$ rpki-client -vvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json) Hash identifier: 7tAmQJbyafdG45BAhIIRyRPNtdOTRNjQhqoDGgYvtuY= Subject key identifier: 22:59:98:B8:E3:6C:34:BD:77:94:9A:59:8D:68:6B:6F:B2:AB:7C:4E Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42 Certificate serial: 1EF15D000AE916824E00C17C2D2F318B850C9694 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft Manifest number: 68 Signing time: Thu 23 Jul 2026 19:01:30 +0000 Manifest this update: Thu 23 Jul 2026 18:56:30 +0000 Manifest next update: Fri 24 Jul 2026 20:52:30 +0000 Files and hashes: 1: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: kASkSUEWO+11iDA9Py3mKILRgOhQuLwbqAtSAhUy7Dw=) 2: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=) 3: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=) 4: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=) 5: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=) 6: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f1:5d:00:0a:e9:16:82:4e:00:c1:7c:2d:2f:31:8b:85:0c:96:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42 Validity Not Before: Jul 23 18:56:30 2026 GMT Not After : Jul 24 20:52:30 2026 GMT Subject: CN=225998B8E36C34BD77949A598D686B6FB2AB7C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:ea:19:93:73:68:f2:e1:45:7f:71:0f:f8: ea:a4:93:e7:4c:36:c0:58:af:63:9e:95:d2:bc:6b: a4:7d:f8:4a:ee:cc:5b:6a:0d:9d:40:b8:7c:b5:07: a9:ba:fb:74:17:93:6f:af:fb:2e:c7:a2:62:6b:ce: e9:f0:b7:c6:26:f4:f7:e0:b8:8c:54:6d:aa:5a:2b: 63:c2:51:98:6b:2d:38:17:d1:78:f9:43:e9:d9:c7: 2d:1a:57:03:15:b3:13:d1:53:57:68:1a:a2:99:3c: b4:95:d6:e0:85:9b:fa:70:78:2f:34:09:50:f4:b3: 69:cf:42:fd:33:fe:f0:c2:3f:51:b5:17:3c:b9:f9: d2:c2:d6:76:3d:1a:dc:ea:66:26:f5:02:98:d1:3c: 93:68:97:81:1e:4d:62:b2:fc:a7:d9:66:34:c6:c5: 05:ed:78:4c:52:71:a2:80:a7:76:8c:78:ec:5c:e4: e8:eb:e9:c8:bb:0b:0c:45:62:5d:63:42:d5:b6:0c: 58:bc:e3:29:e1:41:43:d4:20:7d:89:b9:1c:1a:d8: 7b:99:65:09:90:15:a2:ae:89:c6:d3:12:c3:4d:f0: 48:a8:24:e0:4a:ef:0e:74:e5:46:82:e1:77:64:93: 3d:58:fb:ef:42:c2:ec:83:81:30:69:ab:27:05:79: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:98:B8:E3:6C:34:BD:77:94:9A:59:8D:68:6B:6F:B2:AB:7C:4E X509v3 Authority Key Identifier: keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:26:57:58:6e:a2:6b:3d:b9:5c:5b:17:4b:a6:82:0f:d1:8d: 97:be:bb:bd:f5:f3:ad:3b:bd:50:78:b9:b5:7b:23:f1:3a:7a: 0c:11:96:f6:a9:2c:8a:50:8d:85:ff:26:7e:31:c1:dd:13:fd: 78:37:95:e7:a6:f5:5e:f6:79:de:d9:ee:27:1b:8e:e7:b7:b4: 50:1e:02:fd:a2:ae:31:7a:da:ba:9e:92:25:1e:3d:c7:91:ab: 4d:33:38:d1:6c:de:f9:c3:32:05:e9:6e:3b:b1:b1:53:d5:b5: c1:3f:d7:ff:fb:8c:94:9e:37:07:d2:0e:18:e2:82:e8:cc:63: e2:14:5d:0f:ba:36:c0:8c:4b:12:6e:ee:19:3a:7b:a4:b5:bd: 10:39:ba:57:d7:4d:01:ed:4c:e0:ba:4c:b5:42:25:b2:f8:08: 4f:6a:22:08:18:5e:df:af:f5:47:48:6c:0e:bc:d5:39:4e:12: 49:00:a4:4b:7c:c5:f0:29:2a:ce:a2:63:d7:7a:c7:2d:45:79: 7f:17:0b:70:a6:b1:a5:5f:0a:af:eb:11:8d:4c:34:c8:6a:89: 96:fa:00:79:34:6f:79:2f:69:a5:8f:ef:b1:a7:0d:18:d8:d9: e4:ee:9e:ab:53:40:1b:fc:86:45:83:2f:5c:7a:27:c3:13:cd: dd:64:3f:d8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUHvFdAArpFoJOAMF8LS8xi4UMlpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhERDcx OEU3MEQ0MjAeFw0yNjA3MjMxODU2MzBaFw0yNjA3MjQyMDUyMzBaMDMxMTAvBgNV BAMTKDIyNTk5OEI4RTM2QzM0QkQ3Nzk0OUE1OThENjg2QjZGQjJBQjdDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooOoZk3No8uFFf3EP+Oqkk+dM NsBYr2OeldK8a6R9+EruzFtqDZ1AuHy1B6m6+3QXk2+v+y7HomJrzunwt8Ym9Pfg uIxUbapaK2PCUZhrLTgX0Xj5Q+nZxy0aVwMVsxPRU1doGqKZPLSV1uCFm/pweC80 CVD0s2nPQv0z/vDCP1G1Fzy5+dLC1nY9GtzqZib1ApjRPJNol4EeTWKy/KfZZjTG xQXteExScaKAp3aMeOxc5Ojr6ci7CwxFYl1jQtW2DFi84ynhQUPUIH2JuRwa2HuZ ZQmQFaKuicbTEsNN8EioJOBK7w505UaC4Xdkkz1Y++9CwuyDgTBpqycFed11AgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUIlmYuONsNL13lJpZjWhrb7KrfE4wHwYDVR0j BBgwFoAUQyc09AkgIFymRDo7mTCN1xjnDUIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdEUy8w LzQzMjczNEY0MDkyMDIwNUNBNjQ0M0EzQjk5MzA4REQ3MThFNzBENDIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhE RDcxOEU3MEQ0Mi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRFMvMC80MzI3MzRGNDA5MjAyMDVD QTY0NDNBM0I5OTMwOERENzE4RTcwRDQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiZXWG6iaz25XFsX S6aCD9GNl767vfXzrTu9UHi5tXsj8Tp6DBGW9qksilCNhf8mfjHB3RP9eDeV56b1 XvZ53tnuJxuO57e0UB4C/aKuMXraup6SJR49x5GrTTM40Wze+cMyBeluO7GxU9W1 wT/X//uMlJ43B9IOGOKC6Mxj4hRdD7o2wIxLEm7uGTp7pLW9EDm6V9dNAe1M4LpM tUIlsvgIT2oiCBhe36/1R0hsDrzVOU4SSQCkS3zF8CkqzqJj13rHLUV5fxcLcKax pV8Kr+sRjUw0yGqJlvoAeTRveS9ppY/vsacNGNjZ5O6eq1NAG/yGRYMvXHonwxPN 3WQ/2A== -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:58 2026 by rpki-client