$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft File: 4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json) Hash identifier: C2r/j1iLaKvjkRn57sJIPvruSYe/ppWZS2CMXecLseU= Subject key identifier: 5A:6A:4B:1D:27:5A:69:33:41:2F:55:49:3A:F4:DD:B7:76:BE:75:52 Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Certificate serial: 27A269E75461633CFED8AB16D4D3C46D05B767E8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft Manifest number: FD Signing time: Sat 14 Nov 2026 20:14:52 +0000 Manifest this update: Sat 14 Nov 2026 20:09:52 +0000 Manifest next update: Sun 15 Nov 2026 23:06:52 +0000 Files and hashes: 1: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=) 2: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=) 3: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=) 4: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: xnAzyFcN4hdCpCibgWH1HUTwRYrQqToXI53sRqgMECw=) 5: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (hash: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a2:69:e7:54:61:63:3c:fe:d8:ab:16:d4:d3:c4:6d:05:b7:67:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Validity Not Before: Nov 14 20:09:52 2026 GMT Not After : Nov 15 23:06:52 2026 GMT Subject: CN=5A6A4B1D275A6933412F55493AF4DDB776BE7552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:16:08:1b:c5:9e:13:89:28:8c:1d:35:e7: 08:d0:c9:d0:50:34:49:4e:9a:96:ab:b5:07:97:27: 81:33:de:b1:36:ef:d5:c3:3c:8d:b9:6d:59:f9:99: 03:21:19:33:58:ec:b2:0e:d0:7a:3e:e9:60:d8:02: 56:9f:21:59:a5:f6:9f:ea:10:05:02:10:ec:4b:19: c9:1e:53:0b:24:25:d9:7d:fd:0a:c1:f0:e6:11:1f: 77:60:b7:35:bf:67:ae:5d:c0:64:48:6d:de:ac:dd: af:e5:0e:a8:32:d5:39:0e:30:1c:21:8f:b2:14:86: 45:3d:d1:dc:fb:9e:17:08:00:34:bc:46:71:ab:d4: 4b:0a:75:ae:61:3d:cf:51:a9:2e:ec:69:09:15:30: 29:7d:80:8e:ba:c5:80:6b:3f:b4:51:18:29:65:77: 6e:6a:37:6f:c7:f5:87:0a:4f:b1:66:ea:e5:fe:6c: 6c:24:e4:11:12:dc:22:7f:3b:53:70:a5:80:c6:ff: f0:25:8f:a4:05:37:10:c9:94:b9:22:ba:14:98:f5: 25:75:45:12:22:f2:85:eb:a6:14:39:85:ed:43:3d: 4f:3f:72:46:42:21:a1:d6:7b:95:48:fd:f2:65:34: 9f:63:56:6a:1f:bc:6f:91:f7:81:a5:8b:8d:d3:67: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:4B:1D:27:5A:69:33:41:2F:55:49:3A:F4:DD:B7:76:BE:75:52 X509v3 Authority Key Identifier: keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3c:ca:62:58:06:9a:53:06:4d:65:85:08:93:0d:48:d0:fd: 0b:50:cb:69:c0:58:34:3a:89:53:b3:44:fa:86:6d:22:06:7c: 9e:81:83:27:1b:32:72:d7:c3:52:cd:ec:ec:02:0a:52:9b:41: 20:23:46:f4:b6:90:d1:3a:fb:e7:d1:1e:d7:86:ac:93:c2:96: e9:b9:62:85:fd:2c:77:31:a6:83:f1:8f:55:e0:05:b5:6b:08: 0f:f9:99:2a:5f:e3:2b:e1:0f:8a:79:50:7f:ff:99:84:24:57: ab:9e:d5:ce:1c:71:aa:ee:0d:98:02:55:79:85:7f:63:61:d4: 88:f2:fc:8d:8d:2c:c5:6c:dc:ba:da:87:50:2a:d0:c4:8b:e5: 80:5b:40:dc:f5:e0:d3:be:a2:0e:ce:90:9f:8b:2c:6d:52:cf: 3d:1d:1e:7d:76:f7:ac:7e:36:ae:c6:87:de:13:7f:49:57:9a: 26:ce:69:bc:de:aa:3e:d2:f3:59:3e:0a:44:85:0d:39:9a:79: 42:f8:f4:23:ad:5f:7f:40:c6:ac:88:99:6e:7a:65:08:a4:62: 14:02:7e:14:1c:25:49:77:79:0a:46:56:b1:0c:8e:b9:34:b2: 1c:86:4b:0a:3b:64:59:60:4e:fd:a6:e2:72:c3:ff:f6:84:f5: b9:a8:27:11 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUJ6Jp51RhYzz+2KsW1NPEbQW3Z+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2 OTI3Q0RFNTAeFw0yNjExMTQyMDA5NTJaFw0yNjExMTUyMzA2NTJaMDMxMTAvBgNV BAMTKDVBNkE0QjFEMjc1QTY5MzM0MTJGNTU0OTNBRjREREI3NzZCRTc1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+xYIG8WeE4kojB015wjQydBQ NElOmpartQeXJ4Ez3rE279XDPI25bVn5mQMhGTNY7LIO0Ho+6WDYAlafIVml9p/q EAUCEOxLGckeUwskJdl9/QrB8OYRH3dgtzW/Z65dwGRIbd6s3a/lDqgy1TkOMBwh j7IUhkU90dz7nhcIADS8RnGr1EsKda5hPc9RqS7saQkVMCl9gI66xYBrP7RRGCll d25qN2/H9YcKT7Fm6uX+bGwk5BES3CJ/O1NwpYDG//Alj6QFNxDJlLkiuhSY9SV1 RRIi8oXrphQ5he1DPU8/ckZCIaHWe5VI/fJlNJ9jVmofvG+R94Gli43TZ2GNAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUWmpLHSdaaTNBL1VJOvTdt3a+dVIwHwYDVR0j BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXQkVTVFdBUkUvMC80NTky NTYyNDU5Qjg4RTg2MUQ3RTQwQjI2OUI2NEVDQzY5MjdDREU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA TjzKYlgGmlMGTWWFCJMNSND9C1DLacBYNDqJU7NE+oZtIgZ8noGDJxsyctfDUs3s 7AIKUptBICNG9LaQ0Tr759Ee14ask8KW6blihf0sdzGmg/GPVeAFtWsID/mZKl/j K+EPinlQf/+ZhCRXq57Vzhxxqu4NmAJVeYV/Y2HUiPL8jY0sxWzcutqHUCrQxIvl gFtA3PXg076iDs6Qn4ssbVLPPR0efXb3rH42rsaH3hN/SVeaJs5pvN6qPtLzWT4K RIUNOZp5Qvj0I61ff0DGrIiZbnplCKRiFAJ+FBwlSXd5CkZWsQyOuTSyHIZLCjtk WWBO/abicsP/9oT1uagnEQ== -----END CERTIFICATE-----Generated at Sun Nov 15 08:41:16 2026 by rpki-client