$ rpki-client -vvvf rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft File: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft (raw, json) Hash identifier: 1H5j1egX0iNANq2bX+uv56GXEtqFGGpLSWlZNba/uqo= Subject key identifier: 79:5F:CE:B0:E6:67:71:8C:07:BF:3C:D4:E9:09:FF:0F:45:C0:5F:1B Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Certificate serial: 34A73B94B12B55C70CBAF3ADAC1ECDC49F2EA1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft Manifest number: BB Signing time: Fri 25 Sep 2026 21:49:24 +0000 Manifest this update: Fri 25 Sep 2026 21:44:24 +0000 Manifest next update: Sat 26 Sep 2026 22:27:24 +0000 Files and hashes: 1: 323430363a623463303a3a2f33322d3332203d3e203633383938.roa (hash: YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=) 2: 7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl (hash: RIMq6IX8lWK2NayXWfZ/Jtd4XUHde+QlyhJybxWwVho=) 3: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (hash: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=) 4: 3130332e3135382e37382e302f32332d3234203d3e203633383938.roa (hash: Q+s1vVVcnXTpW/r/MnON9SbkY3njdmQ1XoB50+rVZow=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a7:3b:94:b1:2b:55:c7:0c:ba:f3:ad:ac:1e:cd:c4:9f:2e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230 Validity Not Before: Sep 25 21:44:24 2026 GMT Not After : Sep 26 22:27:24 2026 GMT Subject: CN=795FCEB0E667718C07BF3CD4E909FF0F45C05F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:37:fb:0a:c3:41:63:6a:3f:0f:0f:37:86: e3:50:43:f8:4c:b7:fe:39:59:69:f1:07:7d:b3:0c: f4:c1:34:52:2a:f6:40:2a:b3:06:ad:ea:98:25:59: aa:ae:ee:c1:a5:bd:32:f3:92:7b:72:b3:e8:0c:af: dc:f4:66:4d:24:31:9a:bf:ed:c3:64:b5:ae:f9:ca: dc:82:cc:6e:f8:8e:29:34:c6:2e:8c:dc:ef:41:a2: bb:f4:bc:b7:5c:90:ee:9f:f6:ef:69:8a:72:b6:2d: 73:f9:4b:cc:3b:74:70:70:40:8f:6c:fb:fb:3c:61: 81:c0:4b:d1:04:bc:f9:93:23:2a:53:73:91:d9:ef: e6:18:aa:a2:52:e3:2a:44:c3:d6:9e:33:cf:57:74: dc:89:b4:61:3b:5b:75:1f:6b:f1:02:6b:09:fd:b2: e7:7d:ea:52:18:43:25:39:bc:c8:25:c9:e1:12:2b: 82:cf:64:01:9d:0f:af:7e:99:8b:a7:14:39:a1:2c: e6:7f:a4:a7:39:8b:54:f9:47:d6:4b:77:3d:68:d7: ff:1a:77:6a:62:ce:d0:aa:c6:97:df:ca:35:24:de: a2:dd:7c:6b:a3:8f:ab:ad:28:c9:71:13:06:1e:44: 56:e9:a3:08:db:be:4a:90:64:77:fe:64:5b:e3:75: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:CE:B0:E6:67:71:8C:07:BF:3C:D4:E9:09:FF:0F:45:C0:5F:1B X509v3 Authority Key Identifier: keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:98:c1:52:ed:8f:91:49:28:dd:d0:72:19:e2:a0:96:d0:a4: 96:db:5c:b4:21:a4:8d:47:fd:ae:f1:c0:42:e3:e9:fa:18:43: 17:d1:49:e7:8c:85:50:f3:75:61:a1:b6:0f:18:d4:ee:7b:f4: 1f:97:7d:b6:9a:83:72:d0:81:0a:8c:e9:36:34:47:0f:ea:69: 41:de:5e:f6:fe:50:25:4b:d4:45:04:c7:0c:b8:e4:0a:0b:10: e5:51:63:a8:51:b8:ce:dc:a9:f5:6f:65:a6:d7:89:58:49:fd: 62:8c:19:28:5c:36:d3:1e:8f:61:13:ae:18:5c:f4:64:71:84: 93:b5:68:01:c4:2b:73:ec:e4:ed:25:95:1d:d3:46:9c:39:c4: 1a:41:7b:e2:e5:06:d1:ef:31:8e:6d:d3:63:6f:ce:52:77:a2: f2:a5:d7:64:d2:cd:96:29:cb:5b:1e:8f:85:bf:25:74:a2:73: fc:47:e9:d9:a9:2e:6b:40:44:f0:d4:8c:42:09:a7:2f:eb:7a: 52:de:f6:ac:69:c9:af:de:ac:67:a8:c5:00:b6:eb:5a:c1:b4: 29:7a:75:99:98:78:a2:87:52:57:62:a2:89:33:6a:1c:4f:e2: ba:1e:d7:09:cb:cf:59:54:3f:17:8d:b2:a5:0f:6b:70:6b:2a: f3:a6:40:34 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgITNKc7lLErVccMuvOtrB7NxJ8uoTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3RTRBMDA5NDA1NEREMUFFNEMzQUE3Mzk3NkU1NTRGMTkx QkM1MjMwMB4XDTI2MDkyNTIxNDQyNFoXDTI2MDkyNjIyMjcyNFowMzExMC8GA1UE AxMoNzk1RkNFQjBFNjY3NzE4QzA3QkYzQ0Q0RTkwOUZGMEY0NUMwNUYxQjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK18N/sKw0Fjaj8PDzeG41BD+Ey3 /jlZafEHfbMM9ME0Uir2QCqzBq3qmCVZqq7uwaW9MvOSe3Kz6Ayv3PRmTSQxmr/t w2S1rvnK3ILMbviOKTTGLozc70Giu/S8t1yQ7p/272mKcrYtc/lLzDt0cHBAj2z7 +zxhgcBL0QS8+ZMjKlNzkdnv5hiqolLjKkTD1p4zz1d03Im0YTtbdR9r8QJrCf2y 533qUhhDJTm8yCXJ4RIrgs9kAZ0Pr36Zi6cUOaEs5n+kpzmLVPlH1kt3PWjX/xp3 amLO0KrGl9/KNSTeot18a6OPq60oyXETBh5EVumjCNu+SpBkd/5kW+N1pxcCAwEA AaOCAfIwggHuMB0GA1UdDgQWBBR5X86w5mdxjAe/PNTpCf8PRcBfGzAfBgNVHSME GDAWgBR+SgCUBU3Rrkw6pzl25VTxkbxSMDAOBgNVHQ8BAf8EBAMCB4AwZQYDVR0f BF4wXDBaoFigVoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OU1NDWUJF Ui8wLzdFNEEwMDk0MDU0REQxQUU0QzNBQTczOTc2RTU1NEYxOTFCQzUyMzAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvN0U0QTAwOTQwNTRERDFBRTRDM0FBNzM5NzZF NTU0RjE5MUJDNTIzMC5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05TU0NZQkVSLzAvN0U0QTAwOTQw NTRERDFBRTRDM0FBNzM5NzZFNTU0RjE5MUJDNTIzMC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH6YwVLt j5FJKN3QchnioJbQpJbbXLQhpI1H/a7xwELj6foYQxfRSeeMhVDzdWGhtg8Y1O57 9B+Xfbaag3LQgQqM6TY0Rw/qaUHeXvb+UCVL1EUExwy45AoLEOVRY6hRuM7cqfVv ZabXiVhJ/WKMGShcNtMej2ETrhhc9GRxhJO1aAHEK3Ps5O0llR3TRpw5xBpBe+Ll BtHvMY5t02NvzlJ3ovKl12TSzZYpy1sej4W/JXSic/xH6dmpLmtARPDUjEIJpy/r elLe9qxpya/erGeoxQC261rBtCl6dZmYeKKHUldiookzahxP4roe1wnLz1lUPxeN sqUPa3BrKvOmQDQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:51:20 2026 by rpki-client