$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft File: aMrB-gTYDP4-K-l8erGFK2ZWU18.mft (raw, json) Hash identifier: sa831Xn9ojmkBK5LMMkbVvZcWa+f+dv8plxrFP0VU4o= Subject key identifier: 06:C2:74:CC:25:B5:C7:36:BD:BE:A4:AD:32:37:AF:D5:46:1B:69:09 Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Certificate serial: 13C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft Manifest number: 13B6 Signing time: Sun 19 Oct 2025 21:25:32 +0000 Manifest this update: Sun 19 Oct 2025 21:25:32 +0000 Manifest next update: Tue 21 Oct 2025 21:25:32 +0000 Files and hashes: 1: 6XGvDhhCQBa13ub_Oe5hYLv8zMM.roa (hash: Z1Gx766UgoSnBYLl2jt8suotvAI/pJir5o3p/czJyzk=) 2: aMrB-gTYDP4-K-l8erGFK2ZWU18.crl (hash: YRpm53YUrjYhJ/AbZIG/F8f6LOCTocjVOPhFcctGNK0=) 3: sARw9pMu_RpcSMhi8ubdIQCRQa8.roa (hash: kyDTvc/E2K4lbKvS33fEfyUu1GnXr626zoGtZ35HhX4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5063 (0x13c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Validity Not Before: Oct 19 21:25:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=06C274CC25B5C736BDBEA4AD3237AFD5461B6909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:87:c4:0b:a7:37:be:2d:dd:5c:55:39:28: 31:c9:ca:ac:20:56:97:9a:40:08:e1:0e:b0:b4:9b: 15:3f:da:29:fd:41:72:26:82:fd:dc:23:f8:89:06: 98:f9:bf:5c:89:dd:f2:87:c3:74:4f:c2:0d:4b:f1: 0e:36:f4:dc:0b:9c:5d:15:66:d3:c2:ed:67:e2:e3: aa:68:4d:f1:c4:a0:52:1c:5b:7d:d0:da:b9:23:83: 55:2e:71:36:db:a6:cf:97:7f:25:cb:7f:0a:50:1c: d7:cf:09:08:e5:bd:63:95:f7:b9:c8:9e:ba:d0:79: 53:ac:69:e6:b2:23:3f:8e:95:7c:26:c6:e7:2d:19: e2:e5:13:8b:a3:70:ce:26:36:ed:12:70:ed:6d:42: 1a:3c:2f:b5:49:45:4d:49:8c:50:a5:5c:88:16:53: df:f6:9c:3e:eb:f6:4d:9f:3b:f6:4c:6c:eb:ea:47: 80:69:19:b5:df:15:ec:fd:8c:04:70:0b:ab:41:8a: 7a:2a:71:21:8a:50:f6:50:c7:d5:a4:3e:a8:3e:e6: 7c:86:6c:e7:8b:69:fc:f7:f0:55:8c:69:f5:ca:c8: a7:d6:2c:c4:f4:56:2f:e8:b2:f2:e1:39:fb:41:49: 1b:40:4f:63:3a:31:4d:9d:48:3f:ea:4b:35:fd:d7: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:74:CC:25:B5:C7:36:BD:BE:A4:AD:32:37:AF:D5:46:1B:69:09 X509v3 Authority Key Identifier: keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:26:8d:f9:8f:ae:54:d1:cc:eb:69:ee:17:78:3e:22:ed:ef: a8:49:6f:0c:59:39:ab:98:95:51:46:fe:7d:33:c5:86:e9:4a: 03:24:cc:45:bb:20:36:82:50:08:79:0d:8e:ab:85:13:32:2e: 95:58:e4:7a:9e:93:12:12:22:7e:34:dd:14:e8:04:2b:0e:87: 2c:df:60:40:00:54:a1:fe:84:bf:09:38:17:d1:79:e6:cc:d2: 13:b8:00:37:a7:bf:de:58:c3:8b:f9:8b:d9:61:bc:f2:41:c0: 39:14:9b:57:1e:d7:08:33:88:d0:00:fc:7b:f3:79:1e:0b:22: 80:03:5b:4a:8d:39:a1:00:ec:a6:35:1e:31:77:7d:10:a4:9b: a0:18:23:2c:9a:e0:2e:d6:b5:6d:dd:fa:ac:8c:e1:6a:ee:84: 25:aa:4d:d4:37:a8:7b:e7:f4:83:3d:33:4c:49:56:7a:cb:b5: 65:e7:a8:23:cc:af:87:ab:58:08:e5:2b:61:36:2c:63:62:a3: 5e:79:83:1b:a7:26:3a:21:9f:e7:fc:ea:0a:be:a5:ed:4a:ff: 70:7a:93:d4:99:32:34:eb:9c:1f:d3:14:bc:0f:db:0a:9b:7c: 98:0d:b8:e7:a3:a2:cc:c4:2b:d5:32:4a:54:94:19:42:dd:aa: 82:f1:2b:24 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNTEwMTky MTI1MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA2QzI3NENDMjVCNUM3 MzZCREJFQTRBRDMyMzdBRkQ1NDYxQjY5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT1YfEC6c3vi3dXFU5KDHJyqwgVpeaQAjhDrC0mxU/2in9QXIm gv3cI/iJBpj5v1yJ3fKHw3RPwg1L8Q429NwLnF0VZtPC7Wfi46poTfHEoFIcW33Q 2rkjg1UucTbbps+XfyXLfwpQHNfPCQjlvWOV97nInrrQeVOsaeayIz+OlXwmxuct GeLlE4ujcM4mNu0ScO1tQho8L7VJRU1JjFClXIgWU9/2nD7r9k2fO/ZMbOvqR4Bp GbXfFez9jARwC6tBinoqcSGKUPZQx9WkPqg+5nyGbOeLafz38FWMafXKyKfWLMT0 Vi/osvLhOftBSRtAT2M6MU2dSD/qSzX91xN/AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUBsJ0zCW1xza9vqStMjev1UYbaQkwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8 erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9hTXJCLWdUWURQNC1L LWw4ZXJHRksyWldVMTgubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJSaN+Y+uVNHM62nuF3g+Iu3vqElvDFk5q5iVUUb+fTPFhulKAyTMRbsgNoJQ CHkNjquFEzIulVjkep6TEhIifjTdFOgEKw6HLN9gQABUof6Evwk4F9F55szSE7gA N6e/3ljDi/mL2WG88kHAORSbVx7XCDOI0AD8e/N5HgsigANbSo05oQDspjUeMXd9 EKSboBgjLJrgLta1bd36rIzhau6EJapN1Deoe+f0gz0zTElWesu1ZeeoI8yvh6tY COUrYTYsY2KjXnmDG6cmOiGf5/zqCr6l7Ur/cHqT1JkyNOucH9MUvA/bCpt8mA24 56OizMQr1TJKVJQZQt2qgvErJA== -----END CERTIFICATE-----Generated at Tue Oct 21 09:03:19 2025 by rpki-client