$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft File: Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft (raw, json) Hash identifier: npJKBSJpjKE2A/Vd3M1oZvpVB2dnjvNqEfVi7B54U48= Subject key identifier: CA:C4:81:81:B0:E5:07:27:7E:DA:EC:3A:7D:AF:D0:43:C4:B5:A1:DF Authority key identifier: 1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA Certificate issuer: /CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA Certificate serial: 1275 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft Manifest number: 126E Signing time: Sun 19 Oct 2025 21:54:35 +0000 Manifest this update: Sun 19 Oct 2025 21:54:35 +0000 Manifest next update: Tue 21 Oct 2025 21:54:35 +0000 Files and hashes: 1: DATqF1VlaSz-MapwlM-D2x6-R9s.roa (hash: KFAMqU+h9lvfvsG6l8JSi4EmMkRgSzLn3uRUvNMCpCc=) 2: Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl (hash: v0VPwwuHhd88F+8M4QsP1fB+/r47Gcod/5w4o5HHLH8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4725 (0x1275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA Validity Not Before: Oct 19 21:54:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CAC48181B0E507277EDAEC3A7DAFD043C4B5A1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:97:c5:02:67:60:63:5a:91:e8:d2:ff:49: 29:a3:25:d9:f2:8a:08:5d:a7:e3:ff:17:80:aa:ab: ae:6f:f3:76:f5:26:c0:a9:17:85:d1:c4:fb:e5:69: e1:80:dd:ad:01:13:59:9b:d7:b8:90:76:60:25:0a: ee:17:c3:cc:96:0a:c3:22:74:c9:9c:36:b8:d2:fb: f3:0c:12:98:6c:fc:b6:ec:4a:d5:9b:df:fc:58:e8: be:90:74:3f:c3:5c:14:42:53:69:ba:07:3a:55:25: 04:0b:99:b2:0b:1b:19:d8:a7:04:59:19:ee:5b:71: 9b:08:b2:63:f4:e8:58:a6:31:ea:ee:a8:c9:ac:bd: 4a:ef:83:f5:f9:fb:c3:0f:6f:15:be:52:02:fb:0f: a3:b6:ec:87:2f:d7:e5:33:71:ae:03:d6:52:17:6d: 0f:ba:e1:df:c8:e1:09:a8:9e:b2:6c:fc:83:df:3b: 0f:ac:e8:b4:28:9d:37:ab:1a:c3:c7:0e:32:45:61: fe:76:37:7a:37:3e:32:f4:b3:c4:39:a9:13:dd:73: 7f:72:52:18:b8:50:a7:dc:19:f6:55:e1:df:2b:18: 81:ae:08:91:24:43:16:73:fd:ba:51:ab:1b:c8:88: 48:43:66:96:d1:45:a6:c1:03:40:b5:47:5c:13:09: 9c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C4:81:81:B0:E5:07:27:7E:DA:EC:3A:7D:AF:D0:43:C4:B5:A1:DF X509v3 Authority Key Identifier: keyid:1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ac:e9:00:9a:06:75:0a:d6:fc:fa:c5:14:40:5e:d6:41:47: c1:17:ef:7e:c0:76:c6:d1:fa:90:97:8e:6f:19:f5:fd:33:ce: da:fb:b6:23:50:b5:06:41:3e:8b:3f:07:ca:04:3e:6f:e9:26: 15:5c:cd:f2:9f:02:48:5d:80:be:5a:93:23:b9:e4:f5:59:1e: bc:6c:d9:5f:21:3a:53:a3:e5:76:52:8b:9b:73:b2:7b:b6:59: fd:4a:71:07:58:b1:03:9c:ec:d4:38:87:d5:b8:29:36:59:0b: 10:9a:aa:6e:ac:cd:74:b2:68:ad:9f:39:35:34:e7:39:dc:ba: 08:06:67:e4:74:f4:e5:b5:9d:f8:a0:a0:46:e9:cd:6f:e9:97: e5:18:76:2b:f6:b8:f5:c9:8a:47:34:36:7f:e7:5b:08:58:96: 11:41:96:c3:cd:78:f0:4e:88:22:bc:ef:48:49:a3:d0:7c:b5: a7:c3:83:7b:a7:70:31:a0:98:b3:18:9a:80:d4:30:ae:78:94: 95:99:b1:4b:e1:e9:fd:5e:c0:cd:66:b5:46:96:b8:7b:b7:bd: cf:40:22:bd:ce:c3:5f:13:d2:df:f0:a3:08:56:b9:f4:43:a3: 86:5a:cb:cc:01:ae:25:c8:3d:e2:26:1a:65:5c:ac:0e:35:81: 36:b5:c6:9d -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICEnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFB REVCNEQ0NUQ3OTQxRDlCNTNFRjRDMkNDNjFCOTYwMjQ3NkZDQTAeFw0yNTEwMTky MTU0MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBQzQ4MTgxQjBFNTA3 Mjc3RURBRUMzQTdEQUZEMDQzQzRCNUExREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJLZfFAmdgY1qR6NL/SSmjJdnyighdp+P/F4Cqq65v83b1JsCp F4XRxPvlaeGA3a0BE1mb17iQdmAlCu4Xw8yWCsMidMmcNrjS+/MMEphs/LbsStWb 3/xY6L6QdD/DXBRCU2m6BzpVJQQLmbILGxnYpwRZGe5bcZsIsmP06FimMeruqMms vUrvg/X5+8MPbxW+UgL7D6O27Icv1+Uzca4D1lIXbQ+64d/I4QmonrJs/IPfOw+s 6LQonTerGsPHDjJFYf52N3o3PjL0s8Q5qRPdc39yUhi4UKfcGfZV4d8rGIGuCJEk QxZz/bpRqxvIiEhDZpbRRabBA0C1R1wTCZxnAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUysSBgbDlByd+2uw6fa/QQ8S1od8wHwYDVR0jBBgwFoAUGq3rTUXXlB2bU+9M LMYblgJHb8owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQk9PS1Mv R3EzclRVWFhsQjJiVS05TUxNWWJsZ0pIYjhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9HcTNyVFVYWGxCMmJVLTlNTE1ZYmxnSkhiOG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CT09LUy9HcTNyVFVYWGxCMmJVLTlNTE1Z YmxnSkhiOG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6zp AJoGdQrW/PrFFEBe1kFHwRfvfsB2xtH6kJeObxn1/TPO2vu2I1C1BkE+iz8HygQ+ b+kmFVzN8p8CSF2AvlqTI7nk9VkevGzZXyE6U6PldlKLm3Oye7ZZ/UpxB1ixA5zs 1DiH1bgpNlkLEJqqbqzNdLJorZ85NTTnOdy6CAZn5HT05bWd+KCgRunNb+mX5Rh2 K/a49cmKRzQ2f+dbCFiWEUGWw8148E6IIrzvSEmj0Hy1p8ODe6dwMaCYsxiagNQw rniUlZmxS+Hp/V7AzWa1Rpa4e7e9z0Aivc7DXxPS3/CjCFa59EOjhlrLzAGuJcg9 4iYaZVysDjWBNrXGnQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:37:53 2025 by rpki-client