$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft File: CA678C886D87F023B9297877BF550E88E90AE169.mft (raw, json) Hash identifier: +CiG+xc9JYSBfAQuIxIro6AiWzIItMbzKPEAdui2MaI= Subject key identifier: 7D:F3:45:EA:2B:5C:DF:9A:19:99:66:2B:F5:DA:1C:64:72:AF:8D:EA Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 Certificate issuer: /CN=CA678C886D87F023B9297877BF550E88E90AE169 Certificate serial: 786DF9F28614077B7208C21C0FE6E34E7C70BD21 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft Manifest number: BB Signing time: Sun 27 Sep 2026 04:53:02 +0000 Manifest this update: Sun 27 Sep 2026 04:48:02 +0000 Manifest next update: Mon 28 Sep 2026 07:25:02 +0000 Files and hashes: 1: 34392e3231332e33342e302f32332d3234203d3e203231383539.roa (hash: fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=) 2: CA678C886D87F023B9297877BF550E88E90AE169.crl (hash: HZSIiEfXGihVfoUykUF4e5iXbZcPn9V+CVmFp6DzBRo=) 3: 34392e3231332e33342e302f32332d3234203d3e2037353336.roa (hash: UiYvDw3Nz5+XLnUJ6ot0sHBwCYvrMQN4qa4YEtJyIAc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6d:f9:f2:86:14:07:7b:72:08:c2:1c:0f:e6:e3:4e:7c:70:bd:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169 Validity Not Before: Sep 27 04:48:02 2026 GMT Not After : Sep 28 07:25:02 2026 GMT Subject: CN=7DF345EA2B5CDF9A1999662BF5DA1C6472AF8DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:cd:51:a2:5e:c5:44:77:6d:79:8f:5e:b2: 8d:45:5e:99:9a:dc:16:39:57:e1:02:68:33:ce:e8: ea:4f:0b:8e:b3:02:74:aa:23:9a:2d:eb:d1:91:0c: 32:73:67:b2:9f:9d:d9:12:98:62:8b:79:9e:70:5c: ad:84:ab:68:cd:b0:a2:a7:24:2a:27:a1:b1:c6:5e: 0f:1a:1e:d8:d8:a4:db:7b:a6:b7:87:74:70:95:40: 6e:85:ad:3d:5f:f3:e6:c8:32:50:c6:e8:4d:c1:d6: 30:8e:1e:57:34:b6:3f:c5:55:83:19:da:ce:18:56: 35:dd:0b:cf:2a:1c:3f:ec:5e:7a:9d:a2:ff:87:b1: 0a:8d:14:f6:c5:19:dd:6f:58:39:21:41:15:de:e4: 2a:03:8c:53:31:2d:b9:57:87:41:a8:6a:bb:ee:b4: 67:dc:b2:2e:c5:da:01:17:bd:35:50:f6:b6:ee:f8: 24:c0:7c:ec:6a:0b:bc:6a:2a:01:92:bb:9d:fe:1d: f9:6d:2d:a8:c4:41:66:4f:5e:13:89:4e:64:32:76: e4:f5:f3:9b:4a:af:ac:d8:dd:91:15:28:e2:a6:b1: 75:33:14:00:5a:9e:65:ca:62:4e:5c:9a:cd:95:7e: 42:05:b0:6b:b5:62:2f:ac:41:88:3c:5f:bb:de:39: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F3:45:EA:2B:5C:DF:9A:19:99:66:2B:F5:DA:1C:64:72:AF:8D:EA X509v3 Authority Key Identifier: keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ce:77:57:20:fe:9b:e0:79:e4:8b:a8:58:d5:b7:a8:21:41: d7:27:57:29:b1:c5:fa:5b:f6:48:a0:ab:38:06:ee:e5:fc:b9: c9:b1:99:d4:12:ea:91:a6:2b:2f:2b:5a:51:42:d0:41:13:d5: 93:ef:3a:98:57:e2:6a:ce:67:57:01:85:82:a2:88:4d:f7:dd: 35:8c:c1:ae:db:03:53:7e:2d:9f:f9:47:4f:9b:4b:d9:b2:ad: 0a:9f:49:b9:6c:99:fa:86:4c:4b:c1:bc:19:c6:dd:02:cc:a6: 82:a7:7e:6f:29:2b:48:5a:73:25:83:af:c8:0a:2c:d3:4e:21: 98:73:b9:22:00:ff:f6:ff:49:96:c9:8a:c7:4b:eb:3a:f2:fa: a0:2b:5d:7d:7f:83:b9:1d:0d:3a:f0:4b:21:80:0c:24:58:dc: 12:4d:b8:2b:63:68:c3:41:b3:46:d7:d0:15:4f:70:01:92:7c: 4f:52:98:b9:27:c2:28:7b:cf:25:38:69:58:4e:f7:ad:b2:be: c8:f7:40:9d:40:e3:46:48:37:bd:37:8f:ba:fd:a0:3a:ca:47: 23:e4:de:65:b8:0c:f1:fb:da:ce:ae:d3:28:82:81:a9:29:f1: 58:a9:13:a0:5c:07:8f:41:66:c9:23:94:3c:b5:f3:48:47:b8: 40:50:b9:46 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUeG358oYUB3tyCMIcD+bjTnxwvSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1NTBFODhF OTBBRTE2OTAeFw0yNjA5MjcwNDQ4MDJaFw0yNjA5MjgwNzI1MDJaMDMxMTAvBgNV BAMTKDdERjM0NUVBMkI1Q0RGOUExOTk5NjYyQkY1REExQzY0NzJBRjhERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMAc1Rol7FRHdteY9eso1FXpma 3BY5V+ECaDPO6OpPC46zAnSqI5ot69GRDDJzZ7KfndkSmGKLeZ5wXK2Eq2jNsKKn JConobHGXg8aHtjYpNt7preHdHCVQG6FrT1f8+bIMlDG6E3B1jCOHlc0tj/FVYMZ 2s4YVjXdC88qHD/sXnqdov+HsQqNFPbFGd1vWDkhQRXe5CoDjFMxLblXh0Goarvu tGfcsi7F2gEXvTVQ9rbu+CTAfOxqC7xqKgGSu53+HfltLajEQWZPXhOJTmQyduT1 85tKr6zY3ZEVKOKmsXUzFABanmXKYk5cms2VfkIFsGu1Yi+sQYg8X7veOTwfAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUffNF6itc35oZmWYr9docZHKvjeowHwYDVR0j BBgwFoAUymeMiG2H8CO5KXh3v1UOiOkK4WkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJWUlZ SS8wL0NBNjc4Qzg4NkQ4N0YwMjNCOTI5Nzg3N0JGNTUwRTg4RTkwQUUxNjkuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1 NTBFODhFOTBBRTE2OS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISVlJWUkvMC9DQTY3OEM4ODZE ODdGMDIzQjkyOTc4NzdCRjU1MEU4OEU5MEFFMTY5Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM53VyD+ m+B55IuoWNW3qCFB1ydXKbHF+lv2SKCrOAbu5fy5ybGZ1BLqkaYrLytaUULQQRPV k+86mFfias5nVwGFgqKITffdNYzBrtsDU34tn/lHT5tL2bKtCp9JuWyZ+oZMS8G8 GcbdAsymgqd+bykrSFpzJYOvyAos004hmHO5IgD/9v9JlsmKx0vrOvL6oCtdfX+D uR0NOvBLIYAMJFjcEk24K2Now0GzRtfQFU9wAZJ8T1KYuSfCKHvPJThpWE73rbK+ yPdAnUDjRkg3vTePuv2gOspHI+TeZbgM8fvazq7TKIKBqSnxWKkToFwHj0FmySOU PLXzSEe4QFC5Rg== -----END CERTIFICATE-----Generated at Sun Sep 27 17:43:11 2026 by rpki-client