$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft File: aGGW3gPV2jAP80-5M56yqPE90pc.mft (raw, json) Hash identifier: KgMWRI6SS7kixvEl2JCajLv3dhM7yvvkHVEYCTV1H6A= Subject key identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 Authority key identifier: 68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 Certificate issuer: /CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Certificate serial: 0CFB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft Manifest number: 0CFB Signing time: Fri 04 Jul 2025 22:05:07 +0000 Manifest this update: Fri 04 Jul 2025 22:05:07 +0000 Manifest next update: Sun 06 Jul 2025 22:05:07 +0000 Files and hashes: 1: aGGW3gPV2jAP80-5M56yqPE90pc.crl (hash: xACh6UxM0XSCExxy6q+rGjMzUCwSr+eKAu/5IomHwSk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 10:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Validity Not Before: Jul 4 22:05:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6C4B094FA0068711B8F2F4E9F4310B43D86CA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:9c:03:ce:1d:4a:cb:ed:cb:a1:a4:96:45: 0f:8f:7d:29:75:cb:77:ba:52:c2:a8:07:3a:87:24: b3:3f:9d:7c:31:b8:3f:e4:fa:ac:36:85:62:ab:da: 59:5a:17:89:0d:ad:9e:59:a7:f2:d5:0a:3a:c9:c2: 89:dd:d9:2b:3a:91:df:38:66:80:a5:2f:64:4c:78: 1a:aa:eb:51:8f:98:92:6f:d4:31:89:97:4b:95:78: 40:85:3b:b9:2c:3c:73:31:1d:29:b9:e2:ed:3c:7e: 33:f6:d2:ac:4c:74:9d:f9:2d:b5:95:84:a5:5c:f9: a5:87:6c:81:cc:8e:2f:c4:55:e0:d9:43:42:dd:c4: b6:dd:a4:ff:13:47:e4:a4:e8:95:95:0e:54:bc:ee: 53:de:b1:27:06:f6:4d:da:e1:e2:42:c8:26:f0:79: c4:0a:50:b9:b5:bd:5b:81:88:be:50:37:02:6d:13: 5e:fa:05:aa:9a:c0:7e:08:82:18:a9:95:b5:b8:e9: 48:56:40:0e:94:5b:1f:c4:cd:28:2d:65:41:2d:e9: 31:f6:8c:9f:bb:74:57:56:34:7b:fe:29:fe:17:58: 8d:6d:6b:d9:8c:dc:ec:18:4a:44:57:04:4d:de:f0: 80:34:6c:42:1b:13:ae:8d:c9:2a:8b:f7:2f:34:c8: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 X509v3 Authority Key Identifier: keyid:68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:bd:f6:0f:27:4d:c7:ab:c9:a9:7f:1d:19:76:86:9c:4c:7b: 84:f4:9a:05:1f:e7:4d:de:f8:70:d2:e8:2b:ad:ba:1f:fb:2c: d1:6f:c0:de:ee:df:07:a5:4d:cf:d0:42:82:69:44:81:2a:8e: fd:da:b7:86:5d:e1:64:4d:80:54:5e:fc:86:0b:ce:64:3f:2e: 21:2a:aa:ef:6f:aa:e8:9c:e6:5f:ac:06:6f:53:38:5e:2e:48: 66:e6:6f:c1:38:e0:33:76:c2:fe:4b:da:27:5a:b3:4d:66:75: d3:2e:e4:52:85:44:d8:ea:33:f0:4e:bb:0b:e3:1a:99:a8:35: 73:41:ab:60:13:5a:f8:88:57:a4:f1:9a:60:24:b8:52:02:f7: a5:ba:68:2b:b6:b7:af:48:ca:47:df:84:e7:7c:a7:f5:15:79: 5a:b4:cc:68:74:85:da:12:a9:14:95:45:c2:5b:9e:1d:ce:44: 53:e9:75:14:8f:38:6a:5c:ef:86:7b:44:f4:33:34:93:57:a7: 39:84:3b:22:ab:65:67:e0:eb:a7:2b:68:35:34:ed:39:90:91: c4:ed:1c:af:3c:30:50:46:02:a6:2d:1e:40:c1:03:7f:c3:f2: 27:e5:db:94:ba:6c:1e:30:44:32:43:94:50:bf:d2:63:be:0d: 20:98:f5:55 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjg2 MTk2REUwM0Q1REEzMDBGRjM0RkI5MzM5RUIyQThGMTNERDI5NzAeFw0yNTA3MDQy MjA1MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZDNEIwOTRGQTAwNjg3 MTFCOEYyRjRFOUY0MzEwQjQzRDg2Q0E5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6GpwDzh1Ky+3LoaSWRQ+PfSl1y3e6UsKoBzqHJLM/nXwxuD/k +qw2hWKr2llaF4kNrZ5Zp/LVCjrJwond2Ss6kd84ZoClL2RMeBqq61GPmJJv1DGJ l0uVeECFO7ksPHMxHSm54u08fjP20qxMdJ35LbWVhKVc+aWHbIHMji/EVeDZQ0Ld xLbdpP8TR+Sk6JWVDlS87lPesScG9k3a4eJCyCbwecQKULm1vVuBiL5QNwJtE176 BaqawH4IghiplbW46UhWQA6UWx/EzSgtZUEt6TH2jJ+7dFdWNHv+Kf4XWI1ta9mM 3OwYSkRXBE3e8IA0bEIbE66NySqL9y80yHLdAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUbEsJT6AGhxG48vTp9DELQ9hsqcEwHwYDVR0jBBgwFoAUaGGW3gPV2jAP80+5 M56yqPE90pcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFJDTE9V RC9hR0dXM2dQVjJqQVA4MC01TTU2eXFQRTkwcGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2FHR1czZ1BWMmpBUDgwLTVNNTZ5cVBFOTBwYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RSQ0xPVUQvYUdHVzNnUFYyakFQODAt NU01NnlxUEU5MHBjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AKC99g8nTceryal/HRl2hpxMe4T0mgUf503e+HDS6Cutuh/7LNFvwN7u3welTc/Q QoJpRIEqjv3at4Zd4WRNgFRe/IYLzmQ/LiEqqu9vquic5l+sBm9TOF4uSGbmb8E4 4DN2wv5L2idas01mddMu5FKFRNjqM/BOuwvjGpmoNXNBq2ATWviIV6TxmmAkuFIC 96W6aCu2t69IykffhOd8p/UVeVq0zGh0hdoSqRSVRcJbnh3ORFPpdRSPOGpc74Z7 RPQzNJNXpzmEOyKrZWfg66craDU07TmQkcTtHK88MFBGAqYtHkDBA3/D8ifl25S6 bB4wRDJDlFC/0mO+DSCY9VU= -----END CERTIFICATE-----Generated at Sat Jul 5 05:43:31 2025 by rpki-client