$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json) Hash identifier: m7SDM249KIIHr1AP62geVRIIqW7sUEjOiV7VfirRvIA= Subject key identifier: 23:D0:01:F0:57:8A:E5:6E:D3:85:0B:BC:43:35:1B:E5:27:15:59:07 Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42 Certificate serial: 74ABAD62239993C5D3E129A738E2AFCB2693DDF6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft Manifest number: FF Signing time: Sat 14 Nov 2026 22:12:11 +0000 Manifest this update: Sat 14 Nov 2026 22:07:11 +0000 Manifest next update: Mon 16 Nov 2026 00:33:11 +0000 Files and hashes: 1: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=) 2: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: 5zRymB2yzWkF0xNSXDszxSdfKpgTCcjaHrMqnRvIk44=) 3: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=) 4: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=) 5: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=) 6: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ab:ad:62:23:99:93:c5:d3:e1:29:a7:38:e2:af:cb:26:93:dd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42 Validity Not Before: Nov 14 22:07:11 2026 GMT Not After : Nov 16 00:33:11 2026 GMT Subject: CN=23D001F0578AE56ED3850BBC43351BE527155907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:d8:bd:b3:96:af:8c:0f:5d:65:ac:b9:cb: 88:36:5d:f7:9c:87:2d:7f:b9:5f:d6:38:5f:7b:4c: 92:01:16:bd:8d:d4:4f:71:d3:2b:65:f1:d3:e8:cc: e9:0e:1e:1a:34:53:0c:1b:df:04:38:f2:59:c1:3c: 24:38:c7:2f:4a:3e:66:0b:40:51:aa:16:18:df:4f: 30:99:17:0b:20:5d:28:64:d6:2a:2f:6d:5e:a5:8d: 92:0a:03:47:de:06:59:15:d2:20:c1:4c:4f:b8:66: 43:2d:d8:53:96:1b:26:79:1a:f0:72:a0:81:6e:9a: 48:45:d5:d6:52:27:f5:5f:ef:ac:8b:73:6d:ae:aa: ac:0d:7a:c9:d6:13:9c:22:7b:a8:ff:02:89:4b:fc: e7:bb:c9:ee:82:ef:c7:e3:af:11:02:39:f9:13:3c: d7:0d:96:b8:ef:a6:5f:9b:cd:43:99:b2:8c:a1:08: 98:3a:07:67:25:c7:aa:14:7a:0c:ed:9f:7c:fc:3d: 65:d0:aa:54:29:72:b7:ab:67:93:df:ca:52:9c:ac: bd:d0:3d:ff:01:3a:f2:0d:72:fb:16:b8:73:76:f8: 63:ea:f8:48:08:c2:61:61:4f:fe:86:eb:4a:db:92: 12:af:3e:09:15:06:2b:90:1b:b1:7a:48:fc:6b:cd: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:01:F0:57:8A:E5:6E:D3:85:0B:BC:43:35:1B:E5:27:15:59:07 X509v3 Authority Key Identifier: keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9f:a7:e7:04:85:df:6c:b5:e3:91:83:42:c9:07:3b:66:11: 7e:57:b2:04:b4:f1:8b:43:3e:bc:f3:0e:37:e7:1a:e7:9e:55: e4:5c:c6:29:e9:53:50:96:c6:37:67:1c:e7:d5:46:f6:f5:c6: 07:86:d8:8a:4e:64:db:95:79:c6:86:f8:ee:dc:e1:a8:75:c3: 28:51:84:df:d1:bd:3d:b7:b3:1f:e8:af:f1:c1:9d:1b:df:45: 97:21:53:52:04:1f:2a:35:9c:d9:7e:2a:f7:60:30:3c:8a:8c: b8:59:50:2f:6a:dc:36:9e:f7:78:1c:8b:54:31:c7:04:ee:c8: dc:32:54:0b:7b:7a:0c:f2:18:ef:45:1e:7b:39:e5:9c:22:07: ba:cf:eb:68:d5:49:91:48:cf:19:65:26:63:58:1a:26:a0:7d: e2:0e:4d:27:ce:7b:a0:8d:18:bd:c0:f2:ed:c3:1b:03:9c:ba: 4d:e9:2c:b6:cf:1b:f1:8e:61:a9:50:62:a8:31:42:5e:9f:88: e0:2d:58:7e:4c:b4:f5:19:0e:94:ae:aa:80:b4:d1:ac:46:be: d1:76:d8:9e:e2:fc:d9:c4:21:ab:a9:50:ca:29:bb:4d:b2:a7: ac:57:ff:5f:df:10:e7:d7:de:ba:ea:01:8b:14:12:2b:40:54: bf:83:ac:01 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUdKutYiOZk8XT4SmnOOKvyyaT3fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhERDcx OEU3MEQ0MjAeFw0yNjExMTQyMjA3MTFaFw0yNjExMTYwMDMzMTFaMDMxMTAvBgNV BAMTKDIzRDAwMUYwNTc4QUU1NkVEMzg1MEJCQzQzMzUxQkU1MjcxNTU5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC229i9s5avjA9dZay5y4g2Xfec hy1/uV/WOF97TJIBFr2N1E9x0ytl8dPozOkOHho0Uwwb3wQ48lnBPCQ4xy9KPmYL QFGqFhjfTzCZFwsgXShk1iovbV6ljZIKA0feBlkV0iDBTE+4ZkMt2FOWGyZ5GvBy oIFumkhF1dZSJ/Vf76yLc22uqqwNesnWE5wie6j/AolL/Oe7ye6C78fjrxECOfkT PNcNlrjvpl+bzUOZsoyhCJg6B2clx6oUegztn3z8PWXQqlQpcrerZ5PfylKcrL3Q Pf8BOvINcvsWuHN2+GPq+EgIwmFhT/6G60rbkhKvPgkVBiuQG7F6SPxrzc/fAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUI9AB8FeK5W7ThQu8QzUb5ScVWQcwHwYDVR0j BBgwFoAUQyc09AkgIFymRDo7mTCN1xjnDUIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdEUy8w LzQzMjczNEY0MDkyMDIwNUNBNjQ0M0EzQjk5MzA4REQ3MThFNzBENDIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhE RDcxOEU3MEQ0Mi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRFMvMC80MzI3MzRGNDA5MjAyMDVD QTY0NDNBM0I5OTMwOERENzE4RTcwRDQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZ+n5wSF32y145GD QskHO2YRfleyBLTxi0M+vPMON+ca555V5FzGKelTUJbGN2cc59VG9vXGB4bYik5k 25V5xob47tzhqHXDKFGE39G9PbezH+iv8cGdG99FlyFTUgQfKjWc2X4q92AwPIqM uFlQL2rcNp73eByLVDHHBO7I3DJUC3t6DPIY70UeeznlnCIHus/raNVJkUjPGWUm Y1gaJqB94g5NJ857oI0YvcDy7cMbA5y6Teksts8b8Y5hqVBiqDFCXp+I4C1Yfky0 9RkOlK6qgLTRrEa+0XbYnuL82cQhq6lQyim7TbKnrFf/X98Q59feuuoBixQSK0BU v4OsAQ== -----END CERTIFICATE-----Generated at Sun Nov 15 14:55:36 2026 by rpki-client