$ rpki-client -vvvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: qmRDHR2wnjH+CHkNGD0z5lo53scEw5v/24qtcb4GPc4= Subject key identifier: AB:5F:D1:D2:C8:43:56:9E:EE:14:2F:A8:B1:5F:F8:1F:59:87:13:A1 Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 3E3852A60635457AF9C4FF5732D048A8044793D8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: BC Signing time: Fri 25 Sep 2026 19:53:59 +0000 Manifest this update: Fri 25 Sep 2026 19:48:59 +0000 Manifest next update: Sat 26 Sep 2026 20:12:59 +0000 Files and hashes: 1: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) 2: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 3: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: mD2jIlozA2wwUemjVLYEaj5hzpmx8ak/mm0VK6Ysq2U=) 4: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 15:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:38:52:a6:06:35:45:7a:f9:c4:ff:57:32:d0:48:a8:04:47:93:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Sep 25 19:48:59 2026 GMT Not After : Sep 26 20:12:59 2026 GMT Subject: CN=AB5FD1D2C843569EEE142FA8B15FF81F598713A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:62:f2:86:be:91:af:c3:65:6d:5e:da:eb: 10:32:15:f0:1f:93:19:19:3a:d5:89:b6:5b:70:48: f5:f0:44:4e:01:04:0d:8a:1e:76:ef:9a:d7:20:56: f4:3e:b0:ce:8b:83:e0:35:94:f8:19:77:0a:46:11: 8b:95:e4:15:ba:e5:0b:97:23:7c:72:8f:1b:40:ce: 94:20:5f:79:45:b5:5d:4f:8c:44:14:c7:d9:b1:a2: b6:2b:55:2a:58:0a:04:45:27:45:11:25:f3:7a:b5: b8:e8:91:3d:34:11:6b:54:80:4c:19:e3:f5:36:15: bc:47:3b:52:0b:a5:32:fc:5f:68:37:6f:67:f2:b3: 8a:5c:a0:dc:25:62:e7:46:4f:1f:38:e3:23:e6:ad: ba:19:0d:b8:e4:e6:4a:5f:30:ba:76:c8:cc:d3:9f: 54:58:4f:06:75:66:f2:b5:d3:92:8e:cf:9f:f6:53: 0f:12:79:91:e4:cf:ea:a0:9a:b8:c6:f3:0e:df:c5: 0e:23:54:ad:8a:c3:96:9f:67:1e:00:b9:5d:58:4b: fa:10:bd:ed:6c:be:aa:96:d3:86:2d:38:2b:69:e5: 06:7d:82:01:b5:2e:79:d6:38:1a:06:d5:0d:3c:46: f5:14:90:1c:cb:da:40:36:f3:3e:60:89:9c:aa:1e: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:D1:D2:C8:43:56:9E:EE:14:2F:A8:B1:5F:F8:1F:59:87:13:A1 X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:41:08:50:f1:56:c4:24:93:1d:4d:67:83:d7:5e:1a:78: ef:e3:40:f5:a5:c6:97:5d:f3:69:3e:b4:de:86:ee:ce:37:42: a7:74:8f:3f:c4:21:d8:56:33:45:a9:e1:b5:2f:a9:05:94:b8: 71:74:10:1b:83:43:fe:78:8c:fc:06:4f:e1:92:74:61:5b:f7: 6d:fc:1b:9d:5a:7b:dc:07:3d:d8:45:20:aa:df:cc:d7:a7:54: 72:ba:72:ae:a4:41:07:87:c7:49:df:5f:b9:4c:1c:cd:9f:a7: 9a:60:a5:53:bf:e3:73:46:79:23:cb:a5:fc:6e:b3:bd:ea:e3: b2:2f:31:03:af:ad:a8:50:b5:50:47:f1:69:ac:0e:9f:a3:58: cf:85:bb:82:09:96:5a:7a:8a:8c:90:63:08:71:84:2e:f1:eb: 58:f4:b0:b7:9c:c8:73:f0:d5:34:b7:30:c5:cb:90:f6:33:70: d9:e7:ea:fc:bd:57:f4:12:64:e1:9f:6a:0b:a8:1d:d2:a5:2c: ea:17:03:4d:39:7c:5e:c0:7d:2f:66:45:eb:14:df:a2:60:b1: bb:22:88:83:09:06:bf:0e:1d:d5:21:ec:a0:e6:82:d9:9b:59: 9a:df:45:c1:00:94:15:80:8b:37:01:bb:13:5e:16:d3:14:87: 6e:05:6f:54 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUPjhSpgY1RXr5xP9XMtBIqARHk9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA5MjUxOTQ4NTlaFw0yNjA5MjYyMDEyNTlaMDMxMTAvBgNV BAMTKEFCNUZEMUQyQzg0MzU2OUVFRTE0MkZBOEIxNUZGODFGNTk4NzEzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXWLyhr6Rr8NlbV7a6xAyFfAf kxkZOtWJtltwSPXwRE4BBA2KHnbvmtcgVvQ+sM6Lg+A1lPgZdwpGEYuV5BW65QuX I3xyjxtAzpQgX3lFtV1PjEQUx9mxorYrVSpYCgRFJ0URJfN6tbjokT00EWtUgEwZ 4/U2FbxHO1ILpTL8X2g3b2fys4pcoNwlYudGTx844yPmrboZDbjk5kpfMLp2yMzT n1RYTwZ1ZvK105KOz5/2Uw8SeZHkz+qgmrjG8w7fxQ4jVK2Kw5afZx4AuV1YS/oQ ve1svqqW04YtOCtp5QZ9ggG1LnnWOBoG1Q08RvUUkBzL2kA28z5giZyqHiiDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUq1/R0shDVp7uFC+osV/4H1mHE6EwHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABDiQQhQ8VbE JJMdTWeD114aeO/jQPWlxpdd82k+tN6G7s43Qqd0jz/EIdhWM0Wp4bUvqQWUuHF0 EBuDQ/54jPwGT+GSdGFb9238G51ae9wHPdhFIKrfzNenVHK6cq6kQQeHx0nfX7lM HM2fp5pgpVO/43NGeSPLpfxus73q47IvMQOvrahQtVBH8WmsDp+jWM+Fu4IJllp6 ioyQYwhxhC7x61j0sLecyHPw1TS3MMXLkPYzcNnn6vy9V/QSZOGfaguoHdKlLOoX A005fF7AfS9mResU36JgsbsiiIMJBr8OHdUh7KDmgtmbWZrfRcEAlBWAizcBuxNe FtMUh24Fb1Q= -----END CERTIFICATE-----Generated at Sat Sep 26 00:50:37 2026 by rpki-client