$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft File: CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json) Hash identifier: 6AKN6yElywA8PZvy/PT8FZNrnasx0m3jkYKhF2+nbdw= Subject key identifier: 60:3B:48:8F:1F:1C:97:6E:D3:CB:8C:34:D1:32:AD:8F:45:84:E5:30 Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Certificate serial: 3B97DFC45C248F7F6192776F67DF94751100AE56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft Manifest number: 011D Signing time: Sat 14 Nov 2026 19:54:49 +0000 Manifest this update: Sat 14 Nov 2026 19:49:49 +0000 Manifest next update: Sun 15 Nov 2026 20:42:49 +0000 Files and hashes: 1: 3231312e37362e3138362e302f32342d3234203d3e203137393939.roa (hash: NKa8Iy3MaUeUumQO6cNWkp1u/SclAT0YOySq+5J8B9Q=) 2: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=) 3: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: YmFcMPunWby+wmQSosjFnw9Pwq7C6CcYQ95ZZRoYIlc=) 4: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=) 5: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=) 6: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=) 7: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=) 8: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=) 9: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=) 10: 323430323a373165303a3a2f34302d3438203d3e20313331363738.roa (hash: mTqEC6aiPcWHZSlk2Er8l9ki9WnEV+dwuhfO3oWs108=) 11: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=) 12: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=) 13: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=) 14: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=) 15: 323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa (hash: vsm9UGN6tHY0aNAGBXgIpoDTNmnsxdu9OsGwN4Md6uM=) 16: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=) 17: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=) 18: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=) 19: 323430323a373165303a3a2f33322d3438203d3e20313334383233.roa (hash: Ezk288EMxD5xtLGFhHQ06ty+ECxin6l3nT7k5oesNiA=) 20: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=) 21: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=) 22: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:97:df:c4:5c:24:8f:7f:61:92:77:6f:67:df:94:75:11:00:ae:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Validity Not Before: Nov 14 19:49:49 2026 GMT Not After : Nov 15 20:42:49 2026 GMT Subject: CN=603B488F1F1C976ED3CB8C34D132AD8F4584E530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:d3:4f:41:e2:ac:1b:37:fe:c3:d7:05:33: 3e:7e:94:b3:d5:78:ef:67:d8:4a:93:91:da:98:c4: c1:96:be:56:9f:3d:86:9b:f2:1f:31:49:ef:e2:24: a7:0a:8f:32:a0:e6:d0:7e:f8:ce:66:cc:85:be:89: ec:fc:aa:0f:15:46:ec:fc:f4:e0:46:82:8b:80:2d: 00:fa:b8:d1:08:a4:26:8b:09:83:62:b6:6e:ec:74: 15:23:be:28:41:d7:55:94:e1:45:7b:41:b5:da:05: 16:38:d1:fd:e8:ce:cd:f6:f9:68:a8:33:06:bc:2c: 6e:c8:d9:78:44:bc:06:76:48:30:e4:a0:bd:01:63: cb:98:c6:9d:39:9a:09:97:34:95:c6:c6:7d:29:a5: c2:46:9b:bd:83:39:0a:3e:f8:e2:b4:d9:55:3d:21: 27:8d:02:24:62:a2:86:93:24:2a:a4:c7:1c:5f:84: 66:8d:41:09:0c:96:58:6b:3b:41:f5:01:22:4e:c9: 2e:78:c5:c4:db:30:da:18:09:fa:d1:cf:dd:06:97: 9d:aa:0b:c8:af:5a:fb:c2:83:ac:fa:bd:2c:b7:e9: 27:8d:c3:6d:70:63:d4:6a:14:ba:40:89:a1:e1:9f: b7:36:a9:93:86:b2:56:3c:24:d0:d0:49:e5:fe:b4: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3B:48:8F:1F:1C:97:6E:D3:CB:8C:34:D1:32:AD:8F:45:84:E5:30 X509v3 Authority Key Identifier: keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:77:5a:47:1e:a2:55:e8:41:33:d7:90:86:6f:18:16:d8:30: 17:fb:23:de:45:d0:67:64:ba:c9:3c:69:8c:b1:0c:2a:5c:f7: 33:5d:cb:2e:f4:8e:b5:9e:44:6b:e0:47:07:6d:9a:e4:d7:6a: bd:ea:16:b7:f7:ba:0d:84:2e:2e:79:c4:d0:16:c3:c8:8b:fa: 25:d5:8f:9d:7b:c2:b8:7f:5e:02:ab:dd:fd:45:94:8c:85:12: 52:a0:ba:59:5a:a2:71:16:88:11:48:92:ed:a5:7b:fe:7b:c3: 19:c8:9d:5d:dd:97:1a:c6:80:c6:48:41:f1:08:39:b9:6d:f1: 9c:16:8e:5b:37:d4:b9:d7:05:ed:be:0f:d7:1c:cd:72:32:16: a9:c5:31:f3:4f:2c:f4:25:da:7e:31:40:10:fc:30:55:a3:64: 31:37:8a:d3:44:f7:48:44:07:9c:fc:41:cd:88:8d:bc:de:fa: 36:ad:21:03:26:f7:84:d2:4e:58:17:da:33:17:06:02:40:38: e4:c5:d2:44:0c:f8:bc:c9:49:55:61:80:39:49:f5:d8:ac:83: cf:cb:c7:39:1d:77:d9:47:bb:ff:e2:5f:cc:bd:9a:fe:ec:6d: 6f:d9:e2:55:e3:7c:5b:53:74:0e:61:be:14:23:81:15:9d:26: 85:4d:ce:46 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUO5ffxFwkj39hkndvZ9+UdREArlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE MTQ0RkVBRTAeFw0yNjExMTQxOTQ5NDlaFw0yNjExMTUyMDQyNDlaMDMxMTAvBgNV BAMTKDYwM0I0ODhGMUYxQzk3NkVEM0NCOEMzNEQxMzJBRDhGNDU4NEU1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEw9NPQeKsGzf+w9cFMz5+lLPV eO9n2EqTkdqYxMGWvlafPYab8h8xSe/iJKcKjzKg5tB++M5mzIW+iez8qg8VRuz8 9OBGgouALQD6uNEIpCaLCYNitm7sdBUjvihB11WU4UV7QbXaBRY40f3ozs32+Wio Mwa8LG7I2XhEvAZ2SDDkoL0BY8uYxp05mgmXNJXGxn0ppcJGm72DOQo++OK02VU9 ISeNAiRiooaTJCqkxxxfhGaNQQkMllhrO0H1ASJOyS54xcTbMNoYCfrRz90Gl52q C8ivWvvCg6z6vSy36SeNw21wY9RqFLpAiaHhn7c2qZOGslY8JNDQSeX+tMiRAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUYDtIjx8cl27Ty4w00TKtj0WE5TAwHwYDVR0j BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1 QzQ5OUZEMTQ0RkVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC9DRTExQkRENDRG NjY3NzY2MjRDNEQ5QkUxNDVDNDk5RkQxNDRGRUFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXdaRx6i VehBM9eQhm8YFtgwF/sj3kXQZ2S6yTxpjLEMKlz3M13LLvSOtZ5Ea+BHB22a5Ndq veoWt/e6DYQuLnnE0BbDyIv6JdWPnXvCuH9eAqvd/UWUjIUSUqC6WVqicRaIEUiS 7aV7/nvDGcidXd2XGsaAxkhB8Qg5uW3xnBaOWzfUudcF7b4P1xzNcjIWqcUx808s 9CXafjFAEPwwVaNkMTeK00T3SEQHnPxBzYiNvN76Nq0hAyb3hNJOWBfaMxcGAkA4 5MXSRAz4vMlJVWGAOUn12KyDz8vHOR132Ue7/+JfzL2a/uxtb9niVeN8W1N0DmG+ FCOBFZ0mhU3ORg== -----END CERTIFICATE-----Generated at Sun Nov 15 00:54:44 2026 by rpki-client