$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json) Hash identifier: r38XsPSAp99vUeuj8iFMjlArQBvq0imHOx/9gdGZgf4= Subject key identifier: F6:DC:B2:10:E3:6D:B6:99:54:D4:39:95:8A:F7:D8:C1:45:9B:7C:76 Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Certificate serial: 2F2A03AAECCF95B994FCFAF9343610DFC77DF46D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft Manifest number: 66 Signing time: Fri 24 Jul 2026 00:07:04 +0000 Manifest this update: Fri 24 Jul 2026 00:02:04 +0000 Manifest next update: Sat 25 Jul 2026 00:57:04 +0000 Files and hashes: 1: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=) 2: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: WEu/ERJAHmshX7UDBLh1/4QZ9ZfLLVOxbuYkDOZrczU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2a:03:aa:ec:cf:95:b9:94:fc:fa:f9:34:36:10:df:c7:7d:f4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Validity Not Before: Jul 24 00:02:04 2026 GMT Not After : Jul 25 00:57:04 2026 GMT Subject: CN=F6DCB210E36DB69954D439958AF7D8C1459B7C76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:79:6b:d5:31:87:52:c5:1e:75:0e:39:7d: 0a:d3:4e:32:59:c0:d8:1d:33:48:9a:1f:42:34:cf: 1f:dd:32:e6:8c:83:3a:05:f3:44:02:be:81:23:8c: c4:d9:3f:28:69:54:d7:57:d6:ea:62:3d:a3:af:ff: 63:ef:ca:08:3a:23:88:c8:3f:a8:06:7a:e6:5c:de: 41:81:6d:c1:a6:54:fc:1f:6d:d9:11:d3:71:32:e9: d5:d1:3b:02:39:85:9e:19:ae:42:53:2f:fc:df:dd: 11:76:85:21:6d:bb:76:8b:23:d4:2c:a3:7a:48:ed: 2b:51:27:07:24:4b:cd:5d:39:f1:4e:be:73:82:ca: c4:0e:c1:86:c0:c2:9c:bf:68:9b:cc:97:b5:19:7b: f3:09:7f:2b:c2:91:12:26:bc:bf:e1:5c:68:2d:2d: 7e:34:f9:e9:46:9e:8b:93:a4:6c:f4:9e:97:b9:6e: fb:b8:ed:7f:2e:e2:4f:f9:b9:5a:93:5e:3f:8e:a9: 1e:25:e3:fc:a8:5e:98:5f:33:fb:3e:30:9e:35:b4: 49:1f:91:38:ae:0a:52:95:1f:8c:d8:67:d0:dd:6b: 1d:af:48:c6:da:11:44:70:82:3e:0d:79:75:76:ee: b6:43:b3:0e:2f:a6:5c:62:41:b6:0c:6d:03:2c:ea: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DC:B2:10:E3:6D:B6:99:54:D4:39:95:8A:F7:D8:C1:45:9B:7C:76 X509v3 Authority Key Identifier: keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:35:65:8e:48:da:23:4a:d3:0d:35:d5:cb:31:ea:72:52:ec: 8b:93:5b:98:f9:0a:3b:69:7e:cf:f4:1b:68:9a:77:40:ff:70: 0e:8e:9c:ee:e0:ca:61:32:cd:1b:50:c0:94:b5:f2:8c:70:23: a2:0f:1d:59:88:9e:9b:23:54:c1:d1:f8:19:9f:29:ad:60:49: b6:07:ce:df:25:05:45:c0:ba:9f:67:bc:8c:75:2f:e5:c3:0a: ea:96:3d:ed:0c:93:96:3b:47:f5:0f:f5:78:47:51:5c:73:2d: 55:c0:f8:a8:e8:16:53:91:b8:dc:27:ad:fe:fc:15:73:be:b7: e4:8e:af:de:b5:1f:a5:ee:72:e6:45:e8:82:57:f3:89:76:d4: f2:a6:08:c7:9d:d6:38:47:3a:cc:e5:e2:d5:c7:df:8c:4a:52: 5e:1a:39:ea:f6:75:80:f0:4b:d5:bb:6c:91:a2:42:36:89:d7: 1c:b3:cd:29:ec:f2:cc:0a:02:b4:36:85:0c:5a:6d:31:48:ef: d6:03:da:8c:89:5c:d2:c9:60:f4:e9:9e:87:09:4a:69:05:5f: 4e:08:a1:cc:0a:62:4a:77:52:d0:6b:8e:34:49:94:a5:4c:ee: a6:76:2d:05:dd:f8:d4:a7:df:5f:05:63:19:c2:b9:de:a0:c0: 06:64:9c:4d -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIULyoDquzPlbmU/Pr5NDYQ38d99G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5 OTdDNkU4MjAeFw0yNjA3MjQwMDAyMDRaFw0yNjA3MjUwMDU3MDRaMDMxMTAvBgNV BAMTKEY2RENCMjEwRTM2REI2OTk1NEQ0Mzk5NThBRjdEOEMxNDU5QjdDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFm3lr1TGHUsUedQ45fQrTTjJZ wNgdM0iaH0I0zx/dMuaMgzoF80QCvoEjjMTZPyhpVNdX1upiPaOv/2Pvygg6I4jI P6gGeuZc3kGBbcGmVPwfbdkR03Ey6dXROwI5hZ4ZrkJTL/zf3RF2hSFtu3aLI9Qs o3pI7StRJwckS81dOfFOvnOCysQOwYbAwpy/aJvMl7UZe/MJfyvCkRImvL/hXGgt LX40+elGnouTpGz0npe5bvu47X8u4k/5uVqTXj+OqR4l4/yoXphfM/s+MJ41tEkf kTiuClKVH4zYZ9Ddax2vSMbaEURwgj4NeXV27rZDsw4vplxiQbYMbQMs6l8HAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU9tyyEONttplU1DmVivfYwUWbfHYwHwYDVR0j BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0 QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxNWWOSNojStMN NdXLMepyUuyLk1uY+Qo7aX7P9BtomndA/3AOjpzu4MphMs0bUMCUtfKMcCOiDx1Z iJ6bI1TB0fgZnymtYEm2B87fJQVFwLqfZ7yMdS/lwwrqlj3tDJOWO0f1D/V4R1Fc cy1VwPio6BZTkbjcJ63+/BVzvrfkjq/etR+l7nLmReiCV/OJdtTypgjHndY4RzrM 5eLVx9+MSlJeGjnq9nWA8EvVu2yRokI2idccs80p7PLMCgK0NoUMWm0xSO/WA9qM iVzSyWD06Z6HCUppBV9OCKHMCmJKd1LQa440SZSlTO6mdi0F3fjUp99fBWMZwrne oMAGZJxN -----END CERTIFICATE-----Generated at Fri Jul 24 11:50:17 2026 by rpki-client