$ rpki-client -vvvf rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft File: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft (raw, json) Hash identifier: O09wdapTDKWh0ZUyL+Li1vZfRY2k4sU4q1asqXcASbs= Subject key identifier: 63:4D:58:A2:F8:9C:16:58:CF:F3:49:59:75:2D:09:55:D5:B9:6D:D7 Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Certificate serial: 3863A9ACFEA02A990A44A3AFAE2C4E6D03A2C904 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft Manifest number: BE Signing time: Sun 27 Sep 2026 05:48:09 +0000 Manifest this update: Sun 27 Sep 2026 05:43:09 +0000 Manifest next update: Mon 28 Sep 2026 06:13:09 +0000 Files and hashes: 1: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl (hash: MJi3ncbrZd+06HuZinxrTtpUCd83STZ2/4x9erhCxDQ=) 2: 3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa (hash: Cd6OMIoEih6thkDQvlDIyWr358PSZmpUGiX23euG7pQ=) 3: 3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa (hash: N130VCEwGnahMmdQnEoFsloWsrRvCZQOZhmdArYbsZw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:63:a9:ac:fe:a0:2a:99:0a:44:a3:af:ae:2c:4e:6d:03:a2:c9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Validity Not Before: Sep 27 05:43:09 2026 GMT Not After : Sep 28 06:13:09 2026 GMT Subject: CN=634D58A2F89C1658CFF34959752D0955D5B96DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:b5:87:e1:bf:5e:e0:b6:94:77:09:19:8c: ee:75:b6:d7:b9:c7:32:21:0f:1e:b2:59:0f:dd:a2: 22:02:ec:77:35:91:13:0b:dd:d0:7c:0e:72:d8:71: 60:dc:c2:7a:85:ba:bd:cc:ba:4d:6f:bf:23:3d:f7: 9a:1e:85:79:ca:f4:34:c3:ea:5d:99:b9:83:7d:cb: 5e:e7:8f:a0:3c:e3:50:55:b5:2a:72:60:44:3b:10: b1:8f:51:69:f9:fd:5d:30:a0:dd:53:bc:b8:8e:13: 85:22:d7:0b:33:cf:3e:40:c7:dd:66:72:41:25:8d: 90:15:83:43:f0:9f:52:03:fa:2c:95:01:88:02:9f: 11:94:c1:23:ba:5a:30:15:07:70:1e:3b:a7:bc:5f: 0a:bb:86:2d:ba:3c:b6:b3:74:38:cb:6a:74:6d:77: 81:b0:97:35:dd:f0:34:50:65:ba:d0:99:58:12:97: a8:e6:a4:54:26:4a:49:7f:c4:1f:67:35:9a:ef:af: 7a:73:c2:83:04:c8:08:75:59:49:d1:9a:81:6f:df: d0:c6:1f:5c:96:50:9b:b0:03:a6:fc:9c:83:18:7b: 74:75:2f:9a:29:50:fc:5f:5c:1b:6c:9e:f3:99:4a: b7:d7:45:e2:10:f9:bb:22:ea:75:96:8d:20:03:05: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4D:58:A2:F8:9C:16:58:CF:F3:49:59:75:2D:09:55:D5:B9:6D:D7 X509v3 Authority Key Identifier: keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d1:5c:bf:13:ea:dd:a7:f2:07:1c:60:65:1b:ac:9a:b4:41: c3:8c:db:d9:1b:da:8d:6b:56:f5:ed:e1:62:d1:6f:9f:9d:7c: 98:49:79:fe:32:72:62:a3:51:02:3e:01:84:5c:e8:91:1b:4b: 8d:04:b4:d5:a6:f2:29:59:74:b0:5d:21:91:47:8e:1d:14:fb: 8f:f3:f3:99:68:33:93:10:d1:29:a8:5d:9c:da:e1:81:28:7a: f5:25:9b:a8:64:b5:a3:ad:ff:ad:b9:58:11:38:6d:7f:97:40: c4:28:c5:b7:3a:6a:c9:23:9c:6f:89:17:a9:8f:a2:98:82:9f: 0e:be:f0:64:6d:0f:3b:7a:bb:fd:07:53:13:bc:d9:d8:e7:9d: c2:83:8f:f7:67:03:bf:82:0b:5c:b0:d8:cf:06:b4:20:0f:f4: fc:da:5e:e1:ae:ed:54:9e:35:6b:b0:40:66:68:17:7a:73:0a: 46:93:70:6b:d9:82:a1:f8:a2:65:4e:77:8c:38:59:96:bb:1f: 3d:d5:eb:11:d0:73:32:86:0e:89:92:be:65:8e:db:48:94:ea: 95:4b:92:1d:0a:41:3e:b1:ef:38:60:b2:aa:eb:53:eb:15:75: fd:8a:06:2e:2d:69:18:50:31:95:ca:ee:df:e0:b7:4a:2b:b5: f5:e9:8c:cc -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUOGOprP6gKpkKRKOvrixObQOiyQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRC RkY4QjYzMTAeFw0yNjA5MjcwNTQzMDlaFw0yNjA5MjgwNjEzMDlaMDMxMTAvBgNV BAMTKDYzNEQ1OEEyRjg5QzE2NThDRkYzNDk1OTc1MkQwOTU1RDVCOTZERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SbWH4b9e4LaUdwkZjO51tte5 xzIhDx6yWQ/doiIC7Hc1kRML3dB8DnLYcWDcwnqFur3Muk1vvyM995oehXnK9DTD 6l2ZuYN9y17nj6A841BVtSpyYEQ7ELGPUWn5/V0woN1TvLiOE4Ui1wszzz5Ax91m ckEljZAVg0Pwn1ID+iyVAYgCnxGUwSO6WjAVB3AeO6e8Xwq7hi26PLazdDjLanRt d4GwlzXd8DRQZbrQmVgSl6jmpFQmSkl/xB9nNZrvr3pzwoMEyAh1WUnRmoFv39DG H1yWUJuwA6b8nIMYe3R1L5opUPxfXBtsnvOZSrfXReIQ+bsi6nWWjSADBUVjAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUY01YovicFljP80lZdS0JVdW5bdcwHwYDVR0j BBgwFoAUE4oFSuICMv502kGn0ftmhL/4tjEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzEvMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy8xMzhBMDU0QUUyMDIzMkZFNzREQTQxQTdEMUZC NjY4NEJGRjhCNjMxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzEvMTM4QTA1NEFFMjAy MzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD3RXL8T6t2n 8gccYGUbrJq0QcOM29kb2o1rVvXt4WLRb5+dfJhJef4ycmKjUQI+AYRc6JEbS40E tNWm8ilZdLBdIZFHjh0U+4/z85loM5MQ0SmoXZza4YEoevUlm6hktaOt/625WBE4 bX+XQMQoxbc6askjnG+JF6mPopiCnw6+8GRtDzt6u/0HUxO82djnncKDj/dnA7+C C1yw2M8GtCAP9PzaXuGu7VSeNWuwQGZoF3pzCkaTcGvZgqH4omVOd4w4WZa7Hz3V 6xHQczKGDomSvmWO20iU6pVLkh0KQT6x7zhgsqrrU+sVdf2KBi4taRhQMZXK7t/g t0ortfXpjMw= -----END CERTIFICATE-----Generated at Sun Sep 27 23:14:28 2026 by rpki-client