$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft File: 4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json) Hash identifier: XRarWsMyZLlwWCmIpAF5fH04ZxzaQssL/djTa8NBY4g= Subject key identifier: CD:1D:10:3B:4D:9B:2B:B9:C1:E4:AA:F7:67:F1:E5:62:0F:0F:05:BB Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Certificate serial: 7FB2FD1D2BCFEA6DE696226B6B6C9095215BB556 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft Manifest number: BA Signing time: Thu 24 Sep 2026 14:00:02 +0000 Manifest this update: Thu 24 Sep 2026 13:55:02 +0000 Manifest next update: Fri 25 Sep 2026 15:04:02 +0000 Files and hashes: 1: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=) 2: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=) 3: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=) 4: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (hash: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=) 5: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: BtRInaWo7k9vBRJFtUpH3PWLkbPYDgxflg+gOCQYK64=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b2:fd:1d:2b:cf:ea:6d:e6:96:22:6b:6b:6c:90:95:21:5b:b5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Validity Not Before: Sep 24 13:55:02 2026 GMT Not After : Sep 25 15:04:02 2026 GMT Subject: CN=CD1D103B4D9B2BB9C1E4AAF767F1E5620F0F05BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:e6:55:56:14:5a:af:8a:e6:3e:fd:37:01: 94:16:ad:a7:d9:18:0e:37:d4:52:fb:9a:95:73:32: 2f:8a:33:76:cb:ac:78:33:02:b7:2f:a3:3a:bc:94: 48:25:80:26:fe:23:54:a3:48:3f:7d:1b:a6:59:3a: 1e:9d:59:6c:fe:e2:34:c8:a1:3f:c2:bd:24:b0:7a: 4b:1b:f3:a2:7f:1d:b3:29:7b:e3:54:34:62:9d:10: 12:d9:d1:84:2f:8d:5b:6f:20:dd:a7:df:c3:1c:04: f1:09:96:29:a3:df:53:b6:c7:2e:36:b8:14:3b:21: 55:8e:ff:2d:a0:ae:ac:3a:08:08:1b:7c:41:40:2a: d5:e2:6f:b0:a7:4b:de:d2:fa:f7:3d:dd:fe:06:4a: c2:c1:98:31:8b:e9:85:d3:bb:18:3a:25:d9:89:e0: 30:13:b1:3b:9b:91:aa:83:1d:ed:0c:5a:b0:1c:be: a4:3a:03:48:8d:fe:70:46:e2:27:e6:1c:cb:f5:0b: 73:d4:33:1b:e5:87:ef:f6:34:0e:46:e2:09:f9:d0: c1:13:30:6f:97:7e:5d:03:c1:67:b8:90:a2:8a:ed: 09:a3:5d:6b:f1:ca:35:21:4a:46:49:68:7e:ad:12: b2:e4:01:8a:e4:8b:23:4f:2c:8d:eb:0b:a5:53:1a: 8c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1D:10:3B:4D:9B:2B:B9:C1:E4:AA:F7:67:F1:E5:62:0F:0F:05:BB X509v3 Authority Key Identifier: keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a5:23:ab:69:c9:19:d1:33:a2:f1:29:3e:57:30:15:c2:46: a4:9f:a4:ae:1f:4e:ff:7b:d1:bb:37:cd:ff:01:90:28:20:f9: 6e:3b:21:73:f8:65:42:61:ca:23:df:79:3c:d3:38:90:28:cf: 02:a1:37:0f:8f:9b:b8:c2:81:92:4d:0d:34:c6:3d:46:5d:1c: 14:89:89:9a:bd:d6:a9:79:b1:af:79:08:9d:c8:56:49:cf:d2: ba:c7:3e:0d:d3:6b:97:5b:f3:cb:a1:a7:bb:e5:0a:73:f3:2e: 4c:f4:c9:7a:3d:52:41:a9:04:30:dd:af:2d:e6:d6:f8:4b:29: d6:2b:6d:1c:53:33:45:ff:73:78:30:a1:9b:6a:17:da:a6:a6: 4b:a8:3c:f4:13:e7:e9:44:60:70:57:05:33:17:d7:4c:c1:0e: d5:23:6a:97:ac:23:38:d1:32:9f:28:17:d0:94:20:4c:0e:df: b5:3e:77:2f:0d:6f:40:e9:34:a8:37:47:13:85:13:06:d8:21: 52:21:8b:2e:9c:ac:4f:e9:24:71:a9:24:44:bb:f4:21:39:24: 26:39:26:6b:69:c0:14:c2:66:c7:12:5e:81:f0:2d:e1:75:90: 7e:52:5e:bc:ed:5e:44:93:f3:ad:a1:f9:51:55:fd:9f:4b:e7: a9:b4:b9:a1 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUf7L9HSvP6m3mliJra2yQlSFbtVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2 OTI3Q0RFNTAeFw0yNjA5MjQxMzU1MDJaFw0yNjA5MjUxNTA0MDJaMDMxMTAvBgNV BAMTKENEMUQxMDNCNEQ5QjJCQjlDMUU0QUFGNzY3RjFFNTYyMEYwRjA1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEOZVVhRar4rmPv03AZQWrafZ GA431FL7mpVzMi+KM3bLrHgzArcvozq8lEglgCb+I1SjSD99G6ZZOh6dWWz+4jTI oT/CvSSweksb86J/HbMpe+NUNGKdEBLZ0YQvjVtvIN2n38McBPEJlimj31O2xy42 uBQ7IVWO/y2grqw6CAgbfEFAKtXib7CnS97S+vc93f4GSsLBmDGL6YXTuxg6JdmJ 4DATsTubkaqDHe0MWrAcvqQ6A0iN/nBG4ifmHMv1C3PUMxvlh+/2NA5G4gn50MET MG+Xfl0DwWe4kKKK7QmjXWvxyjUhSkZJaH6tErLkAYrkiyNPLI3rC6VTGoxhAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUzR0QO02bK7nB5Kr3Z/HlYg8PBbswHwYDVR0j BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXQkVTVFdBUkUvMC80NTky NTYyNDU5Qjg4RTg2MUQ3RTQwQjI2OUI2NEVDQzY5MjdDREU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ZaUjq2nJGdEzovEpPlcwFcJGpJ+krh9O/3vRuzfN/wGQKCD5bjshc/hlQmHKI995 PNM4kCjPAqE3D4+buMKBkk0NNMY9Rl0cFImJmr3WqXmxr3kInchWSc/Susc+DdNr l1vzy6Gnu+UKc/MuTPTJej1SQakEMN2vLebW+Esp1ittHFMzRf9zeDChm2oX2qam S6g89BPn6URgcFcFMxfXTMEO1SNql6wjONEynygX0JQgTA7ftT53Lw1vQOk0qDdH E4UTBtghUiGLLpysT+kkcakkRLv0ITkkJjkma2nAFMJmxxJegfAt4XWQflJevO1e RJPzraH5UVX9n0vnqbS5oQ== -----END CERTIFICATE-----Generated at Thu Sep 24 19:44:06 2026 by rpki-client