyJW0b84FLpAMW3hUtB5ZhF+oB1Gi7qWgoiprpVlBmvDLwGA7u8Gs9aN/JMn /jYbJK4jkXoy7Oy4aZ0yohtprNQztXdZvsN0WMlcgUyVzdYSpzFOuY8Vov/cHQK/ WejOP0l+48LdrGUYyow0BhN/MF4Qj9YS+IjEoIh3/UrfHTEV287GaMPZ1dvy7qcS hrR2TXwwfIWIqba27IldNmuklYeixvkNTpYTSc0l7ikvlkc6jo9gfZlWfoF8FYQ2 QmnH+g== -----END CERTIFICATE-----Generated at Fri Sep 25 09:44:32 2026 by rpki-client