$ rpki-client -vvf rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft File: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft (raw, json) Hash identifier: /QltjJMmpCqkIKBkci9yHmf1Yz9dDjM9l44aKAyL5xU= Subject key identifier: 9E:0B:77:36:75:D6:15:1C:26:64:A1:83:65:37:88:E7:BF:BA:62:87 Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Certificate serial: 7B0049108913177A097492A5E8611E5D5EB3795A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 18:46:29 +0000 Manifest this update: Thu 23 Jul 2026 18:41:29 +0000 Manifest next update: Fri 24 Jul 2026 21:18:29 +0000 Files and hashes: 1: 432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl (hash: 4ziqksWIWP1rOwR5eQvjmgefTcbzJ+wyR1Ae41/IxVI=) 2: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (hash: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=) 3: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (hash: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=) 4: 3231312e37392e39382e302f32332d3234203d3e203231383539.roa (hash: I1jX/SnnFc+gmcZStVqiSrnNdoqyaCZ0ExujTfgAaX0=) 5: 3231312e37392e39382e302f32332d3234203d3e2037343833.roa (hash: CV931fhtw0I4Ug+ZdjJ2kNYqIh93pZBX4rG+jxT2d9s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:00:49:10:89:13:17:7a:09:74:92:a5:e8:61:1e:5d:5e:b3:79:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8 Validity Not Before: Jul 23 18:41:29 2026 GMT Not After : Jul 24 21:18:29 2026 GMT Subject: CN=9E0B773675D6151C2664A183653788E7BFBA6287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:03:df:08:6f:2b:21:74:c1:a7:7c:cd:5b: cb:86:28:be:55:38:5b:19:e2:2b:bc:dd:64:05:be: f1:0b:e3:ef:8b:ef:bd:f6:11:6a:b7:3b:ed:b4:31: 2c:1d:c3:ff:c7:a8:15:f9:2d:ca:ff:de:bf:9f:1d: f9:54:ee:40:6f:a9:e3:59:67:a3:6f:82:92:59:43: 64:9e:1c:40:57:b1:ae:89:e3:49:39:12:73:5f:7c: 50:4f:a7:d0:c3:5d:30:a7:84:27:6f:4c:01:a2:b0: 1a:fb:32:1b:be:97:da:84:41:06:41:c9:c0:da:a9: 95:52:aa:a9:00:ca:2e:08:31:a4:62:0e:ed:74:51: 50:c1:93:35:64:a2:d4:53:45:95:28:ca:cb:f9:03: fc:fa:1a:e9:a8:0c:34:21:71:f3:33:df:12:9a:bf: 34:2a:7a:c0:09:e5:04:8c:82:cb:ce:03:d4:99:52: 41:63:54:44:ba:7d:85:d4:0a:06:54:6f:2e:d6:3d: 7b:55:46:81:84:7c:7d:f8:64:e5:23:cf:eb:08:e6: ed:e1:2e:55:a2:23:9e:57:e9:a2:dc:99:7f:be:80: cb:fb:2c:95:19:60:b0:79:27:9a:16:fe:70:00:cc: c5:8b:29:79:01:3a:8d:e1:a7:67:8b:e2:b2:81:67: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0B:77:36:75:D6:15:1C:26:64:A1:83:65:37:88:E7:BF:BA:62:87 X509v3 Authority Key Identifier: keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:21:ef:40:a8:fb:62:6b:61:b3:5e:33:29:7f:5a:bb:55:de: ff:c1:bd:bc:0a:21:72:2e:fd:f4:4e:99:a8:1e:2f:b9:96:46: d4:e7:cf:3b:46:a8:b4:b5:85:d4:44:08:9e:9c:7f:ed:c6:a2: 78:2a:ed:4d:22:44:28:16:2c:0a:ea:4c:d9:e9:15:f6:69:7c: 91:7c:19:80:d6:14:01:93:5d:21:72:9b:14:fe:cd:e9:18:14: 9c:ad:74:94:f1:0a:3f:24:44:f6:89:3a:29:67:1a:94:d1:76: 48:de:94:5d:d0:10:c9:67:69:3f:fb:e2:b6:24:5c:17:df:8d: be:b5:da:ea:63:22:c3:34:02:34:1c:b8:d6:79:ef:69:5d:01: e5:d2:5f:8c:a9:45:0b:98:b3:88:f1:d8:3d:8b:3e:b0:9d:40: fa:72:e0:98:13:ee:85:84:11:9b:7d:f8:bc:50:b7:96:54:7c: 7f:f2:af:de:d8:57:5c:ce:cf:33:e1:03:9f:95:2e:12:42:e6: 52:b7:52:3f:4d:e4:1d:4e:b1:8b:9e:2d:1b:f2:98:2f:06:15: ec:53:d5:1a:84:10:c9:57:6b:64:ee:33:b9:f9:33:88:f0:9d: 52:ff:a7:10:13:3a:9d:f9:13:65:a5:88:88:aa:4e:d0:d6:bc: 69:58:8b:08 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUewBJEIkTF3oJdJKl6GEeXV6zeVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThDNjJBRkM1 MzMzQTJBODAeFw0yNjA3MjMxODQxMjlaFw0yNjA3MjQyMTE4MjlaMDMxMTAvBgNV BAMTKDlFMEI3NzM2NzVENjE1MUMyNjY0QTE4MzY1Mzc4OEU3QkZCQTYyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GwPfCG8rIXTBp3zNW8uGKL5V OFsZ4iu83WQFvvEL4++L7732EWq3O+20MSwdw//HqBX5Lcr/3r+fHflU7kBvqeNZ Z6NvgpJZQ2SeHEBXsa6J40k5EnNffFBPp9DDXTCnhCdvTAGisBr7Mhu+l9qEQQZB ycDaqZVSqqkAyi4IMaRiDu10UVDBkzVkotRTRZUoysv5A/z6GumoDDQhcfMz3xKa vzQqesAJ5QSMgsvOA9SZUkFjVES6fYXUCgZUby7WPXtVRoGEfH34ZOUjz+sI5u3h LlWiI55X6aLcmX++gMv7LJUZYLB5J5oW/nAAzMWLKXkBOo3hp2eL4rKBZ645AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUngt3NnXWFRwmZKGDZTeI57+6YocwHwYDVR0j BBgwFoAUQycW7gVM69xi/ALd6MYq/FMzoqgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTk9SREFU Vy8wLzQzMjcxNkVFMDU0Q0VCREM2MkZDMDJEREU4QzYyQUZDNTMzM0EyQTguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNDMyNzE2RUUwNTRDRUJEQzYyRkMwMkRERThD NjJBRkM1MzMzQTJBOC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05PUkRBVFcvMC80MzI3MTZFRTA1 NENFQkRDNjJGQzAyRERFOEM2MkFGQzUzMzNBMkE4Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISHvQKj7 Ymths14zKX9au1Xe/8G9vAohci799E6ZqB4vuZZG1OfPO0aotLWF1EQInpx/7cai eCrtTSJEKBYsCupM2ekV9ml8kXwZgNYUAZNdIXKbFP7N6RgUnK10lPEKPyRE9ok6 KWcalNF2SN6UXdAQyWdpP/vitiRcF9+NvrXa6mMiwzQCNBy41nnvaV0B5dJfjKlF C5iziPHYPYs+sJ1A+nLgmBPuhYQRm334vFC3llR8f/Kv3thXXM7PM+EDn5UuEkLm UrdSP03kHU6xi54tG/KYLwYV7FPVGoQQyVdrZO4zufkziPCdUv+nEBM6nfkTZaWI iKpO0Na8aViLCA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:15 2026 by rpki-client