$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft File: e4JX_9x80ctBlhKc1ASTNSvIO7k.mft (raw, json) Hash identifier: xYwIfRaaErirCXiuHvyk5B/bqvXrepsyLBz+S7Hl43o= Subject key identifier: BF:F9:66:CC:34:DB:9F:8E:2C:AE:59:69:35:E3:1A:9A:DD:5D:70:87 Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 Certificate issuer: /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Certificate serial: 0451 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft Manifest number: 0443 Signing time: Fri 04 Jul 2025 22:03:25 +0000 Manifest this update: Fri 04 Jul 2025 22:03:25 +0000 Manifest next update: Sun 06 Jul 2025 22:03:25 +0000 Files and hashes: 1: CeMkpZ8HxNQGFu4bP1lsOxUY-_Q.roa (hash: jRkWDxakz+suU8WzElFrv1eo1YG7jwJCXNrbU8SO0zQ=) 2: Dh1Q-mCi6rVOEQacifIZfxW3g0w.roa (hash: gTD6usTiIP8l1Xlw+iXZdWMh/Dvh0Vy0TRM60Yq3MIU=) 3: e4JX_9x80ctBlhKc1ASTNSvIO7k.crl (hash: ARkwcSEYD2ClckGUTbt+KTsDjq+bpUvLLWsZa3VM37Y=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9 Validity Not Before: Jul 4 22:03:25 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BFF966CC34DB9F8E2CAE596935E31A9ADD5D7087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:80:b7:5b:78:9c:3e:48:9e:3c:ca:f7:cf: 66:5b:63:f0:47:3d:88:8b:c4:77:32:5d:70:85:b9: 9e:83:35:83:60:17:cb:96:8e:d5:ec:bb:dc:67:50: 42:9d:86:bf:b5:e1:10:0d:fe:1d:0e:12:ed:77:3d: d3:34:01:68:d0:fc:2a:0e:73:b6:d6:a1:80:72:2d: 89:a7:46:58:93:21:a8:dc:8d:8e:23:db:e2:cb:6c: 29:fe:f2:e5:22:a2:f6:f3:24:41:71:0b:51:34:28: 7f:08:8f:7b:02:7a:21:01:0d:ad:fa:01:3a:1d:5c: 74:1a:4f:9a:7b:63:07:20:a9:32:d7:4f:28:f5:fd: 10:80:80:62:d0:3a:85:66:2a:32:0d:22:f2:a2:64: 12:3b:10:52:d8:32:f8:18:8d:54:9f:1c:db:b3:39: 0d:0d:ae:7c:1f:06:06:4a:9c:d4:de:c5:12:74:0d: ed:01:2a:0f:49:a1:8d:10:5e:77:4f:8c:42:c8:83: db:5b:bb:86:09:ec:9a:72:6e:e0:49:c6:cd:30:1a: 9c:42:f0:3a:a3:d1:d1:cb:c9:53:3b:a4:39:3d:ba: 22:eb:b2:7f:ea:54:6b:08:51:d3:11:a3:3f:1e:1c: 28:f5:24:84:60:0a:55:7e:db:67:d3:01:6e:c1:37: 1f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:66:CC:34:DB:9F:8E:2C:AE:59:69:35:E3:1A:9A:DD:5D:70:87 X509v3 Authority Key Identifier: keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9b:37:84:5b:9f:1e:f7:5e:3d:a2:c6:5c:1c:75:37:dc:5b: 65:c5:6e:ca:ed:54:f9:10:1e:3d:b4:4f:3f:8e:89:ac:47:f9: e6:df:2f:47:55:34:db:ed:09:3e:e7:0e:0a:b4:3b:be:d3:3a: bf:46:29:76:e3:7b:50:ca:80:7b:61:52:68:9e:4b:46:2a:19: ad:66:c2:62:91:cd:b6:c6:51:83:49:a0:fd:ae:62:f6:c3:50: fb:18:39:18:a2:c3:51:7f:62:81:3a:ed:78:b1:c2:3f:19:ba: 76:f8:bf:e5:5e:8f:c5:ef:e3:bf:88:fe:f5:75:6d:a7:3f:b1: a7:99:5c:9a:c3:f3:e3:80:3c:10:67:df:71:2c:14:c3:21:70: b9:87:23:61:f2:09:71:39:39:4b:af:6d:86:a4:94:c8:11:af: da:4d:5c:ea:97:3d:be:bb:da:15:71:1d:ee:d8:b1:1f:99:55: 85:b5:fd:1b:cc:71:98:f2:b4:1f:40:45:a5:3e:ec:2e:69:8d: 66:c4:b9:09:49:1c:97:26:74:f9:aa:fb:1a:34:45:c1:a0:4f: 7a:06:62:53:bc:4f:4f:00:10:fd:cc:f4:d8:47:88:cf:ae:d8: 72:96:16:7f:29:bd:a6:53:c4:29:5a:f5:10:8e:96:04:8b:02: 20:93:80:ed -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0I4 MjU3RkZEQzdDRDFDQjQxOTYxMjlDRDQwNDkzMzUyQkM4M0JCOTAeFw0yNTA3MDQy MjAzMjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGRjk2NkNDMzREQjlG OEUyQ0FFNTk2OTM1RTMxQTlBREQ1RDcwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyF4C3W3icPkiePMr3z2ZbY/BHPYiLxHcyXXCFuZ6DNYNgF8uW jtXsu9xnUEKdhr+14RAN/h0OEu13PdM0AWjQ/CoOc7bWoYByLYmnRliTIajcjY4j 2+LLbCn+8uUiovbzJEFxC1E0KH8Ij3sCeiEBDa36ATodXHQaT5p7YwcgqTLXTyj1 /RCAgGLQOoVmKjINIvKiZBI7EFLYMvgYjVSfHNuzOQ0NrnwfBgZKnNTexRJ0De0B Kg9JoY0QXndPjELIg9tbu4YJ7JpybuBJxs0wGpxC8Dqj0dHLyVM7pDk9uiLrsn/q VGsIUdMRoz8eHCj1JIRgClV+22fTAW7BNx+PAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUv/lmzDTbn44srllpNeMamt1dcIcwHwYDVR0jBBgwFoAUe4JX/9x80ctBlhKc 1ASTNSvIO7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFSQU1J VEEvZTRKWF85eDgwY3RCbGhLYzFBU1ROU3ZJTzdrLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lNEpYXzl4ODBjdEJsaEtjMUFTVE5TdklPN2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQVJBTUlUQS9lNEpYXzl4ODBjdEJs aEtjMUFTVE5TdklPN2subWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKps3hFufHvdePaLGXBx1N9xbZcVuyu1U+RAePbRPP46JrEf55t8vR1U02+0J PucOCrQ7vtM6v0YpduN7UMqAe2FSaJ5LRioZrWbCYpHNtsZRg0mg/a5i9sNQ+xg5 GKLDUX9igTrteLHCPxm6dvi/5V6Pxe/jv4j+9XVtpz+xp5lcmsPz44A8EGffcSwU wyFwuYcjYfIJcTk5S69thqSUyBGv2k1c6pc9vrvaFXEd7tixH5lVhbX9G8xxmPK0 H0BFpT7sLmmNZsS5CUkclyZ0+ar7GjRFwaBPegZiU7xPTwAQ/cz02EeIz67YcpYW fym9plPEKVr1EI6WBIsCIJOA7Q== -----END CERTIFICATE-----Generated at Fri Jul 4 23:16:12 2025 by rpki-client