$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft File: B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft (raw, json) Hash identifier: q9/yE+Km1qBxC9G4g5H7/1Qz4l5TxVpBCqj31EHTPwg= Subject key identifier: B2:D8:4A:4F:5C:A2:2D:6D:6F:0A:8F:0D:BB:A4:A1:07:53:09:A4:8E Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Certificate serial: 23D1478E939F9711B3555AC7237D137C30C270A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft Manifest number: BE Signing time: Thu 24 Sep 2026 00:50:00 +0000 Manifest this update: Thu 24 Sep 2026 00:45:00 +0000 Manifest next update: Fri 25 Sep 2026 02:09:00 +0000 Files and hashes: 1: 3130332e34362e3138382e302f32322d3232203d3e203338383531.roa (hash: IGUXagfNdDGbcIwOiNJB2WILqRSYaabubVYlRzK02WU=) 2: 3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (hash: wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=) 3: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (hash: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=) 4: 34332e3232372e32342e302f32322d3232203d3e203338383531.roa (hash: Jc0taR/H4saYaDAoJgE+9UiKJq1S+bCLyLdRp8kMM8s=) 5: 34332e3232372e32352e302f32342d3234203d3e203338383531.roa (hash: AVukq4MJYvCGIAziMbV6ZV4Pe3c02PVGzfhBcKVubb8=) 6: 3130332e34362e3138382e302f32332d3233203d3e203338383531.roa (hash: mG1ga13lp7MgEJvmiHGi6aFGInKwqgg1PecqbqqFlqE=) 7: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (hash: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=) 8: B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl (hash: AI3BS2we1nZacRKzPI72qFtOwAu8v6rBtRYQPI5Gx8w=) 9: 3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (hash: s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=) 10: 3130332e3133312e3137322e302f32322d3234203d3e203338383531.roa (hash: gJf9DLGPPpkcFmCRmCzChYMvtlZ7ty7+aorHZQ0RXhY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d1:47:8e:93:9f:97:11:b3:55:5a:c7:23:7d:13:7c:30:c2:70:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE Validity Not Before: Sep 24 00:45:00 2026 GMT Not After : Sep 25 02:09:00 2026 GMT Subject: CN=B2D84A4F5CA22D6D6F0A8F0DBBA4A1075309A48E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:a0:78:51:25:06:ec:ec:7c:e4:60:ef:60: fe:13:9d:03:d5:f6:cb:03:ce:f8:ec:88:ed:d7:ac: 67:db:77:ab:1f:9e:e1:6b:b6:59:9a:0c:b0:67:c7: 19:f4:51:6f:a6:79:5b:b8:49:d4:34:70:cf:2b:a1: ef:bf:1d:5e:96:f8:36:ca:2a:8f:aa:03:9d:1f:d1: 11:46:88:06:72:e2:45:1c:24:84:7f:35:88:6f:df: 68:69:9c:e7:22:e3:84:71:ab:8d:d7:c2:0a:1e:6b: bf:5f:2a:50:8b:da:1b:19:af:d1:1c:0a:00:3c:5c: a3:e0:dc:68:a0:bc:c4:1c:a3:d0:8a:e9:b6:51:20: 4f:42:e7:f4:8a:26:f5:0e:ce:67:45:30:b3:34:b4: c5:27:06:4e:0c:ae:68:bc:d9:41:51:d9:11:b1:9b: 75:67:2c:23:f8:36:19:39:6f:86:b2:bf:c1:0e:2d: 7a:a9:53:49:46:cc:3c:83:cb:07:fd:66:a3:89:52: 72:38:f6:c6:19:d0:1f:f8:23:3f:ba:9b:4a:79:25: 6a:7c:40:ab:31:dd:58:89:b4:eb:33:14:33:bb:0d: ec:70:12:46:b6:d0:e4:30:5d:0c:5a:57:cb:e6:0a: 0b:d1:09:79:02:95:ab:ab:7a:4f:d9:bf:82:31:32: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D8:4A:4F:5C:A2:2D:6D:6F:0A:8F:0D:BB:A4:A1:07:53:09:A4:8E X509v3 Authority Key Identifier: keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fc:2c:2a:fc:ed:7a:3c:0a:49:ef:b1:6c:d0:14:f4:20:a1: 1e:2c:2d:ba:52:0c:8e:a6:a5:1b:50:fc:e6:02:58:49:1f:66: 77:6d:17:29:95:c7:7b:b5:3b:d9:91:5c:b0:26:a6:de:e6:ea: ac:2d:13:75:96:2a:6c:a3:fd:1d:e6:29:61:ba:d0:79:24:ee: 0b:cf:3b:4a:d7:f5:54:d7:2f:f8:32:93:5f:e3:12:f5:f4:a0: f3:47:5d:2f:54:7d:86:96:d4:f4:ba:73:71:87:c7:a0:d8:91: 1b:52:36:b7:08:24:fe:d3:d3:1e:e3:fe:2d:f0:d0:96:e8:81: a5:d5:22:dd:4f:6b:a2:8e:d9:6e:35:ff:de:a3:00:70:1a:46: a2:2d:c5:65:bd:ce:af:d9:fe:7d:2d:cf:9a:b1:ac:78:f5:24: af:c7:a3:b4:2c:91:41:bd:e2:84:62:b0:0b:42:63:e0:32:41: 3c:c9:f8:09:cd:a7:84:28:46:de:25:6a:27:63:fd:5f:9d:3a: d0:ec:27:ca:2c:e1:83:97:fd:0f:1c:ab:88:de:a8:78:ba:c5: 0a:be:db:1c:e0:07:8b:c6:4a:19:86:21:16:60:72:b3:d8:58: 69:66:67:64:7c:c1:ba:89:b3:17:79:09:80:53:01:7f:08:fc: 15:07:c5:92 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUI9FHjpOflxGzVVrHI30TfDDCcKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw OENEMjVBRTAeFw0yNjA5MjQwMDQ1MDBaFw0yNjA5MjUwMjA5MDBaMDMxMTAvBgNV BAMTKEIyRDg0QTRGNUNBMjJENkQ2RjBBOEYwREJCQTRBMTA3NTMwOUE0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCToaB4USUG7Ox85GDvYP4TnQPV 9ssDzvjsiO3XrGfbd6sfnuFrtlmaDLBnxxn0UW+meVu4SdQ0cM8roe+/HV6W+DbK Ko+qA50f0RFGiAZy4kUcJIR/NYhv32hpnOci44Rxq43Xwgoea79fKlCL2hsZr9Ec CgA8XKPg3GigvMQco9CK6bZRIE9C5/SKJvUOzmdFMLM0tMUnBk4Mrmi82UFR2RGx m3VnLCP4Nhk5b4ayv8EOLXqpU0lGzDyDywf9ZqOJUnI49sYZ0B/4Iz+6m0p5JWp8 QKsx3ViJtOszFDO7DexwEka20OQwXQxaV8vmCgvRCXkClaurek/Zv4IxMnknAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUsthKT1yiLW1vCo8Nu6ShB1MJpI4wHwYDVR0j BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE ODgxNUUwOENEMjVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC9CNjIxNzM1RTMy NDA0NkZGRkMxREQ3NUQ0RUQ4ODE1RTA4Q0QyNUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/wsKvzt ejwKSe+xbNAU9CChHiwtulIMjqalG1D85gJYSR9md20XKZXHe7U72ZFcsCam3ubq rC0TdZYqbKP9HeYpYbrQeSTuC887Stf1VNcv+DKTX+MS9fSg80ddL1R9hpbU9Lpz cYfHoNiRG1I2twgk/tPTHuP+LfDQluiBpdUi3U9roo7ZbjX/3qMAcBpGoi3FZb3O r9n+fS3PmrGsePUkr8ejtCyRQb3ihGKwC0Jj4DJBPMn4Cc2nhChG3iVqJ2P9X506 0Ownyizhg5f9DxyriN6oeLrFCr7bHOAHi8ZKGYYhFmBys9hYaWZnZHzBuomzF3kJ gFMBfwj8FQfFkg== -----END CERTIFICATE-----Generated at Thu Sep 24 10:02:17 2026 by rpki-client