$ rpki-client -vvvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json) Hash identifier: etK9foBEjQfeUGB0iDm/Jos6gAdwzSsPAZxbRxTTjok= Subject key identifier: 4A:21:32:49:37:DF:69:ED:B2:1E:E6:16:2D:AC:6B:A3:5F:91:46:F7 Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Certificate serial: 22118A19F025B041D002D82D69DFC0BBE7624B78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft Manifest number: FD Signing time: Sun 15 Nov 2026 04:09:45 +0000 Manifest this update: Sun 15 Nov 2026 04:04:45 +0000 Manifest next update: Mon 16 Nov 2026 04:32:45 +0000 Files and hashes: 1: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=) 2: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=) 3: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: NCV0+ZkHK2TUJvffUsIhFCiEIJ/6DmMHFJpxWokQQpo=) 4: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:11:8a:19:f0:25:b0:41:d0:02:d8:2d:69:df:c0:bb:e7:62:4b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0 Validity Not Before: Nov 15 04:04:45 2026 GMT Not After : Nov 16 04:32:45 2026 GMT Subject: CN=4A21324937DF69EDB21EE6162DAC6BA35F9146F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:c5:a6:52:4d:02:b9:8e:21:9f:93:85:ba: 8b:f5:35:8b:dd:c6:15:96:85:92:e7:84:2b:a4:94: dc:7d:59:81:14:1b:7d:b4:ba:03:dc:bf:b9:38:d1: 26:46:1e:b5:4c:e6:53:8e:82:32:63:01:ae:15:98: ca:c1:7a:1c:aa:a2:af:ed:84:4d:a9:bb:a4:c9:f8: 2c:2a:5f:8e:d4:5d:a0:84:82:2c:f9:cd:ed:20:48: 97:01:e5:27:67:d7:92:7e:04:17:3c:65:50:85:90: dc:46:df:66:80:cf:d9:56:6a:0b:fb:3e:f7:91:cd: 38:d9:1a:60:2c:25:b0:61:8d:69:4f:f9:52:03:ec: c8:ac:1c:cc:ae:8d:cb:49:3e:ca:49:64:86:a3:67: d7:32:18:d7:5b:ea:22:69:57:16:09:ab:f6:d9:93: eb:da:7f:60:5d:f6:52:00:bf:8a:b7:5e:96:ca:e3: 9c:04:f1:ad:df:33:ac:cd:b8:29:34:3e:01:1d:9e: 1c:50:90:35:a2:a8:0b:97:9b:ec:46:fd:45:4e:77: fd:5c:8d:1e:eb:82:70:ec:18:ee:70:ac:ef:04:8b: e4:6a:12:69:11:45:82:e3:8f:ea:ab:f9:89:aa:2f: 7e:a0:6c:da:cc:63:89:9e:86:f5:67:f5:f4:96:31: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:32:49:37:DF:69:ED:B2:1E:E6:16:2D:AC:6B:A3:5F:91:46:F7 X509v3 Authority Key Identifier: keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b5:d8:d8:72:12:90:0e:78:e6:2d:97:4a:04:51:5e:75:1c: f6:1b:bc:33:ad:20:31:27:df:1e:d6:52:f0:c4:65:b4:b5:a1: 28:c4:bd:83:d1:ee:62:6d:a7:95:85:55:83:ae:97:3d:25:10: fd:e4:8e:d8:7c:cf:b7:9b:0c:66:2d:57:e1:48:63:a1:fd:c0: fb:1e:c1:70:4a:c1:4a:45:7f:6d:5b:8e:42:cd:85:48:04:70: c6:18:55:10:6b:d9:48:4d:4f:31:82:d7:eb:8a:1b:a1:9a:5e: 5c:e5:e1:2a:45:59:b0:09:bd:0d:47:56:cf:1f:f3:7e:aa:ee: 79:83:aa:8d:74:1b:68:ab:e1:d5:7e:77:37:90:5f:28:61:62: 06:1c:b1:97:2f:73:4d:78:dc:c5:01:93:e1:73:4d:f6:56:8f: bc:d5:f8:78:e9:0d:dd:6d:8c:60:ce:05:05:93:06:13:40:d6: dc:4b:61:30:ee:2e:c3:72:d2:42:eb:72:74:85:e8:1b:7a:32: 7b:f9:f3:a2:cc:6c:84:ed:8f:0d:18:ca:1e:82:6b:b4:57:a4: ce:f5:05:f9:ad:4d:cc:95:e3:0f:1e:7f:41:f2:c4:47:cb:69: 46:94:53:7e:ab:05:44:23:b5:2c:94:0f:88:25:8b:f6:56:b2: e4:28:a0:69 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUIhGKGfAlsEHQAtgtad/Au+diS3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEz MjU3MDVGMDAeFw0yNjExMTUwNDA0NDVaFw0yNjExMTYwNDMyNDVaMDMxMTAvBgNV BAMTKDRBMjEzMjQ5MzdERjY5RURCMjFFRTYxNjJEQUM2QkEzNUY5MTQ2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8cWmUk0CuY4hn5OFuov1NYvd xhWWhZLnhCuklNx9WYEUG320ugPcv7k40SZGHrVM5lOOgjJjAa4VmMrBehyqoq/t hE2pu6TJ+CwqX47UXaCEgiz5ze0gSJcB5Sdn15J+BBc8ZVCFkNxG32aAz9lWagv7 PveRzTjZGmAsJbBhjWlP+VID7MisHMyujctJPspJZIajZ9cyGNdb6iJpVxYJq/bZ k+vaf2Bd9lIAv4q3XpbK45wE8a3fM6zNuCk0PgEdnhxQkDWiqAuXm+xG/UVOd/1c jR7rgnDsGO5wrO8Ei+RqEmkRRYLjj+qr+YmqL36gbNrMY4mehvVn9fSWMdoVAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUSiEySTffae2yHuYWLaxro1+RRvcwHwYDVR0j BBgwFoAUaFhM0cfrCAjhri3kwZXM4TJXBfAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAv Njg1ODRDRDFDN0VCMDgwOEUxQUUyREU0QzE5NUNDRTEzMjU3MDVGMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS82ODU4NENEMUM3RUIwODA4RTFBRTJERTRDMTk1Q0NF MTMyNTcwNUYwLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVERDLzAvNjg1ODRDRDFDN0VCMDgwOEUx QUUyREU0QzE5NUNDRTEzMjU3MDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGC12NhyEpAOeOYtl0oE UV51HPYbvDOtIDEn3x7WUvDEZbS1oSjEvYPR7mJtp5WFVYOulz0lEP3kjth8z7eb DGYtV+FIY6H9wPsewXBKwUpFf21bjkLNhUgEcMYYVRBr2UhNTzGC1+uKG6GaXlzl 4SpFWbAJvQ1HVs8f836q7nmDqo10G2ir4dV+dzeQXyhhYgYcsZcvc0143MUBk+Fz TfZWj7zV+HjpDd1tjGDOBQWTBhNA1txLYTDuLsNy0kLrcnSF6Bt6Mnv586LMbITt jw0Yyh6Ca7RXpM71BfmtTcyV4w8ef0HyxEfLaUaUU36rBUQjtSyUD4gli/ZWsuQo oGk= -----END CERTIFICATE-----Generated at Sun Nov 15 11:09:23 2026 by rpki-client