$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft File: CcNLispiD2KMeh5oIUQO7mgOTNg.mft (raw, json) Hash identifier: Sg6FClIx+VsT4bbX7FepAFThO24n60GFA5M3qvpcTOk= Subject key identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E Authority key identifier: 09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 Certificate issuer: /CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Certificate serial: D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft Manifest number: CF Signing time: Sat 17 May 2025 22:23:58 +0000 Manifest this update: Sat 17 May 2025 22:23:58 +0000 Manifest next update: Mon 19 May 2025 22:23:58 +0000 Files and hashes: 1: CcNLispiD2KMeh5oIUQO7mgOTNg.crl (hash: xRF9tX+xjfkIVyr3M7S9Ea05NErS5/Lgew93KeuCEUU=) 2: GnyyDpm3mmdAbCCQVhzVRnw6x0M.roa (hash: APtmjKoACUfAq/x3gki3kLBJ0COWTpLHdikKUYku2G8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Validity Not Before: May 17 22:23:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1CBA7DECBE64D6CB9C5C2638ECFB967C1EA4FC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:5a:86:b7:69:3b:e2:d1:5b:00:7a:fd:5a: b2:84:8c:da:34:5c:8d:6b:38:f6:f6:5a:d3:39:0d: 8f:b8:7f:07:7b:15:94:14:3b:b3:cc:83:fd:cc:c5: d6:ce:87:9d:f1:60:77:96:05:33:7e:c4:55:c5:b4: c0:83:a9:64:4d:42:e6:01:0e:e8:fb:f8:9a:97:ad: 5e:06:5a:07:4a:b0:6b:60:0e:4b:be:7f:e8:03:0f: 68:5a:1d:e9:44:f8:bd:49:4d:ea:36:e8:4d:77:c5: 7a:3d:bc:d2:a4:a0:d0:60:01:61:5e:97:87:49:df: db:71:3a:0c:2a:e2:b9:8d:8d:7c:73:af:f6:33:fc: be:9d:f6:5f:f0:19:ef:8a:2e:0e:39:2d:74:a4:9d: 23:b2:b6:50:f0:94:18:fa:e2:d3:96:67:d0:3f:84: 8e:54:2c:55:14:83:c9:9c:fd:1e:be:1e:87:7c:fe: 59:56:de:04:51:15:38:ae:8a:37:6b:ca:b5:da:39: 3f:fc:ba:a0:e8:91:d3:a3:0d:19:72:9e:12:51:98: 31:c9:c4:b0:54:2c:c4:6c:cf:6a:aa:97:c5:b2:39: a3:6d:bb:2b:72:56:e4:88:bc:7f:8f:cd:e5:95:14: 5c:d4:3e:ea:4b:5b:2d:10:5d:e2:1b:b0:0c:61:bc: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E X509v3 Authority Key Identifier: keyid:09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:00:ce:ee:5b:ca:a1:38:99:0c:3a:84:4c:b1:0f:1e:4e:a7: 57:8b:53:f2:b0:8c:50:82:f8:f3:b8:0e:55:e3:1e:46:8d:7a: 9c:f8:c9:94:cb:25:96:1e:f8:64:68:74:24:cc:0f:9b:71:16: b9:6a:18:1a:db:ea:70:95:7a:e3:b7:db:9e:51:95:7b:ca:ef: 01:38:6b:6f:cc:45:4e:e7:d2:c5:bd:e7:79:a0:88:ca:27:bf: a0:46:a7:19:9e:f2:84:8c:80:7e:09:50:8a:68:73:3b:f8:1e: 88:2a:0b:1e:80:08:c5:b8:7c:36:8d:b0:13:de:c9:bf:52:33: 67:70:b3:d0:f1:7e:a0:f0:be:53:f2:55:d6:ca:02:34:56:c3: 9b:17:1b:c0:8b:4d:be:c7:f8:82:1d:99:6d:1e:92:4e:c5:bd: 0c:9e:71:84:3b:a4:73:f9:8c:9f:d4:39:5e:bb:32:17:85:9a: 5d:b3:7c:f0:db:83:c5:86:e4:4e:43:9b:98:a5:fc:7a:94:0a: 1c:d2:40:23:bf:ec:16:ed:b3:d5:1b:27:da:7c:15:a7:74:6b: d2:0c:71:cf:c1:bf:b4:ba:31:d1:f2:81:05:e6:e9:40:3c:ee: 6b:fe:54:2d:94:53:48:3f:a1:7b:bd:1a:e2:e0:84:67:89:bd: b4:e8:59:98 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDlD MzRCOEFDQTYyMEY2MjhDN0ExRTY4MjE0NDBFRUU2ODBFNENEODAeFw0yNTA1MTcy MjIzNThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFDQkE3REVDQkU2NEQ2 Q0I5QzVDMjYzOEVDRkI5NjdDMUVBNEZDOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGTFqGt2k74tFbAHr9WrKEjNo0XI1rOPb2WtM5DY+4fwd7FZQU O7PMg/3MxdbOh53xYHeWBTN+xFXFtMCDqWRNQuYBDuj7+JqXrV4GWgdKsGtgDku+ f+gDD2haHelE+L1JTeo26E13xXo9vNKkoNBgAWFel4dJ39txOgwq4rmNjXxzr/Yz /L6d9l/wGe+KLg45LXSknSOytlDwlBj64tOWZ9A/hI5ULFUUg8mc/R6+Hod8/llW 3gRRFTiuijdryrXaOT/8uqDokdOjDRlynhJRmDHJxLBULMRsz2qql8WyOaNtuyty VuSIvH+PzeWVFFzUPupLWy0QXeIbsAxhvOsrAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUHLp97L5k1sucXCY47PuWfB6k/I4wHwYDVR0jBBgwFoAUCcNLispiD2KMeh5o IUQO7mgOTNgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5OT0xV WC9DY05MaXNwaUQyS01laDVvSVVRTzdtZ09UTmcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NjTkxpc3BpRDJLTWVoNW9JVVFPN21nT1ROZy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lOTk9MVVgvQ2NOTGlzcGlEMktNZWg1 b0lVUU83bWdPVE5nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AJYAzu5byqE4mQw6hEyxDx5Op1eLU/KwjFCC+PO4DlXjHkaNepz4yZTLJZYe+GRo dCTMD5txFrlqGBrb6nCVeuO3255RlXvK7wE4a2/MRU7n0sW953mgiMonv6BGpxme 8oSMgH4JUIpoczv4HogqCx6ACMW4fDaNsBPeyb9SM2dws9DxfqDwvlPyVdbKAjRW w5sXG8CLTb7H+IIdmW0ekk7FvQyecYQ7pHP5jJ/UOV67MheFml2zfPDbg8WG5E5D m5il/HqUChzSQCO/7Bbts9UbJ9p8Fad0a9IMcc/Bv7S6MdHygQXm6UA87mv+VC2U U0g/oXu9GuLghGeJvbToWZg= -----END CERTIFICATE-----Generated at Mon May 19 00:44:50 2025 by rpki-client