$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft File: V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft (raw, json) Hash identifier: lNpJYWij9W7sfqTQ8aCmLQQjGusYuQsvgIwgAGEhG/g= Subject key identifier: 8E:61:F9:BD:73:B4:7E:E6:DC:34:02:24:64:43:3E:03:E1:A9:71:F6 Authority key identifier: 57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C Certificate issuer: /CN=574D5FD459D0D01C338EF0236122C762EC83283C Certificate serial: 0259 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft Manifest number: 0257 Signing time: Sat 17 May 2025 21:53:23 +0000 Manifest this update: Sat 17 May 2025 21:53:23 +0000 Manifest next update: Mon 19 May 2025 21:53:23 +0000 Files and hashes: 1: GOQABUtCO_JalyBCm2JecyCOhC0.roa (hash: m5On71NAFLAaXbkjbhGSUeJTBsJ96FgZNr3eXDVHZ2w=) 2: V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl (hash: u5QbW6DD/kRC5CzOzx6Wz7R3Gt4tnDczHuq4YZfuySw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=574D5FD459D0D01C338EF0236122C762EC83283C Validity Not Before: May 17 21:53:23 2025 GMT Not After : Oct 8 15:30:19 2025 GMT Subject: CN=8E61F9BD73B47EE6DC34022464433E03E1A971F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:b2:ed:58:0f:40:34:2d:f5:a4:c9:d1:2d: 78:91:5a:c7:b1:ad:26:60:c6:0e:2e:0f:f7:e1:c9: c0:d5:57:13:5f:a2:0b:d7:58:55:55:e1:b7:7a:56: cc:e0:ea:d2:45:a7:81:61:4e:5d:44:31:39:0b:0b: 6c:ed:6f:09:a9:77:a5:d5:9f:07:e5:9c:1b:1a:08: 52:c1:71:5c:79:6e:39:a4:4a:9b:f9:b7:e3:34:be: 57:6d:af:db:c2:da:07:d6:0f:14:60:9c:1e:41:fb: ad:75:0a:78:7f:73:f5:5b:9b:20:3e:59:2e:1a:cb: 43:c1:20:e7:db:85:f5:5c:4d:b4:5b:c9:e4:c5:34: 65:54:69:4e:49:c8:e2:58:74:b1:a4:d1:e1:83:67: a8:a3:0e:70:35:68:ba:3f:54:8b:6f:82:f0:98:da: 0a:e1:9a:04:ab:30:80:ce:fb:f0:73:93:62:14:8f: ab:90:c4:95:4e:9b:6b:87:4d:09:99:0b:d9:49:16: c3:4a:fc:13:a1:44:ac:ce:70:7f:b6:a7:aa:f9:a1: 92:a3:06:9a:66:54:fc:61:49:b3:bf:79:5b:c5:33: e9:51:4a:57:7c:19:ce:a3:5a:2f:1a:cd:c3:7f:ed: a6:b9:fb:aa:fb:16:ce:ca:9d:14:47:54:0c:99:55: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:61:F9:BD:73:B4:7E:E6:DC:34:02:24:64:43:3E:03:E1:A9:71:F6 X509v3 Authority Key Identifier: keyid:57:4D:5F:D4:59:D0:D0:1C:33:8E:F0:23:61:22:C7:62:EC:83:28:3C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUMMYTECH/V01f1FnQ0BwzjvAjYSLHYuyDKDw.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6e:29:22:04:da:b9:23:87:48:a3:44:07:d0:f5:ec:95:93: 65:e2:5f:71:08:8f:e3:e7:e7:ef:35:ff:f4:1b:b1:eb:5d:e2: e8:2e:1d:16:b1:34:c8:4a:af:1f:0f:36:f5:4b:19:c5:85:b3: b1:02:66:02:a2:d3:b5:4b:7a:51:f6:c2:03:bd:df:84:1a:c5: 78:c9:44:d2:49:e3:63:d0:6f:d4:17:eb:c8:c1:73:3b:b4:c3: fa:8d:48:ef:04:b7:6b:26:d5:85:04:b1:e1:2a:93:18:ef:39: 28:11:3c:19:c2:49:4e:47:31:d3:ec:54:b9:e0:73:8a:86:d0: a6:e4:c7:b6:9d:5b:53:d7:49:e7:47:d3:e4:ed:63:d8:bc:a2: f3:ed:f9:33:2b:4f:00:9a:3f:ce:d8:98:70:d7:48:fa:44:36: 97:fe:f3:b7:f5:cd:f7:85:7e:86:0a:94:e1:44:a5:39:ed:7c: cf:7c:48:87:74:29:53:bd:5e:4f:4b:57:0d:71:96:9e:fd:93: ae:dd:98:94:f8:c7:99:42:90:ef:78:21:96:d2:bf:03:79:2e: 60:57:a8:79:40:aa:ed:6c:e9:eb:ed:ed:e5:c1:bf:aa:ff:48: 32:23:8f:67:b4:49:fc:1d:46:02:b3:d1:7e:e9:3b:3d:88:94: bd:8f:da:b7 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTc0 RDVGRDQ1OUQwRDAxQzMzOEVGMDIzNjEyMkM3NjJFQzgzMjgzQzAeFw0yNTA1MTcy MTUzMjNaFw0yNTEwMDgxNTMwMTlaMDMxMTAvBgNVBAMTKDhFNjFGOUJENzNCNDdF RTZEQzM0MDIyNDY0NDMzRTAzRTFBOTcxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCo3LLtWA9ANC31pMnRLXiRWsexrSZgxg4uD/fhycDVVxNfogvX WFVV4bd6Vszg6tJFp4FhTl1EMTkLC2ztbwmpd6XVnwflnBsaCFLBcVx5bjmkSpv5 t+M0vldtr9vC2gfWDxRgnB5B+611Cnh/c/VbmyA+WS4ay0PBIOfbhfVcTbRbyeTF NGVUaU5JyOJYdLGk0eGDZ6ijDnA1aLo/VItvgvCY2grhmgSrMIDO+/Bzk2IUj6uQ xJVOm2uHTQmZC9lJFsNK/BOhRKzOcH+2p6r5oZKjBppmVPxhSbO/eVvFM+lRSld8 Gc6jWi8azcN/7aa5+6r7Fs7KnRRHVAyZVdhdAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUjmH5vXO0fubcNAIkZEM+A+GpcfYwHwYDVR0jBBgwFoAUV01f1FnQ0BwzjvAj YSLHYuyDKDwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVTU1Z VEVDSC9WMDFmMUZuUTBCd3pqdkFqWVNMSFl1eURLRHcuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1YwMWYxRm5RMEJ3emp2QWpZU0xIWXV5REtEdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVU1NWVRFQ0gvVjAxZjFGblEw Qnd6anZBallTTEhZdXlES0R3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9uKSIE2rkjh0ijRAfQ9eyVk2XiX3EIj+Pn5+81//Qbsetd4uguHRax NMhKrx8PNvVLGcWFs7ECZgKi07VLelH2wgO934QaxXjJRNJJ42PQb9QX68jBczu0 w/qNSO8Et2sm1YUEseEqkxjvOSgRPBnCSU5HMdPsVLngc4qG0Kbkx7adW1PXSedH 0+TtY9i8ovPt+TMrTwCaP87YmHDXSPpENpf+87f1zfeFfoYKlOFEpTntfM98SId0 KVO9Xk9LVw1xlp79k67dmJT4x5lCkO94IZbSvwN5LmBXqHlAqu1s6evt7eXBv6r/ SDIjj2e0SfwdRgKz0X7pOz2IlL2P2rc= -----END CERTIFICATE-----Generated at Mon May 19 00:48:05 2025 by rpki-client