$ rpki-client -vvvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft File: D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json) Hash identifier: xCpqvpct82+Jfx2CSEBshF0w/f+Dkz0HnqDn9kImwLs= Subject key identifier: 31:2B:0D:A9:FA:6F:CC:BE:62:61:06:A0:16:7B:9B:26:39:45:D5:84 Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 Certificate issuer: /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Certificate serial: 7BCCEC3AEEB9C8A1006F47A176884F1466E617A2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft Manifest number: BA Signing time: Sun 27 Sep 2026 10:43:43 +0000 Manifest this update: Sun 27 Sep 2026 10:38:43 +0000 Manifest next update: Mon 28 Sep 2026 14:21:43 +0000 Files and hashes: 1: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=) 2: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: bjRDJW1yxXW+EddzmiZp2H7pF1Ohb3mjKa/SjxJvjWs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cc:ec:3a:ee:b9:c8:a1:00:6f:47:a1:76:88:4f:14:66:e6:17:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227 Validity Not Before: Sep 27 10:38:43 2026 GMT Not After : Sep 28 14:21:43 2026 GMT Subject: CN=312B0DA9FA6FCCBE626106A0167B9B263945D584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:dd:f8:a2:c4:fa:b5:20:e7:7a:68:f7:ea: 12:bc:2f:f1:c2:ae:24:4a:02:a0:08:ad:a7:c2:c2: d1:71:27:39:03:2d:82:8d:6f:c3:9e:ac:a2:c7:09: 17:37:df:fe:5c:50:48:0d:8a:17:df:62:67:10:a5: 2a:f1:dc:4d:e9:95:0b:60:8a:89:72:13:c2:b5:76: ca:e9:20:b9:f0:72:0c:3e:42:2c:48:48:b1:81:45: 32:d4:06:3d:76:d9:39:50:9a:4f:50:fd:52:f5:91: d1:89:ce:a9:e0:dc:fa:5d:a6:0a:be:51:eb:b9:20: b8:6f:84:22:d8:73:1e:1b:bc:92:9c:0f:11:67:88: b7:7a:97:5d:96:84:59:8f:b8:a7:f5:be:fa:3f:49: fd:54:55:25:70:0a:e0:19:34:91:49:29:86:7c:33: c9:23:2d:eb:c3:85:82:fb:11:d1:70:52:d5:e0:03: 1d:76:fb:bf:3b:07:fd:92:08:da:3c:1b:8b:cb:e6: 0e:cc:aa:fc:ac:ec:3e:84:39:cf:c0:67:a3:6a:ab: 5a:32:37:63:f4:6b:a6:a3:1d:e4:c0:e6:26:f1:bd: 49:70:de:6b:2f:00:db:94:21:44:65:49:f9:a6:40: 92:49:18:f6:d0:be:0f:f1:3b:47:65:3d:f4:51:1c: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2B:0D:A9:FA:6F:CC:BE:62:61:06:A0:16:7B:9B:26:39:45:D5:84 X509v3 Authority Key Identifier: keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:13:d7:ab:e2:98:ad:7c:e8:c5:ed:6a:9a:2b:4b:f4:b7:b4: a6:44:97:72:db:03:4f:51:5c:44:d9:fe:d4:1d:8b:29:67:f7: f8:97:53:12:7a:75:7b:41:aa:08:cb:7e:3a:03:54:d1:a3:52: 8d:b6:48:cb:b4:25:6b:38:d9:9a:bb:b7:68:ae:9c:73:b0:c0: 82:a0:32:82:dc:96:7e:48:e9:d9:05:3a:40:c5:27:c8:f9:2e: 25:d4:a7:1f:77:77:5c:6f:9f:05:98:44:58:bc:4f:03:86:52: 99:bd:1e:65:1f:36:56:5b:f0:41:3f:c9:43:b1:44:35:76:96: cf:19:22:7f:17:eb:41:ed:3d:57:d7:b1:e9:ed:02:6c:7c:bb: 8a:a7:48:01:70:8c:95:bb:2c:24:b4:eb:b0:58:d7:d6:a0:99: bc:99:93:2a:3a:0d:e1:3f:16:e3:f9:70:78:6b:fb:ec:16:32: 65:7b:ee:26:d3:86:3d:e7:b2:e0:db:84:67:2c:4d:79:bc:88: b9:14:c9:0c:4b:5e:94:e7:d7:a1:36:82:09:3c:0b:c0:4a:43: df:e6:f6:fa:7f:e4:f2:c7:0e:fc:bd:96:29:b3:fe:6a:71:53: a2:c1:65:89:57:68:22:11:64:bb:5c:aa:19:38:b4:a0:be:02: 2a:d8:cc:9f -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUe8zsOu65yKEAb0ehdohPFGbmF6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBFMDk0MDczOUM3QzhBMUUzOUZBOTkzQTE1OUYyNzkw MUFEMTIyNzAeFw0yNjA5MjcxMDM4NDNaFw0yNjA5MjgxNDIxNDNaMDMxMTAvBgNV BAMTKDMxMkIwREE5RkE2RkNDQkU2MjYxMDZBMDE2N0I5QjI2Mzk0NUQ1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrN34osT6tSDnemj36hK8L/HC riRKAqAIrafCwtFxJzkDLYKNb8OerKLHCRc33/5cUEgNihffYmcQpSrx3E3plQtg iolyE8K1dsrpILnwcgw+QixISLGBRTLUBj122TlQmk9Q/VL1kdGJzqng3Ppdpgq+ Ueu5ILhvhCLYcx4bvJKcDxFniLd6l12WhFmPuKf1vvo/Sf1UVSVwCuAZNJFJKYZ8 M8kjLevDhYL7EdFwUtXgAx12+787B/2SCNo8G4vL5g7Mqvys7D6EOc/AZ6Nqq1oy N2P0a6ajHeTA5ibxvUlw3msvANuUIURlSfmmQJJJGPbQvg/xO0dlPfRRHIVZAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUMSsNqfpvzL5iYQagFnubJjlF1YQwHwYDVR0j BBgwFoAU0OCUBznHyKHjn6mToVnyeQGtEicwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VSVkNP TVAvMC9EMEUwOTQwNzM5QzdDOEExRTM5RkE5OTNBMTU5RjI3OTAxQUQxMjI3LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwRTA5NDA3MzlDN0M4QTFFMzlGQTk5M0Ex NTlGMjc5MDFBRDEyMjcuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRVJWQ09NUC8wL0QwRTA5NDA3 MzlDN0M4QTFFMzlGQTk5M0ExNTlGMjc5MDFBRDEyMjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKE9er 4pitfOjF7WqaK0v0t7SmRJdy2wNPUVxE2f7UHYspZ/f4l1MSenV7QaoIy346A1TR o1KNtkjLtCVrONmau7dorpxzsMCCoDKC3JZ+SOnZBTpAxSfI+S4l1Kcfd3dcb58F mERYvE8DhlKZvR5lHzZWW/BBP8lDsUQ1dpbPGSJ/F+tB7T1X17Hp7QJsfLuKp0gB cIyVuywktOuwWNfWoJm8mZMqOg3hPxbj+XB4a/vsFjJle+4m04Y957Lg24RnLE15 vIi5FMkMS16U59ehNoIJPAvASkPf5vb6f+Tyxw78vZYps/5qcVOiwWWJV2giEWS7 XKoZOLSgvgIq2Myf -----END CERTIFICATE-----Generated at Sun Sep 27 21:05:33 2026 by rpki-client