$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft File: CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json) Hash identifier: 0p4078AIkykFR76cuz7RLjgMwCJUT33RTYTLbN28EvE= Subject key identifier: 53:33:D7:06:C6:0D:29:57:B5:DF:85:01:13:79:11:16:FE:B8:08:9A Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42 Certificate issuer: /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742 Certificate serial: 118F95C9A854E76A2427937C58715FFB98DA2409 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 20:31:42 +0000 Manifest this update: Thu 23 Jul 2026 20:26:42 +0000 Manifest next update: Fri 24 Jul 2026 21:04:42 +0000 Files and hashes: 1: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: xo8aozsMiTDu3v/BSqllcXGBw3OCdjLV7XqcBFQlEyQ=) 2: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=) 3: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8f:95:c9:a8:54:e7:6a:24:27:93:7c:58:71:5f:fb:98:da:24:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742 Validity Not Before: Jul 23 20:26:42 2026 GMT Not After : Jul 24 21:04:42 2026 GMT Subject: CN=5333D706C60D2957B5DF850113791116FEB8089A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:09:f3:28:c2:55:8d:0d:99:5d:ba:34:64: 77:51:8e:2d:63:24:0d:a6:d2:16:4a:d9:e9:8c:d0: 11:b6:92:b5:7b:f9:82:21:03:2e:55:d4:1b:18:b4: ba:46:ca:b0:3a:69:0f:36:af:93:a7:7c:0d:d0:2c: e5:42:8d:27:56:45:67:ee:73:be:c3:4f:91:c9:59: 53:67:e4:02:79:46:87:f0:32:8c:96:82:fe:a2:d1: 84:a8:59:06:6b:29:2c:cc:2c:76:36:90:0d:57:17: c6:3c:7e:78:08:bc:71:cc:b4:9c:83:8e:92:86:e2: 80:de:95:e9:80:dc:2b:05:58:10:c8:e5:d6:81:b0: 3e:48:5c:25:c9:d4:5a:c8:ea:26:86:5b:f2:67:09: af:15:88:2b:ca:d7:62:b3:28:e2:11:4b:f8:02:d8: 35:60:8a:95:6c:c1:2a:bd:34:33:99:21:34:f9:33: 5a:00:b8:d1:f4:22:a4:74:eb:83:b1:a4:87:0d:98: f9:49:08:3a:be:81:8e:7e:9f:02:83:83:04:ca:34: 98:09:74:99:c0:d7:70:ed:3e:d9:df:30:bd:4d:b1: 5e:09:65:74:5d:06:f5:11:19:f0:ed:0c:24:f1:74: b1:1c:6c:03:31:93:d1:48:71:a6:2a:f1:f5:12:9d: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:33:D7:06:C6:0D:29:57:B5:DF:85:01:13:79:11:16:FE:B8:08:9A X509v3 Authority Key Identifier: keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b0:98:a4:43:2f:d3:bb:3c:b4:38:f5:56:55:86:c1:e9:57: 6d:ff:5b:cd:12:76:1e:d5:4c:ec:5f:40:6d:ed:5d:23:03:f9: ea:6b:70:79:a7:ac:75:f2:a6:f3:6f:17:b2:8c:78:bc:b6:c7: 49:b3:74:c7:da:9a:81:e5:be:0e:ae:ed:40:6c:54:7f:c4:f4: d0:bb:b3:c2:18:61:f6:dd:8f:5b:46:bd:d5:76:54:90:ff:1d: c8:e7:cd:fd:19:a9:7e:e7:1e:e9:e5:63:6a:bf:42:64:c2:27: fa:0f:89:c1:fc:ab:e7:4a:b1:b1:3e:d3:ab:29:d4:5b:d8:63: 7f:e2:ad:35:4f:51:01:18:94:06:d0:db:df:63:80:ad:a4:ff: 3e:08:0a:48:9c:46:71:f7:a0:a7:49:a5:0f:10:83:4b:eb:cb: a3:bf:7b:50:20:de:79:b7:23:1d:b6:ba:a9:3b:b8:3a:6c:3f: 21:2d:3a:75:f5:a4:ab:c2:d7:37:9f:b7:60:7c:b4:ac:4d:a2: 6f:ea:58:ed:bc:da:71:92:79:f8:d7:0e:7c:22:64:45:22:ea: a6:c5:42:44:d5:93:db:ee:51:f4:a5:f5:6c:02:c2:50:36:1e: 79:48:73:bc:4d:fa:0b:67:07:5a:36:7f:89:6e:d7:58:b0:0f: 8a:4e:01:4a -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUEY+VyahU52okJ5N8WHFf+5jaJAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VGNzQyODU5MDNFRUEzMzQ2RkIxRTc0ODcyODk1QTRD RThEMTc0MjAeFw0yNjA3MjMyMDI2NDJaFw0yNjA3MjQyMTA0NDJaMDMxMTAvBgNV BAMTKDUzMzNENzA2QzYwRDI5NTdCNURGODUwMTEzNzkxMTE2RkVCODA4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsgnzKMJVjQ2ZXbo0ZHdRji1j JA2m0hZK2emM0BG2krV7+YIhAy5V1BsYtLpGyrA6aQ82r5OnfA3QLOVCjSdWRWfu c77DT5HJWVNn5AJ5RofwMoyWgv6i0YSoWQZrKSzMLHY2kA1XF8Y8fngIvHHMtJyD jpKG4oDelemA3CsFWBDI5daBsD5IXCXJ1FrI6iaGW/JnCa8ViCvK12KzKOIRS/gC 2DVgipVswSq9NDOZITT5M1oAuNH0IqR064OxpIcNmPlJCDq+gY5+nwKDgwTKNJgJ dJnA13DtPtnfML1NsV4JZXRdBvURGfDtDCTxdLEcbAMxk9FIcaYq8fUSnQK/AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUUzPXBsYNKVe134UBE3kRFv64CJowHwYDVR0j BBgwFoAUzvdChZA+6jNG+x50hyiVpM6NF0IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRlUv MC9DRUY3NDI4NTkwM0VFQTMzNDZGQjFFNzQ4NzI4OTVBNENFOEQxNzQyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0NFRjc0Mjg1OTAzRUVBMzM0NkZCMUU3NDg3Mjg5 NUE0Q0U4RDE3NDIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQUlGVS8wL0NFRjc0Mjg1OTAzRUVB MzM0NkZCMUU3NDg3Mjg5NUE0Q0U4RDE3NDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4sJikQy/Tuzy0 OPVWVYbB6Vdt/1vNEnYe1UzsX0Bt7V0jA/nqa3B5p6x18qbzbxeyjHi8tsdJs3TH 2pqB5b4Oru1AbFR/xPTQu7PCGGH23Y9bRr3VdlSQ/x3I5839Gal+5x7p5WNqv0Jk wif6D4nB/KvnSrGxPtOrKdRb2GN/4q01T1EBGJQG0NvfY4CtpP8+CApInEZx96Cn SaUPEINL68ujv3tQIN55tyMdtrqpO7g6bD8hLTp19aSrwtc3n7dgfLSsTaJv6ljt vNpxknn41w58ImRFIuqmxUJE1ZPb7lH0pfVsAsJQNh55SHO8TfoLZwdaNn+JbtdY sA+KTgFK -----END CERTIFICATE-----Generated at Fri Jul 24 08:17:25 2026 by rpki-client