$ rpki-client -vvvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft File: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json) Hash identifier: t2Nsjg0wrIFRkGvFjG8WvB3/VeSNToUyuU7eOjuShoA= Subject key identifier: 78:28:9B:69:DB:61:BC:3C:5C:BA:B7:6C:E6:99:1B:79:80:58:A0:7D Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 11E9ABC314AEEE743D6CBADFFE8D962E6D80AF1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft Manifest number: 0100 Signing time: Sat 14 Nov 2026 10:27:04 +0000 Manifest this update: Sat 14 Nov 2026 10:22:04 +0000 Manifest next update: Sun 15 Nov 2026 11:22:04 +0000 Files and hashes: 1: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=) 2: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=) 3: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: /e72vxcQxOERnlqXuEK6FON/UZ98+G7t3MYKoO0czDQ=) 4: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=) 5: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=) 6: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=) 7: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=) 8: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 11:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e9:ab:c3:14:ae:ee:74:3d:6c:ba:df:fe:8d:96:2e:6d:80:af:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: Nov 14 10:22:04 2026 GMT Not After : Nov 15 11:22:04 2026 GMT Subject: CN=78289B69DB61BC3C5CBAB76CE6991B798058A07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:2a:a3:f5:80:71:35:f5:bc:9e:d5:3d:6a: 70:f1:3c:08:ed:a7:be:0d:82:2b:85:d4:26:5b:18: 9f:39:e1:bb:5f:6a:eb:ad:ca:e2:ff:0f:cc:62:9f: b8:76:a6:63:b4:47:10:d1:89:fd:bf:af:fe:ed:a2: 91:09:d6:7f:a2:ad:b7:40:19:73:3d:1f:7a:d0:d7: b4:90:74:b5:d7:d9:04:94:2e:22:f9:28:b5:ac:fa: e0:03:1f:6c:d6:fa:66:1d:11:41:ec:be:fd:2f:07: dc:d4:f9:69:f2:da:a1:e5:e3:2f:73:cc:ca:14:e4: 5b:da:ad:ab:59:28:f8:4c:7f:07:da:61:c3:9a:35: e8:7b:73:00:5e:30:89:6a:7a:be:33:b6:8c:f9:71: a3:37:6a:85:ee:54:93:c2:b9:76:ac:6d:76:16:63: 9b:cc:f5:b6:1d:a4:63:df:55:c4:1d:79:5b:c4:ec: 6e:74:83:e0:89:2f:7f:af:9b:de:79:cf:1a:53:19: de:a7:4d:ab:b8:fa:55:6e:b4:ec:e7:23:97:c8:36: 10:56:86:e7:3d:b7:ef:42:43:e0:ff:34:f2:de:78: a6:8b:21:ac:43:5f:18:08:46:e6:ea:2b:af:2a:93: fa:f7:1a:ec:6b:ea:39:85:37:d4:e5:2f:9b:39:7b: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:28:9B:69:DB:61:BC:3C:5C:BA:B7:6C:E6:99:1B:79:80:58:A0:7D X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6b:c0:d0:91:3e:e2:07:84:d5:42:78:9f:cb:1a:a5:5a:82: ed:21:7a:72:05:9e:e0:e3:41:6f:98:18:4e:01:58:df:24:8d: 91:50:45:f9:fd:62:11:e5:7c:32:76:e2:20:bf:7b:da:b4:3d: c7:63:2e:44:c0:93:8a:75:0f:bb:51:04:32:d0:b4:42:ca:4b: 05:ce:3c:4c:cc:cf:ad:c5:d8:95:fb:21:35:2c:ee:98:6e:de: b1:fd:c7:2c:2e:fe:f7:24:ee:bc:47:00:96:8a:5b:fe:5d:32: 54:57:7a:18:b4:48:2b:c1:d0:41:9c:29:af:d1:84:25:6f:d1: c4:c0:2c:55:4b:3b:f9:f1:ef:eb:78:13:f4:8c:c7:73:42:8d: f2:37:ee:0e:dd:7a:ab:66:21:1c:3d:5a:5e:cf:7f:d0:41:9f: 1d:b7:85:09:7f:44:ab:a4:28:f4:a2:72:59:56:f6:e2:07:a7: 49:43:f0:be:ab:b2:57:ea:cd:1c:9b:a1:4c:93:00:71:02:14: 04:02:32:9f:1e:f2:5c:e6:5a:d0:ab:a4:36:27:86:9e:72:21: ec:2d:53:bd:c8:89:a2:dc:97:69:52:36:5f:d6:5d:97:aa:fe: 07:1c:2c:8c:ff:7a:05:8c:1a:da:95:e8:4b:9a:71:43:86:08: c8:4d:5c:c9 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUEemrwxSu7nQ9bLrf/o2WLm2Arx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjExMTQxMDIyMDRaFw0yNjExMTUxMTIyMDRaMDMxMTAvBgNV BAMTKDc4Mjg5QjY5REI2MUJDM0M1Q0JBQjc2Q0U2OTkxQjc5ODA1OEEwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOhCqj9YBxNfW8ntU9anDxPAjt p74NgiuF1CZbGJ854btfauutyuL/D8xin7h2pmO0RxDRif2/r/7topEJ1n+irbdA GXM9H3rQ17SQdLXX2QSULiL5KLWs+uADH2zW+mYdEUHsvv0vB9zU+Wny2qHl4y9z zMoU5FvaratZKPhMfwfaYcOaNeh7cwBeMIlqer4ztoz5caM3aoXuVJPCuXasbXYW Y5vM9bYdpGPfVcQdeVvE7G50g+CJL3+vm955zxpTGd6nTau4+lVutOznI5fINhBW huc9t+9CQ+D/NPLeeKaLIaxDXxgIRubqK68qk/r3Guxr6jmFN9TlL5s5e0nTAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUeCibadthvDxcurds5pkbeYBYoH0wHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvNTZEMkUyNUU0MDlGRTk1NkEx NEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKdrwNCRPuIHhNVCeJ/L GqVagu0henIFnuDjQW+YGE4BWN8kjZFQRfn9YhHlfDJ24iC/e9q0PcdjLkTAk4p1 D7tRBDLQtELKSwXOPEzMz63F2JX7ITUs7phu3rH9xywu/vck7rxHAJaKW/5dMlRX ehi0SCvB0EGcKa/RhCVv0cTALFVLO/nx7+t4E/SMx3NCjfI37g7deqtmIRw9Wl7P f9BBnx23hQl/RKukKPSicllW9uIHp0lD8L6rslfqzRyboUyTAHECFAQCMp8e8lzm WtCrpDYnhp5yIewtU73IiaLcl2lSNl/WXZeq/gccLIz/egWMGtqV6EuacUOGCMhN XMk= -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:43 2026 by rpki-client