$ rpki-client -vvf rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft File: 2D63D0213010A74651A161277EB9CBDC9CF65853.mft (raw, json) Hash identifier: CCkY7ce+S1FQcdqoYM5eP1foMmtvmrn4YxqxhozxsHs= Subject key identifier: 12:1A:45:23:24:B7:AA:21:D6:2C:16:54:72:5A:75:87:53:3F:16:D0 Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53 Certificate issuer: /CN=2D63D0213010A74651A161277EB9CBDC9CF65853 Certificate serial: 74EF4A9ED120CBA39ABFEC0EFCE244F6126F5B5A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 09:27:07 +0000 Manifest this update: Thu 23 Jul 2026 09:22:07 +0000 Manifest next update: Fri 24 Jul 2026 13:03:07 +0000 Files and hashes: 1: 323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (hash: E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=) 2: 2D63D0213010A74651A161277EB9CBDC9CF65853.crl (hash: xwPwypsxGtisn1vVZsodLm2+bkeKs/YsWUrkG9GX2E4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ef:4a:9e:d1:20:cb:a3:9a:bf:ec:0e:fc:e2:44:f6:12:6f:5b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853 Validity Not Before: Jul 23 09:22:07 2026 GMT Not After : Jul 24 13:03:07 2026 GMT Subject: CN=121A452324B7AA21D62C1654725A7587533F16D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:03:34:6e:f3:3f:b3:15:84:85:7e:d7:50: d7:a3:3d:83:f6:f8:06:9f:14:9a:f2:6d:7f:65:2d: ee:4c:87:f8:7b:86:2b:a9:cc:41:4f:25:37:a9:ec: 92:4a:91:47:e6:94:4a:d4:8a:00:6e:72:7c:3d:61: 99:b6:46:4c:3f:f3:7b:f5:3a:d4:25:23:56:a7:19: 8c:aa:64:91:56:87:e7:21:4e:a3:a9:2e:46:7f:bc: 96:4b:ef:62:8f:43:10:f0:73:22:60:6e:a6:10:f1: b7:62:94:cd:eb:18:43:e3:6f:b1:bc:f8:05:3b:a0: 1d:85:13:6d:37:b2:d8:e1:84:fa:ab:bd:0f:d1:3d: db:bb:f9:e3:f2:31:02:a5:f8:63:ed:55:91:d0:16: 94:ce:9b:c9:f1:88:90:d2:86:38:a9:81:5e:3e:40: a9:50:b1:54:ed:67:24:bf:29:4f:4a:45:6d:9e:65: ba:e4:3e:d5:d9:30:16:a1:28:21:b1:50:67:19:23: a8:f5:bf:8f:ff:f9:6e:6a:69:9d:a1:79:12:7d:df: 5d:fe:ae:cc:6f:50:c8:60:ec:0d:bc:64:ce:1e:72: 62:02:9f:ca:9a:16:11:47:5c:80:ab:12:1e:a8:ad: 20:f9:0d:c2:16:87:b9:11:c1:4b:51:5d:29:40:03: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:45:23:24:B7:AA:21:D6:2C:16:54:72:5A:75:87:53:3F:16:D0 X509v3 Authority Key Identifier: keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:55:67:1e:96:e1:79:b1:6c:bd:d8:2c:28:80:43:68:c8:26: 5b:8f:4d:6a:f7:84:9c:4e:34:6f:bd:87:4d:60:ce:04:44:d6: 93:78:13:ad:3d:63:ad:96:7c:76:01:91:16:06:77:c1:13:d8: 8b:a3:2e:08:26:6b:d9:cb:dc:4d:c6:31:85:e6:43:eb:40:fe: 34:37:ca:c8:f0:7e:00:07:c8:54:dc:aa:35:0d:b6:14:9e:c0: 94:b1:22:3c:66:26:59:21:a6:db:28:c3:89:8e:ff:3c:98:76: a0:86:3d:74:40:49:99:6f:03:05:0a:f4:f2:63:95:bc:30:fa: 9a:67:60:ac:2e:44:89:5a:b9:5a:12:ba:d3:4c:0c:ef:c3:80: 96:90:08:2c:1f:fc:f2:fa:fb:d1:a5:53:a8:5a:5c:f0:45:4e: c6:45:3e:85:d8:42:61:60:46:ee:3a:cc:73:9e:2d:cb:ca:ea: 69:86:06:38:2e:3f:fa:0e:d1:a7:d8:d5:2f:71:57:2c:cf:89: 26:e7:a6:6e:53:e5:8a:66:53:62:46:c3:14:4b:45:14:f1:71: 0e:91:49:d3:a1:85:f0:b9:68:f2:85:6f:13:ac:d2:0f:a4:11: e7:85:87:1e:a1:2a:68:52:94:72:45:2f:14:fe:9c:a6:3b:3f: c7:a7:eb:67 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUdO9KntEgy6Oav+wO/OJE9hJvW1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2M0QwMjEzMDEwQTc0NjUxQTE2MTI3N0VCOUNCREM5 Q0Y2NTg1MzAeFw0yNjA3MjMwOTIyMDdaFw0yNjA3MjQxMzAzMDdaMDMxMTAvBgNV BAMTKDEyMUE0NTIzMjRCN0FBMjFENjJDMTY1NDcyNUE3NTg3NTMzRjE2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi1wM0bvM/sxWEhX7XUNejPYP2 +AafFJrybX9lLe5Mh/h7hiupzEFPJTep7JJKkUfmlErUigBucnw9YZm2Rkw/83v1 OtQlI1anGYyqZJFWh+chTqOpLkZ/vJZL72KPQxDwcyJgbqYQ8bdilM3rGEPjb7G8 +AU7oB2FE203stjhhPqrvQ/RPdu7+ePyMQKl+GPtVZHQFpTOm8nxiJDShjipgV4+ QKlQsVTtZyS/KU9KRW2eZbrkPtXZMBahKCGxUGcZI6j1v4//+W5qaZ2heRJ9313+ rsxvUMhg7A28ZM4ecmICn8qaFhFHXICrEh6orSD5DcIWh7kRwUtRXSlAAzFFAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUEhpFIyS3qiHWLBZUclp1h1M/FtAwHwYDVR0j BBgwFoAULWPQITAQp0ZRoWEnfrnL3Jz2WFMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv MC8yRDYzRDAyMTMwMTBBNzQ2NTFBMTYxMjc3RUI5Q0JEQzlDRjY1ODUzLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzJENjNEMDIxMzAxMEE3NDY1MUExNjEyNzdFQjlD QkRDOUNGNjU4NTMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8wLzJENjNEMDIxMzAxMEE3 NDY1MUExNjEyNzdFQjlDQkRDOUNGNjU4NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3VWceluF5sWy9 2CwogENoyCZbj01q94ScTjRvvYdNYM4ERNaTeBOtPWOtlnx2AZEWBnfBE9iLoy4I JmvZy9xNxjGF5kPrQP40N8rI8H4AB8hU3Ko1DbYUnsCUsSI8ZiZZIabbKMOJjv88 mHaghj10QEmZbwMFCvTyY5W8MPqaZ2CsLkSJWrlaErrTTAzvw4CWkAgsH/zy+vvR pVOoWlzwRU7GRT6F2EJhYEbuOsxzni3LyupphgY4Lj/6DtGn2NUvcVcsz4km56Zu U+WKZlNiRsMUS0UU8XEOkUnToYXwuWjyhW8TrNIPpBHnhYceoSpoUpRyRS8U/pym Oz/Hp+tn -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:10 2026 by rpki-client