$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft File: CcNLispiD2KMeh5oIUQO7mgOTNg.mft (raw, json) Hash identifier: x6JJqFNrdVNKz4zc8tMsfJ0Y302XBobxT3yTCkXFuWI= Subject key identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E Authority key identifier: 09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 Certificate issuer: /CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Certificate serial: 0114 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft Manifest number: 0111 Signing time: Sat 23 Aug 2025 21:16:31 +0000 Manifest this update: Sat 23 Aug 2025 21:16:31 +0000 Manifest next update: Mon 25 Aug 2025 21:16:31 +0000 Files and hashes: 1: CcNLispiD2KMeh5oIUQO7mgOTNg.crl (hash: UPoZlR8NoxapErrzCTYfIqMdx3ic2/RNQdxxGOVWoEY=) 2: NmQ8BBO4LonT-eQgYmHCbTR5cGY.roa (hash: 700LtPQZ2bjcgwvKuHHVtaaWjPWIvcgjXu3X81p8dNQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09C34B8ACA620F628C7A1E6821440EEE680E4CD8 Validity Not Before: Aug 23 21:16:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1CBA7DECBE64D6CB9C5C2638ECFB967C1EA4FC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:5a:86:b7:69:3b:e2:d1:5b:00:7a:fd:5a: b2:84:8c:da:34:5c:8d:6b:38:f6:f6:5a:d3:39:0d: 8f:b8:7f:07:7b:15:94:14:3b:b3:cc:83:fd:cc:c5: d6:ce:87:9d:f1:60:77:96:05:33:7e:c4:55:c5:b4: c0:83:a9:64:4d:42:e6:01:0e:e8:fb:f8:9a:97:ad: 5e:06:5a:07:4a:b0:6b:60:0e:4b:be:7f:e8:03:0f: 68:5a:1d:e9:44:f8:bd:49:4d:ea:36:e8:4d:77:c5: 7a:3d:bc:d2:a4:a0:d0:60:01:61:5e:97:87:49:df: db:71:3a:0c:2a:e2:b9:8d:8d:7c:73:af:f6:33:fc: be:9d:f6:5f:f0:19:ef:8a:2e:0e:39:2d:74:a4:9d: 23:b2:b6:50:f0:94:18:fa:e2:d3:96:67:d0:3f:84: 8e:54:2c:55:14:83:c9:9c:fd:1e:be:1e:87:7c:fe: 59:56:de:04:51:15:38:ae:8a:37:6b:ca:b5:da:39: 3f:fc:ba:a0:e8:91:d3:a3:0d:19:72:9e:12:51:98: 31:c9:c4:b0:54:2c:c4:6c:cf:6a:aa:97:c5:b2:39: a3:6d:bb:2b:72:56:e4:88:bc:7f:8f:cd:e5:95:14: 5c:d4:3e:ea:4b:5b:2d:10:5d:e2:1b:b0:0c:61:bc: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BA:7D:EC:BE:64:D6:CB:9C:5C:26:38:EC:FB:96:7C:1E:A4:FC:8E X509v3 Authority Key Identifier: keyid:09:C3:4B:8A:CA:62:0F:62:8C:7A:1E:68:21:44:0E:EE:68:0E:4C:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CcNLispiD2KMeh5oIUQO7mgOTNg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INNOLUX/CcNLispiD2KMeh5oIUQO7mgOTNg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9e:69:c6:57:66:9a:de:2b:70:50:d3:e3:4d:80:cd:31:56: dc:91:98:be:e3:32:fe:fb:71:c8:4c:b8:c2:6d:d4:b9:a9:c6: c9:28:3a:03:57:be:7d:83:6a:b0:5b:6f:77:15:59:f7:ac:76: 93:a7:6d:12:8b:d3:8e:e0:b6:55:01:cb:c8:0a:6c:df:fd:69: 92:78:74:a1:0f:13:15:48:30:95:d5:dc:d7:c4:0c:f5:ca:82: 9a:c4:23:86:7e:47:eb:11:e5:c3:8d:6f:3d:92:a4:ba:af:20: c6:f0:73:fc:8a:d5:27:34:2d:6f:c3:86:4a:42:5f:9c:e8:68: 63:46:61:fb:2a:65:74:ed:fc:56:9f:f7:bf:a4:b4:7f:06:3e: c9:cb:16:fa:9d:c5:20:e7:d0:a8:4c:46:2f:f9:8d:34:f5:bf: 58:3b:54:1c:33:de:51:c9:0d:3a:dd:df:ae:2c:ee:12:78:45: f9:94:15:15:f8:eb:56:16:e9:bf:fb:43:5b:21:7a:83:ac:58: 2d:a5:44:06:4f:d2:1b:66:81:b8:70:28:b1:d1:59:e7:c5:d4: ac:00:d5:a0:e4:aa:da:53:ec:80:c8:c5:44:9c:96:83:99:49: da:cb:1c:df:5d:3a:1c:a2:83:a5:e7:55:31:c7:6d:d8:92:6f: a1:27:c8:16 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDlD MzRCOEFDQTYyMEY2MjhDN0ExRTY4MjE0NDBFRUU2ODBFNENEODAeFw0yNTA4MjMy MTE2MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFDQkE3REVDQkU2NEQ2 Q0I5QzVDMjYzOEVDRkI5NjdDMUVBNEZDOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGTFqGt2k74tFbAHr9WrKEjNo0XI1rOPb2WtM5DY+4fwd7FZQU O7PMg/3MxdbOh53xYHeWBTN+xFXFtMCDqWRNQuYBDuj7+JqXrV4GWgdKsGtgDku+ f+gDD2haHelE+L1JTeo26E13xXo9vNKkoNBgAWFel4dJ39txOgwq4rmNjXxzr/Yz /L6d9l/wGe+KLg45LXSknSOytlDwlBj64tOWZ9A/hI5ULFUUg8mc/R6+Hod8/llW 3gRRFTiuijdryrXaOT/8uqDokdOjDRlynhJRmDHJxLBULMRsz2qql8WyOaNtuyty VuSIvH+PzeWVFFzUPupLWy0QXeIbsAxhvOsrAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQUHLp97L5k1sucXCY47PuWfB6k/I4wHwYDVR0jBBgwFoAUCcNLispiD2KMeh5o IUQO7mgOTNgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU5OT0xV WC9DY05MaXNwaUQyS01laDVvSVVRTzdtZ09UTmcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0NjTkxpc3BpRDJLTWVoNW9JVVFPN21nT1ROZy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lOTk9MVVgvQ2NOTGlzcGlEMktNZWg1 b0lVUU83bWdPVE5nLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB ADeeacZXZpreK3BQ0+NNgM0xVtyRmL7jMv77cchMuMJt1LmpxskoOgNXvn2DarBb b3cVWfesdpOnbRKL047gtlUBy8gKbN/9aZJ4dKEPExVIMJXV3NfEDPXKgprEI4Z+ R+sR5cONbz2SpLqvIMbwc/yK1Sc0LW/DhkpCX5zoaGNGYfsqZXTt/Faf97+ktH8G PsnLFvqdxSDn0KhMRi/5jTT1v1g7VBwz3lHJDTrd364s7hJ4RfmUFRX461YW6b/7 Q1sheoOsWC2lRAZP0htmgbhwKLHRWefF1KwA1aDkqtpT7IDIxUScloOZSdrLHN9d Ohyig6XnVTHHbdiSb6EnyBY= -----END CERTIFICATE-----Generated at Sun Aug 24 01:26:38 2025 by rpki-client