$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft File: 4F029ED27C82844F72C10999E3E77841D888E8A5.mft (raw, json) Hash identifier: kNYWdqRx3zWc7E82XIvefhtQ8kll9b9Gmf7yfmwRgC0= Subject key identifier: 74:69:4F:11:25:44:2C:24:E4:B7:9F:B2:0F:F0:1F:29:95:A5:7E:B7 Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 1A73B356E305EC68E06E5786B3ABBF0EECD41F4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft Manifest number: BB Signing time: Sat 26 Sep 2026 01:59:55 +0000 Manifest this update: Sat 26 Sep 2026 01:54:55 +0000 Manifest next update: Sun 27 Sep 2026 05:18:55 +0000 Files and hashes: 1: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (hash: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk=) 2: 3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (hash: mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=) 3: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (hash: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=) 4: 4F029ED27C82844F72C10999E3E77841D888E8A5.crl (hash: Eb4UiTyly7vLPrfFZ+WYjf0vKUgfjLNrfjbydEyOnMw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 05:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:73:b3:56:e3:05:ec:68:e0:6e:57:86:b3:ab:bf:0e:ec:d4:1f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: Sep 26 01:54:55 2026 GMT Not After : Sep 27 05:18:55 2026 GMT Subject: CN=74694F1125442C24E4B79FB20FF01F2995A57EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:ac:79:08:6a:ff:a0:bc:c9:42:d1:4f:e6: b0:ca:9c:b0:49:c2:36:8d:de:c9:12:5e:97:64:c1: 1d:32:25:da:19:0f:16:2c:a3:64:5d:a4:46:28:50: 48:ef:bf:68:3a:58:08:e9:a1:72:b1:fe:68:00:47: 28:81:91:bf:04:68:07:0c:a4:f6:0b:c3:e6:39:8c: 14:be:5b:85:e6:2e:7e:2b:7d:bf:b5:c2:c0:10:fe: 8a:4f:0c:33:d1:c0:52:a1:30:d8:48:26:fe:12:52: c9:0e:5f:a1:ff:c3:c7:72:63:b9:83:0f:61:ea:19: 7c:79:8c:51:ec:77:f6:04:34:7f:81:89:da:e2:fe: 13:f9:c5:2d:1d:63:b1:45:bb:d0:76:cd:42:60:bf: 96:ba:a2:61:09:0a:d3:e0:76:0f:bb:43:d3:91:20: 37:11:d9:bd:d1:01:b0:0a:6f:29:78:05:ab:01:83: 70:7b:41:3a:2f:66:8b:c6:6f:81:cb:d9:c4:ae:60: eb:b4:ef:99:6a:d1:dc:13:1d:bb:b5:a6:97:5e:62: 29:e2:94:46:38:a2:18:ec:49:52:b8:d4:74:7e:08: 64:ab:95:ba:7a:bd:67:0f:74:a2:4d:fc:9e:79:d3: 4f:0e:63:56:12:21:c7:50:75:42:5c:a9:3d:79:4f: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:69:4F:11:25:44:2C:24:E4:B7:9F:B2:0F:F0:1F:29:95:A5:7E:B7 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c1:a3:22:ae:0b:ed:ed:68:b0:c4:39:15:93:d0:ca:bf:7e: 1f:bf:80:80:4d:00:64:e3:9e:d8:e3:1c:65:cd:ea:72:4e:80: 83:75:98:50:22:c8:6e:80:1c:a3:1c:d4:5e:5d:52:0f:6b:97: 46:ad:b4:9b:68:a5:ed:23:f2:d4:eb:76:1c:5a:95:9f:34:08: 8b:e0:65:e4:5d:0b:a3:58:48:1e:40:3a:fb:78:04:7c:3a:52: 14:fd:a8:e3:cf:92:f0:56:c1:0e:69:03:23:a3:26:51:9c:08: 4b:4d:e7:0b:af:4c:e0:7e:1b:35:66:96:a2:36:5f:58:61:4d: a2:b0:88:51:99:75:f9:78:da:d1:b5:e6:3b:c5:49:f4:3b:52: 2a:86:50:49:ec:5f:d6:99:43:c4:78:50:c8:ca:04:6d:8e:37: 15:59:1d:a1:f5:e2:a2:a7:1f:c0:53:32:92:f6:15:4b:a7:71: 19:41:1c:8c:40:63:ce:84:3b:e8:38:2f:83:f1:d6:ac:88:2c: 14:4c:79:c1:b3:8b:3a:57:5f:f9:ed:dc:a9:7d:8f:e4:64:f4: 93:07:de:1c:4f:9e:dc:e9:eb:43:6a:c8:61:78:74:bb:7c:dc: bb:4e:98:78:2d:57:78:a3:2b:46:e6:73:6f:71:8b:c1:4e:b9: 5c:66:16:71 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUGnOzVuMF7GjgbleGs6u/DuzUH0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA5MjYwMTU0NTVaFw0yNjA5MjcwNTE4NTVaMDMxMTAvBgNV BAMTKDc0Njk0RjExMjU0NDJDMjRFNEI3OUZCMjBGRjAxRjI5OTVBNTdFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS56x5CGr/oLzJQtFP5rDKnLBJ wjaN3skSXpdkwR0yJdoZDxYso2RdpEYoUEjvv2g6WAjpoXKx/mgARyiBkb8EaAcM pPYLw+Y5jBS+W4XmLn4rfb+1wsAQ/opPDDPRwFKhMNhIJv4SUskOX6H/w8dyY7mD D2HqGXx5jFHsd/YENH+Bidri/hP5xS0dY7FFu9B2zUJgv5a6omEJCtPgdg+7Q9OR IDcR2b3RAbAKbyl4BasBg3B7QTovZovGb4HL2cSuYOu075lq0dwTHbu1ppdeYini lEY4ohjsSVK41HR+CGSrlbp6vWcPdKJN/J55008OY1YSIcdQdUJcqT15T6ezAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUdGlPESVELCTkt5+yD/AfKZWlfrcwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzRGMDI5RUQyN0M4Mjg0 NEY3MkMxMDk5OUUzRTc3ODQxRDg4OEU4QTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBswaMirgvt7Wiw xDkVk9DKv34fv4CATQBk457Y4xxlzepyToCDdZhQIshugByjHNReXVIPa5dGrbSb aKXtI/LU63YcWpWfNAiL4GXkXQujWEgeQDr7eAR8OlIU/ajjz5LwVsEOaQMjoyZR nAhLTecLr0zgfhs1ZpaiNl9YYU2isIhRmXX5eNrRteY7xUn0O1IqhlBJ7F/WmUPE eFDIygRtjjcVWR2h9eKipx/AUzKS9hVLp3EZQRyMQGPOhDvoOC+D8dasiCwUTHnB s4s6V1/57dypfY/kZPSTB94cT57c6etDashheHS7fNy7Tph4LVd4oytG5nNvcYvB TrlcZhZx -----END CERTIFICATE-----Generated at Sat Sep 26 14:23:09 2026 by rpki-client