$ rpki-client -vvf rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft File: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft (raw, json) Hash identifier: L8QmH2+9v4/E19VoAx8SnTfEVtdPSLyDBwZqV0ppFHo= Subject key identifier: 53:78:78:CA:26:41:9E:1B:5F:69:35:62:68:4C:19:64:36:39:17:21 Authority key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B Certificate issuer: /CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Certificate serial: 54E858786B5DDE1E5A03EDD87E589F58A5035D5E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft Manifest number: 03 Signing time: Tue 12 May 2026 12:35:59 +0000 Manifest this update: Tue 12 May 2026 12:30:59 +0000 Manifest next update: Wed 13 May 2026 14:51:59 +0000 Files and hashes: 1: 3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa (hash: OqVP0uLmbV0LsJpz9XRBwsukxxQL93Tm+zzp3azYLeM=) 2: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl (hash: 9n1yio07ql588DO7sxH5cHzYJIqWXSr2FnEwhilvhmo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e8:58:78:6b:5d:de:1e:5a:03:ed:d8:7e:58:9f:58:a5:03:5d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B Validity Not Before: May 12 12:30:59 2026 GMT Not After : May 13 14:51:59 2026 GMT Subject: CN=537878CA26419E1B5F693562684C196436391721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:60:ce:79:9e:b3:38:f7:2b:11:f2:0a:35:e6: 0c:43:6c:77:d2:c2:4d:f1:da:7e:ed:b9:08:ef:d3: f1:46:5f:ce:ba:16:01:23:4e:17:df:51:a1:f2:5e: 39:f5:f9:b8:ba:00:a7:68:62:a3:72:77:38:c2:7c: 71:fa:d9:95:8c:17:64:48:01:71:9e:2c:6f:f9:cf: 12:bf:9e:4c:dd:51:6e:1c:3d:1f:de:a4:76:b2:82: 7d:80:59:e9:c2:e6:ad:24:7e:68:de:53:39:48:f7: 93:b5:37:76:dd:22:be:ef:40:d0:cf:31:ff:cb:93: e3:04:01:f5:89:03:8b:3b:9b:be:01:82:fb:09:0a: b3:f7:f4:fd:cb:92:1f:04:b4:9a:fd:17:0a:62:d9: 7c:64:0c:33:6c:35:87:84:3c:f3:06:ca:27:86:b1: 5b:b8:73:10:9e:b0:9e:4b:91:30:06:ca:0b:29:df: cf:80:2b:a7:68:21:27:cc:32:cd:af:45:66:ab:bc: 48:33:b6:76:98:d9:ad:c0:f6:4b:88:c1:71:77:de: d3:61:3a:4c:80:a9:2d:33:55:ab:fc:a5:21:62:e3: 7c:83:39:69:c8:5d:03:b8:6a:03:f4:e1:48:06:8e: 76:74:70:94:e6:b1:cc:26:d5:7c:a0:98:89:5a:93: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:78:CA:26:41:9E:1B:5F:69:35:62:68:4C:19:64:36:39:17:21 X509v3 Authority Key Identifier: keyid:BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f9:15:d1:6c:c7:8e:4b:26:55:4a:79:9a:24:93:da:fe:24: 83:27:eb:bb:48:61:2a:d3:b0:ab:3c:9c:f0:46:32:80:8c:f3: d6:ba:81:82:ae:10:52:d1:b7:b4:68:28:76:db:24:5c:72:aa: 86:75:f1:80:cf:11:52:e7:b3:97:d5:3f:03:6c:e1:4b:30:8f: 28:dd:82:c5:9f:cb:54:7d:56:57:28:06:75:a0:5b:b3:5c:bd: c2:da:4d:7b:d2:08:b4:00:0b:43:d8:d2:e1:d9:c3:0b:4d:cb: 25:32:d1:5e:d9:61:78:e6:4e:66:1d:aa:dd:a2:f7:18:b3:d8: ee:cf:33:49:4e:ae:e0:95:88:c0:d4:81:c5:aa:f4:8d:1e:af: 2e:9f:75:ec:00:d7:fc:21:9f:1c:cc:34:4b:47:f2:88:64:10: a6:65:0e:cf:8f:43:b8:14:2f:e9:c3:2c:87:71:41:ef:07:17: c9:ff:88:43:08:29:f4:bc:22:8a:96:68:e7:57:35:1e:77:f4: 34:30:4e:c7:13:ab:b1:c9:f8:7e:6a:16:c9:6d:21:de:e1:1d: 5e:2a:76:36:ee:3e:36:92:57:0f:6e:8a:3d:d7:d7:b6:f6:7d: ad:b0:a6:84:71:7f:4a:ea:50:e6:85:f8:67:88:69:2f:6e:4d: 82:36:c9:17 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUVOhYeGtd3h5aA+3YflifWKUDXV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwMUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJB Q0UzQzEwQjAeFw0yNjA1MTIxMjMwNTlaFw0yNjA1MTMxNDUxNTlaMDMxMTAvBgNV BAMTKDUzNzg3OENBMjY0MTlFMUI1RjY5MzU2MjY4NEMxOTY0MzYzOTE3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvYM55nrM49ysR8go15gxDbHfS wk3x2n7tuQjv0/FGX866FgEjThffUaHyXjn1+bi6AKdoYqNydzjCfHH62ZWMF2RI AXGeLG/5zxK/nkzdUW4cPR/epHaygn2AWenC5q0kfmjeUzlI95O1N3bdIr7vQNDP Mf/Lk+MEAfWJA4s7m74BgvsJCrP39P3Lkh8EtJr9Fwpi2XxkDDNsNYeEPPMGyieG sVu4cxCesJ5LkTAGygsp38+AK6doISfMMs2vRWarvEgztnaY2a3A9kuIwXF33tNh OkyAqS0zVav8pSFi43yDOWnIXQO4agP04UgGjnZ0cJTmscwm1XygmIlakwHfAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUU3h4yiZBnhtfaTViaEwZZDY5FyEwHwYDVR0j BBgwFoAUvQH/5a0oeZnjPEWG6R5jQqzjwQswDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAv QkQwMUZGRTVBRDI4Nzk5OUUzM0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9CRDAxRkZFNUFEMjg3OTk5RTMzQzQ1ODZFOTFFNjM0 MkFDRTNDMTBCLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEdNLzAvQkQwMUZGRTVBRDI4Nzk5OUUz M0M0NTg2RTkxRTYzNDJBQ0UzQzEwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALD5FdFsx45LJlVKeZok k9r+JIMn67tIYSrTsKs8nPBGMoCM89a6gYKuEFLRt7RoKHbbJFxyqoZ18YDPEVLn s5fVPwNs4UswjyjdgsWfy1R9VlcoBnWgW7NcvcLaTXvSCLQAC0PY0uHZwwtNyyUy 0V7ZYXjmTmYdqt2i9xiz2O7PM0lOruCViMDUgcWq9I0ery6fdewA1/whnxzMNEtH 8ohkEKZlDs+PQ7gUL+nDLIdxQe8HF8n/iEMIKfS8IoqWaOdXNR539DQwTscTq7HJ +H5qFsltId7hHV4qdjbuPjaSVw9uij3X17b2fa2wpoRxf0rqUOaF+GeIaS9uTYI2 yRc= -----END CERTIFICATE-----Generated at Wed May 13 04:26:57 2026 by rpki-client