$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json) Hash identifier: 1GnmctUATYfm60m/oc9hqtR8CuaOGsmJ7xpoEHpxyDM= Subject key identifier: D4:53:ED:B6:C7:56:3B:48:0E:D5:63:7D:F1:D8:22:8B:D2:AC:1D:E6 Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA Certificate serial: 6C97FC2E0634914FEA3BECED1A278EE13CEDDE6D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 13:19:50 +0000 Manifest this update: Thu 24 Sep 2026 13:14:50 +0000 Manifest next update: Fri 25 Sep 2026 14:05:50 +0000 Files and hashes: 1: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=) 2: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: VSSf25ZM9YJrcE7wwmLAjjAPYGNpY3waTOPOlQfQcFQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:97:fc:2e:06:34:91:4f:ea:3b:ec:ed:1a:27:8e:e1:3c:ed:de:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA Validity Not Before: Sep 24 13:14:50 2026 GMT Not After : Sep 25 14:05:50 2026 GMT Subject: CN=D453EDB6C7563B480ED5637DF1D8228BD2AC1DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:d6:5e:c5:ee:12:19:1f:63:a4:ff:66:d6: 68:f4:18:8a:3b:da:30:df:31:71:9c:72:99:b7:ea: a0:cb:8a:c4:26:6f:27:90:91:c3:92:d2:5c:49:5b: d0:2c:93:15:85:b6:7b:78:f7:8b:76:6f:c9:f5:1c: 55:0e:97:10:9a:40:16:45:07:a1:1a:39:cc:06:7e: 6b:70:b8:8c:63:f0:ab:10:bd:50:92:07:7c:c0:68: 8e:df:d2:d1:9d:29:65:20:b3:1c:1a:f2:8c:d5:65: 1f:9d:dc:92:73:fd:27:0c:98:e0:ef:aa:c7:43:95: a2:de:7e:d5:f2:6b:bb:3c:30:bb:d0:c6:0d:fa:9d: 6d:b3:00:13:66:f8:33:05:86:97:f1:fc:9d:7e:6b: 2b:79:53:93:bd:ba:ea:39:71:a9:33:c7:54:7d:50: a8:df:d7:af:cf:ae:d8:86:e8:48:47:c4:14:a1:11: 21:15:01:39:8b:d4:b1:b9:08:62:4a:cb:15:5e:0d: e9:37:d8:f5:0b:cc:8d:fd:98:a1:e8:9b:30:00:25: 5c:b0:9f:ed:39:1c:f1:ad:62:9d:5d:24:37:ca:21: 18:65:d5:7e:f3:8d:59:5f:46:3c:f2:a3:10:79:26: 2f:54:ca:c7:0b:ae:ae:0c:59:1f:c9:aa:75:8f:fd: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:53:ED:B6:C7:56:3B:48:0E:D5:63:7D:F1:D8:22:8B:D2:AC:1D:E6 X509v3 Authority Key Identifier: keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:27:e3:64:7c:81:a5:10:50:89:5a:25:1d:3e:87:d1:01:31: 31:f4:8f:1a:2c:9a:ef:55:d4:96:b1:6a:06:74:c7:fa:c7:2d: 41:09:e0:13:69:88:0e:f7:d5:be:73:79:f6:cf:3b:6b:c5:eb: 0f:16:01:12:7a:2f:ae:e6:16:2b:75:03:dc:8a:0e:13:e4:88: 68:33:5c:b6:6b:03:5f:24:9f:eb:1a:20:0e:55:b6:3c:a4:4b: 85:50:d8:6c:de:85:45:7d:ed:20:97:37:4f:3f:fc:7e:f3:da: e7:fb:1d:df:40:fd:84:32:28:ab:58:72:bc:a0:1f:0d:f6:5e: 6f:50:82:11:4f:ec:0a:53:97:63:af:6b:8e:65:1b:8b:88:79: 3b:1d:eb:0f:c8:36:86:eb:d6:33:c5:9e:37:ec:c1:78:03:01: 43:0d:3e:93:bf:66:fe:14:d7:0d:30:b2:8e:74:a0:43:ce:45: b2:cf:26:e2:c4:24:10:45:b4:68:c6:d5:59:1c:dd:20:e4:e1: 64:b0:8a:c8:3a:75:20:12:09:f1:b4:f6:5b:10:12:bd:0b:44: f2:36:b1:43:bc:09:31:06:f6:9a:db:13:27:de:d6:d4:14:9a: dd:64:02:72:78:7a:16:c5:57:76:69:69:4f:b9:e3:30:6a:6c: fe:5d:81:60 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUbJf8LgY0kU/qO+ztGieO4Tzt3m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0QjQxQTEzQUJCMEQ2MUExNTRBQjMxODlDOUJGRDJE QUVENERFQTAeFw0yNjA5MjQxMzE0NTBaFw0yNjA5MjUxNDA1NTBaMDMxMTAvBgNV BAMTKEQ0NTNFREI2Qzc1NjNCNDgwRUQ1NjM3REYxRDgyMjhCRDJBQzFERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kdZexe4SGR9jpP9m1mj0GIo7 2jDfMXGccpm36qDLisQmbyeQkcOS0lxJW9AskxWFtnt494t2b8n1HFUOlxCaQBZF B6EaOcwGfmtwuIxj8KsQvVCSB3zAaI7f0tGdKWUgsxwa8ozVZR+d3JJz/ScMmODv qsdDlaLeftXya7s8MLvQxg36nW2zABNm+DMFhpfx/J1+ayt5U5O9uuo5cakzx1R9 UKjf16/PrtiG6EhHxBShESEVATmL1LG5CGJKyxVeDek32PULzI39mKHomzAAJVyw n+05HPGtYp1dJDfKIRhl1X7zjVlfRjzyoxB5Ji9UyscLrq4MWR/JqnWP/SUDAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU1FPttsdWO0gO1WN98dgii9KsHeYwHwYDVR0j BBgwFoAUA0tBoTq7DWGhVKsxicm/0trtTeowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTFVPU0kv MC8wMzRCNDFBMTNBQkIwRDYxQTE1NEFCMzE4OUM5QkZEMkRBRUQ0REVBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzAzNEI0MUExM0FCQjBENjFBMTU0QUIzMTg5QzlC RkQyREFFRDRERUEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MVU9TSS8wLzAzNEI0MUExM0FCQjBE NjFBMTU0QUIzMTg5QzlCRkQyREFFRDRERUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcJ+NkfIGlEFCJ WiUdPofRATEx9I8aLJrvVdSWsWoGdMf6xy1BCeATaYgO99W+c3n2zztrxesPFgES ei+u5hYrdQPcig4T5IhoM1y2awNfJJ/rGiAOVbY8pEuFUNhs3oVFfe0glzdPP/x+ 89rn+x3fQP2EMiirWHK8oB8N9l5vUIIRT+wKU5djr2uOZRuLiHk7HesPyDaG69Yz xZ437MF4AwFDDT6Tv2b+FNcNMLKOdKBDzkWyzybixCQQRbRoxtVZHN0g5OFksIrI OnUgEgnxtPZbEBK9C0TyNrFDvAkxBvaa2xMn3tbUFJrdZAJyeHoWxVd2aWlPueMw amz+XYFg -----END CERTIFICATE-----Generated at Thu Sep 24 17:18:41 2026 by rpki-client