$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json) Hash identifier: 8K+hDvEYGHmBT1BHy3XkXstViu3ZdoRQHVBdIpRrtCQ= Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0E39 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft Manifest number: 0E08 Signing time: Thu 26 Mar 2026 11:28:18 +0000 Manifest this update: Thu 26 Mar 2026 11:28:18 +0000 Manifest next update: Sat 28 Mar 2026 11:28:18 +0000 Files and hashes: 1: HRMAxRXK5pKcPb7PHO24g9nrhrg.roa (hash: V+4ZHFaGAWIdxHvkzBaLqJ1SvTIiYhyUkTdY7kPLyBw=) 2: UIMTQHmFmo88PzEoISDo_JVpdaQ.roa (hash: 6I5G4AMaTT88cxkwmm4Q54jpCJ74DMEcBLsESCz8zjY=) 3: _tWnmt3FWhBCn49-axqjUNG3LS4.roa (hash: AFFJi6IPS4yoS8axncJqMKcky+ClNeoIqct83uaoQ/E=) 4: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: fa4uiUMd+gWcwWdnw26HCrVF5P8Cem0tTe4wCni4a/8=) 5: u8rl2w7io81gZokrxbLmwdcC8fM.roa (hash: DXx2GWjISM27LVGjEZGhahbsJeVpFkvDCkpLIPcYosg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 23:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Mar 26 11:28:18 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f: 1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98: 8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80: 52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80: c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef: d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61: ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad: ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38: 04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13: b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f: 70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9: d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3: f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef: 84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7: 8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb: 26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd: 15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:41:00:d3:fd:fa:5e:c5:a8:62:ef:9b:a6:9d:9d:c5:ff:d9: 0a:a0:a1:c1:8e:5e:04:3f:a2:e4:6c:24:e4:6a:01:c8:29:cd: c2:e2:b4:90:34:8c:5b:48:fc:ea:3a:6c:d0:22:21:07:6c:8b: c5:43:86:13:1e:5c:0b:ac:11:da:f4:c5:0e:2b:5b:32:fe:4a: a3:af:33:d2:70:50:16:1c:b3:11:8f:fb:a9:da:bd:82:57:c4: dc:5f:37:ae:bd:bb:8d:53:41:2b:dc:cc:a9:21:9d:fd:4e:2c: e0:04:3d:fc:20:79:ba:3a:b2:1c:18:83:ae:f4:bf:1f:a1:08: 7c:9c:36:2c:bf:2b:d6:ef:8d:2e:a2:b1:b2:7a:05:91:90:45: 2e:5c:5d:a8:41:6f:61:36:18:14:5e:5e:bb:80:b1:1b:fb:c7: b3:b9:71:4e:1e:15:43:03:fc:b4:6c:c7:b8:8b:ba:23:ae:6a: 27:35:d0:d5:5c:a7:ff:ef:57:76:0f:5e:da:80:cb:58:9c:fd: e5:be:48:05:c2:80:bb:21:ff:ef:90:90:70:0c:88:13:3b:be: 83:2d:34:6c:39:cb:57:31:93:54:50:c4:6d:80:42:f5:07:16: 63:54:27:02:3c:45:a4:68:0c:53:3d:87:6d:f1:77:08:b6:dd: af:75:4d:b9 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNjAzMjYx MTI4MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDAxQ0Y1OEUzOTBFRjNB RjI2NDY0RTk3MzRFNkM5MjIzNEZEQUE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY6spYKDJStMrDaYgKbx66YVfb9posXOCOqH8pmI3zo+OAi/ox evCJKIQqgFIah63buZ5hmytgyhungMle2YxzWDe+Uf/x7f0R79F99SqH/uRC5Nvi jP1+Ye3wg8nWp7ssjueNEXS6reqPFUOR5Y/T83teT2TcOAQbKMWf4s/yLe+d5D92 E7JSIcQRr3y2Q5YWFfj+T3BEAgP23E/HfJG3RGNzqdYIGP9kZds8vjKMWpEa0/aI RVUX4eisfehM6PFO74Q48s/g7YFg7HcXPGK554rmOOr2QEWGilAOo4TPyybaxTS5 TQ0oxCwRyHauvRVSs401Rcomh3NBzxcvfbf7AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUAc9Y45DvOvJkZOlzTmySI0/apoMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9nd3ZFUVFGaXBZME5z WDRLTlJWUi03UFhVYUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAkEA0/36XsWoYu+bpp2dxf/ZCqChwY5eBD+i5Gwk5GoByCnNwuK0kDSMW0j8 6jps0CIhB2yLxUOGEx5cC6wR2vTFDitbMv5Ko68z0nBQFhyzEY/7qdq9glfE3F83 rr27jVNBK9zMqSGd/U4s4AQ9/CB5ujqyHBiDrvS/H6EIfJw2LL8r1u+NLqKxsnoF kZBFLlxdqEFvYTYYFF5eu4CxG/vHs7lxTh4VQwP8tGzHuIu6I65qJzXQ1Vyn/+9X dg9e2oDLWJz95b5IBcKAuyH/75CQcAyIEzu+gy00bDnLVzGTVFDEbYBC9QcWY1Qn AjxFpGgMUz2HbfF3CLbdr3VNuQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:22:06 2026 by rpki-client