$ rpki-client -vvvf rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft File: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft (raw, json) Hash identifier: +jQrkBRDB6fJFCY6s6u76Kjv3SwOcDbUsjP1lItpszg= Subject key identifier: A0:A8:52:C0:4F:DA:85:D3:9A:CF:8F:54:69:FC:FF:2D:70:C5:4F:0B Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 Certificate issuer: /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Certificate serial: 6BFEC557885F87C5A67E21C970044211C11A6CA5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 05:52:41 +0000 Manifest this update: Thu 24 Sep 2026 05:47:41 +0000 Manifest next update: Fri 25 Sep 2026 07:59:41 +0000 Files and hashes: 1: 3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (hash: q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=) 2: 2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl (hash: HG/VGZ82i+OwQZG5if613IIeVBdkoYCcwOXnXwaCzpo=) 3: 3130332e3134302e3233332e302f32342d3234203d3e203332323432.roa (hash: dWqlZ57qGRFx6N79EQLtYosKEY+TDhYs9JMAewBJPsQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fe:c5:57:88:5f:87:c5:a6:7e:21:c9:70:04:42:11:c1:1a:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22 Validity Not Before: Sep 24 05:47:41 2026 GMT Not After : Sep 25 07:59:41 2026 GMT Subject: CN=A0A852C04FDA85D39ACF8F5469FCFF2D70C54F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:7c:14:3e:01:78:b3:95:53:2d:b1:08:f0: df:a5:02:01:a7:58:47:ae:e3:3b:0e:73:a3:7c:f4: da:ce:47:4e:19:ac:fe:df:14:f1:12:cd:a9:d9:d5: 77:01:86:dd:7f:7b:1e:8d:42:b9:fe:c1:17:ad:f4: 9c:2f:d9:20:76:8d:de:f6:9f:3b:2c:4f:14:cf:66: 68:f8:0d:2f:96:da:7d:cb:92:68:2f:3e:0f:5f:53: 12:bc:60:50:b3:7c:d8:a8:11:0e:92:ab:8c:9e:86: 63:c0:a6:2f:f2:02:f2:d6:24:cb:d3:0d:60:ad:e1: 2d:e0:ba:f3:ea:3d:07:50:c9:62:dd:22:19:52:b1: c2:8f:de:96:82:f9:53:06:70:53:0a:22:23:78:3a: 5f:60:f2:9c:1b:04:90:3e:78:fb:57:1e:02:f4:45: a6:36:d7:1e:98:a7:0b:07:5d:31:09:20:8a:53:52: 78:d7:45:58:cc:4d:3b:f0:c4:0f:c0:6e:c3:5d:c0: 25:8d:49:a0:5e:ba:1a:9d:f7:a1:d0:15:40:77:7b: d7:04:81:91:05:4e:e5:40:fb:a1:d5:1b:f7:93:67: 4c:e1:2f:c5:62:8b:8d:ba:fe:59:d3:af:44:db:a3: 06:d1:5d:83:87:6e:f6:cd:d5:24:7f:58:94:86:10: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A8:52:C0:4F:DA:85:D3:9A:CF:8F:54:69:FC:FF:2D:70:C5:4F:0B X509v3 Authority Key Identifier: keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:59:b5:5e:95:4a:46:51:b7:90:a5:f2:ee:08:74:60:68:40: 40:53:cc:c8:09:39:11:8e:ea:47:5d:12:8a:99:47:1d:82:55: e2:9b:fc:e4:15:ee:d7:a2:d5:5d:fd:22:de:e8:53:9a:b9:8d: 28:e8:23:33:80:64:63:e7:82:6a:96:c4:7d:9e:9a:f4:59:c0: 2a:f6:b4:57:f0:7c:c6:72:04:21:a9:a6:c4:09:5c:7c:8c:5d: 8b:33:2b:ef:ad:82:48:87:6f:0c:64:b0:3c:2f:ee:00:71:37: 5c:f1:5b:7a:1c:a3:4c:cf:6a:f9:a7:51:76:b3:2b:88:54:d5: 76:59:73:6f:12:85:1f:fa:8d:41:60:90:64:9d:b5:bd:7a:c9: 56:18:9c:4d:4d:6a:95:0e:b8:77:ce:0c:51:82:24:26:48:94: 34:2e:f9:83:86:8a:33:a9:28:8e:7f:92:85:f3:3f:12:0b:b5: bd:12:da:85:cf:94:fe:e4:52:7b:ff:e1:95:c4:93:49:3b:62: 31:23:0a:ea:64:f4:8b:90:1f:6b:c8:52:2c:07:62:2b:a7:b2: 8f:c4:43:35:df:f0:e9:55:36:95:76:85:ff:75:a5:48:16:98: 2e:c3:f9:ef:42:31:a4:1f:33:9c:c4:cd:d1:b9:cf:16:96:da: a9:b3:4b:f0 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUa/7FV4hfh8WmfiHJcARCEcEabKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVBRDQ4 QzY3NUQyMjAeFw0yNjA5MjQwNTQ3NDFaFw0yNjA5MjUwNzU5NDFaMDMxMTAvBgNV BAMTKEEwQTg1MkMwNEZEQTg1RDM5QUNGOEY1NDY5RkNGRjJENzBDNTRGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nnwUPgF4s5VTLbEI8N+lAgGn WEeu4zsOc6N89NrOR04ZrP7fFPESzanZ1XcBht1/ex6NQrn+wRet9Jwv2SB2jd72 nzssTxTPZmj4DS+W2n3LkmgvPg9fUxK8YFCzfNioEQ6Sq4yehmPApi/yAvLWJMvT DWCt4S3guvPqPQdQyWLdIhlSscKP3paC+VMGcFMKIiN4Ol9g8pwbBJA+ePtXHgL0 RaY21x6YpwsHXTEJIIpTUnjXRVjMTTvwxA/AbsNdwCWNSaBeuhqd96HQFUB3e9cE gZEFTuVA+6HVG/eTZ0zhL8Vii426/lnTr0TbowbRXYOHbvbN1SR/WJSGEFIZAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUoKhSwE/ahdOaz49Uafz/LXDFTwswHwYDVR0j BBgwFoAULVj7CtbLTP33NkeR0UNa1IxnXSIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDTC8w LzJENThGQjBBRDZDQjRDRkRGNzM2NDc5MUQxNDM1QUQ0OEM2NzVEMjIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkQ1OEZCMEFENkNCNENGREY3MzY0NzkxRDE0MzVB RDQ4QzY3NUQyMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0wvMC8yRDU4RkIwQUQ2Q0I0Q0ZE RjczNjQ3OTFEMTQzNUFENDhDNjc1RDIyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFm1XpVKRlG3kKXy 7gh0YGhAQFPMyAk5EY7qR10SiplHHYJV4pv85BXu16LVXf0i3uhTmrmNKOgjM4Bk Y+eCapbEfZ6a9FnAKva0V/B8xnIEIammxAlcfIxdizMr762CSIdvDGSwPC/uAHE3 XPFbehyjTM9q+adRdrMriFTVdllzbxKFH/qNQWCQZJ21vXrJVhicTU1qlQ64d84M UYIkJkiUNC75g4aKM6kojn+ShfM/Egu1vRLahc+U/uRSe//hlcSTSTtiMSMK6mT0 i5Afa8hSLAdiK6eyj8RDNd/w6VU2lXaF/3WlSBaYLsP570IxpB8znMTN0bnPFpba qbNL8A== -----END CERTIFICATE-----Generated at Thu Sep 24 22:00:53 2026 by rpki-client