$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft File: aGGW3gPV2jAP80-5M56yqPE90pc.mft (raw, json) Hash identifier: QFtoeNIrfAM0OQJyji3a3Y88mxA8elKt9baq4OPoRUw= Subject key identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 Authority key identifier: 68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 Certificate issuer: /CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Certificate serial: 0CDB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft Manifest number: 0CDB Signing time: Sat 17 May 2025 21:55:20 +0000 Manifest this update: Sat 17 May 2025 21:55:20 +0000 Manifest next update: Mon 19 May 2025 21:55:20 +0000 Files and hashes: 1: aGGW3gPV2jAP80-5M56yqPE90pc.crl (hash: NdwVrUgTvSiUMchngu5BaB8wUQE4VR4TV1mL2cDm+AU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686196DE03D5DA300FF34FB9339EB2A8F13DD297 Validity Not Before: May 17 21:55:20 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6C4B094FA0068711B8F2F4E9F4310B43D86CA9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:9c:03:ce:1d:4a:cb:ed:cb:a1:a4:96:45: 0f:8f:7d:29:75:cb:77:ba:52:c2:a8:07:3a:87:24: b3:3f:9d:7c:31:b8:3f:e4:fa:ac:36:85:62:ab:da: 59:5a:17:89:0d:ad:9e:59:a7:f2:d5:0a:3a:c9:c2: 89:dd:d9:2b:3a:91:df:38:66:80:a5:2f:64:4c:78: 1a:aa:eb:51:8f:98:92:6f:d4:31:89:97:4b:95:78: 40:85:3b:b9:2c:3c:73:31:1d:29:b9:e2:ed:3c:7e: 33:f6:d2:ac:4c:74:9d:f9:2d:b5:95:84:a5:5c:f9: a5:87:6c:81:cc:8e:2f:c4:55:e0:d9:43:42:dd:c4: b6:dd:a4:ff:13:47:e4:a4:e8:95:95:0e:54:bc:ee: 53:de:b1:27:06:f6:4d:da:e1:e2:42:c8:26:f0:79: c4:0a:50:b9:b5:bd:5b:81:88:be:50:37:02:6d:13: 5e:fa:05:aa:9a:c0:7e:08:82:18:a9:95:b5:b8:e9: 48:56:40:0e:94:5b:1f:c4:cd:28:2d:65:41:2d:e9: 31:f6:8c:9f:bb:74:57:56:34:7b:fe:29:fe:17:58: 8d:6d:6b:d9:8c:dc:ec:18:4a:44:57:04:4d:de:f0: 80:34:6c:42:1b:13:ae:8d:c9:2a:8b:f7:2f:34:c8: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4B:09:4F:A0:06:87:11:B8:F2:F4:E9:F4:31:0B:43:D8:6C:A9:C1 X509v3 Authority Key Identifier: keyid:68:61:96:DE:03:D5:DA:30:0F:F3:4F:B9:33:9E:B2:A8:F1:3D:D2:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aGGW3gPV2jAP80-5M56yqPE90pc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DRCLOUD/aGGW3gPV2jAP80-5M56yqPE90pc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ff:9e:ef:4c:13:d3:18:97:2f:59:92:46:5d:31:03:ed:c2: 3e:d4:50:bd:47:f0:44:07:4a:54:cb:9f:ea:bb:bf:d1:91:8f: d2:b4:b7:a0:d6:71:a1:f6:3b:6b:a6:64:f6:ef:ee:9f:28:82: c9:6d:f9:8d:a0:32:e5:c7:d2:65:39:61:2d:d3:51:2c:77:5e: 6a:f1:f3:32:4c:bd:77:97:b5:a3:bb:34:77:b8:d0:65:7b:c2: c6:b0:16:e6:0e:00:a6:03:b2:31:83:6c:eb:4a:71:c8:ea:5e: 1d:f5:f0:77:f5:d1:b9:20:89:29:e1:1a:f5:c8:1d:96:b2:24: b9:97:d5:90:d3:a4:8a:e2:36:9f:19:6d:d6:a7:42:96:87:fe: 4b:50:e2:98:97:10:5b:8a:12:a7:a9:81:d1:e5:be:76:04:1f: 63:3b:da:31:69:bb:d2:b6:26:6c:01:ba:e1:cf:97:7a:1f:0f: c2:7d:e8:0c:82:c3:7b:5c:e1:49:97:fe:d0:81:68:ee:7c:f0: 21:07:67:89:a7:dd:6d:2d:f9:18:82:01:0c:25:04:06:a8:e2: 3a:fb:b4:9c:b7:56:19:0a:cb:a6:b5:bd:69:e6:dd:22:0c:4a: 81:21:03:e3:bb:dd:9e:2d:3d:37:ff:ab:dc:3d:10:ae:6e:20: 45:3e:b8:d9 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICDNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjg2 MTk2REUwM0Q1REEzMDBGRjM0RkI5MzM5RUIyQThGMTNERDI5NzAeFw0yNTA1MTcy MTU1MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZDNEIwOTRGQTAwNjg3 MTFCOEYyRjRFOUY0MzEwQjQzRDg2Q0E5QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6GpwDzh1Ky+3LoaSWRQ+PfSl1y3e6UsKoBzqHJLM/nXwxuD/k +qw2hWKr2llaF4kNrZ5Zp/LVCjrJwond2Ss6kd84ZoClL2RMeBqq61GPmJJv1DGJ l0uVeECFO7ksPHMxHSm54u08fjP20qxMdJ35LbWVhKVc+aWHbIHMji/EVeDZQ0Ld xLbdpP8TR+Sk6JWVDlS87lPesScG9k3a4eJCyCbwecQKULm1vVuBiL5QNwJtE176 BaqawH4IghiplbW46UhWQA6UWx/EzSgtZUEt6TH2jJ+7dFdWNHv+Kf4XWI1ta9mM 3OwYSkRXBE3e8IA0bEIbE66NySqL9y80yHLdAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUbEsJT6AGhxG48vTp9DELQ9hsqcEwHwYDVR0jBBgwFoAUaGGW3gPV2jAP80+5 M56yqPE90pcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFJDTE9V RC9hR0dXM2dQVjJqQVA4MC01TTU2eXFQRTkwcGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2FHR1czZ1BWMmpBUDgwLTVNNTZ5cVBFOTBwYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RSQ0xPVUQvYUdHVzNnUFYyakFQODAt NU01NnlxUEU5MHBjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ACD/nu9ME9MYly9ZkkZdMQPtwj7UUL1H8EQHSlTLn+q7v9GRj9K0t6DWcaH2O2um ZPbv7p8ogslt+Y2gMuXH0mU5YS3TUSx3Xmrx8zJMvXeXtaO7NHe40GV7wsawFuYO AKYDsjGDbOtKccjqXh318Hf10bkgiSnhGvXIHZayJLmX1ZDTpIriNp8ZbdanQpaH /ktQ4piXEFuKEqepgdHlvnYEH2M72jFpu9K2JmwBuuHPl3ofD8J96AyCw3tc4UmX /tCBaO588CEHZ4mn3W0t+RiCAQwlBAao4jr7tJy3VhkKy6a1vWnm3SIMSoEhA+O7 3Z4tPTf/q9w9EK5uIEU+uNk= -----END CERTIFICATE-----Generated at Mon May 19 00:52:39 2025 by rpki-client