$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft File: 146BBB242D194BB38E4863F248016CC51755565D.mft (raw, json) Hash identifier: aeHhMTcif9jUbAjGqtVegkmvyRxLJ5RCi1mgXwFzX+A= Subject key identifier: 3A:2A:91:5C:39:B8:72:6E:0F:54:BD:AC:68:14:E0:D6:76:71:DC:00 Authority key identifier: 14:6B:BB:24:2D:19:4B:B3:8E:48:63:F2:48:01:6C:C5:17:55:56:5D Certificate issuer: /CN=146BBB242D194BB38E4863F248016CC51755565D Certificate serial: 17F94311EC5D60094668645C756B6678B5839B65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft Manifest number: 04 Signing time: Wed 13 May 2026 05:01:58 +0000 Manifest this update: Wed 13 May 2026 04:56:58 +0000 Manifest next update: Thu 14 May 2026 06:48:58 +0000 Files and hashes: 1: 3130332e3139302e3136382e302f32332d3234203d3e2037343833.roa (hash: HUxXTX4AEZCdEmoKnBU0/T6Q3Fkfl/P32GPMMl4DSA0=) 2: 146BBB242D194BB38E4863F248016CC51755565D.crl (hash: sGhMVnh5ABHJb6uSV2Y1cI5pIdoclw/E4bjOO90/UAI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.crl rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f9:43:11:ec:5d:60:09:46:68:64:5c:75:6b:66:78:b5:83:9b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146BBB242D194BB38E4863F248016CC51755565D Validity Not Before: May 13 04:56:58 2026 GMT Not After : May 14 06:48:58 2026 GMT Subject: CN=3A2A915C39B8726E0F54BDAC6814E0D67671DC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:7a:c0:ba:90:20:30:3c:41:4b:49:1f:e3: a1:92:66:cf:ab:5f:10:46:30:48:1f:80:1e:92:f0: 09:e3:b4:4d:e9:ee:03:24:a1:8d:89:2a:52:3e:dc: 5e:e4:e5:7f:6e:74:31:01:72:aa:74:7a:b3:7d:17: 69:ae:40:51:75:00:d9:1d:e6:a8:b8:84:8e:1c:4b: 86:ee:ab:49:0c:68:6b:ec:0b:94:a7:0f:25:5a:14: 9a:04:ae:39:ee:b9:55:ae:77:56:3f:49:34:86:ca: f5:26:83:05:06:bd:91:ad:fa:b9:0d:eb:81:22:3d: 53:29:47:ca:f9:b3:93:a3:41:1d:7f:f5:7d:c9:08: 36:bc:0c:22:66:7e:dd:65:55:fb:1c:ad:20:1a:77: c7:a7:f0:5e:74:80:15:4a:fc:20:06:ab:a9:35:49: 7b:c5:03:59:eb:94:1f:1a:d4:27:d0:4d:64:a2:ae: be:6c:5b:f8:8b:7c:74:8b:ec:69:b9:93:bc:79:57: d4:ca:c7:f0:28:fe:9a:5c:76:7e:77:5f:49:c1:db: 38:4f:00:04:7f:a1:e7:f0:42:84:0e:96:aa:59:e4: 72:94:bf:7f:59:00:26:59:67:ef:50:3a:4a:e1:75: 50:c3:47:3b:59:82:f0:76:2c:65:b9:0d:57:05:4d: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2A:91:5C:39:B8:72:6E:0F:54:BD:AC:68:14:E0:D6:76:71:DC:00 X509v3 Authority Key Identifier: keyid:14:6B:BB:24:2D:19:4B:B3:8E:48:63:F2:48:01:6C:C5:17:55:56:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:b5:62:74:58:bb:41:20:e3:89:66:4c:82:b5:80:71:29: cc:42:8c:26:93:09:5a:c6:ab:65:60:2c:00:51:b5:c6:52:dd: b0:07:b7:a8:67:20:0a:56:32:a5:37:76:6f:e9:70:d3:09:a2: ec:9b:27:74:7e:9a:ca:12:2f:44:8b:95:22:d0:8a:49:ee:bd: 3c:c9:7a:be:19:cd:ec:b4:d0:a0:66:1e:d2:37:50:2a:bc:c5: 33:d0:ba:40:99:8b:fa:f5:f3:56:7a:3a:32:0b:78:50:06:f6: ad:93:59:36:7c:7a:05:93:4f:75:f1:36:88:ce:6a:b0:37:ef: d9:75:8f:cf:cb:00:6a:8f:e4:50:82:2f:3f:5f:63:e5:45:86: 9c:3f:7d:84:9d:6b:1b:41:3f:f2:a9:79:c7:9a:81:f6:75:77: 84:40:a2:25:ba:76:d3:04:09:30:ef:68:f0:6a:3b:06:d3:41: db:3e:40:b6:0c:83:8c:38:2f:86:47:10:6d:d4:9a:ca:02:a3: 5d:59:b4:18:1a:c1:29:15:84:d0:1a:f1:ff:9c:c3:97:06:c7: 30:f2:04:38:3a:f9:53:92:18:8d:8a:39:59:b3:e2:8c:16:62: af:c8:ca:ac:93:fc:0e:35:89:2a:43:34:cb:06:33:cd:37:72: 57:9b:5b:0f -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUF/lDEexdYAlGaGRcdWtmeLWDm2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QkJCMjQyRDE5NEJCMzhFNDg2M0YyNDgwMTZDQzUx NzU1NTY1RDAeFw0yNjA1MTMwNDU2NThaFw0yNjA1MTQwNjQ4NThaMDMxMTAvBgNV BAMTKDNBMkE5MTVDMzlCODcyNkUwRjU0QkRBQzY4MTRFMEQ2NzY3MURDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe53rAupAgMDxBS0kf46GSZs+r XxBGMEgfgB6S8AnjtE3p7gMkoY2JKlI+3F7k5X9udDEBcqp0erN9F2muQFF1ANkd 5qi4hI4cS4buq0kMaGvsC5SnDyVaFJoErjnuuVWud1Y/STSGyvUmgwUGvZGt+rkN 64EiPVMpR8r5s5OjQR1/9X3JCDa8DCJmft1lVfscrSAad8en8F50gBVK/CAGq6k1 SXvFA1nrlB8a1CfQTWSirr5sW/iLfHSL7Gm5k7x5V9TKx/Ao/ppcdn53X0nB2zhP AAR/oefwQoQOlqpZ5HKUv39ZACZZZ+9QOkrhdVDDRztZgvB2LGW5DVcFTbSXAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUOiqRXDm4cm4PVL2saBTg1nZx3AAwHwYDVR0j BBgwFoAUFGu7JC0ZS7OOSGPySAFsxRdVVl0wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUFJRk9P RC8wLzE0NkJCQjI0MkQxOTRCQjM4RTQ4NjNGMjQ4MDE2Q0M1MTc1NTU2NUQuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMTQ2QkJCMjQyRDE5NEJCMzhFNDg2M0YyNDgw MTZDQzUxNzU1NTY1RC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01BSUZPT0QvMC8xNDZCQkIyNDJE MTk0QkIzOEU0ODYzRjI0ODAxNkNDNTE3NTU1NjVELm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoS1YnRY u0Eg44lmTIK1gHEpzEKMJpMJWsarZWAsAFG1xlLdsAe3qGcgClYypTd2b+lw0wmi 7JsndH6ayhIvRIuVItCKSe69PMl6vhnN7LTQoGYe0jdQKrzFM9C6QJmL+vXzVno6 Mgt4UAb2rZNZNnx6BZNPdfE2iM5qsDfv2XWPz8sAao/kUIIvP19j5UWGnD99hJ1r G0E/8ql5x5qB9nV3hECiJbp20wQJMO9o8Go7BtNB2z5AtgyDjDgvhkcQbdSaygKj XVm0GBrBKRWE0Brx/5zDlwbHMPIEODr5U5IYjYo5WbPijBZir8jKrJP8DjWJKkM0 ywYzzTdyV5tbDw== -----END CERTIFICATE-----Generated at Wed May 13 09:15:16 2026 by rpki-client