$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft File: uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft (raw, json) Hash identifier: HQ5gDvKtUF40cQe3lMJ1F72Kv1ShsIqWZ28LSN4Q1Sc= Subject key identifier: E8:06:86:7C:F7:12:B7:6F:BE:9A:35:56:34:C8:92:0F:0E:F9:89:E2 Authority key identifier: BB:01:24:AC:65:3F:B7:31:EB:EA:D2:10:5C:9B:F6:13:6F:8B:24:9A Certificate issuer: /CN=BB0124AC653FB731EBEAD2105C9BF6136F8B249A Certificate serial: 0D08 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/uwEkrGU_tzHr6tIQXJv2E2-LJJo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft Manifest number: 0D08 Signing time: Sat 23 Aug 2025 21:14:20 +0000 Manifest this update: Sat 23 Aug 2025 21:14:20 +0000 Manifest next update: Mon 25 Aug 2025 21:14:20 +0000 Files and hashes: 1: uwEkrGU_tzHr6tIQXJv2E2-LJJo.crl (hash: LwjDKISi8n9DROtN1E+uczn2rlAv5sBe0C9MXJI4vx8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/uwEkrGU_tzHr6tIQXJv2E2-LJJo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0124AC653FB731EBEAD2105C9BF6136F8B249A Validity Not Before: Aug 23 21:14:20 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E806867CF712B76FBE9A355634C8920F0EF989E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:79:46:8e:67:c8:1c:46:82:7a:26:9a:d7: e8:bc:ef:ce:10:2f:9e:17:ac:4f:41:b4:5c:60:be: d3:51:31:85:4f:5f:56:46:21:4f:0c:e9:e8:d6:3d: 3c:9c:0e:f0:c7:31:26:4b:07:9c:14:d7:1e:cb:03: d8:34:47:ca:af:fd:a1:b4:b0:7c:be:bf:a4:fd:68: 0d:c1:6d:f3:b7:01:e5:f6:36:ff:6d:95:0a:3e:74: 06:54:d6:c9:32:47:8c:00:85:01:9a:ea:1c:e9:3c: d8:e8:b2:ea:d7:04:6e:64:7c:67:b1:b2:da:ad:b0: ab:1c:70:9c:93:eb:55:86:ea:cf:9b:32:83:ed:7b: 10:6d:b5:7b:68:5b:48:24:39:2f:5d:48:7d:6e:05: 21:11:11:4c:11:7d:34:3f:1b:90:90:09:4c:37:fe: 0b:e1:2d:a0:c9:53:8b:08:0d:94:c8:d9:2d:7f:e2: 60:48:8f:ad:15:35:75:66:77:e7:b6:5c:f8:6f:b8: 6c:e4:8f:76:b0:5a:09:e7:52:cf:b7:ea:34:85:7f: 1b:11:3e:e7:db:40:f2:0e:1e:20:93:7d:3e:7e:e3: 2d:0d:b3:04:0c:a1:38:08:06:40:1a:23:67:70:9a: 32:58:df:53:00:89:78:ce:a6:97:22:e5:6c:d2:b3: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:06:86:7C:F7:12:B7:6F:BE:9A:35:56:34:C8:92:0F:0E:F9:89:E2 X509v3 Authority Key Identifier: keyid:BB:01:24:AC:65:3F:B7:31:EB:EA:D2:10:5C:9B:F6:13:6F:8B:24:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/uwEkrGU_tzHr6tIQXJv2E2-LJJo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIMEI/uwEkrGU_tzHr6tIQXJv2E2-LJJo.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e2:62:bd:12:b5:64:06:e0:63:35:fe:35:17:78:78:2b:e9: 98:2c:c7:6e:3e:38:55:89:c3:dd:6e:f1:02:4c:04:27:64:3d: a5:7e:12:26:f1:9c:1e:e3:71:4a:80:95:ca:b5:92:62:98:72: 60:d8:38:fe:7e:af:df:51:df:dd:e2:82:63:1f:6a:31:9d:00: 4a:ac:3e:eb:7e:8a:6f:fb:a7:7e:89:cb:9b:cc:f8:7f:84:2f: 96:1c:6b:d4:d2:de:bd:3e:86:89:18:00:fa:ea:39:99:4c:e7: d5:6c:5b:17:e2:90:2e:83:3b:b1:c9:a7:72:af:ee:e7:84:9f: 00:da:42:03:f7:b3:e4:7c:57:5c:fd:54:5e:ba:57:23:e2:2b: 0a:7c:73:92:5a:d6:82:8b:d1:d0:2c:08:3a:0d:b4:62:18:f2: be:e7:0c:42:ae:dd:30:f2:74:14:c0:80:69:0d:19:fb:51:45: 8c:ed:9f:40:ab:0a:6e:69:14:cb:b4:4b:b3:0a:7b:e1:ca:93: 92:c7:50:1c:63:d5:dc:2c:8c:14:84:a7:5f:f0:fa:24:bd:bb: bd:1e:95:78:4e:20:bd:fc:22:99:91:28:ef:d3:ea:f6:a7:b0: d9:a1:a6:1c:92:5f:2d:19:79:ab:76:b4:cc:09:9c:ac:91:61: a2:70:69:46 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkIw MTI0QUM2NTNGQjczMUVCRUFEMjEwNUM5QkY2MTM2RjhCMjQ5QTAeFw0yNTA4MjMy MTE0MjBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU4MDY4NjdDRjcxMkI3 NkZCRTlBMzU1NjM0Qzg5MjBGMEVGOTg5RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAX3lGjmfIHEaCeiaa1+i8784QL54XrE9BtFxgvtNRMYVPX1ZG IU8M6ejWPTycDvDHMSZLB5wU1x7LA9g0R8qv/aG0sHy+v6T9aA3BbfO3AeX2Nv9t lQo+dAZU1skyR4wAhQGa6hzpPNjosurXBG5kfGexstqtsKsccJyT61WG6s+bMoPt exBttXtoW0gkOS9dSH1uBSEREUwRfTQ/G5CQCUw3/gvhLaDJU4sIDZTI2S1/4mBI j60VNXVmd+e2XPhvuGzkj3awWgnnUs+36jSFfxsRPufbQPIOHiCTfT5+4y0NswQM oTgIBkAaI2dwmjJY31MAiXjOppci5WzSs3KHAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQU6AaGfPcSt2++mjVWNMiSDw75ieIwHwYDVR0jBBgwFoAUuwEkrGU/tzHr6tIQ XJv2E2+LJJowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTUVJ L3V3RWtyR1VfdHpIcjZ0SVFYSnYyRTItTEpKby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvdXdFa3JHVV90ekhyNnRJUVhKdjJFMi1MSkpvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTUVJL3V3RWtyR1VfdHpIcjZ0SVFY SnYyRTItTEpKby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP 4mK9ErVkBuBjNf41F3h4K+mYLMduPjhVicPdbvECTAQnZD2lfhIm8Zwe43FKgJXK tZJimHJg2Dj+fq/fUd/d4oJjH2oxnQBKrD7rfopv+6d+icubzPh/hC+WHGvU0t69 PoaJGAD66jmZTOfVbFsX4pAugzuxyadyr+7nhJ8A2kID97PkfFdc/VReulcj4isK fHOSWtaCi9HQLAg6DbRiGPK+5wxCrt0w8nQUwIBpDRn7UUWM7Z9AqwpuaRTLtEuz CnvhypOSx1AcY9XcLIwUhKdf8Pokvbu9HpV4TiC9/CKZkSjv0+r2p7DZoaYckl8t GXmrdrTMCZyskWGicGlG -----END CERTIFICATE-----Generated at Sun Aug 24 05:05:39 2025 by rpki-client