$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft File: ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft (raw, json) Hash identifier: e49Gqzr1nQjrPZQl494yMXHdfpRouXcIo7iV3e3nWUo= Subject key identifier: 9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48 Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148 Certificate serial: 09B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft Manifest number: 09A1 Signing time: Sun 19 Oct 2025 21:55:37 +0000 Manifest this update: Sun 19 Oct 2025 21:55:37 +0000 Manifest next update: Tue 21 Oct 2025 21:55:37 +0000 Files and hashes: 1: 5HDQAMklDeueQTcmy3OyS-y3Ap0.roa (hash: oi9x9zW2CMBMfkn3Epm3L4Mkd7ng9Dj4vtIZoiSP230=) 2: ZMmIArsdvB5K2IufGrvcLgCm_M4.roa (hash: gekpg+vy4ahMRhLvLF48mPLKOUNTBf9ep8nOGDIGHkE=) 3: ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl (hash: 8HqSW6ImQqRLgGWnHkHWOgvAIUbYVzsA4UHZ4DuRr5s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148 Validity Not Before: Oct 19 21:55:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9E0948674DB51888C393AF9B532AFDB9C59BFD3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:6e:f0:47:be:1b:cf:5e:b9:5d:65:92:4f: b2:27:2d:a0:b3:21:e5:91:f2:f4:6b:cc:d5:9a:e4: 21:4f:37:ca:ac:5e:f6:27:39:12:11:23:a5:34:8d: a3:e0:d7:29:71:07:d6:11:45:e9:e6:9b:3f:4c:c7: 3d:76:43:d8:49:e8:33:67:75:1d:9a:98:a6:eb:84: 1e:5f:60:47:25:ed:a2:0a:07:51:eb:c7:83:45:dc: ca:f8:c0:b0:da:b0:88:65:04:60:d7:32:43:4a:18: 61:f5:65:ac:27:6a:64:b7:dc:aa:ce:ef:f5:9d:35: 8a:ff:0b:b4:9a:61:b6:7b:f0:bf:3c:c2:25:71:75: c2:df:3d:fd:b5:56:46:a2:e0:92:fe:70:ad:4c:d6: 2a:9f:ce:bc:bb:e9:ed:f3:06:03:42:9f:33:23:f9: 21:35:34:19:af:4a:e0:45:22:f0:95:6d:5e:09:c7: 22:51:00:91:da:d4:36:ac:0b:00:17:ef:a0:39:e1: 69:49:06:d1:07:76:ac:7a:e5:3a:d9:3d:82:8e:56: c5:12:ba:aa:28:36:e0:ba:81:4c:b2:b4:4e:b7:2c: 47:d8:0d:9b:a6:f7:03:c0:4a:a9:87:4b:22:08:6c: e2:c2:0c:d0:c8:a7:26:32:a2:3e:6f:f2:ef:4b:31: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B X509v3 Authority Key Identifier: keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e5:d1:2e:f1:36:32:e9:c1:fc:b2:1f:98:fb:8d:52:e3:0c: c7:3b:a3:98:9b:a2:b9:db:3c:d0:4e:7b:ee:2d:e0:64:0c:69: 35:08:5d:72:7b:00:fc:e2:80:da:e8:6e:4d:63:9d:81:e5:cc: 1b:d1:e4:44:b5:b8:65:eb:46:9e:c1:ca:35:91:3e:1f:51:0f: 8d:11:95:9d:c7:1e:85:57:b5:89:b0:d6:78:a2:eb:69:87:f6: 8c:8b:e5:ae:c2:ec:58:6e:04:a5:f0:d2:ef:7e:b2:cf:62:26: bc:85:36:4b:ec:ec:23:4d:b0:13:2b:d3:e6:77:44:3f:f8:d8: 83:c1:8a:6e:54:28:34:11:a7:28:1a:52:51:71:c2:cc:7b:aa: cf:b7:83:13:1e:22:e9:4a:c4:d0:bd:cd:02:96:5b:68:ce:80: bc:8e:97:8b:6c:0d:57:94:8b:27:91:44:72:3c:29:0c:93:f5: 1e:04:6d:26:80:3d:bd:f1:95:03:f8:bc:7b:0f:4b:c9:68:23: 34:28:0a:04:cc:db:03:c4:d9:9f:09:7e:88:fc:e3:4b:9e:03: 37:d1:32:53:87:67:f4:0a:6f:85:08:96:b5:7a:76:3b:c4:fc: 95:08:6b:5f:f9:ba:96:19:0d:14:05:db:e7:40:7b:e9:e0:f4: cb:90:f1:48 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEEz RkQ4OUNFNzBBMTRGMTNFRDBBODY0NTkyMjREMDA3REQwQTE0ODAeFw0yNTEwMTky MTU1MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFMDk0ODY3NERCNTE4 ODhDMzkzQUY5QjUzMkFGREI5QzU5QkZEM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhlW7wR74bz165XWWST7InLaCzIeWR8vRrzNWa5CFPN8qsXvYn ORIRI6U0jaPg1ylxB9YRRenmmz9Mxz12Q9hJ6DNndR2amKbrhB5fYEcl7aIKB1Hr x4NF3Mr4wLDasIhlBGDXMkNKGGH1ZawnamS33KrO7/WdNYr/C7SaYbZ78L88wiVx dcLfPf21Vkai4JL+cK1M1iqfzry76e3zBgNCnzMj+SE1NBmvSuBFIvCVbV4JxyJR AJHa1DasCwAX76A54WlJBtEHdqx65TrZPYKOVsUSuqooNuC6gUyytE63LEfYDZum 9wPASqmHSyIIbOLCDNDIpyYyoj5v8u9LMb65AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUnglIZ021GIjDk6+bUyr9ucWb/TswHwYDVR0jBBgwFoAUij/YnOcKFPE+0Khk WSJNAH3QoUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJQU9D SElBTy9pal9Zbk9jS0ZQRS0wS2hrV1NKTkFIM1FvVWcuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2lqX1luT2NLRlBFLTBLaGtXU0pOQUgzUW9VZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NISUFPQ0hJQU8vaWpfWW5PY0tG UEUtMEtoa1dTSk5BSDNRb1VnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADnl0S7xNjLpwfyyH5j7jVLjDMc7o5ibornbPNBOe+4t4GQMaTUIXXJ7 APzigNrobk1jnYHlzBvR5ES1uGXrRp7ByjWRPh9RD40RlZ3HHoVXtYmw1nii62mH 9oyL5a7C7FhuBKXw0u9+ss9iJryFNkvs7CNNsBMr0+Z3RD/42IPBim5UKDQRpyga UlFxwsx7qs+3gxMeIulKxNC9zQKWW2jOgLyOl4tsDVeUiyeRRHI8KQyT9R4EbSaA Pb3xlQP4vHsPS8loIzQoCgTM2wPE2Z8Jfoj840ueAzfRMlOHZ/QKb4UIlrV6djvE /JUIa1/5upYZDRQF2+dAe+ng9MuQ8Ug= -----END CERTIFICATE-----Generated at Mon Oct 20 17:03:28 2025 by rpki-client