$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft File: 68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json) Hash identifier: SqCZ7bHDRjyr1zq+cxdRFnnIsAUrl9onG+O9VMLrxFo= Subject key identifier: CB:0B:69:DD:35:DB:45:59:DE:41:D8:EC:74:4C:75:9F:CF:57:E6:19 Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 2A9BC3188BE7B9099B886E8E3FA461FED2943938 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 20:56:45 +0000 Manifest this update: Thu 23 Jul 2026 20:51:45 +0000 Manifest next update: Fri 24 Jul 2026 22:28:45 +0000 Files and hashes: 1: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: 9ar/e6sku6JS/WLwTfOgnRBVKiW/Ux3NXwcHhGKqv9k=) 2: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=) 3: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=) 4: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9b:c3:18:8b:e7:b9:09:9b:88:6e:8e:3f:a4:61:fe:d2:94:39:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: Jul 23 20:51:45 2026 GMT Not After : Jul 24 22:28:45 2026 GMT Subject: CN=CB0B69DD35DB4559DE41D8EC744C759FCF57E619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:2c:93:cc:53:df:0a:64:96:c1:b0:27:12: d7:d2:0c:ff:49:05:b2:0b:33:f3:fc:3a:3d:61:05: ad:4c:99:cc:61:ed:eb:cc:2e:2f:6b:43:f3:d0:0b: 2c:af:b9:5c:92:67:26:f4:10:c5:39:7f:bc:4b:de: a3:2e:e9:1a:af:c1:23:71:ba:e3:4f:e2:2d:88:f5: 72:48:65:9b:73:5f:6e:74:be:72:f6:3e:dd:ca:1b: d7:62:bc:2c:01:2f:be:68:5b:d8:8d:d8:00:ca:0a: 4f:a4:e3:31:5d:1a:6a:2d:b3:c8:be:66:ea:d8:de: 61:bb:ba:f5:ab:17:72:da:14:41:41:46:f7:e9:f6: f8:3e:ce:08:0b:d3:b2:83:13:1d:f2:d6:a3:91:ae: a4:8a:c7:fd:81:e4:ba:32:a7:b5:fc:ae:7d:b9:a8: 56:e5:7e:9c:08:c1:96:e8:44:6d:22:ea:5c:bc:90: c3:80:6e:09:a8:fe:48:8a:7a:31:a8:28:46:d6:19: 72:98:54:00:82:b8:1d:e2:a3:f0:7a:2a:b7:cd:25: 40:bd:f7:df:42:a4:0b:a8:a0:2c:1f:48:df:11:4c: c2:f6:b0:ef:f5:2d:3e:60:57:cb:90:57:d0:37:8c: 65:f7:ab:5e:71:c8:64:12:89:a3:cc:ce:e7:20:d7: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0B:69:DD:35:DB:45:59:DE:41:D8:EC:74:4C:75:9F:CF:57:E6:19 X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a6:9f:de:5d:2f:ff:9a:60:60:56:df:1d:59:f0:f8:b6:b4: 62:36:3e:4d:62:81:26:13:a6:4c:34:da:f8:12:a2:f2:37:1c: 5c:49:94:a8:c0:91:19:78:2f:e2:cf:e5:dd:15:1c:ed:51:8e: 88:13:5e:6d:7c:c8:88:b4:67:6c:1a:f6:37:f6:d3:9e:62:c3: eb:de:82:60:72:1b:71:06:10:f6:67:0c:5f:8d:aa:bc:7e:11: 6d:21:2b:5b:1d:b5:4f:48:1e:e8:27:0f:14:68:ff:2d:57:7f: 1e:08:e7:4f:d7:1c:62:f4:4f:c0:73:79:2b:19:32:43:34:fc: 95:6c:ae:f3:c2:95:5f:26:27:13:d8:c9:58:d8:ad:09:5a:28: 7b:19:f7:46:f0:df:5c:17:80:15:7f:c8:2d:32:cf:89:2c:b7: c1:e9:04:94:bc:fd:a0:69:af:86:4b:db:1a:40:60:31:80:e8: b1:1c:c5:fa:da:e7:30:aa:2d:52:46:ea:69:1d:ad:f6:00:0d: 4c:a4:57:67:ad:f4:52:64:1a:56:82:8b:f7:8b:34:04:97:db: fb:c0:dd:be:fc:0c:bb:38:dc:bf:68:85:4b:d1:e3:76:39:b8: ed:2f:18:d4:06:18:9b:f4:28:f2:8f:5d:8e:a3:49:36:96:0d: 35:2b:79:34 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUKpvDGIvnuQmbiG6OP6Rh/tKUOTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA3MjMyMDUxNDVaFw0yNjA3MjQyMjI4NDVaMDMxMTAvBgNV BAMTKENCMEI2OUREMzVEQjQ1NTlERTQxRDhFQzc0NEM3NTlGQ0Y1N0U2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41yyTzFPfCmSWwbAnEtfSDP9J BbILM/P8Oj1hBa1Mmcxh7evMLi9rQ/PQCyyvuVySZyb0EMU5f7xL3qMu6RqvwSNx uuNP4i2I9XJIZZtzX250vnL2Pt3KG9divCwBL75oW9iN2ADKCk+k4zFdGmots8i+ ZurY3mG7uvWrF3LaFEFBRvfp9vg+zggL07KDEx3y1qORrqSKx/2B5Loyp7X8rn25 qFblfpwIwZboRG0i6ly8kMOAbgmo/kiKejGoKEbWGXKYVACCuB3io/B6KrfNJUC9 999CpAuooCwfSN8RTML2sO/1LT5gV8uQV9A3jGX3q15xyGQSiaPMzucg18F7AgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUywtp3TXbRVneQdjsdEx1n89X5hkwHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvNjhDMkM0MzVENzM2 RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFWmn95dL/+a YGBW3x1Z8Pi2tGI2Pk1igSYTpkw02vgSovI3HFxJlKjAkRl4L+LP5d0VHO1RjogT Xm18yIi0Z2wa9jf2055iw+vegmByG3EGEPZnDF+Nqrx+EW0hK1sdtU9IHugnDxRo /y1Xfx4I50/XHGL0T8BzeSsZMkM0/JVsrvPClV8mJxPYyVjYrQlaKHsZ90bw31wX gBV/yC0yz4kst8HpBJS8/aBpr4ZL2xpAYDGA6LEcxfra5zCqLVJG6mkdrfYADUyk V2et9FJkGlaCi/eLNASX2/vA3b78DLs43L9ohUvR43Y5uO0vGNQGGJv0KPKPXY6j STaWDTUreTQ= -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:23 2026 by rpki-client