$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft File: POusQFclHIqquVTcIgsiSWvu9WM.mft (raw, json) Hash identifier: D0hkg7izGoKeEZmNRYSabUfH+Im2rInr2hTCyddJNOA= Subject key identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Certificate serial: 03D8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft Manifest number: 03C9 Signing time: Sat 23 Aug 2025 21:15:04 +0000 Manifest this update: Sat 23 Aug 2025 21:15:04 +0000 Manifest next update: Mon 25 Aug 2025 21:15:04 +0000 Files and hashes: 1: 0AkPXYww2D93Nkznc4ZeWwIUOD8.roa (hash: 6K7q0V1fYQuXnpFtyDU+R0QiaeGmCnyIPoeF8/zgCaw=) 2: DsNvx9zfaquK26P5h6DwvPHgUS4.roa (hash: AuuRyAEKpoHJ69oM8oLbWzuc+DZUHuieDZ6hbMB27+Y=) 3: POusQFclHIqquVTcIgsiSWvu9WM.crl (hash: eMArCZ6wG3Uw/HScpu2vbQDTSuTbvmk2KrQs5PTomt4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Validity Not Before: Aug 23 21:15:04 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C8CD023F29E25DE9D3BBA766BB4D1201BA7074DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:c8:2c:ab:24:28:82:73:e4:d4:7b:89:27: 22:a9:1c:80:9a:96:6e:19:52:cb:4c:30:68:87:42: 7f:4e:6d:9d:c7:f8:91:a0:af:55:5e:9d:a6:a5:5f: be:57:be:b8:69:95:fe:cd:2a:2d:8c:8a:73:01:61: 27:8a:8b:b4:22:c7:68:ed:bb:be:57:3b:e3:b6:e7: bd:b0:d0:c5:f0:64:ec:c1:48:5f:27:ce:ec:17:59: c0:57:3d:1c:ac:d2:70:13:2c:dc:64:24:13:19:51: cb:c3:d8:3c:35:6e:7e:e2:25:78:bd:36:23:42:fd: dc:7e:29:ba:73:59:ca:ab:eb:92:f8:89:39:4f:fe: f2:ee:10:fa:b9:32:81:2a:e6:1f:35:ec:ae:0f:f3: 70:7d:6e:0b:d6:6b:e4:ff:c4:9f:5a:85:db:63:50: ee:bf:f1:90:62:e9:2e:16:48:cf:c5:d6:e4:99:51: 45:57:ca:3f:14:60:e7:04:a6:06:ac:b0:ef:1c:24: 89:ca:f0:d5:b8:6f:73:20:ec:1f:42:6c:8e:fc:2c: 5d:2d:52:ab:1f:9f:ae:54:46:79:29:40:62:f5:08: da:05:bd:5b:c8:2f:d3:93:6b:00:b7:53:e3:9b:ec: c6:ad:f7:cc:f7:66:91:a7:9c:87:6f:01:ce:89:24: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB X509v3 Authority Key Identifier: keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:58:c8:63:d3:69:d2:62:97:38:e3:58:f2:f7:63:7b:1b:cd: 79:d0:c5:9d:40:2f:4f:47:53:9a:cf:b7:eb:17:e1:20:c7:77: 75:82:57:4d:49:53:b3:ec:32:20:94:33:b4:21:c0:4d:6a:50: aa:5c:91:66:78:65:e5:53:f4:38:c5:ab:e6:61:52:2e:0d:dd: 84:e6:e7:32:fc:54:0e:ae:df:7b:a8:62:6b:e8:e1:a1:03:06: e3:d5:16:64:d1:55:c3:b0:67:ca:49:d7:af:92:f9:24:48:5c: eb:bf:5a:16:aa:62:8d:be:9f:4a:56:8c:9f:33:8a:da:41:bc: 4c:63:d8:0a:0b:48:c4:6c:99:6a:a6:ab:fb:55:a5:a8:7a:60: 55:5f:33:62:b3:a2:c2:fd:51:1b:e3:17:e0:50:ca:97:a6:18: cf:69:03:70:07:fe:3b:4d:e7:d5:ff:14:4a:25:b4:46:5d:3b: b7:5a:6e:80:6a:de:50:1e:69:2a:2a:80:c1:fe:be:ec:eb:d4: 95:74:f8:27:6f:c6:46:67:4b:df:cd:45:8d:d8:f3:9e:8e:49: 67:2c:26:0b:aa:42:c8:15:07:ea:70:60:c3:10:b5:ff:dc:43: d5:a5:f2:15:6b:e1:31:59:1b:7f:d0:6c:99:06:1a:42:e1:f1: e5:0b:ef:a6 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNTA4MjMy MTE1MDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM4Q0QwMjNGMjlFMjVE RTlEM0JCQTc2NkJCNEQxMjAxQkE3MDc0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkSMgsqyQognPk1HuJJyKpHICalm4ZUstMMGiHQn9ObZ3H+JGg r1VenaalX75Xvrhplf7NKi2MinMBYSeKi7Qix2jtu75XO+O2572w0MXwZOzBSF8n zuwXWcBXPRys0nATLNxkJBMZUcvD2Dw1bn7iJXi9NiNC/dx+KbpzWcqr65L4iTlP /vLuEPq5MoEq5h817K4P83B9bgvWa+T/xJ9ahdtjUO6/8ZBi6S4WSM/F1uSZUUVX yj8UYOcEpgassO8cJInK8NW4b3Mg7B9CbI78LF0tUqsfn65URnkpQGL1CNoFvVvI L9OTawC3U+Ob7Mat98z3ZpGnnIdvAc6JJIy5AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUyM0CPyniXenTu6dmu00SAbpwdNswHwYDVR0jBBgwFoAUPOusQFclHIqquVTc IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvUE91c1FGY2xI SXFxdVZUY0lnc2lTV3Z1OVdNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEpYyGPTadJilzjjWPL3Y3sbzXnQxZ1AL09HU5rPt+sX4SDHd3WCV01J U7PsMiCUM7QhwE1qUKpckWZ4ZeVT9DjFq+ZhUi4N3YTm5zL8VA6u33uoYmvo4aED BuPVFmTRVcOwZ8pJ16+S+SRIXOu/WhaqYo2+n0pWjJ8zitpBvExj2AoLSMRsmWqm q/tVpah6YFVfM2KzosL9URvjF+BQypemGM9pA3AH/jtN59X/FEoltEZdO7daboBq 3lAeaSoqgMH+vuzr1JV0+CdvxkZnS9/NRY3Y856OSWcsJguqQsgVB+pwYMMQtf/c Q9Wl8hVr4TFZG3/QbJkGGkLh8eUL76Y= -----END CERTIFICATE-----Generated at Sun Aug 24 02:31:57 2025 by rpki-client