$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft File: aGGW3gPV2jAP80-5M56yqPE90pc.mft (raw, json) Hash identifier: Y3hXvBSAhzw9DPX92YlTH5Y53thAWW2mXG5GZQmeGzc= Subject key identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 Authority key identifier: 68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 Certificate issuer: /CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Certificate serial: 0DAC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft Manifest number: 0DAC Signing time: Wed 25 Mar 2026 21:59:29 +0000 Manifest this update: Wed 25 Mar 2026 21:59:29 +0000 Manifest next update: Fri 27 Mar 2026 21:59:29 +0000 Files and hashes: 1: aGGW3gPV2jAP80-5M56yqPE90pc.crl (hash: 9JlumQJTUNMY8grIeAE1DtI/zATQgtcbSw2rRDeCHvY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Validity Not Before: Mar 25 21:59:29 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6C4B094FA0068711B8F2F4E9F4310B43D86CA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:9c:03:ce:1d:4a:cb:ed:cb:a1:a4:96:45: 0f:8f:7d:29:75:cb:77:ba:52:c2:a8:07:3a:87:24: b3:3f:9d:7c:31:b8:3f:e4:fa:ac:36:85:62:ab:da: 59:5a:17:89:0d:ad:9e:59:a7:f2:d5:0a:3a:c9:c2: 89:dd:d9:2b:3a:91:df:38:66:80:a5:2f:64:4c:78: 1a:aa:eb:51:8f:98:92:6f:d4:31:89:97:4b:95:78: 40:85:3b:b9:2c:3c:73:31:1d:29:b9:e2:ed:3c:7e: 33:f6:d2:ac:4c:74:9d:f9:2d:b5:95:84:a5:5c:f9: a5:87:6c:81:cc:8e:2f:c4:55:e0:d9:43:42:dd:c4: b6:dd:a4:ff:13:47:e4:a4:e8:95:95:0e:54:bc:ee: 53:de:b1:27:06:f6:4d:da:e1:e2:42:c8:26:f0:79: c4:0a:50:b9:b5:bd:5b:81:88:be:50:37:02:6d:13: 5e:fa:05:aa:9a:c0:7e:08:82:18:a9:95:b5:b8:e9: 48:56:40:0e:94:5b:1f:c4:cd:28:2d:65:41:2d:e9: 31:f6:8c:9f:bb:74:57:56:34:7b:fe:29:fe:17:58: 8d:6d:6b:d9:8c:dc:ec:18:4a:44:57:04:4d:de:f0: 80:34:6c:42:1b:13:ae:8d:c9:2a:8b:f7:2f:34:c8: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 X509v3 Authority Key Identifier: keyid:68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e3:e1:c7:94:7f:9a:4a:02:81:26:5f:a9:6f:2d:9a:45:66: 5a:13:bb:fc:da:be:44:0b:b1:d0:1a:5b:36:e2:52:2f:99:36: 0c:4b:74:53:8f:7e:a5:b8:77:ae:fe:0a:03:c0:26:7b:10:18: b2:21:b4:eb:38:96:28:5c:32:54:c9:f5:a5:98:e6:db:2e:0e: 1c:f9:7c:d8:30:f4:6d:78:4a:30:13:b3:cc:8f:b4:51:1c:b5: 59:4f:43:5d:bc:f4:d1:e6:45:48:9c:04:89:57:e5:c2:b4:38: b7:0d:38:15:84:46:61:5f:d2:a5:ef:e4:0f:cd:97:3f:db:b6: c0:34:76:9a:15:13:11:35:87:65:56:70:cf:c4:b0:43:3d:67: 13:e4:6b:32:e2:88:7c:15:c9:e6:62:0d:bb:82:9c:fa:af:d2: f1:55:03:eb:a0:5b:20:fb:0c:f5:59:bd:7e:f9:6d:8c:48:18: 69:b6:46:98:48:20:b8:33:cd:e9:31:6f:40:dd:e5:95:dd:13: d4:8b:0c:6f:ba:d9:32:fb:f7:51:e9:5e:8b:01:6d:44:4c:1a: 51:55:cf:9f:2a:a9:0b:02:a3:70:04:c1:f4:7f:a8:dd:a4:e7: 54:4d:fb:05:b7:a1:68:1a:c3:0e:a7:97:30:2c:1d:c6:f1:08: 77:97:2f:4d -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjg2 MTk2REUwM0Q1REEzMDBGRjM0RkI5MzM5RUIyQThGMTNERDI5NzAeFw0yNjAzMjUy MTU5MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDNEIwOTRGQTAwNjg3 MTFCOEYyRjRFOUY0MzEwQjQzRDg2Q0E5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6GpwDzh1Ky+3LoaSWRQ+PfSl1y3e6UsKoBzqHJLM/nXwxuD/k +qw2hWKr2llaF4kNrZ5Zp/LVCjrJwond2Ss6kd84ZoClL2RMeBqq61GPmJJv1DGJ l0uVeECFO7ksPHMxHSm54u08fjP20qxMdJ35LbWVhKVc+aWHbIHMji/EVeDZQ0Ld xLbdpP8TR+Sk6JWVDlS87lPesScG9k3a4eJCyCbwecQKULm1vVuBiL5QNwJtE176 BaqawH4IghiplbW46UhWQA6UWx/EzSgtZUEt6TH2jJ+7dFdWNHv+Kf4XWI1ta9mM 3OwYSkRXBE3e8IA0bEIbE66NySqL9y80yHLdAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUbEsJT6AGhxG48vTp9DELQ9hsqcEwHwYDVR0jBBgwFoAUaGGW3gPV2jAP80+5 M56yqPE90pcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFJDTE9V RC9hR0dXM2dQVjJqQVA4MC01TTU2eXFQRTkwcGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2FHR1czZ1BWMmpBUDgwLTVNNTZ5cVBFOTBwYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RSQ0xPVUQvYUdHVzNnUFYyakFQODAt NU01NnlxUEU5MHBjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AGPj4ceUf5pKAoEmX6lvLZpFZloTu/zavkQLsdAaWzbiUi+ZNgxLdFOPfqW4d67+ CgPAJnsQGLIhtOs4lihcMlTJ9aWY5tsuDhz5fNgw9G14SjATs8yPtFEctVlPQ128 9NHmRUicBIlX5cK0OLcNOBWERmFf0qXv5A/Nlz/btsA0dpoVExE1h2VWcM/EsEM9 ZxPkazLiiHwVyeZiDbuCnPqv0vFVA+ugWyD7DPVZvX75bYxIGGm2RphIILgzzekx b0Dd5ZXdE9SLDG+62TL791HpXosBbURMGlFVz58qqQsCo3AEwfR/qN2k51RN+wW3 oWgaww6nlzAsHcbxCHeXL00= -----END CERTIFICATE-----Generated at Fri Mar 27 09:58:18 2026 by rpki-client