$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json) Hash identifier: AVK89I7QXDCdAlonEFpBnBE6y/Kn1WVEc5kqKoGwlDQ= Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0D64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft Manifest number: 0D37 Signing time: Sat 17 May 2025 21:22:33 +0000 Manifest this update: Sat 17 May 2025 21:22:33 +0000 Manifest next update: Mon 19 May 2025 21:22:33 +0000 Files and hashes: 1: 3Kf3vQjh77j-rovWseazIe2p3N0.roa (hash: 07kUCJaDVepBYELuXGf6572F1XUmEmaBDfv569uoqAE=) 2: 9F3wUx7xk_uyyBAckXeo8GtKBCg.roa (hash: Inb/cjQwutVg2dLsNevaryukIUxJX4sS3o22vwCOT7w=) 3: NBMitYmQhIh2rnquqkNjJdTprQA.roa (hash: 9ElOZUZFrBnQxctX56S3T+EwMNiefRafQOIg0vsLUxo=) 4: cmBNJBmOkVoPRxVqC932eEk8U4U.roa (hash: KtkGafBeLiSh3QNd4wYz+hrNvhwahgzQlmZ3K7/RZJg=) 5: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: u9xt0Vu52Vx3lOkjFWwBsRwy/9eys3bRexlxxp38GWM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: May 17 21:22:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f: 1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98: 8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80: 52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80: c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef: d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61: ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad: ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38: 04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13: b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f: 70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9: d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3: f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef: 84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7: 8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb: 26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd: 15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:67:52:75:22:fb:7b:da:d6:c1:ba:52:86:97:df:a2:27:74: b7:75:07:ea:e5:80:36:b4:59:e7:9b:7b:58:e7:04:9e:12:4a: 66:ba:40:e9:fd:90:4d:b7:f7:49:83:fa:0e:3d:d0:c3:42:f8: 00:9d:e0:1d:3f:ba:e0:9a:ab:97:ca:b9:a9:95:d2:05:17:5a: f1:a9:2a:92:4e:0f:fa:7d:14:a4:80:36:cd:66:99:aa:46:28: 47:e0:d5:47:38:9b:5e:d3:b8:d9:c3:5a:26:0a:ca:e9:84:7a: b7:ac:3f:2d:12:f1:95:8a:40:c0:f8:50:2b:d0:a9:12:3b:a5: a1:00:7e:71:5f:01:ff:ce:9e:1d:f2:c7:56:d1:05:8e:6e:a6: 40:92:5b:29:68:1d:54:a8:37:92:85:a4:a8:f3:49:34:fc:8c: 9f:af:56:68:2e:70:a2:af:07:e2:77:db:d7:2d:00:93:a6:6f: bc:85:6b:6c:b3:4e:a7:3d:fa:70:12:a0:cd:09:54:54:2a:80: ee:17:2b:8d:79:de:f2:b1:a2:fd:0b:dd:9b:9c:f3:a0:bb:0d: 6c:db:e5:fc:0a:28:d0:21:2c:2a:b2:10:b2:d7:5b:a0:1e:8f: 8a:f8:ce:7b:4a:59:9d:68:22:2a:af:e6:0e:c2:58:bb:dd:89: a1:05:34:f3 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTA1MTcy MTIyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxQ0Y1OEUzOTBFRjNB RjI2NDY0RTk3MzRFNkM5MjIzNEZEQUE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY6spYKDJStMrDaYgKbx66YVfb9posXOCOqH8pmI3zo+OAi/ox evCJKIQqgFIah63buZ5hmytgyhungMle2YxzWDe+Uf/x7f0R79F99SqH/uRC5Nvi jP1+Ye3wg8nWp7ssjueNEXS6reqPFUOR5Y/T83teT2TcOAQbKMWf4s/yLe+d5D92 E7JSIcQRr3y2Q5YWFfj+T3BEAgP23E/HfJG3RGNzqdYIGP9kZds8vjKMWpEa0/aI RVUX4eisfehM6PFO74Q48s/g7YFg7HcXPGK554rmOOr2QEWGilAOo4TPyybaxTS5 TQ0oxCwRyHauvRVSs401Rcomh3NBzxcvfbf7AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUAc9Y45DvOvJkZOlzTmySI0/apoMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9nd3ZFUVFGaXBZME5z WDRLTlJWUi03UFhVYUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtWdSdSL7e9rWwbpShpffoid0t3UH6uWANrRZ55t7WOcEnhJKZrpA6f2QTbf3 SYP6Dj3Qw0L4AJ3gHT+64Jqrl8q5qZXSBRda8akqkk4P+n0UpIA2zWaZqkYoR+DV RzibXtO42cNaJgrK6YR6t6w/LRLxlYpAwPhQK9CpEjuloQB+cV8B/86eHfLHVtEF jm6mQJJbKWgdVKg3koWkqPNJNPyMn69WaC5woq8H4nfb1y0Ak6ZvvIVrbLNOpz36 cBKgzQlUVCqA7hcrjXne8rGi/Qvdm5zzoLsNbNvl/Aoo0CEsKrIQstdboB6PivjO e0pZnWgiKq/mDsJYu92JoQU08w== -----END CERTIFICATE-----Generated at Mon May 19 02:44:35 2025 by rpki-client