$ rpki-client -vvvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft File: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json) Hash identifier: SD09veTMejGZ5ROH8d8Flw6GmJz/TXMveW1ndPm0uvM= Subject key identifier: EB:D7:9B:7D:85:7A:CB:02:50:75:47:DC:84:7D:C9:B3:F9:F7:5D:21 Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D Certificate issuer: /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Certificate serial: 71DDA19453CE6695C93FB885776524FA2C440144 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft Manifest number: FE Signing time: Sun 15 Nov 2026 15:18:23 +0000 Manifest this update: Sun 15 Nov 2026 15:13:23 +0000 Manifest next update: Mon 16 Nov 2026 17:13:23 +0000 Files and hashes: 1: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=) 2: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=) 3: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=) 4: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: cr7FgMtjGfVm5KUUmyILrLdThMTzAGWvjKMh/Cn5thU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dd:a1:94:53:ce:66:95:c9:3f:b8:85:77:65:24:fa:2c:44:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D Validity Not Before: Nov 15 15:13:23 2026 GMT Not After : Nov 16 17:13:23 2026 GMT Subject: CN=EBD79B7D857ACB02507547DC847DC9B3F9F75D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7b:5b:16:e9:e3:ff:95:2f:09:83:69:d8:65: fb:c6:b8:6e:17:a0:67:fa:ba:4f:b9:76:6d:7d:3e: e0:ee:ad:37:99:d7:4f:68:31:99:1f:79:5d:c7:88: 4b:21:95:67:79:26:b2:da:c5:f4:43:34:90:5a:8e: 41:23:9d:00:04:11:41:94:3e:25:21:59:f2:9c:98: ee:25:c0:7b:3c:50:a0:55:ad:0b:06:f8:19:c2:fb: 27:13:36:b7:ab:9e:95:98:f8:af:7c:14:13:5c:44: e3:5d:d9:6e:3a:b9:7a:b1:e7:67:0f:5e:c7:db:3f: 52:36:59:1a:1f:1c:3a:07:cc:a2:78:07:31:e5:e0: 49:39:b1:34:f1:07:94:da:2e:e6:3f:43:59:19:a7: a5:2b:7d:b0:72:61:0e:a6:94:94:d6:bc:b4:9c:ac: 63:2c:3d:9a:8a:51:22:8b:c0:db:bb:2f:96:d3:46: d1:39:ad:e4:cf:10:d8:38:95:fd:d8:67:86:3e:a2: ee:14:d9:88:c8:f2:f9:7d:ee:96:1f:1f:07:50:aa: 1d:03:10:ab:fa:09:6e:76:39:95:fc:e1:a7:e0:f6: 03:6d:28:e9:09:36:3b:25:c9:bb:e1:7b:de:9a:78: dd:7c:0b:47:32:1d:f6:4b:3a:0a:4b:13:56:28:72: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D7:9B:7D:85:7A:CB:02:50:75:47:DC:84:7D:C9:B3:F9:F7:5D:21 X509v3 Authority Key Identifier: keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:c2:60:05:6c:98:49:39:b8:48:59:22:a6:71:6d:84:85: 6e:93:ab:65:36:d8:b8:44:c6:69:5e:0c:71:06:64:9e:a8:20: 6b:d2:59:8b:6e:49:af:4c:ab:c2:03:72:63:c3:0e:48:62:d5: 95:b7:9c:20:9b:53:77:1e:84:89:b3:6f:9c:13:54:f9:9b:cb: 48:51:74:6e:1a:df:1d:d6:89:b7:59:31:4c:1d:12:4d:e0:7d: db:a6:28:5e:0b:b4:60:2a:d0:9b:66:2d:de:0a:38:74:4d:41: 7d:5e:98:7b:64:fc:31:0f:d1:59:9a:e6:36:2e:42:44:db:e7: c2:ba:0b:c6:9a:5a:13:26:6b:4b:d1:da:32:65:d2:bb:b0:95: 03:3e:4a:70:66:85:e0:77:af:95:a6:94:04:cd:47:a4:4b:74: d1:8d:e8:27:de:25:4b:0d:c2:25:f6:ae:22:ed:d6:a2:5a:51: 71:81:f3:bd:d4:da:6d:06:05:69:ef:6a:ac:f1:05:0a:8b:8c: 62:48:98:5c:c6:48:27:eb:be:30:dd:03:19:a5:87:64:20:7c: 40:34:fe:df:12:8e:37:85:27:17:9a:6f:8c:ce:07:40:65:8d: 68:82:84:7e:cf:37:e6:ab:00:2d:d4:92:c9:ed:70:df:c4:eb: 99:5e:3a:ae -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcd2hlFPOZpXJP7iFd2Uk+ixEAUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzRE Q0Q2MTQxRDAeFw0yNjExMTUxNTEzMjNaFw0yNjExMTYxNzEzMjNaMDMxMTAvBgNV BAMTKEVCRDc5QjdEODU3QUNCMDI1MDc1NDdEQzg0N0RDOUIzRjlGNzVEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDze1sW6eP/lS8Jg2nYZfvGuG4X oGf6uk+5dm19PuDurTeZ109oMZkfeV3HiEshlWd5JrLaxfRDNJBajkEjnQAEEUGU PiUhWfKcmO4lwHs8UKBVrQsG+BnC+ycTNrernpWY+K98FBNcRONd2W46uXqx52cP XsfbP1I2WRofHDoHzKJ4BzHl4Ek5sTTxB5TaLuY/Q1kZp6UrfbByYQ6mlJTWvLSc rGMsPZqKUSKLwNu7L5bTRtE5reTPENg4lf3YZ4Y+ou4U2YjI8vl97pYfHwdQqh0D EKv6CW52OZX84afg9gNtKOkJNjslybvhe96aeN18C0cyHfZLOgpLE1YochqlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU69ebfYV6ywJQdUfchH3Js/n3XSEwHwYDVR0j BBgwFoAUcHwF3AaJHrSivrGGqLthxNzWFB0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUND VUJFLzAvNzA3QzA1REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS83MDdDMDVEQzA2ODkxRUI0QTJCRUIxODZB OEJCNjFDNERDRDYxNDFELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFHSUNDVUJFLzAvNzA3QzA1 REMwNjg5MUVCNEEyQkVCMTg2QThCQjYxQzREQ0Q2MTQxRC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHkT wmAFbJhJObhIWSKmcW2EhW6Tq2U22LhExmleDHEGZJ6oIGvSWYtuSa9Mq8IDcmPD Dkhi1ZW3nCCbU3cehImzb5wTVPmby0hRdG4a3x3WibdZMUwdEk3gfdumKF4LtGAq 0JtmLd4KOHRNQX1emHtk/DEP0Vma5jYuQkTb58K6C8aaWhMma0vR2jJl0ruwlQM+ SnBmheB3r5WmlATNR6RLdNGN6CfeJUsNwiX2riLt1qJaUXGB873U2m0GBWnvaqzx BQqLjGJImFzGSCfrvjDdAxmlh2QgfEA0/t8SjjeFJxeab4zOB0BljWiChH7PN+ar AC3UksntcN/E65leOq4= -----END CERTIFICATE-----Generated at Sun Nov 15 22:09:18 2026 by rpki-client