$ rpki-client -vvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft File: D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json) Hash identifier: Ihui+3kTXtvcA5DCgXMChSVB1FAqYwbI/zvsCfHfeOM= Subject key identifier: 09:44:CB:4A:F2:BF:72:24:6C:67:D0:43:2D:D7:F7:9E:BD:A6:FF:E3 Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 Certificate issuer: /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Certificate serial: 7AC116D1227B92BA77E29B12669FBDB6351E1D3C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft Manifest number: 03 Signing time: Tue 12 May 2026 09:44:53 +0000 Manifest this update: Tue 12 May 2026 09:39:53 +0000 Manifest next update: Wed 13 May 2026 13:14:53 +0000 Files and hashes: 1: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: hd+e2bFM46/yPdi/p3kzXd3wvNPqCGKq65Q6Ii5CZLo=) 2: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c1:16:d1:22:7b:92:ba:77:e2:9b:12:66:9f:bd:b6:35:1e:1d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Validity Not Before: May 12 09:39:53 2026 GMT Not After : May 13 13:14:53 2026 GMT Subject: CN=0944CB4AF2BF72246C67D0432DD7F79EBDA6FFE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:38:b1:c6:02:31:5b:62:c8:59:0e:8c:03: 03:cf:71:aa:7e:0e:e2:51:70:80:91:63:c0:7f:61: 77:41:46:ff:cc:0f:19:79:69:65:6a:a5:6f:48:5d: aa:9a:c2:61:c4:08:00:af:18:2d:59:36:36:26:d3: 4a:a6:5a:47:4a:0c:f0:ba:ac:c5:d5:69:d9:dc:aa: ac:8b:be:be:db:0a:b8:86:a5:92:86:6c:04:e6:02: b4:83:9a:0f:b0:34:d5:cf:11:f3:31:19:71:ad:a9: c0:31:43:ec:34:12:00:4f:cb:ce:25:d6:01:65:4c: a5:b2:68:78:45:46:87:7b:1c:77:26:2f:54:49:e4: 19:1c:83:43:cf:b0:0e:9d:40:05:3c:43:9c:47:8a: 62:a6:8c:5c:3b:d5:50:18:f9:cb:f0:0c:79:52:64: 15:74:6e:ff:b5:6a:6a:1d:0c:19:5a:5a:0b:95:21: 7a:19:88:6e:54:4b:e6:ed:eb:61:8f:0d:9c:72:3d: e8:0c:8f:13:b4:67:75:f0:1c:0f:ad:27:c1:80:23: 97:aa:d2:9b:1b:d5:de:b2:35:e6:f0:ab:42:6b:4b: 14:db:25:20:38:ea:22:07:8d:a5:87:e3:f9:5c:a7: 4c:c9:30:05:55:55:e1:fa:6d:c0:92:4b:f4:6f:04: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:44:CB:4A:F2:BF:72:24:6C:67:D0:43:2D:D7:F7:9E:BD:A6:FF:E3 X509v3 Authority Key Identifier: keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a5:4c:8e:4b:64:b0:db:6b:8f:5a:32:06:18:17:1a:dd:71: 50:9b:17:7c:d5:b0:a1:77:2d:2b:bf:21:66:ca:3d:59:00:37: b9:fb:2c:aa:1f:90:22:26:c5:1b:f4:67:06:c9:0e:1c:a3:62: 85:81:7b:d7:3a:c6:dd:b4:97:02:3c:ef:52:ae:10:15:f7:df: 01:80:0f:8b:46:88:be:0c:be:66:0a:0a:fd:6a:70:f3:f6:a5: 3c:bc:b4:10:30:8c:de:dc:8f:df:79:6f:d7:88:51:10:ef:b8: f3:34:53:db:6f:2c:e2:1b:11:45:9b:f3:43:a8:97:f2:d4:a2: ab:64:5e:8e:e8:ec:02:c6:81:d9:36:79:56:8b:36:c6:fd:d2: 0a:54:a0:86:36:97:55:c9:78:54:5d:66:8c:cc:c0:b2:35:72: 97:38:86:7e:d5:c7:86:8d:8a:12:b8:cd:d4:d9:ae:6b:8b:3a: ec:51:af:88:c0:2c:49:dc:b8:f5:7e:68:32:68:5b:36:b3:be: 1e:7c:b4:0b:78:31:2b:9a:d8:02:7b:07:e3:62:6b:e1:e7:9a: 52:5c:cf:f4:e6:1b:aa:fd:88:f2:19:c0:cb:42:54:7a:c3:c4: ab:a7:29:8e:8b:b9:16:32:58:c7:28:24:67:02:89:9a:cd:c3: 50:12:6e:bc -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUesEW0SJ7krp34psSZp+9tjUeHTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBFMDk0MDczOUM3QzhBMUUzOUZBOTkzQTE1OUYyNzkw MUFEMTIyNzAeFw0yNjA1MTIwOTM5NTNaFw0yNjA1MTMxMzE0NTNaMDMxMTAvBgNV BAMTKDA5NDRDQjRBRjJCRjcyMjQ2QzY3RDA0MzJERDdGNzlFQkRBNkZGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHjixxgIxW2LIWQ6MAwPPcap+ DuJRcICRY8B/YXdBRv/MDxl5aWVqpW9IXaqawmHECACvGC1ZNjYm00qmWkdKDPC6 rMXVadncqqyLvr7bCriGpZKGbATmArSDmg+wNNXPEfMxGXGtqcAxQ+w0EgBPy84l 1gFlTKWyaHhFRod7HHcmL1RJ5Bkcg0PPsA6dQAU8Q5xHimKmjFw71VAY+cvwDHlS ZBV0bv+1amodDBlaWguVIXoZiG5US+bt62GPDZxyPegMjxO0Z3XwHA+tJ8GAI5eq 0psb1d6yNebwq0JrSxTbJSA46iIHjaWH4/lcp0zJMAVVVeH6bcCSS/RvBHBNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUCUTLSvK/ciRsZ9BDLdf3nr2m/+MwHwYDVR0j BBgwFoAU0OCUBznHyKHjn6mToVnyeQGtEicwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VSVkNP TVAvMC9EMEUwOTQwNzM5QzdDOEExRTM5RkE5OTNBMTU5RjI3OTAxQUQxMjI3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwRTA5NDA3MzlDN0M4QTFFMzlGQTk5M0Ex NTlGMjc5MDFBRDEyMjcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRVJWQ09NUC8wL0QwRTA5NDA3 MzlDN0M4QTFFMzlGQTk5M0ExNTlGMjc5MDFBRDEyMjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+pUyO S2Sw22uPWjIGGBca3XFQmxd81bChdy0rvyFmyj1ZADe5+yyqH5AiJsUb9GcGyQ4c o2KFgXvXOsbdtJcCPO9SrhAV998BgA+LRoi+DL5mCgr9anDz9qU8vLQQMIze3I/f eW/XiFEQ77jzNFPbbyziGxFFm/NDqJfy1KKrZF6O6OwCxoHZNnlWizbG/dIKVKCG NpdVyXhUXWaMzMCyNXKXOIZ+1ceGjYoSuM3U2a5rizrsUa+IwCxJ3Lj1fmgyaFs2 s74efLQLeDErmtgCewfjYmvh55pSXM/05huq/YjyGcDLQlR6w8SrpymOi7kWMljH KCRnAomazcNQEm68 -----END CERTIFICATE-----Generated at Wed May 13 04:27:12 2026 by rpki-client