$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft File: gwLeGTWY7cNiItkp-tZng2fWLiE.mft (raw, json) Hash identifier: z9xSuJcOS8mOHrEYZzemx/FhaLA0wbobAKCXVLj9LSI= Subject key identifier: 75:E9:DF:9E:69:A1:B2:5A:4A:5F:73:92:30:1A:D3:BB:22:51:C2:64 Authority key identifier: 83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21 Certificate issuer: /CN=8302DE193598EDC36222D929FAD6678367D62E21 Certificate serial: 1356 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft Manifest number: 134E Signing time: Sat 17 May 2025 21:54:05 +0000 Manifest this update: Sat 17 May 2025 21:54:05 +0000 Manifest next update: Mon 19 May 2025 21:54:05 +0000 Files and hashes: 1: gwLeGTWY7cNiItkp-tZng2fWLiE.crl (hash: 2WM4KCPMDaGj1Dg1J9uuf6WNAyohDG1qzaNBK4Gi1N8=) 2: jp7iUXs1QL-dq_O6g6LurfVUmwU.roa (hash: vf1owcSNZb8jbw6sYZS+tY/Tcb5V3XE2VHZCTaLbsh0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 23:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4950 (0x1356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8302DE193598EDC36222D929FAD6678367D62E21 Validity Not Before: May 17 21:54:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=75E9DF9E69A1B25A4A5F7392301AD3BB2251C264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:8b:a3:9a:0f:af:5b:d0:39:19:63:2d:b2: cd:e0:37:a8:0a:d9:bb:97:01:79:1c:aa:bd:82:40: 68:4d:18:e7:ea:b1:03:48:1f:c9:fe:70:bd:ad:83: e1:14:a9:c0:be:a3:70:c5:11:f1:72:38:a7:87:b3: a3:79:20:16:70:34:fe:47:c5:32:35:cc:85:59:c8: 8a:9f:2e:7b:22:6b:8a:f3:fb:ac:3c:33:11:af:98: 23:08:f9:52:5a:e2:10:d3:df:63:f6:cd:9d:36:80: b2:68:de:1a:8a:53:f7:35:08:6b:29:c3:64:ca:61: f1:0b:73:88:8a:52:39:b2:f6:1c:82:74:5d:37:43: a3:e5:32:bd:28:c9:ae:26:c8:96:4e:29:c0:6c:c4: 89:eb:48:11:2f:73:46:35:de:10:72:72:54:90:61: 41:d9:72:39:5c:0b:ff:be:ac:d0:13:e3:b2:c3:05: 36:c8:e4:a2:1e:e7:5a:3a:1d:5c:a2:4d:3e:89:58: ab:fd:c4:a1:cc:ca:62:76:d7:22:eb:74:f9:d9:8c: fb:c8:ad:22:81:6e:3d:e4:b8:da:bd:f0:eb:36:f3: 00:cb:2d:61:a9:b9:1e:f7:8c:d2:09:af:63:1b:e7: c9:a7:3c:95:dc:df:3e:a8:58:0c:f9:3d:a6:b4:ce: c4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E9:DF:9E:69:A1:B2:5A:4A:5F:73:92:30:1A:D3:BB:22:51:C2:64 X509v3 Authority Key Identifier: keyid:83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d7:fa:f9:59:e8:45:2c:70:bc:05:76:07:a1:c8:69:13:4f: 43:59:6d:7c:bf:d1:47:e7:8d:6b:db:1f:30:af:8e:41:ab:c5: 18:8a:46:11:83:b6:b9:f1:fa:f5:4d:a0:54:ac:b0:8e:77:c3: 9c:25:a0:b2:9b:0c:5e:7b:78:04:f9:18:bb:d5:a9:6f:7c:c1: 57:e2:9f:2b:77:cd:5d:83:19:f7:e8:8c:8a:3a:48:05:9a:a0: d4:a5:27:34:a3:d1:b6:93:13:c0:7a:c5:29:10:b7:20:21:e0: 20:67:1a:61:37:cc:96:0f:b8:fe:9c:92:d1:78:83:9f:71:5e: 71:07:1a:6d:6d:55:27:18:7c:66:41:bf:c5:79:b1:ca:5f:8a: 4a:81:40:ca:7f:b5:e2:ac:60:26:96:9f:bb:ea:c4:a0:c4:0f: 7f:48:ad:09:5b:7b:28:0c:e2:87:f2:3f:65:ec:02:01:ca:db: f9:c0:76:c7:1e:36:55:27:5e:79:9f:80:91:7c:7a:fc:b0:46: b4:3f:67:29:97:e2:d4:a4:bb:9c:55:c6:2c:eb:e5:e2:06:04: e9:0d:8a:8a:98:ef:18:bc:bd:60:db:45:f4:c9:36:04:60:bb: 15:79:76:e5:af:17:c3:f9:a6:d5:78:5f:34:93:0c:49:32:6d: 40:94:58:6e -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICE1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw MkRFMTkzNTk4RURDMzYyMjJEOTI5RkFENjY3ODM2N0Q2MkUyMTAeFw0yNTA1MTcy MTU0MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1RTlERjlFNjlBMUIy NUE0QTVGNzM5MjMwMUFEM0JCMjI1MUMyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC914ujmg+vW9A5GWMtss3gN6gK2buXAXkcqr2CQGhNGOfqsQNI H8n+cL2tg+EUqcC+o3DFEfFyOKeHs6N5IBZwNP5HxTI1zIVZyIqfLnsia4rz+6w8 MxGvmCMI+VJa4hDT32P2zZ02gLJo3hqKU/c1CGspw2TKYfELc4iKUjmy9hyCdF03 Q6PlMr0oya4myJZOKcBsxInrSBEvc0Y13hByclSQYUHZcjlcC/++rNAT47LDBTbI 5KIe51o6HVyiTT6JWKv9xKHMymJ21yLrdPnZjPvIrSKBbj3kuNq98Os28wDLLWGp uR73jNIJr2Mb58mnPJXc3z6oWAz5Paa0zsTfAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUdenfnmmhslpKX3OSMBrTuyJRwmQwHwYDVR0jBBgwFoAUgwLeGTWY7cNiItkp +tZng2fWLiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRUhIS1kv Z3dMZUdUV1k3Y05pSXRrcC10Wm5nMmZXTGlFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9nd0xlR1RXWTdjTmlJdGtwLXRabmcyZldMaUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FSEhLWS9nd0xlR1RXWTdjTmlJdGtwLXRa bmcyZldMaUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAztf6 +VnoRSxwvAV2B6HIaRNPQ1ltfL/RR+eNa9sfMK+OQavFGIpGEYO2ufH69U2gVKyw jnfDnCWgspsMXnt4BPkYu9Wpb3zBV+KfK3fNXYMZ9+iMijpIBZqg1KUnNKPRtpMT wHrFKRC3ICHgIGcaYTfMlg+4/pyS0XiDn3FecQcabW1VJxh8ZkG/xXmxyl+KSoFA yn+14qxgJpafu+rEoMQPf0itCVt7KAzih/I/ZewCAcrb+cB2xx42VSdeeZ+AkXx6 /LBGtD9nKZfi1KS7nFXGLOvl4gYE6Q2KipjvGLy9YNtF9Mk2BGC7FXl25a8Xw/mm 1XhfNJMMSTJtQJRYbg== -----END CERTIFICATE-----Generated at Sun May 18 21:37:41 2025 by rpki-client