$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft File: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json) Hash identifier: s5fiilgLmUjS2PLg2nBV1pnThIEgSXyc4LDe1IlAth0= Subject key identifier: 02:B8:78:4D:E0:10:02:89:93:51:B1:13:80:37:E5:33:FC:E4:85:DB Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8 Certificate issuer: /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8 Certificate serial: 36245064FB0887CB0D6155548A14635FE049CBD1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 04:16:23 +0000 Manifest this update: Thu 24 Sep 2026 04:11:23 +0000 Manifest next update: Fri 25 Sep 2026 06:59:23 +0000 Files and hashes: 1: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: zKLUkCg3PwvOdXAHMgLMw8WXbK6LtndNxwTm+MiHKZY=) 2: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:24:50:64:fb:08:87:cb:0d:61:55:54:8a:14:63:5f:e0:49:cb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8 Validity Not Before: Sep 24 04:11:23 2026 GMT Not After : Sep 25 06:59:23 2026 GMT Subject: CN=02B8784DE01002899351B1138037E533FCE485DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:16:2f:ca:3b:f4:d5:fd:fe:6c:a5:4b:b3: 0d:1e:e8:2f:77:aa:7f:3a:6a:d7:ef:b4:6d:21:53: 78:21:66:73:d2:be:54:38:62:59:7a:92:d0:fe:c0: 63:23:4f:cf:0b:a9:92:c2:fc:78:c9:8a:83:cc:ae: b7:6c:1e:f4:94:a6:ba:ff:7b:16:47:a5:87:a5:cf: 06:18:27:af:19:ca:2f:bc:7f:0f:6f:c0:af:64:77: 61:38:0c:3c:8d:34:0a:95:2e:7e:c2:5c:1e:f4:b1: 7d:59:5e:8e:86:95:7e:c2:8a:46:df:27:58:fa:88: 66:3f:a7:b6:74:37:f2:d0:91:44:27:cb:88:97:e5: 5b:34:98:95:7b:ce:1e:2f:fd:29:ef:14:79:32:bd: 37:48:64:a2:f0:ca:14:09:12:17:ff:71:21:79:a7: b9:dc:00:60:98:3a:61:69:c8:46:d2:0c:26:14:ab: 3e:6e:0b:ac:e3:bc:69:6f:09:f6:60:73:07:c4:cd: 97:9e:45:b0:ae:eb:da:de:bb:ea:5c:b2:c1:00:3e: 43:8d:d9:3b:2f:a3:e2:8d:4f:09:d3:f9:e3:0c:a7: d5:d8:8c:bb:22:bd:54:48:bc:77:41:4c:07:fd:a2: f9:cc:66:47:60:64:23:dc:a7:d6:45:7f:43:b7:9d: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B8:78:4D:E0:10:02:89:93:51:B1:13:80:37:E5:33:FC:E4:85:DB X509v3 Authority Key Identifier: keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:f0:41:c9:1d:e5:53:8c:0a:8f:ea:27:2e:aa:88:bd:8b:e9: 95:1e:5e:50:90:04:e2:f2:e7:ad:5e:4f:f4:66:dd:97:c4:29: ce:e5:7a:39:51:e8:2a:93:c2:c4:a5:52:fc:34:6f:01:9d:7f: 81:34:e3:d2:5a:46:38:5e:9e:ae:cf:c2:17:52:6f:d2:cb:37: 56:ca:3e:fe:5c:f7:a0:a3:34:40:97:8a:25:cb:4f:4a:a1:05: a7:ec:5e:01:57:9f:8d:82:d1:62:54:2f:a1:dd:a0:c9:e5:65: 99:4c:4b:1c:f7:27:e2:39:dc:bf:41:ce:6f:e7:88:d6:fc:8d: 4e:30:7f:5c:64:db:72:7b:b9:1c:79:61:85:15:3d:6a:08:50: 4a:94:44:39:10:0c:43:a5:c1:c0:58:cf:44:b9:8d:b9:0d:c8: 48:54:e4:ef:93:24:c7:38:70:3d:7d:53:d5:d0:6b:b6:66:cf: 9e:dc:72:73:0b:7d:2c:67:8b:7d:56:9d:0f:c0:50:61:2e:a4: e9:ca:3a:49:9d:02:58:51:68:8d:21:05:d0:b8:fc:ca:fc:2c: 08:a9:28:dc:0c:54:1a:bf:5c:55:0d:d4:b9:94:11:df:9c:67: b2:ef:6d:1d:ae:ec:5f:e3:04:79:94:84:07:b4:99:39:b7:e2: 49:f9:a0:3b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUNiRQZPsIh8sNYVVUihRjX+BJy9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY3MkNDMUZFMjcwOEU4ODJDN0M3QUM5RjAxNkM5QzUz NTAzMDFCODAeFw0yNjA5MjQwNDExMjNaFw0yNjA5MjUwNjU5MjNaMDMxMTAvBgNV BAMTKDAyQjg3ODRERTAxMDAyODk5MzUxQjExMzgwMzdFNTMzRkNFNDg1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIBYvyjv01f3+bKVLsw0e6C93 qn86atfvtG0hU3ghZnPSvlQ4Yll6ktD+wGMjT88LqZLC/HjJioPMrrdsHvSUprr/ exZHpYelzwYYJ68Zyi+8fw9vwK9kd2E4DDyNNAqVLn7CXB70sX1ZXo6GlX7Cikbf J1j6iGY/p7Z0N/LQkUQny4iX5Vs0mJV7zh4v/SnvFHkyvTdIZKLwyhQJEhf/cSF5 p7ncAGCYOmFpyEbSDCYUqz5uC6zjvGlvCfZgcwfEzZeeRbCu69reu+pcssEAPkON 2Tsvo+KNTwnT+eMMp9XYjLsivVRIvHdBTAf9ovnMZkdgZCPcp9ZFf0O3nVQRAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUArh4TeAQAomTUbETgDflM/zkhdswHwYDVR0j BBgwFoAURnLMH+JwjogsfHrJ8BbJxTUDAbgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MC80NjcyQ0MxRkUyNzA4RTg4MkM3QzdBQzlGMDE2QzlDNTM1MDMwMUI4LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzQ2NzJDQzFGRTI3MDhFODgyQzdDN0FDOUYwMTZD OUM1MzUwMzAxQjguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8wLzQ2NzJDQzFGRTI3MDhF ODgyQzdDN0FDOUYwMTZDOUM1MzUwMzAxQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC8EHJHeVTjAqP 6icuqoi9i+mVHl5QkATi8uetXk/0Zt2XxCnO5Xo5Uegqk8LEpVL8NG8BnX+BNOPS WkY4Xp6uz8IXUm/SyzdWyj7+XPegozRAl4oly09KoQWn7F4BV5+NgtFiVC+h3aDJ 5WWZTEsc9yfiOdy/Qc5v54jW/I1OMH9cZNtye7kceWGFFT1qCFBKlEQ5EAxDpcHA WM9EuY25DchIVOTvkyTHOHA9fVPV0Gu2Zs+e3HJzC30sZ4t9Vp0PwFBhLqTpyjpJ nQJYUWiNIQXQuPzK/CwIqSjcDFQav1xVDdS5lBHfnGey720druxf4wR5lIQHtJk5 t+JJ+aA7 -----END CERTIFICATE-----Generated at Thu Sep 24 19:41:28 2026 by rpki-client