$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: HTuLB7tO2hDMaf1rvxgYQNdAFa2c7AiitW+mN9cAKno= Subject key identifier: 30:B2:93:5D:8C:9C:58:A1:25:9B:6E:4A:40:0B:BA:75:27:EF:66:E0 Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 0FBFD1697DD754CA28EDFFC46230C5C2A60A324D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: 65 Signing time: Thu 23 Jul 2026 13:22:33 +0000 Manifest this update: Thu 23 Jul 2026 13:17:33 +0000 Manifest next update: Fri 24 Jul 2026 13:27:33 +0000 Files and hashes: 1: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) 2: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: tabJW1sIseWn4SPNx9q/Q3U0haTHrlSusk305zQ9HZ8=) 3: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) 4: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bf:d1:69:7d:d7:54:ca:28:ed:ff:c4:62:30:c5:c2:a6:0a:32:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Jul 23 13:17:33 2026 GMT Not After : Jul 24 13:27:33 2026 GMT Subject: CN=30B2935D8C9C58A1259B6E4A400BBA7527EF66E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:ca:91:17:33:34:64:db:fd:08:b3:dc:f1: bc:2e:5d:0d:28:ab:5c:68:5c:e4:82:cc:31:69:ad: 09:99:7a:08:c3:01:ea:c1:1f:28:ac:9a:76:7f:b3: 4f:91:6e:fc:7a:c0:e3:e6:98:f6:c5:f4:52:92:23: ca:0d:ec:e8:ab:28:10:78:0b:d4:e2:57:27:43:16: 6d:d5:21:78:13:63:7a:33:3d:76:06:8d:ab:bb:b6: f4:42:b5:01:99:54:66:a3:e1:dc:f2:8b:46:0a:70: 57:2d:56:4d:ee:ed:3e:85:e6:16:59:57:17:5c:93: 06:23:79:c7:88:a9:5a:61:a3:aa:82:e6:d4:e9:24: 26:b4:12:4e:c0:6b:83:d7:5e:43:df:9f:23:fa:85: 48:43:06:34:ab:7f:3d:3b:52:59:49:20:4b:31:d5: e1:1a:ce:0d:7c:8d:5e:c7:9b:9f:78:87:f8:66:be: ba:7a:88:f2:fd:ff:3e:12:49:63:29:f4:62:39:61: 7f:06:ad:58:41:72:3a:c9:53:a9:53:67:3c:db:68: 87:c7:1e:59:ff:79:79:e5:5b:27:65:11:a4:e9:79: 97:71:ec:f2:74:21:41:18:8c:6c:f7:69:db:33:3e: 40:09:5f:1c:8a:6f:7e:d6:c5:c9:4c:10:c6:7f:79: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B2:93:5D:8C:9C:58:A1:25:9B:6E:4A:40:0B:BA:75:27:EF:66:E0 X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c2:e0:d7:45:69:9a:83:4e:06:21:06:08:21:8b:bf:5d:e1: d4:cd:3e:a3:f0:32:70:11:17:94:ab:46:0f:f5:fb:52:c8:5e: 09:bb:d6:93:68:cc:d3:99:dc:37:a8:fe:11:25:29:8f:4b:6b: f7:37:4b:cd:71:4a:10:6b:9a:8b:f1:0a:06:55:2e:94:6c:d7: ec:87:c3:db:30:ab:75:aa:ad:03:49:7c:8d:8d:06:3e:de:44: 32:fe:92:7e:72:7e:df:e6:39:34:52:64:f3:29:3b:1d:a7:cf: 37:1b:de:5f:8c:7f:d9:7a:5e:19:ed:7c:81:2f:ba:c9:fb:a0: b0:bb:73:b5:55:5b:4a:66:26:ba:0a:45:3a:8a:6c:43:8a:86: 5c:96:78:d7:49:f5:2a:98:37:7f:6c:d4:db:b1:2b:32:d7:0a: da:10:4a:44:bd:84:5a:f3:3a:60:db:f1:2a:ee:7f:e0:10:3a: eb:77:5d:29:6c:ee:f8:36:32:08:41:16:e1:32:aa:35:78:64: ec:22:61:08:bd:4d:aa:5f:16:2c:91:1a:05:49:db:82:db:9b: 60:e1:ed:11:3f:83:7e:5e:38:ec:a5:8a:d7:26:f5:46:73:84: 37:64:4b:63:3c:28:42:04:1e:11:94:7e:fd:a2:f3:35:51:56: 1a:84:6b:1a -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUD7/RaX3XVMoo7f/EYjDFwqYKMk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5 MUJDNTIzMDAeFw0yNjA3MjMxMzE3MzNaFw0yNjA3MjQxMzI3MzNaMDMxMTAvBgNV BAMTKDMwQjI5MzVEOEM5QzU4QTEyNTlCNkU0QTQwMEJCQTc1MjdFRjY2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhycqRFzM0ZNv9CLPc8bwuXQ0o q1xoXOSCzDFprQmZegjDAerBHyismnZ/s0+Rbvx6wOPmmPbF9FKSI8oN7OirKBB4 C9TiVydDFm3VIXgTY3ozPXYGjau7tvRCtQGZVGaj4dzyi0YKcFctVk3u7T6F5hZZ VxdckwYjeceIqVpho6qC5tTpJCa0Ek7Aa4PXXkPfnyP6hUhDBjSrfz07UllJIEsx 1eEazg18jV7Hm594h/hmvrp6iPL9/z4SSWMp9GI5YX8GrVhBcjrJU6lTZzzbaIfH Hln/eXnlWydlEaTpeZdx7PJ0IUEYjGz3adszPkAJXxyKb37WxclMEMZ/efdLAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUMLKTXYycWKElm25KQAu6dSfvZuAwHwYDVR0j BBgwFoAUfkoAlAVN0a5MOqc5duVU8ZG8UjAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTQ1lC RVIvMC83RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkxQkM1MjMwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2 RTU1NEYxOTFCQzUyMzAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJFUi8wLzdFNEEwMDk0 MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvwuDX RWmag04GIQYIIYu/XeHUzT6j8DJwEReUq0YP9ftSyF4Ju9aTaMzTmdw3qP4RJSmP S2v3N0vNcUoQa5qL8QoGVS6UbNfsh8PbMKt1qq0DSXyNjQY+3kQy/pJ+cn7f5jk0 UmTzKTsdp883G95fjH/Zel4Z7XyBL7rJ+6Cwu3O1VVtKZia6CkU6imxDioZclnjX SfUqmDd/bNTbsSsy1wraEEpEvYRa8zpg2/Eq7n/gEDrrd10pbO74NjIIQRbhMqo1 eGTsImEIvU2qXxYskRoFSduC25tg4e0RP4N+XjjspYrXJvVGc4Q3ZEtjPChCBB4R lH79ovM1UVYahGsa -----END CERTIFICATE-----Generated at Fri Jul 24 05:33:54 2026 by rpki-client