$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft File: 164EB710D7AA83CB67EE2E709B4F195437239363.mft (raw, json) Hash identifier: O/p7wsbJgtXtcVKAUCANpC+4U1moc0YPt/zkoaa6X/U= Subject key identifier: D0:A6:27:4E:96:23:CA:6F:59:82:FF:DA:B3:56:AF:84:E4:D8:2D:B1 Authority key identifier: 16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63 Certificate issuer: /CN=164EB710D7AA83CB67EE2E709B4F195437239363 Certificate serial: 64CFD983811B42BFE8911B1F2EA4317E92BE0722 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 19:54:17 +0000 Manifest this update: Thu 24 Sep 2026 19:49:17 +0000 Manifest next update: Fri 25 Sep 2026 21:15:17 +0000 Files and hashes: 1: 164EB710D7AA83CB67EE2E709B4F195437239363.crl (hash: /qMsCKYywQk/H1l1MM7/kXM77EFzWyx5tDUtTZgnh7g=) 2: 323430363a3330303a3a2f33322d3332203d3e2033343632.roa (hash: Mx2hdpo1JSD9a9oOTPfRMGnVumGCxyTkbl1EN6cIp8s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cf:d9:83:81:1b:42:bf:e8:91:1b:1f:2e:a4:31:7e:92:be:07:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164EB710D7AA83CB67EE2E709B4F195437239363 Validity Not Before: Sep 24 19:49:17 2026 GMT Not After : Sep 25 21:15:17 2026 GMT Subject: CN=D0A6274E9623CA6F5982FFDAB356AF84E4D82DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:dd:a9:ff:cc:be:04:a6:b7:ba:bf:4f:76: 66:4d:6b:4b:84:02:ee:f3:a7:d8:47:6d:ec:b6:75: 8a:28:54:01:f7:f4:1a:33:46:06:86:db:f2:28:56: 87:e7:cc:ec:94:dd:37:69:02:76:b0:72:94:cb:e9: a8:8f:ab:b4:89:d8:0e:82:9a:0a:72:a5:44:6f:30: 28:a1:a7:d4:97:d6:88:b5:26:81:5f:7b:7d:55:27: b5:08:36:17:96:52:66:0e:71:3b:34:af:97:fd:f0: bd:f2:33:b8:6e:6f:a3:ee:01:d2:e5:ca:e5:18:78: 98:43:2b:4e:02:d0:5a:87:8f:36:56:3e:f5:69:4d: 19:b2:24:6f:d0:54:50:9c:04:81:ff:37:be:be:70: e4:77:ca:7d:22:0f:ec:82:07:f0:a5:79:be:73:b1: 59:36:56:3a:96:4e:f4:07:d8:7f:ee:58:31:45:cf: 92:a9:f8:31:28:f8:fe:d4:4c:59:b2:09:c8:0c:f9: 3a:5f:6d:fc:d4:1f:c6:37:57:75:37:af:01:69:88: a8:0d:13:a5:5f:b1:d5:e0:81:c8:4f:f1:e0:ba:e6: e6:16:c3:fc:7b:50:bb:b6:0c:7d:26:3e:17:01:42: 79:97:cf:30:7b:53:a4:38:7e:04:52:20:b3:ae:d5: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:27:4E:96:23:CA:6F:59:82:FF:DA:B3:56:AF:84:E4:D8:2D:B1 X509v3 Authority Key Identifier: keyid:16:4E:B7:10:D7:AA:83:CB:67:EE:2E:70:9B:4F:19:54:37:23:93:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/164EB710D7AA83CB67EE2E709B4F195437239363.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPUSER/0/164EB710D7AA83CB67EE2E709B4F195437239363.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:67:d2:97:4c:ce:54:ab:ac:74:2c:86:5b:58:c9:ab:fc:72: d1:2c:b3:45:ab:d6:80:26:fa:bd:b2:c9:73:c7:7c:dd:5f:95: df:38:37:c9:7b:d9:dd:b3:ee:41:98:df:78:e3:35:0c:57:13: 9d:38:2f:22:dc:b6:27:10:87:fd:2e:48:9d:8f:9e:e1:27:3d: 9a:5a:20:8d:38:30:d1:36:62:6d:a9:e1:9d:84:00:bf:f0:22: e9:8c:c2:19:65:21:5f:66:c6:57:88:f0:c7:79:22:4d:6f:c5: 79:37:f2:51:31:42:ec:56:b9:51:a4:e9:d6:c1:b5:fa:3d:b0: 74:ec:a9:a2:45:5f:2e:e7:78:5e:07:3c:9e:89:a5:6f:19:2c: 35:9c:39:90:28:56:11:c0:18:1c:4a:a2:c7:12:7f:0e:0a:de: 40:0f:e6:f0:16:f6:e1:1a:7d:dc:77:44:e7:91:a9:6e:1d:76: ce:a7:7a:ab:8d:86:57:2d:1f:f6:33:f9:c5:7b:83:ad:65:1b: 83:ef:b3:6c:b4:95:c6:6a:3b:d8:8a:9f:a6:f0:14:b4:63:55: c8:25:d1:a2:80:d3:4e:a3:66:91:5e:f2:df:47:60:97:1c:bc: 0a:a3:e0:7e:44:44:d7:16:a2:24:9a:77:4e:8f:cf:8a:9e:e3: 55:30:ca:7b -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUZM/Zg4EbQr/okRsfLqQxfpK+ByIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQz NzIzOTM2MzAeFw0yNjA5MjQxOTQ5MTdaFw0yNjA5MjUyMTE1MTdaMDMxMTAvBgNV BAMTKEQwQTYyNzRFOTYyM0NBNkY1OTgyRkZEQUIzNTZBRjg0RTREODJEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkht2p/8y+BKa3ur9PdmZNa0uE Au7zp9hHbey2dYooVAH39BozRgaG2/IoVofnzOyU3TdpAnawcpTL6aiPq7SJ2A6C mgpypURvMCihp9SX1oi1JoFfe31VJ7UINheWUmYOcTs0r5f98L3yM7hub6PuAdLl yuUYeJhDK04C0FqHjzZWPvVpTRmyJG/QVFCcBIH/N76+cOR3yn0iD+yCB/Cleb5z sVk2VjqWTvQH2H/uWDFFz5Kp+DEo+P7UTFmyCcgM+TpfbfzUH8Y3V3U3rwFpiKgN E6VfsdXggchP8eC65uYWw/x7ULu2DH0mPhcBQnmXzzB7U6Q4fgRSILOu1YBPAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU0KYnTpYjym9Zgv/as1avhOTYLbEwHwYDVR0j BBgwFoAUFk63ENeqg8tn7i5wm08ZVDcjk2MwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VS LzAvMTY0RUI3MTBEN0FBODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xNjRFQjcxMEQ3QUE4M0NCNjdFRTJFNzA5QjRG MTk1NDM3MjM5MzYzLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BVU0VSLzAvMTY0RUI3MTBEN0FB ODNDQjY3RUUyRTcwOUI0RjE5NTQzNzIzOTM2My5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADNn0pdMzlSr rHQshltYyav8ctEss0Wr1oAm+r2yyXPHfN1fld84N8l72d2z7kGY33jjNQxXE504 LyLcticQh/0uSJ2PnuEnPZpaII04MNE2Ym2p4Z2EAL/wIumMwhllIV9mxleI8Md5 Ik1vxXk38lExQuxWuVGk6dbBtfo9sHTsqaJFXy7neF4HPJ6JpW8ZLDWcOZAoVhHA GBxKoscSfw4K3kAP5vAW9uEafdx3ROeRqW4dds6nequNhlctH/Yz+cV7g61lG4Pv s2y0lcZqO9iKn6bwFLRjVcgl0aKA006jZpFe8t9HYJccvAqj4H5ERNcWoiSad06P z4qe41Uwyns= -----END CERTIFICATE-----Generated at Fri Sep 25 03:59:35 2026 by rpki-client