$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft File: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft (raw, json) Hash identifier: ZsAqqvetnaASaHR/eCMH/vM9sP+9q/n8V6acjR9G6QI= Subject key identifier: A1:68:9F:CB:97:F7:CD:68:C1:B7:C2:42:A4:F4:68:19:E4:C7:C2:D3 Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Certificate serial: 2E601CAD22E11819C5FDF6CF4A21E22A7A4503ED Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 23:11:56 +0000 Manifest this update: Thu 23 Jul 2026 23:06:56 +0000 Manifest next update: Sat 25 Jul 2026 01:45:56 +0000 Files and hashes: 1: 3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa (hash: Cd6OMIoEih6thkDQvlDIyWr358PSZmpUGiX23euG7pQ=) 2: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl (hash: le3BZeIZg6KOHFJIdXNxS4uMnYbLKgFZu3bSZHgVMHA=) 3: 3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa (hash: N130VCEwGnahMmdQnEoFsloWsrRvCZQOZhmdArYbsZw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:60:1c:ad:22:e1:18:19:c5:fd:f6:cf:4a:21:e2:2a:7a:45:03:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Validity Not Before: Jul 23 23:06:56 2026 GMT Not After : Jul 25 01:45:56 2026 GMT Subject: CN=A1689FCB97F7CD68C1B7C242A4F46819E4C7C2D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:b8:0f:c9:fa:02:ee:65:e6:29:8c:d4:da: db:b7:47:ac:65:72:88:8a:f0:05:29:23:86:e5:69: 6a:1c:af:91:ef:ab:b9:5d:de:f3:b4:49:7b:71:66: 8c:5a:5d:10:c8:3d:07:3b:89:b2:40:57:c4:05:c8: a5:1d:ad:43:57:16:f3:cf:3f:ce:a1:19:7b:50:d3: 25:8e:45:21:c3:d9:d9:d4:f6:60:db:d3:cd:0b:41: 8b:88:55:95:8d:e4:78:52:90:f1:43:51:94:61:ba: dd:ea:f2:9c:e5:55:4c:ef:fb:6a:f5:3d:28:f6:f0: 2c:d0:d4:fc:2f:16:bb:eb:00:1b:f2:64:88:b4:55: 8c:c4:51:01:1a:bd:d9:12:86:9d:d1:ca:d5:39:f7: 99:18:2e:bc:fb:a1:c4:e1:d5:06:19:f2:61:90:52: a5:a9:9c:16:5c:23:c2:05:d1:e3:6d:b7:dd:10:01: 48:dd:4c:2b:f0:bb:14:8c:ab:59:6f:62:7b:06:42: e0:c4:55:c2:f2:c6:f1:cb:ef:5b:bc:6a:a1:a0:cc: 8b:1e:5e:22:9c:5e:be:f3:19:08:52:c2:1c:08:94: 05:ea:f5:82:cd:73:fb:38:e6:f5:67:b0:74:a5:60: 7b:d2:16:20:2e:ab:c7:80:c3:ae:1f:d4:c6:74:12: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:68:9F:CB:97:F7:CD:68:C1:B7:C2:42:A4:F4:68:19:E4:C7:C2:D3 X509v3 Authority Key Identifier: keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:76:07:46:d8:1c:77:2e:a4:6f:5e:ca:11:14:80:0a:45:94: 32:18:10:b4:82:9e:d5:41:01:5d:f1:7b:49:e7:ed:f1:0e:0c: a9:2a:c4:70:a7:59:b8:f3:02:62:9e:ec:bb:31:41:3c:ca:46: 26:84:cd:24:89:fd:e3:94:ed:1c:8e:b7:86:62:76:69:25:d3: 35:eb:e6:ac:ef:bf:b9:d9:af:6c:fd:6c:1b:cd:da:68:81:86: 49:91:00:86:9f:2f:2c:4e:69:8f:3d:ef:8a:5e:4c:bb:45:6b: c5:46:35:1c:90:05:7a:26:76:24:49:27:76:18:55:70:01:07: ce:08:9a:45:99:2d:c5:7f:1e:a4:60:65:96:82:a9:5e:bc:f6: ae:87:26:6f:ad:af:cb:52:64:cd:25:e6:d3:39:6c:b4:ec:b4: e6:7c:b0:13:9e:7d:88:e7:b3:e0:13:4a:5b:8f:1a:5d:69:13: 85:dc:73:ad:81:f9:57:d6:76:9b:22:33:e1:63:59:7e:de:20: 41:6f:71:7d:fb:67:d9:22:34:42:34:11:8c:12:98:77:b3:50: ab:c0:de:fb:eb:40:b4:58:11:3e:a4:89:85:19:f9:56:95:ac: 46:e0:0a:4c:d6:6a:e1:43:f8:fe:bd:69:f9:46:f2:40:81:d8: 74:a0:36:06 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULmAcrSLhGBnF/fbPSiHiKnpFA+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRC RkY4QjYzMTAeFw0yNjA3MjMyMzA2NTZaFw0yNjA3MjUwMTQ1NTZaMDMxMTAvBgNV BAMTKEExNjg5RkNCOTdGN0NENjhDMUI3QzI0MkE0RjQ2ODE5RTRDN0MyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjW7gPyfoC7mXmKYzU2tu3R6xl coiK8AUpI4blaWocr5Hvq7ld3vO0SXtxZoxaXRDIPQc7ibJAV8QFyKUdrUNXFvPP P86hGXtQ0yWORSHD2dnU9mDb080LQYuIVZWN5HhSkPFDUZRhut3q8pzlVUzv+2r1 PSj28CzQ1PwvFrvrABvyZIi0VYzEUQEavdkShp3RytU595kYLrz7ocTh1QYZ8mGQ UqWpnBZcI8IF0eNtt90QAUjdTCvwuxSMq1lvYnsGQuDEVcLyxvHL71u8aqGgzIse XiKcXr7zGQhSwhwIlAXq9YLNc/s45vVnsHSlYHvSFiAuq8eAw64f1MZ0ErhHAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUoWify5f3zWjBt8JCpPRoGeTHwtMwHwYDVR0j BBgwFoAUE4oFSuICMv502kGn0ftmhL/4tjEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzEvMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy8xMzhBMDU0QUUyMDIzMkZFNzREQTQxQTdEMUZC NjY4NEJGRjhCNjMxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzEvMTM4QTA1NEFFMjAy MzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEh2B0bYHHcu pG9eyhEUgApFlDIYELSCntVBAV3xe0nn7fEODKkqxHCnWbjzAmKe7LsxQTzKRiaE zSSJ/eOU7RyOt4Zidmkl0zXr5qzvv7nZr2z9bBvN2miBhkmRAIafLyxOaY8974pe TLtFa8VGNRyQBXomdiRJJ3YYVXABB84ImkWZLcV/HqRgZZaCqV689q6HJm+tr8tS ZM0l5tM5bLTstOZ8sBOefYjns+ATSluPGl1pE4Xcc62B+VfWdpsiM+FjWX7eIEFv cX37Z9kiNEI0EYwSmHezUKvA3vvrQLRYET6kiYUZ+VaVrEbgCkzWauFD+P69aflG 8kCB2HSgNgY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:04:30 2026 by rpki-client