$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft File: LCCIGg79BmSlka8wldKZNe-bw2E.mft (raw, json) Hash identifier: UNjmcQ3JKkS1OwmjBEmGFw7lJJDKLyygYtCDQs2+qp8= Subject key identifier: B0:3C:0A:D6:27:EF:47:73:13:A5:81:EE:5D:A9:7A:18:79:1D:85:76 Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Certificate serial: 0468 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft Manifest number: 0452 Signing time: Sat 23 Aug 2025 21:13:34 +0000 Manifest this update: Sat 23 Aug 2025 21:13:34 +0000 Manifest next update: Mon 25 Aug 2025 21:13:34 +0000 Files and hashes: 1: FcLMk6Ms7LeRO8B-u_BK4U8EFbg.roa (hash: aXWi0r+zCGHrO1NooXA/SEhLfel0z/A3bWQ3qnwXQ0E=) 2: LCCIGg79BmSlka8wldKZNe-bw2E.crl (hash: 1ZfqdI/5skWT9sldGnGZf/dpJBhB62YbKnQanXdFX9E=) 3: VcHhPUQFrOdjDmmmvfcbIpxeQtU.roa (hash: iT3Se10aGqCMKxx0MOMo8JK/4Xy4l4JRPEWP3a93XG8=) 4: ViYHI0H9y83S11Sfy6YOW6OQdjs.roa (hash: oQhmbU41p1m+gPPg/8+bMSz3YlKTQTcJ39pr2cGrbFA=) 5: _jEL8MoVuYabIR3ShykHTNulx7Q.roa (hash: px9FdjqX7FG9jjrnB7QySzwfhJxr13p0V8rnx2xTzWI=) 6: bznF63Ijm1ZcOD1SDiZ_ShvanfM.roa (hash: KlYSRDhJNj2T8gpwhJMpKufMXcaRJI0msmsqEfRxmrU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1128 (0x468) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Validity Not Before: Aug 23 21:13:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B03C0AD627EF477313A581EE5DA97A18791D8576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:9f:53:d6:21:57:62:9d:4c:1b:6c:a4:75: 34:c0:f8:6b:f8:c5:bd:1b:84:e4:93:0f:de:de:0b: bb:50:67:76:70:59:80:92:cf:31:78:37:d6:b8:ef: 1a:36:82:17:48:9e:41:e6:ba:15:a0:13:f2:27:57: 17:4c:21:1a:a3:0b:7a:f9:6c:3c:ed:45:8e:61:e1: b0:6e:ac:80:d5:f8:e6:dd:03:e7:1c:69:13:10:f0: ef:6f:35:2c:45:c3:9c:ab:e6:72:b8:48:8e:92:ba: 7e:9f:a8:77:31:2c:be:67:bb:9f:bf:6a:ba:5e:23: 36:c5:6f:86:6b:c0:8f:03:8a:dc:15:ef:61:bd:c1: f4:07:b8:c6:97:7e:c6:ac:7f:ea:c8:7d:9e:61:d0: 15:e7:c3:6e:69:6c:4b:e3:7e:5d:40:f3:33:ae:95: bb:ed:8c:44:25:63:b3:84:c3:ff:2d:fa:a4:57:dd: 3d:87:a0:02:e0:7f:c2:28:ed:05:79:1e:68:b3:49: f2:c6:0b:de:b1:50:cd:b1:e0:8f:64:fa:71:5d:1a: 4f:71:1b:bb:e6:c5:b9:21:55:41:21:40:0c:3c:e8: fc:c7:00:5a:97:32:1d:be:08:21:e3:c5:4b:54:8e: 4f:1e:bd:e1:f8:de:7d:de:aa:17:16:bc:16:b3:18: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:0A:D6:27:EF:47:73:13:A5:81:EE:5D:A9:7A:18:79:1D:85:76 X509v3 Authority Key Identifier: keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e0:b4:c0:39:3f:ac:1a:3d:2d:22:00:57:e1:a1:2f:84:d5: 47:85:0d:82:54:fc:66:dd:09:f8:cc:e4:12:74:cd:0b:54:89: b4:77:8b:bf:02:f5:ea:b9:5e:c1:8f:59:cc:8f:09:a6:67:70: ff:27:92:b9:a4:57:a6:7a:6c:0f:dc:38:e5:af:2b:2f:49:4f: 5c:5c:27:48:4c:88:45:93:a8:56:db:04:83:ff:6a:fd:70:31: a8:ad:80:37:e0:f9:43:f9:dc:74:79:f1:d1:3b:9f:de:60:9e: 02:9f:21:28:65:60:a9:9a:83:eb:a9:91:71:cd:fa:52:74:7a: 3e:1d:cb:37:08:ff:8b:6b:c8:dd:e4:a0:24:12:cf:8c:8e:dd: 2b:83:d0:71:77:41:ef:52:ce:06:dd:b3:20:cb:88:4d:e9:39: b6:ba:e9:70:1e:cb:a5:97:36:72:2a:22:ee:c6:4d:c8:c3:d2: 10:13:eb:ba:9d:b6:84:d5:8d:f7:ce:8e:b3:c0:ab:f0:ad:ce: c5:f4:d4:1f:4b:ae:56:00:fc:a0:0a:38:c1:9c:c4:4f:aa:13: 10:df:f4:a1:3f:ce:1a:ee:b0:49:8b:fc:4c:21:f5:0e:ca:0d: 56:d0:6c:94:23:95:9c:20:b2:d8:40:c6:3d:10:90:69:84:fc: ae:e3:53:a3 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICBGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMy MDg4MUEwRUZEMDY2NEE1OTFBRjMwOTVEMjk5MzVFRjlCQzM2MTAeFw0yNTA4MjMy MTEzMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIwM0MwQUQ2MjdFRjQ3 NzMxM0E1ODFFRTVEQTk3QTE4NzkxRDg1NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdbp9T1iFXYp1MG2ykdTTA+Gv4xb0bhOSTD97eC7tQZ3ZwWYCS zzF4N9a47xo2ghdInkHmuhWgE/InVxdMIRqjC3r5bDztRY5h4bBurIDV+ObdA+cc aRMQ8O9vNSxFw5yr5nK4SI6Sun6fqHcxLL5nu5+/arpeIzbFb4ZrwI8DitwV72G9 wfQHuMaXfsasf+rIfZ5h0BXnw25pbEvjfl1A8zOulbvtjEQlY7OEw/8t+qRX3T2H oALgf8Io7QV5HmizSfLGC96xUM2x4I9k+nFdGk9xG7vmxbkhVUEhQAw86PzHAFqX Mh2+CCHjxUtUjk8eveH43n3eqhcWvBazGBlRAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUsDwK1ifvR3MTpYHuXal6GHkdhXYwHwYDVR0jBBgwFoAULCCIGg79BmSlka8w ldKZNe+bw2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9MQ0NJR2c3OUJtU2xrYTh3bGRLWk5lLWJ3MkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gvTENDSUdnNzlC bVNsa2E4d2xkS1pOZS1idzJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbgtMA5P6waPS0iAFfhoS+E1UeFDYJU/GbdCfjM5BJ0zQtUibR3i78C 9eq5XsGPWcyPCaZncP8nkrmkV6Z6bA/cOOWvKy9JT1xcJ0hMiEWTqFbbBIP/av1w MaitgDfg+UP53HR58dE7n95gngKfIShlYKmag+upkXHN+lJ0ej4dyzcI/4tryN3k oCQSz4yO3SuD0HF3Qe9SzgbdsyDLiE3pOba66XAey6WXNnIqIu7GTcjD0hAT67qd toTVjffOjrPAq/CtzsX01B9LrlYA/KAKOMGcxE+qExDf9KE/zhrusEmL/Ewh9Q7K DVbQbJQjlZwgsthAxj0QkGmE/K7jU6M= -----END CERTIFICATE-----Generated at Sun Aug 24 01:26:23 2025 by rpki-client