$ rpki-client -vvvf rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft File: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft (raw, json) Hash identifier: yiCQ0zvuSOJFiL4kJf//aoc64/YYuv4bCQbNyYTol8U= Subject key identifier: 45:39:32:D0:63:6A:29:D2:77:B9:C5:1D:BD:09:39:4C:9A:46:5D:C8 Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Certificate serial: 23C161F2FC986DE60B98FC7C133D069175242159 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft Manifest number: B9 Signing time: Thu 24 Sep 2026 12:14:43 +0000 Manifest this update: Thu 24 Sep 2026 12:09:43 +0000 Manifest next update: Fri 25 Sep 2026 13:11:43 +0000 Files and hashes: 1: 3231312e37392e39382e302f32332d3234203d3e2037343833.roa (hash: CV931fhtw0I4Ug+ZdjJ2kNYqIh93pZBX4rG+jxT2d9s=) 2: 3231312e37392e39382e302f32332d3234203d3e203231383539.roa (hash: I1jX/SnnFc+gmcZStVqiSrnNdoqyaCZ0ExujTfgAaX0=) 3: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl (hash: Q/xwjXOq8j0bNYi31jvrk2yZEIDBQ5OjXX89y3KPtlk=) 4: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (hash: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=) 5: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (hash: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c1:61:f2:fc:98:6d:e6:0b:98:fc:7c:13:3d:06:91:75:24:21:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Validity Not Before: Sep 24 12:09:43 2026 GMT Not After : Sep 25 13:11:43 2026 GMT Subject: CN=453932D0636A29D277B9C51DBD09394C9A465DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:90:56:9c:25:13:4b:04:49:9f:6e:8c:0b: f8:a1:40:64:c5:e3:a4:64:39:1e:25:a3:42:cd:00: aa:b4:f5:33:7e:6f:00:6f:11:e2:d3:2d:b1:5d:0c: 92:e7:e3:3a:3b:b7:65:71:ec:75:69:30:f2:bf:96: d0:95:f8:19:bc:73:67:1e:71:f0:f8:62:3d:2b:12: f1:fd:38:75:5d:1a:2b:77:eb:bc:19:22:2e:62:7e: ac:48:22:c8:3c:09:51:07:3d:be:6c:ac:5c:ed:c6: 07:0a:73:ee:16:74:52:9b:2f:66:60:37:c1:67:db: 0d:c7:01:20:41:a8:3c:04:e8:2c:4e:39:6e:28:1a: a4:53:99:7c:d7:07:ce:b2:4c:f8:d5:de:79:3e:e1: 1b:63:9f:f3:28:82:e7:66:d3:41:d3:bd:f1:e1:4a: 4f:57:49:55:bf:f4:c1:ae:c1:ce:68:6f:60:21:25: a8:58:76:bf:e4:a5:7a:22:8d:5f:34:1a:06:48:f2: 35:ca:f8:df:6f:86:25:f5:77:c6:e5:da:5f:0b:69: 88:91:3a:23:c3:f3:7f:9c:48:77:ae:ae:95:fc:5c: 34:18:39:39:6c:da:fd:f4:37:92:68:e8:c6:67:06: f1:2b:a3:a5:f1:18:a1:ba:f0:04:f3:ab:bb:9b:f5: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:39:32:D0:63:6A:29:D2:77:B9:C5:1D:BD:09:39:4C:9A:46:5D:C8 X509v3 Authority Key Identifier: keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2c:1c:da:80:ef:15:ec:41:9b:0e:f6:5e:4c:81:6c:26:88: 91:c3:b8:42:9f:fa:a1:64:10:5d:e3:b8:56:77:a1:8b:8d:3f: 76:50:31:89:58:06:6e:0b:de:0b:22:ec:d9:2d:54:e5:36:16: 11:b4:0f:08:6a:33:b5:d1:23:88:0e:bc:ab:d7:da:5b:be:4c: 29:0b:9b:75:48:ff:c8:2b:a6:b3:88:eb:04:ea:30:96:63:f4: 2a:0b:be:df:81:11:2d:c6:e4:b9:b2:66:a1:41:53:be:49:24: b6:8d:70:17:28:59:f8:b0:40:96:30:3f:42:c7:54:d7:a9:88: e9:0d:76:69:9d:de:dc:82:70:0e:c0:75:88:b0:19:bf:10:c1: 95:0c:20:c5:21:cd:cf:cd:97:3a:e2:94:20:ec:5e:a3:1d:63: ca:14:2c:53:30:7a:d8:da:b7:9c:6a:f5:a8:5a:7d:68:e3:42: 46:e7:17:c7:74:e7:fb:87:2a:95:7b:af:1a:b7:e6:bc:78:bc: 8b:eb:ee:2e:fd:0d:f4:8a:db:21:e3:59:a5:3b:49:c7:fa:f0: 2f:2e:57:ed:af:63:1e:cd:d0:0e:74:ef:32:67:7e:3e:48:50: 00:a6:9b:8d:37:c0:8b:29:d3:11:b3:d5:b8:45:d7:46:54:0b: 68:1a:35:c1 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUI8Fh8vyYbeYLmPx8Ez0GkXUkIVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThDNjJBRkM1 MzMzQTJBODAeFw0yNjA5MjQxMjA5NDNaFw0yNjA5MjUxMzExNDNaMDMxMTAvBgNV BAMTKDQ1MzkzMkQwNjM2QTI5RDI3N0I5QzUxREJEMDkzOTRDOUE0NjVEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwe5BWnCUTSwRJn26MC/ihQGTF 46RkOR4lo0LNAKq09TN+bwBvEeLTLbFdDJLn4zo7t2Vx7HVpMPK/ltCV+Bm8c2ce cfD4Yj0rEvH9OHVdGit367wZIi5ifqxIIsg8CVEHPb5srFztxgcKc+4WdFKbL2Zg N8Fn2w3HASBBqDwE6CxOOW4oGqRTmXzXB86yTPjV3nk+4Rtjn/Mogudm00HTvfHh Sk9XSVW/9MGuwc5ob2AhJahYdr/kpXoijV80GgZI8jXK+N9vhiX1d8bl2l8LaYiR OiPD83+cSHeurpX8XDQYOTls2v30N5Jo6MZnBvEro6XxGKG68ATzq7ub9f1hAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQURTky0GNqKdJ3ucUdvQk5TJpGXcgwHwYDVR0j BBgwFoAUQycW7gVM69xi/ALd6MYq/FMzoqgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9SREFU Vy8wLzQzMjcxNkVFMDU0Q0VCREM2MkZDMDJEREU4QzYyQUZDNTMzM0EyQTguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThD NjJBRkM1MzMzQTJBOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PUkRBVFcvMC80MzI3MTZFRTA1 NENFQkRDNjJGQzAyRERFOEM2MkFGQzUzMzNBMkE4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCwc2oDv FexBmw72XkyBbCaIkcO4Qp/6oWQQXeO4Vnehi40/dlAxiVgGbgveCyLs2S1U5TYW EbQPCGoztdEjiA68q9faW75MKQubdUj/yCums4jrBOowlmP0Kgu+34ERLcbkubJm oUFTvkkkto1wFyhZ+LBAljA/QsdU16mI6Q12aZ3e3IJwDsB1iLAZvxDBlQwgxSHN z82XOuKUIOxeox1jyhQsUzB62Nq3nGr1qFp9aONCRucXx3Tn+4cqlXuvGrfmvHi8 i+vuLv0N9IrbIeNZpTtJx/rwLy5X7a9jHs3QDnTvMmd+PkhQAKabjTfAiynTEbPV uEXXRlQLaBo1wQ== -----END CERTIFICATE-----Generated at Fri Sep 25 07:01:39 2026 by rpki-client