$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json) Hash identifier: 91YGRcDunORBE1hF5ZSjVe4XScOxnHVVjyx1TRj32jQ= Subject key identifier: BD:31:D4:C8:D1:EC:41:F1:FB:B1:91:FF:25:5E:ED:C7:A7:E7:77:F2 Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Certificate serial: 394B85FC10DCD41E6264F237587FB546494D5368 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft Manifest number: 04 Signing time: Tue 12 May 2026 10:25:08 +0000 Manifest this update: Tue 12 May 2026 10:20:08 +0000 Manifest next update: Wed 13 May 2026 12:15:08 +0000 Files and hashes: 1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: 9K3sqv6kUmU+S0EB+S+/NNGv582Nn2Hx7ys4z9rPoLw=) 2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4b:85:fc:10:dc:d4:1e:62:64:f2:37:58:7f:b5:46:49:4d:53:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Validity Not Before: May 12 10:20:08 2026 GMT Not After : May 13 12:15:08 2026 GMT Subject: CN=BD31D4C8D1EC41F1FBB191FF255EEDC7A7E777F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:7b:1f:dc:b3:0a:10:eb:12:e0:97:81:81: 78:dc:8a:09:39:44:cd:98:5f:73:fa:48:5b:c0:7a: f0:09:2d:26:5c:8e:88:9e:b3:9a:ef:f8:7f:7e:f0: e6:0c:e9:ca:30:5c:5a:58:1c:9d:e8:24:ec:8a:8b: 11:5e:bf:20:21:0b:d3:b4:d9:f4:42:b9:2b:39:66: 6f:97:fd:41:bf:14:69:d0:56:c0:bb:ab:1f:11:fb: ee:30:2d:a1:df:c2:f3:a5:4d:34:e4:8a:85:fe:ae: 6e:c5:25:5f:c7:fa:82:cf:92:ec:35:4e:ab:1c:1e: cf:32:a0:56:2c:ab:67:fd:7d:ca:9e:18:d8:53:54: 31:a6:6d:cf:79:99:3c:18:31:8b:16:2f:06:d9:e9: 04:39:13:d6:e8:cd:84:a5:52:d5:48:e2:4a:d0:c1: 6e:e1:cb:77:f9:c0:42:e7:b1:3f:be:3b:c7:2c:07: 45:c2:32:12:fb:5d:33:4d:6b:6b:82:07:13:33:15: bc:29:d5:4e:dd:6f:08:fe:12:15:df:99:d0:6f:87: 2d:2c:74:fa:24:78:29:31:46:ee:b2:35:97:9c:c0: 20:70:69:c5:59:10:77:d4:20:83:64:2c:eb:7c:03: 33:e7:d0:f0:0f:5e:d2:6f:b3:e0:be:03:d0:ef:dc: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:D4:C8:D1:EC:41:F1:FB:B1:91:FF:25:5E:ED:C7:A7:E7:77:F2 X509v3 Authority Key Identifier: keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:77:a1:2b:5c:64:a1:ab:99:6e:b6:9e:f3:52:0e:ff:66:bf: c0:62:a1:ae:da:e0:14:ab:6d:de:37:9e:44:9f:e1:20:63:2a: af:d6:0d:06:f4:11:12:47:2c:ec:f2:83:4c:59:4b:65:3a:9f: 7e:e4:0d:f2:dd:a1:79:3f:7c:26:4a:05:eb:ab:23:d6:b8:ff: b0:12:a3:37:a4:be:b6:cb:02:20:67:2c:28:3d:5e:ee:e9:7c: 3b:e3:b1:14:95:2b:7e:53:d4:ac:f2:37:8a:3d:b5:70:30:c2: 79:72:b6:7a:c7:00:e7:e5:0f:51:3d:46:7b:1a:30:e9:4c:b7: 1e:24:6b:4f:2f:74:02:a6:6d:18:1e:7d:1f:45:95:23:70:4e: f4:23:85:c0:b8:00:8a:f8:a0:d1:5a:14:ec:22:b7:f1:2a:22: 0b:4b:4d:0b:9e:cc:1e:77:d7:38:f4:a3:ff:37:a3:82:8b:c0: 03:af:33:54:de:40:61:0e:a5:54:09:b4:df:38:1e:1d:bb:57: 80:f6:e8:35:84:cd:c1:60:f2:f7:cf:54:6a:d8:0e:b8:20:47: 54:d8:51:4b:8c:1e:57:31:4b:a8:b7:6b:56:46:58:5f:8c:1c: d4:b5:40:75:da:e4:69:d5:34:ba:a8:86:a8:91:de:82:aa:7c: 6f:c0:7f:2b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOUuF/BDc1B5iZPI3WH+1RklNU2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5 OTdDNkU4MjAeFw0yNjA1MTIxMDIwMDhaFw0yNjA1MTMxMjE1MDhaMDMxMTAvBgNV BAMTKEJEMzFENEM4RDFFQzQxRjFGQkIxOTFGRjI1NUVFREM3QTdFNzc3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9Hsf3LMKEOsS4JeBgXjcigk5 RM2YX3P6SFvAevAJLSZcjoies5rv+H9+8OYM6cowXFpYHJ3oJOyKixFevyAhC9O0 2fRCuSs5Zm+X/UG/FGnQVsC7qx8R++4wLaHfwvOlTTTkioX+rm7FJV/H+oLPkuw1 TqscHs8yoFYsq2f9fcqeGNhTVDGmbc95mTwYMYsWLwbZ6QQ5E9bozYSlUtVI4krQ wW7hy3f5wELnsT++O8csB0XCMhL7XTNNa2uCBxMzFbwp1U7dbwj+EhXfmdBvhy0s dPokeCkxRu6yNZecwCBwacVZEHfUIINkLOt8AzPn0PAPXtJvs+C+A9Dv3JQrAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUvTHUyNHsQfH7sZH/JV7tx6fnd/IwHwYDVR0j BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0 QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWd6ErXGShq5lu tp7zUg7/Zr/AYqGu2uAUq23eN55En+EgYyqv1g0G9BESRyzs8oNMWUtlOp9+5A3y 3aF5P3wmSgXrqyPWuP+wEqM3pL62ywIgZywoPV7u6Xw747EUlSt+U9Ss8jeKPbVw MMJ5crZ6xwDn5Q9RPUZ7GjDpTLceJGtPL3QCpm0YHn0fRZUjcE70I4XAuACK+KDR WhTsIrfxKiILS00Lnswed9c49KP/N6OCi8ADrzNU3kBhDqVUCbTfOB4du1eA9ug1 hM3BYPL3z1Rq2A64IEdU2FFLjB5XMUuot2tWRlhfjBzUtUB12uRp1TS6qIaokd6C qnxvwH8r -----END CERTIFICATE-----Generated at Wed May 13 04:17:21 2026 by rpki-client