$ rpki-client -vvvf rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft File: 2963CB623A578334B7033062B58BFED2DC07BB04.mft (raw, json) Hash identifier: cIQXj2jWKeHZNhxmVDkrOtq/+K4L/Hh1ZTe95vyJXEg= Subject key identifier: 8B:47:DA:70:0D:BC:F3:0B:19:27:FE:85:23:3F:2E:B8:31:DF:BE:07 Authority key identifier: 29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 Certificate issuer: /CN=2963CB623A578334B7033062B58BFED2DC07BB04 Certificate serial: 2656CB6D79E98B9E98115D3DF3C74673B119AFC0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject info access: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft Manifest number: B9 Signing time: Fri 25 Sep 2026 08:42:31 +0000 Manifest this update: Fri 25 Sep 2026 08:37:31 +0000 Manifest next update: Sat 26 Sep 2026 11:53:31 +0000 Files and hashes: 1: 2963CB623A578334B7033062B58BFED2DC07BB04.crl (hash: dwWCViMnqtpCnNGMy7QWLu0rFdTs+vBdunkDctC/NE4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:56:cb:6d:79:e9:8b:9e:98:11:5d:3d:f3:c7:46:73:b1:19:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2963CB623A578334B7033062B58BFED2DC07BB04 Validity Not Before: Sep 25 08:37:31 2026 GMT Not After : Sep 26 11:53:31 2026 GMT Subject: CN=8B47DA700DBCF30B1927FE85233F2EB831DFBE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:57:48:94:59:44:97:44:6b:87:b6:e8:40: c2:25:da:54:e3:0f:4d:41:d6:a8:68:16:96:a6:b1: 2f:1e:99:93:e6:33:2d:82:bf:91:76:4f:18:14:42: 21:b7:10:68:52:3a:1d:39:7a:23:3e:2c:5f:ac:4b: 77:2b:8e:79:bd:ee:ab:89:f2:65:56:ad:d1:1a:aa: 4c:6c:1f:96:74:8e:00:fe:51:89:f6:33:52:54:25: 4d:53:37:87:9f:32:bf:63:76:e7:55:e1:03:76:81: c2:5c:40:f0:3e:50:f8:fb:60:63:b1:46:7c:e3:8e: 73:2b:fc:d4:22:7d:bf:53:00:8d:a6:9d:c3:72:ce: ab:63:34:c8:3c:f0:0c:de:e5:6c:76:9b:8a:96:1b: c9:a4:5e:f9:c4:c0:92:75:7c:f1:c7:8a:27:b8:b5: 33:b4:b7:7c:8b:07:fa:45:54:30:27:91:af:3f:0f: 68:58:d4:12:87:36:b3:2d:a1:21:1f:c3:c1:78:9e: ee:49:98:e2:33:f3:2a:cc:fd:66:0b:87:f4:4b:be: 99:f2:3c:be:82:0c:90:0e:c9:16:b0:1e:2d:f2:1c: ec:31:ab:4f:45:b1:95:9d:8e:0f:a6:e2:0b:f4:c6: 78:73:e9:8a:16:93:e4:e1:17:71:c7:8f:a7:f5:e7: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:47:DA:70:0D:BC:F3:0B:19:27:FE:85:23:3F:2E:B8:31:DF:BE:07 X509v3 Authority Key Identifier: keyid:29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d7:67:85:b4:fb:e9:a9:e3:44:0e:f8:5d:00:dd:b9:4c:9f: 8d:64:e8:91:20:75:90:d5:de:65:19:27:63:79:46:da:d2:84: 5c:63:18:db:39:eb:87:60:34:c0:a7:2d:6f:ec:6d:ba:61:d4: 95:08:99:c7:28:d1:e0:20:f6:34:13:b5:86:74:d7:c4:47:5d: a6:5a:e4:27:f7:ae:14:d7:67:c6:f1:b5:f0:55:b7:c5:59:cc: 73:16:62:ad:52:26:30:e7:6d:ea:9e:c9:84:04:d8:66:ae:fd: b8:ac:1c:92:9f:1c:c4:ba:2f:42:71:02:79:c1:c2:36:f4:9f: 25:64:dc:0b:67:f1:cf:6b:e8:29:c0:d2:24:87:2a:ea:93:7a: e0:5c:d3:d8:f3:b9:c9:0d:72:13:57:88:29:e2:2a:90:0d:d4: d9:af:3d:27:60:6e:42:32:87:d1:5f:a0:d6:42:43:f5:87:10: 66:ba:e0:42:e9:2e:2f:15:5f:8f:d3:4d:b2:6b:59:9a:bb:17: 14:73:b5:ba:2f:a9:a8:20:d2:fc:8f:8e:03:b4:fe:b9:13:04: d5:ee:62:b1:34:ac:ee:a9:df:74:6c:4e:f7:4b:da:09:9e:7b: 22:9b:30:1d:92:89:36:04:01:da:24:54:15:a2:da:8f:35:61: f1:85:d0:32 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJlbLbXnpi56YEV0988dGc7EZr8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJE QzA3QkIwNDAeFw0yNjA5MjUwODM3MzFaFw0yNjA5MjYxMTUzMzFaMDMxMTAvBgNV BAMTKDhCNDdEQTcwMERCQ0YzMEIxOTI3RkU4NTIzM0YyRUI4MzFERkJFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtFdIlFlEl0Rrh7boQMIl2lTj D01B1qhoFpamsS8emZPmMy2Cv5F2TxgUQiG3EGhSOh05eiM+LF+sS3crjnm97quJ 8mVWrdEaqkxsH5Z0jgD+UYn2M1JUJU1TN4efMr9jdudV4QN2gcJcQPA+UPj7YGOx RnzjjnMr/NQifb9TAI2mncNyzqtjNMg88Aze5Wx2m4qWG8mkXvnEwJJ1fPHHiie4 tTO0t3yLB/pFVDAnka8/D2hY1BKHNrMtoSEfw8F4nu5JmOIz8yrM/WYLh/RLvpny PL6CDJAOyRawHi3yHOwxq09FsZWdjg+m4gv0xnhz6YoWk+ThF3HHj6f155ldAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUi0facA288wsZJ/6FIz8uuDHfvgcwHwYDVR0j BBgwFoAUKWPLYjpXgzS3AzBitYv+0twHuwQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAv Mjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yOTYzQ0I2MjNBNTc4MzM0QjcwMzMwNjJCNThCRkVE MkRDMDdCQjA0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAvMjk2M0NCNjIzQTU3ODMzNEI3 MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFbXZ4W0++mp40QO+F0A 3blMn41k6JEgdZDV3mUZJ2N5RtrShFxjGNs564dgNMCnLW/sbbph1JUImcco0eAg 9jQTtYZ018RHXaZa5Cf3rhTXZ8bxtfBVt8VZzHMWYq1SJjDnbeqeyYQE2Gau/bis HJKfHMS6L0JxAnnBwjb0nyVk3Atn8c9r6CnA0iSHKuqTeuBc09jzuckNchNXiCni KpAN1NmvPSdgbkIyh9FfoNZCQ/WHEGa64ELpLi8VX4/TTbJrWZq7FxRztbovqagg 0vyPjgO0/rkTBNXuYrE0rO6p33RsTvdL2gmeeyKbMB2SiTYEAdokVBWi2o81YfGF 0DI= -----END CERTIFICATE-----Generated at Fri Sep 25 23:31:47 2026 by rpki-client