$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft File: 589DA145B1A822538BB2E68D892E6742B34F0701.mft (raw, json) Hash identifier: q9bHV3DlMz8ypCh7nBtFGFwkolE+IkDO9sELNDQlKxc= Subject key identifier: FD:B6:D4:9D:C2:A4:0E:B8:E5:3B:D1:BA:6C:FB:C9:6E:8C:F5:50:71 Authority key identifier: 58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 Certificate issuer: /CN=589DA145B1A822538BB2E68D892E6742B34F0701 Certificate serial: 0DEC19F956DB4C4B0917B772F5C27D4FBB1A8C28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft Manifest number: 64 Signing time: Fri 24 Jul 2026 00:27:07 +0000 Manifest this update: Fri 24 Jul 2026 00:22:07 +0000 Manifest next update: Sat 25 Jul 2026 02:57:07 +0000 Files and hashes: 1: 589DA145B1A822538BB2E68D892E6742B34F0701.crl (hash: LeBNziBFgi+UpkMmcpRBga9imIcXu7f1nAMQyQnNZgo=) 2: 3136312e3234382e3132382e302f32332d3234203d3e20313331363435.roa (hash: A2tEu7HgD7mnKwNZUDnZPRv7DPPNtScV1zkEjUfoaE8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ec:19:f9:56:db:4c:4b:09:17:b7:72:f5:c2:7d:4f:bb:1a:8c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589DA145B1A822538BB2E68D892E6742B34F0701 Validity Not Before: Jul 24 00:22:07 2026 GMT Not After : Jul 25 02:57:07 2026 GMT Subject: CN=FDB6D49DC2A40EB8E53BD1BA6CFBC96E8CF55071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:57:85:93:21:b6:53:0f:5d:6f:32:24:49: 34:f3:b9:67:87:51:af:26:83:84:d8:2a:20:4e:3d: 48:db:9e:1b:72:6d:3d:48:07:df:68:ba:6d:f9:22: f6:bb:a9:48:3d:0e:37:c6:69:38:fd:4a:c9:78:c9: 3d:c8:af:65:9c:07:3b:e3:e2:16:64:01:d9:ac:9f: 4b:82:02:7a:25:77:b7:e1:a2:b7:ef:cd:1c:2c:c6: f0:cb:e3:6c:af:45:9d:05:40:a1:d5:f6:f7:56:c8: 36:f5:46:c1:37:6f:e1:9f:14:7f:4f:5a:07:3f:27: e8:f4:7f:ac:1d:50:5d:6d:a6:4e:9b:8f:60:54:da: 12:a0:c6:70:3b:1e:d5:27:ac:66:f5:f8:67:ee:c0: 03:9f:ed:01:39:47:fa:a4:a1:05:42:08:4b:a7:b2: a7:48:4a:07:50:02:de:ee:07:83:10:25:da:71:fc: 36:43:8a:d1:5a:46:b5:70:bc:74:3a:d0:f6:56:a1: c1:a0:5b:df:89:fa:86:68:57:cf:67:c1:b7:a3:04: 98:ea:2d:ee:a1:40:f5:19:be:08:25:65:3d:fd:1f: 7c:7a:8f:ff:11:13:9d:87:82:ff:1f:19:1a:16:1a: 4f:a8:f8:91:c1:56:4a:9b:ea:f0:40:51:b8:66:7c: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B6:D4:9D:C2:A4:0E:B8:E5:3B:D1:BA:6C:FB:C9:6E:8C:F5:50:71 X509v3 Authority Key Identifier: keyid:58:9D:A1:45:B1:A8:22:53:8B:B2:E6:8D:89:2E:67:42:B3:4F:07:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/589DA145B1A822538BB2E68D892E6742B34F0701.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/1/589DA145B1A822538BB2E68D892E6742B34F0701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ee:dd:5d:cc:08:d5:7a:d3:ba:f8:57:24:b3:c6:5d:7b:a3: 0e:d5:3b:4c:c1:fa:c1:83:4b:50:9b:43:18:26:87:f8:b0:f3: 4b:9a:b7:5e:ef:2a:c5:4d:a7:48:cd:7f:c8:00:c6:8d:64:c6: d1:05:a7:9f:c9:11:ad:98:78:f0:95:e2:44:cc:32:ac:42:c1: 0c:aa:b3:ac:47:23:46:2b:20:86:a5:cc:9c:e6:36:e7:3e:95: 36:fd:32:fe:87:9a:25:d6:a7:d7:67:ac:34:09:c2:9e:41:37: f3:24:a7:df:99:e5:90:47:3f:45:dc:7b:cf:a9:9a:93:fb:80: a4:1d:b0:7a:86:e0:13:a2:cb:a0:90:10:84:c6:cf:a2:70:77: 4c:c2:fe:88:16:96:9a:db:0c:01:a9:4e:bc:5e:8c:3e:da:db: 65:46:8a:50:23:29:36:63:a3:a0:fa:b4:47:c0:c3:be:d3:b1: df:7b:95:6c:52:39:ee:f8:11:c0:e4:6b:0f:97:03:64:3a:8a: 96:47:f2:66:55:01:fc:c4:c9:f1:b2:51:62:40:ed:84:05:86: 71:a3:0e:cf:21:44:11:56:ca:d7:2b:fb:7d:41:0e:a0:84:05: e5:a3:15:bb:4d:47:f0:45:9e:84:28:8b:80:7b:1c:29:51:3b: 06:ef:91:ab -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUDewZ+VbbTEsJF7dy9cJ9T7sajCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJC MzRGMDcwMTAeFw0yNjA3MjQwMDIyMDdaFw0yNjA3MjUwMjU3MDdaMDMxMTAvBgNV BAMTKEZEQjZENDlEQzJBNDBFQjhFNTNCRDFCQTZDRkJDOTZFOENGNTUwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnl1eFkyG2Uw9dbzIkSTTzuWeH Ua8mg4TYKiBOPUjbnhtybT1IB99oum35Iva7qUg9DjfGaTj9Ssl4yT3Ir2WcBzvj 4hZkAdmsn0uCAnold7fhorfvzRwsxvDL42yvRZ0FQKHV9vdWyDb1RsE3b+GfFH9P Wgc/J+j0f6wdUF1tpk6bj2BU2hKgxnA7HtUnrGb1+GfuwAOf7QE5R/qkoQVCCEun sqdISgdQAt7uB4MQJdpx/DZDitFaRrVwvHQ60PZWocGgW9+J+oZoV89nwbejBJjq Le6hQPUZvgglZT39H3x6j/8RE52Hgv8fGRoWGk+o+JHBVkqb6vBAUbhmfFMhAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU/bbUncKkDrjlO9G6bPvJboz1UHEwHwYDVR0j BBgwFoAUWJ2hRbGoIlOLsuaNiS5nQrNPBwEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEv NTg5REExNDVCMUE4MjI1MzhCQjJFNjhEODkyRTY3NDJCMzRGMDcwMS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMC81ODlEQTE0NUIxQTgyMjUzOEJCMkU2OEQ4OTJFNjc0 MkIzNEYwNzAxLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tILzEvNTg5REExNDVCMUE4MjI1MzhC QjJFNjhEODkyRTY3NDJCMzRGMDcwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHbu3V3MCNV607r4VySz xl17ow7VO0zB+sGDS1CbQxgmh/iw80uat17vKsVNp0jNf8gAxo1kxtEFp5/JEa2Y ePCV4kTMMqxCwQyqs6xHI0YrIIalzJzmNuc+lTb9Mv6HmiXWp9dnrDQJwp5BN/Mk p9+Z5ZBHP0Xce8+pmpP7gKQdsHqG4BOiy6CQEITGz6Jwd0zC/ogWlprbDAGpTrxe jD7a22VGilAjKTZjo6D6tEfAw77Tsd97lWxSOe74EcDkaw+XA2Q6ipZH8mZVAfzE yfGyUWJA7YQFhnGjDs8hRBFWytcr+31BDqCEBeWjFbtNR/BFnoQoi4B7HClROwbv kas= -----END CERTIFICATE-----Generated at Fri Jul 24 15:46:57 2026 by rpki-client