$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft File: CA678C886D87F023B9297877BF550E88E90AE169.mft (raw, json) Hash identifier: HLQGJ3KmhwJQctUqe9wlOmUWT1iOkaF9DhVjedPk3+Y= Subject key identifier: CA:48:36:29:6A:31:9F:37:30:50:1A:53:50:1B:44:FB:B1:E7:E1:EF Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 Certificate issuer: /CN=CA678C886D87F023B9297877BF550E88E90AE169 Certificate serial: 57A7E475917FDC3BC5C4121D8ACD0C0173FE2C21 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 03:07:25 +0000 Manifest this update: Fri 24 Jul 2026 03:02:25 +0000 Manifest next update: Sat 25 Jul 2026 04:55:25 +0000 Files and hashes: 1: 34392e3231332e33342e302f32332d3234203d3e2037353336.roa (hash: UiYvDw3Nz5+XLnUJ6ot0sHBwCYvrMQN4qa4YEtJyIAc=) 2: CA678C886D87F023B9297877BF550E88E90AE169.crl (hash: 5Pq6rDS87jafacRcXSM62xZTvza+Qj7odfmblbIEJ5M=) 3: 34392e3231332e33342e302f32332d3234203d3e203231383539.roa (hash: fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a7:e4:75:91:7f:dc:3b:c5:c4:12:1d:8a:cd:0c:01:73:fe:2c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169 Validity Not Before: Jul 24 03:02:25 2026 GMT Not After : Jul 25 04:55:25 2026 GMT Subject: CN=CA4836296A319F3730501A53501B44FBB1E7E1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:8a:df:9c:4d:87:16:ef:cb:f2:14:3d:f7: 4d:56:c2:9a:8b:a9:e2:05:61:55:a1:51:d6:68:39: d5:0f:8d:d4:51:63:ea:67:13:df:d1:53:03:8b:1a: 30:09:6a:aa:32:0a:35:fb:8c:90:2d:20:4d:74:e5: ad:c5:0c:33:4e:82:88:fb:e6:68:18:55:84:08:43: e8:ca:d7:ff:e0:64:ac:47:d4:d6:ce:99:70:99:60: e9:9d:ba:33:cf:f5:a8:8e:bd:00:00:08:14:b7:b2: 2b:da:35:ad:65:11:52:68:51:df:cf:b8:f2:57:01: 5f:cc:1c:b8:fa:b3:a6:96:d7:0d:d3:2e:37:32:f2: 18:9c:c7:8e:03:04:05:8a:25:6e:da:98:29:bd:e1: 30:47:43:60:f6:19:f4:8c:da:7c:96:12:e8:48:a2: 20:1b:0b:8c:d1:4a:fb:74:51:39:c1:cf:c3:60:2f: 9b:b7:0e:cf:ef:f2:3e:79:0b:56:af:38:ce:bd:a3: 9a:20:ed:43:05:3a:11:7a:73:6a:3c:46:08:43:44: 47:ef:26:94:a4:5d:cf:ec:bd:6f:4a:29:70:78:77: a2:39:82:cd:a8:e3:56:05:21:b6:07:94:43:00:fd: 46:a2:cc:ba:f9:05:21:ea:78:21:c4:5f:ec:be:d3: c9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:36:29:6A:31:9F:37:30:50:1A:53:50:1B:44:FB:B1:E7:E1:EF X509v3 Authority Key Identifier: keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5f:a0:0d:ec:de:f3:f9:3e:b5:f0:59:e2:29:e2:1b:a1:02: 3f:b8:f1:d0:2e:3e:01:e8:2c:f4:c6:45:97:70:64:53:9a:6f: d4:64:8a:85:9c:db:88:cf:ec:22:47:8f:bd:f0:18:b6:25:3f: 2c:87:38:4c:fe:3e:07:1f:72:45:23:62:6a:8e:54:a9:5b:64: 8a:8a:01:87:8d:68:6e:fe:6c:75:5d:70:3f:dc:22:d8:0a:d1: bc:b0:d2:7f:bc:93:e5:73:38:6c:21:80:47:b3:a2:b6:bb:65: 0d:d4:dc:86:9f:9c:04:7a:4e:2e:2f:89:6f:2a:73:38:21:21: 3a:d1:90:44:db:06:7d:85:57:71:e9:5e:ed:e8:ba:48:c9:aa: 84:d1:c9:cf:e1:e8:05:22:1b:d5:05:9f:a1:18:a9:13:ce:68: fd:92:1f:35:d9:bf:04:6d:10:93:8d:fc:2d:04:43:17:0e:64: 72:46:41:e6:61:f7:a0:56:5b:6f:fb:d7:cb:2b:4a:51:a9:73: 1f:f7:44:5a:fc:00:39:4d:f9:b7:76:a0:39:4c:6c:09:67:8b: 07:ce:94:8e:d3:8b:43:52:d8:5f:ab:85:8b:15:1c:8f:d3:cb: 8f:b5:d0:f2:0d:0b:f0:91:d7:16:e3:2f:e9:04:60:d7:ac:f9: 92:e9:36:c0 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUV6fkdZF/3DvFxBIdis0MAXP+LCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1NTBFODhF OTBBRTE2OTAeFw0yNjA3MjQwMzAyMjVaFw0yNjA3MjUwNDU1MjVaMDMxMTAvBgNV BAMTKENBNDgzNjI5NkEzMTlGMzczMDUwMUE1MzUwMUI0NEZCQjFFN0UxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHorfnE2HFu/L8hQ9901WwpqL qeIFYVWhUdZoOdUPjdRRY+pnE9/RUwOLGjAJaqoyCjX7jJAtIE105a3FDDNOgoj7 5mgYVYQIQ+jK1//gZKxH1NbOmXCZYOmdujPP9aiOvQAACBS3sivaNa1lEVJoUd/P uPJXAV/MHLj6s6aW1w3TLjcy8hicx44DBAWKJW7amCm94TBHQ2D2GfSM2nyWEuhI oiAbC4zRSvt0UTnBz8NgL5u3Ds/v8j55C1avOM69o5og7UMFOhF6c2o8RghDREfv JpSkXc/svW9KKXB4d6I5gs2o41YFIbYHlEMA/UaizLr5BSHqeCHEX+y+08lhAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUykg2KWoxnzcwUBpTUBtE+7Hn4e8wHwYDVR0j BBgwFoAUymeMiG2H8CO5KXh3v1UOiOkK4WkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJWUlZ SS8wL0NBNjc4Qzg4NkQ4N0YwMjNCOTI5Nzg3N0JGNTUwRTg4RTkwQUUxNjkuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1 NTBFODhFOTBBRTE2OS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISVlJWUkvMC9DQTY3OEM4ODZE ODdGMDIzQjkyOTc4NzdCRjU1MEU4OEU5MEFFMTY5Lm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1+gDeze 8/k+tfBZ4iniG6ECP7jx0C4+Aegs9MZFl3BkU5pv1GSKhZzbiM/sIkePvfAYtiU/ LIc4TP4+Bx9yRSNiao5UqVtkiooBh41obv5sdV1wP9wi2ArRvLDSf7yT5XM4bCGA R7OitrtlDdTchp+cBHpOLi+JbypzOCEhOtGQRNsGfYVXcele7ei6SMmqhNHJz+Ho BSIb1QWfoRipE85o/ZIfNdm/BG0Qk438LQRDFw5kckZB5mH3oFZbb/vXyytKUalz H/dEWvwAOU35t3agOUxsCWeLB86UjtOLQ1LYX6uFixUcj9PLj7XQ8g0L8JHXFuMv 6QRg16z5kuk2wA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:26:37 2026 by rpki-client