$ rpki-client -vvvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json) Hash identifier: JDCdyvqyrA4GoCAlvb7suXw1PavpU7MzdHsQZlOmKQE= Subject key identifier: 6A:B5:23:A3:38:9E:3C:73:E5:FA:B5:A2:14:F7:A2:A6:68:C9:F8:62 Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Certificate serial: 27E0A00915C6D2F9535921F79453DAEDECA1A84B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft Manifest number: BB Signing time: Fri 25 Sep 2026 13:33:17 +0000 Manifest this update: Fri 25 Sep 2026 13:28:17 +0000 Manifest next update: Sat 26 Sep 2026 15:58:17 +0000 Files and hashes: 1: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=) 2: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: WLE1T7nLn4EOC1v64ncbJ/wGkqvWHuMveux7EJzCPYA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e0:a0:09:15:c6:d2:f9:53:59:21:f7:94:53:da:ed:ec:a1:a8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Validity Not Before: Sep 25 13:28:17 2026 GMT Not After : Sep 26 15:58:17 2026 GMT Subject: CN=6AB523A3389E3C73E5FAB5A214F7A2A668C9F862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:e6:ec:0e:33:f8:42:25:f3:65:31:aa:7e: a9:27:8f:c0:80:1a:0c:b9:c1:88:4c:28:6a:37:4b: 02:5c:dc:94:7c:c1:7b:54:9b:9a:5c:e8:80:01:54: d7:ad:cd:58:eb:6d:d1:42:d3:b5:a8:3a:b2:e8:ec: 9c:76:16:86:52:66:d3:d2:dd:64:62:7f:64:67:2f: 65:45:d3:77:4d:c5:a9:40:b8:14:ee:e8:b6:5c:21: 5d:03:3f:64:d4:42:2d:99:99:1e:6c:99:95:0a:30: 21:af:fe:46:65:e2:b0:9d:cb:fa:d7:10:d0:e9:51: 74:1a:ef:27:27:76:dc:02:c4:68:5f:0c:97:d9:bc: 8a:b1:83:d1:4b:84:bb:02:11:86:25:a8:4b:b1:e6: ef:51:2b:2c:f2:11:a6:44:94:f2:7e:02:a0:72:ac: a1:6d:b8:60:54:10:9c:ff:76:11:2c:dc:4d:08:34: 38:95:38:8e:a0:81:d2:d5:5a:09:45:96:80:ea:f1: 34:55:6b:63:ae:99:63:35:58:83:41:a6:4e:31:60: a7:03:e7:f2:32:82:95:3d:79:eb:31:40:eb:4b:c5: da:ca:39:c2:98:c0:70:2d:48:5c:0f:59:ad:e2:a4: 53:93:57:ba:7b:b5:72:d5:83:b4:5e:ca:1c:a9:96: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B5:23:A3:38:9E:3C:73:E5:FA:B5:A2:14:F7:A2:A6:68:C9:F8:62 X509v3 Authority Key Identifier: keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a6:9c:2a:38:84:54:82:22:0e:0a:ea:4f:d6:c0:cb:46:5b: 01:73:23:91:b9:18:23:c0:99:57:44:5c:44:71:5d:06:92:46: c7:1f:7f:53:ee:53:0a:0d:48:05:0b:5b:34:c1:72:ed:6f:92: 90:48:0c:91:4b:5d:e2:7e:50:21:08:bb:55:f0:0f:26:78:ad: 7b:b6:af:0b:bc:f2:0d:3d:82:9d:d0:e8:37:cb:c9:53:cd:a3: 43:47:e9:25:ca:66:f7:46:98:1e:d1:ec:44:7a:26:4f:42:e5: 73:53:77:b2:48:e9:ee:3e:4b:d0:d3:9c:f0:51:72:dd:33:55: 58:fc:c5:af:6d:14:7d:1f:7d:3a:8c:d5:8e:5b:f6:87:41:b6: 9c:1a:72:68:6f:63:8d:d8:77:17:10:73:7b:71:ad:46:db:9f: 93:98:4b:22:8f:67:c5:31:6f:8f:bd:61:7e:0d:ce:e6:91:46: fe:1a:2a:ae:92:74:95:4b:30:cf:f2:42:ac:e9:ab:e2:88:87: 9f:a3:6c:eb:98:ea:28:e0:36:b4:cc:36:47:e4:21:a3:cb:7a: 92:f0:13:99:f8:18:16:8b:08:cc:62:e4:ac:e5:16:19:02:dc: d6:4b:fe:6a:80:6c:f4:5e:0f:9e:19:75:38:3d:61:ae:f5:b2: 07:b2:cc:94 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUJ+CgCRXG0vlTWSH3lFPa7eyhqEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5 OTdDNkU4MjAeFw0yNjA5MjUxMzI4MTdaFw0yNjA5MjYxNTU4MTdaMDMxMTAvBgNV BAMTKDZBQjUyM0EzMzg5RTNDNzNFNUZBQjVBMjE0RjdBMkE2NjhDOUY4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRObsDjP4QiXzZTGqfqknj8CA Ggy5wYhMKGo3SwJc3JR8wXtUm5pc6IABVNetzVjrbdFC07WoOrLo7Jx2FoZSZtPS 3WRif2RnL2VF03dNxalAuBTu6LZcIV0DP2TUQi2ZmR5smZUKMCGv/kZl4rCdy/rX ENDpUXQa7ycndtwCxGhfDJfZvIqxg9FLhLsCEYYlqEux5u9RKyzyEaZElPJ+AqBy rKFtuGBUEJz/dhEs3E0INDiVOI6ggdLVWglFloDq8TRVa2OumWM1WINBpk4xYKcD 5/IygpU9eesxQOtLxdrKOcKYwHAtSFwPWa3ipFOTV7p7tXLVg7ReyhypluI9AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUarUjoziePHPl+rWiFPeipmjJ+GIwHwYDVR0j BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0 QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJppwqOIRUgiIO CupP1sDLRlsBcyORuRgjwJlXRFxEcV0GkkbHH39T7lMKDUgFC1s0wXLtb5KQSAyR S13iflAhCLtV8A8meK17tq8LvPINPYKd0Og3y8lTzaNDR+klymb3Rpge0exEeiZP QuVzU3eySOnuPkvQ05zwUXLdM1VY/MWvbRR9H306jNWOW/aHQbacGnJob2ON2HcX EHN7ca1G25+TmEsij2fFMW+PvWF+Dc7mkUb+GiquknSVSzDP8kKs6aviiIefo2zr mOoo4Da0zDZH5CGjy3qS8BOZ+BgWiwjMYuSs5RYZAtzWS/5qgGz0Xg+eGXU4PWGu 9bIHssyU -----END CERTIFICATE-----Generated at Fri Sep 25 19:44:50 2026 by rpki-client