$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DLER/Az4pLp_43JLzZMTyh5zYxyHUick.mft File: Az4pLp_43JLzZMTyh5zYxyHUick.mft (raw, json) Hash identifier: Bo6+ljron7ekcnEwd03DSQEvqnCNxgep0AzMPj3kHLE= Subject key identifier: 0B:E6:EA:FA:89:35:EF:AB:95:D6:5C:B6:C1:F2:D9:14:8C:D5:E5:7D Authority key identifier: 03:3E:29:2E:9F:F8:DC:92:F3:64:C4:F2:87:9C:D8:C7:21:D4:89:C9 Certificate issuer: /CN=033E292E9FF8DC92F364C4F2879CD8C721D489C9 Certificate serial: 03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Az4pLp_43JLzZMTyh5zYxyHUick.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DLER/Az4pLp_43JLzZMTyh5zYxyHUick.mft Manifest number: 03 Signing time: Fri 27 Mar 2026 06:58:08 +0000 Manifest this update: Fri 27 Mar 2026 06:58:08 +0000 Manifest next update: Fri 27 Mar 2026 12:58:08 +0000 Files and hashes: 1: Az4pLp_43JLzZMTyh5zYxyHUick.crl (hash: wrl9xDnxqWT7nlpwbXybgAICn636mhSpmvXv8R+vipo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DLER/Az4pLp_43JLzZMTyh5zYxyHUick.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DLER/Az4pLp_43JLzZMTyh5zYxyHUick.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Az4pLp_43JLzZMTyh5zYxyHUick.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=033E292E9FF8DC92F364C4F2879CD8C721D489C9 Validity Not Before: Mar 27 06:58:08 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0BE6EAFA8935EFAB95D65CB6C1F2D9148CD5E57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:55:24:84:4d:d5:fa:a7:7b:e6:15:54:c7: 11:f6:81:fd:f0:79:27:ff:d4:89:57:56:8b:44:cb: cc:05:5b:2c:b5:b9:bb:0a:20:46:48:63:8c:47:ea: a6:47:1a:46:38:ef:6d:c7:01:29:40:77:b8:02:e1: be:d6:a2:91:c4:7c:e2:3f:8f:f0:52:bb:a3:69:7b: fe:a8:88:e5:b2:62:bd:80:48:87:72:62:0d:9f:67: 66:58:25:08:e9:62:d7:c3:14:17:1d:d9:71:10:9b: e9:de:e1:66:af:3c:e8:a1:55:b0:58:50:d0:c2:92: 61:50:16:14:fc:4c:f7:b1:f0:66:fc:9c:a9:96:3d: ad:fc:77:75:1e:70:e7:ee:d6:28:24:78:e3:5d:64: 94:fb:4a:41:7a:0f:47:29:b2:03:57:a1:5b:2f:68: 07:5f:81:fa:f0:c7:ab:f2:dc:12:68:5f:b2:dd:da: 5e:08:0a:a3:f0:d3:94:92:46:43:dd:54:bd:8e:5f: 70:c5:fc:76:82:8a:da:db:30:90:0a:36:1e:da:c5: e3:a0:46:92:5e:68:46:b5:d4:2c:24:fc:fe:7a:a8: 4f:6b:2b:e9:7e:bc:f5:ed:39:21:69:88:dc:57:91: 7b:20:87:4f:9b:b1:c6:29:6e:11:2f:c8:15:ec:f4: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E6:EA:FA:89:35:EF:AB:95:D6:5C:B6:C1:F2:D9:14:8C:D5:E5:7D X509v3 Authority Key Identifier: keyid:03:3E:29:2E:9F:F8:DC:92:F3:64:C4:F2:87:9C:D8:C7:21:D4:89:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DLER/Az4pLp_43JLzZMTyh5zYxyHUick.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Az4pLp_43JLzZMTyh5zYxyHUick.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DLER/Az4pLp_43JLzZMTyh5zYxyHUick.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:02:bd:7f:79:51:70:51:00:cd:9e:47:e6:bc:97:0b:11: 9c:ce:95:36:4a:84:7e:22:35:fa:55:a9:b2:8f:9a:cf:65:8f: 53:bd:68:ab:1f:a8:af:8a:80:36:b4:88:4d:76:93:6a:95:94: 98:dc:8b:00:08:6f:ac:7d:be:7e:ea:fc:00:91:cd:54:2c:34: 06:4b:62:de:a3:03:39:a8:14:7a:78:f1:7c:f8:57:15:c1:44: b8:fd:30:4d:ac:39:5b:29:57:7b:e7:b6:54:a3:91:4d:3d:66: 98:df:f7:29:92:d2:90:e7:37:34:1e:d4:a6:58:c2:fb:a6:b1: ab:de:7d:48:8e:42:45:87:d0:ec:70:2b:2e:6a:df:05:09:ed: 36:3a:f8:ea:70:26:07:2d:3e:c8:80:76:b0:bd:a4:5a:48:6e: fd:2e:f9:7c:e8:cb:07:c1:b2:86:19:5c:de:36:ad:ca:12:cf: 2c:51:45:9a:bc:a0:70:a8:21:5d:7b:be:78:18:a6:aa:45:a8: 7a:95:97:a3:5f:08:88:19:ac:98:32:86:bb:01:c9:e3:8f:f5: 37:2f:1c:9e:b7:75:5c:15:37:6e:03:3e:9a:d6:5f:c1:00:e4: 5c:18:71:ac:16:b9:2d:32:cd:c1:bd:c3:04:e6:85:08:1a:24: e9:fa:04:38 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzNF MjkyRTlGRjhEQzkyRjM2NEM0RjI4NzlDRDhDNzIxRDQ4OUM5MB4XDTI2MDMyNzA2 NTgwOFoXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoMEJFNkVBRkE4OTM1RUZB Qjk1RDY1Q0I2QzFGMkQ5MTQ4Q0Q1RTU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzpVSSETdX6p3vmFVTHEfaB/fB5J//UiVdWi0TLzAVbLLW5uwog RkhjjEfqpkcaRjjvbccBKUB3uALhvtaikcR84j+P8FK7o2l7/qiI5bJivYBIh3Ji DZ9nZlglCOli18MUFx3ZcRCb6d7hZq886KFVsFhQ0MKSYVAWFPxM97HwZvycqZY9 rfx3dR5w5+7WKCR4411klPtKQXoPRymyA1ehWy9oB1+B+vDHq/LcEmhfst3aXggK o/DTlJJGQ91UvY5fcMX8doKK2tswkAo2HtrF46BGkl5oRrXULCT8/nqoT2sr6X68 9e05IWmI3FeReyCHT5uxxiluES/IFez0OkcCAwEAAaOCAgMwggH/MB0GA1UdDgQW BBQL5ur6iTXvq5XWXLbB8tkUjNXlfTAfBgNVHSMEGDAWgBQDPikun/jckvNkxPKH nNjHIdSJyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ETEVSL0F6 NHBMcF80M0pMelpNVHloNXpZeHlIVWljay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev QXo0cExwXzQzSkx6Wk1UeWg1ell4eUhVaWNrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRExFUi9BejRwTHBfNDNKTHpaTVR5aDV6WXh5 SFVpY2subWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJkCvX95 UXBRAM2eR+a8lwsRnM6VNkqEfiI1+lWpso+az2WPU71oqx+or4qANrSITXaTapWU mNyLAAhvrH2+fur8AJHNVCw0Bkti3qMDOagUenjxfPhXFcFEuP0wTaw5WylXe+e2 VKORTT1mmN/3KZLSkOc3NB7UpljC+6axq959SI5CRYfQ7HArLmrfBQntNjr46nAm By0+yIB2sL2kWkhu/S75fOjLB8Gyhhlc3jatyhLPLFFFmrygcKghXXu+eBimqkWo epWXo18IiBmsmDKGuwHJ44/1Ny8cnrd1XBU3bgM+mtZfwQDkXBhxrBa5LTLNwb3D BOaFCBok6foEOA== -----END CERTIFICATE-----Generated at Fri Mar 27 10:03:40 2026 by rpki-client