$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft File: 2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json) Hash identifier: mRN8zv6qcdGx+vfpZdsPxC/dlxcrceQpFXF/xIT0sDg= Subject key identifier: 33:68:94:92:0B:66:E1:EC:50:06:F7:61:7E:BD:FD:B4:6C:17:45:EF Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53 Certificate issuer: /CN=2D63D0213010A74651A161277EB9CBDC9CF65853 Certificate serial: 50BC492058E9F1F2D6E0154C49E21F6C520F4782 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft Manifest number: B8 Signing time: Thu 24 Sep 2026 11:24:38 +0000 Manifest this update: Thu 24 Sep 2026 11:19:38 +0000 Manifest next update: Fri 25 Sep 2026 13:21:38 +0000 Files and hashes: 1: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=) 2: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: L+Kk+uMYkhAfLllgxPBbtqwZTd5Gifmgf//LlqdTvkg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 13:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bc:49:20:58:e9:f1:f2:d6:e0:15:4c:49:e2:1f:6c:52:0f:47:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853 Validity Not Before: Sep 24 11:19:38 2026 GMT Not After : Sep 25 13:21:38 2026 GMT Subject: CN=336894920B66E1EC5006F7617EBDFDB46C1745EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:0b:88:35:61:5d:53:b6:bb:7f:c4:a3:7f: 07:5d:89:18:9b:fc:39:9e:f4:98:1c:6a:eb:1e:07: cd:eb:2f:e6:fa:15:25:91:b3:04:d9:48:77:6f:22: 7c:85:28:ac:42:25:ef:89:e0:c1:a7:6e:f2:0a:66: d1:7d:96:47:a2:29:99:57:82:0f:b7:c8:1c:5a:52: e1:b7:e2:c1:74:ff:3e:4d:24:7c:a8:d8:1f:48:b6: a6:bd:2d:a0:76:82:a3:af:fa:75:b9:68:91:25:b8: 9a:29:99:65:28:97:5c:22:0d:ea:20:1c:2b:16:a7: fb:17:04:02:72:7e:94:3b:d7:c4:16:84:99:fa:0a: 25:6c:5e:51:e6:21:8f:b9:3d:d1:88:3d:46:72:1f: 29:20:eb:29:d0:9f:e9:92:01:60:cc:40:6b:11:22: 6f:c0:85:72:24:15:d5:c1:c3:f5:43:be:81:f2:ce: 44:c0:06:84:38:af:19:cd:8c:32:25:0a:fc:6a:db: f1:d4:20:b8:6b:68:05:94:0a:ca:63:1c:23:33:14: 58:6a:62:c8:21:44:16:10:44:c0:a3:99:a5:63:1c: b1:eb:51:82:53:36:34:be:81:96:73:99:e6:26:85: 85:6b:52:e4:7d:a0:f5:49:39:3a:3e:e3:d6:7b:21: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:94:92:0B:66:E1:EC:50:06:F7:61:7E:BD:FD:B4:6C:17:45:EF X509v3 Authority Key Identifier: keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3b:09:ae:ab:99:71:dc:33:77:d7:da:a8:64:29:b2:b7:63: c5:04:84:c6:27:43:b1:37:10:82:13:10:77:ea:fe:77:58:16: 4b:f2:5b:2f:11:9b:cb:f5:7d:9a:9a:5e:f9:cf:06:7d:cb:cd: cc:7d:1d:fb:17:7c:82:21:22:01:e8:11:b3:26:9a:89:53:26: 56:a1:9f:de:1d:f8:00:87:2d:20:46:76:02:4d:d6:dc:8a:24: 0c:a2:3b:c9:c9:e7:f8:38:c9:f1:95:b2:63:c5:eb:f8:97:ac: 50:20:09:3b:6e:40:39:22:61:4e:4d:31:f0:64:a8:7b:9b:ee: 23:44:ce:70:94:68:9c:99:62:0a:62:bd:1d:02:58:16:c4:d0: 88:9a:56:ca:55:68:60:6f:f1:4e:e3:78:03:a7:8e:10:66:5b: 3f:ac:02:33:ab:29:9e:ac:5b:c8:21:de:e7:7c:48:eb:14:cf: 01:7c:50:d8:8e:0e:5c:8b:64:b7:34:5f:40:3c:86:ce:94:71: 6a:8c:a8:a2:d0:c7:1d:f4:bc:05:08:4b:f8:d8:7a:ec:71:3f: ac:e9:b9:8b:71:33:c7:ea:b0:06:fa:d2:66:ef:37:93:d6:cf: 7a:02:8d:81:d7:8f:68:c3:1c:cf:5c:04:17:b1:0a:78:72:7d: 7a:9c:c2:c1 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUULxJIFjp8fLW4BVMSeIfbFIPR4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2M0QwMjEzMDEwQTc0NjUxQTE2MTI3N0VCOUNCREM5 Q0Y2NTg1MzAeFw0yNjA5MjQxMTE5MzhaFw0yNjA5MjUxMzIxMzhaMDMxMTAvBgNV BAMTKDMzNjg5NDkyMEI2NkUxRUM1MDA2Rjc2MTdFQkRGREI0NkMxNzQ1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioQuINWFdU7a7f8SjfwddiRib /Dme9JgcauseB83rL+b6FSWRswTZSHdvInyFKKxCJe+J4MGnbvIKZtF9lkeiKZlX gg+3yBxaUuG34sF0/z5NJHyo2B9Itqa9LaB2gqOv+nW5aJEluJopmWUol1wiDeog HCsWp/sXBAJyfpQ718QWhJn6CiVsXlHmIY+5PdGIPUZyHykg6ynQn+mSAWDMQGsR Im/AhXIkFdXBw/VDvoHyzkTABoQ4rxnNjDIlCvxq2/HUILhraAWUCspjHCMzFFhq YsghRBYQRMCjmaVjHLHrUYJTNjS+gZZzmeYmhYVrUuR9oPVJOTo+49Z7IShZAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUM2iUkgtm4exQBvdhfr39tGwXRe8wHwYDVR0j BBgwFoAULWPQITAQp0ZRoWEnfrnL3Jz2WFMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv MC8yRDYzRDAyMTMwMTBBNzQ2NTFBMTYxMjc3RUI5Q0JEQzlDRjY1ODUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzJENjNEMDIxMzAxMEE3NDY1MUExNjEyNzdFQjlD QkRDOUNGNjU4NTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8wLzJENjNEMDIxMzAxMEE3 NDY1MUExNjEyNzdFQjlDQkRDOUNGNjU4NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsOwmuq5lx3DN3 19qoZCmyt2PFBITGJ0OxNxCCExB36v53WBZL8lsvEZvL9X2aml75zwZ9y83MfR37 F3yCISIB6BGzJpqJUyZWoZ/eHfgAhy0gRnYCTdbciiQMojvJyef4OMnxlbJjxev4 l6xQIAk7bkA5ImFOTTHwZKh7m+4jRM5wlGicmWIKYr0dAlgWxNCImlbKVWhgb/FO 43gDp44QZls/rAIzqymerFvIId7nfEjrFM8BfFDYjg5ci2S3NF9APIbOlHFqjKii 0Mcd9LwFCEv42HrscT+s6bmLcTPH6rAG+tJm7zeT1s96Ao2B149owxzPXAQXsQp4 cn16nMLB -----END CERTIFICATE-----Generated at Thu Sep 24 21:17:48 2026 by rpki-client