$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft File: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft (raw, json) Hash identifier: 2VYnAZ9Ii2qL3kUt/LktmGqK/bVqLkvwPon3r/VPOfg= Subject key identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 Authority key identifier: F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 Certificate issuer: /CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Certificate serial: 015A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft Manifest number: 0157 Signing time: Mon 20 Oct 2025 11:55:24 +0000 Manifest this update: Mon 20 Oct 2025 11:55:24 +0000 Manifest next update: Mon 20 Oct 2025 17:55:24 +0000 Files and hashes: 1: 2bTqYrZys3Fogts7Fv5vjncOvIc.roa (hash: qnYX1Y1VBdTSxMV61i74UZEIUai9LUqwtA41ObRO5LM=) 2: 8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl (hash: JUIbS04p2IYqY9+h9HWi+hEC81nwgEFWiKtNFGkMwKs=) 3: tLu-I9oq1RRSJ0vvoLhlsRiRwLs.roa (hash: C+hnYv/6wK9mkig8dcNgI/gFIC1w51hQFxp7v/QJxMA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F020EAF6D24B74EEA54A844F70234DCA255A6BC1 Validity Not Before: Oct 20 11:55:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=583A5A22C9FACAD6184308263A5D344A96CDDF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:63:95:81:da:10:f6:38:47:1c:3b:70:8a: 99:0b:e1:4e:f5:5b:fa:27:d7:d5:ec:db:db:2c:f9: fd:59:5e:29:01:be:ba:ec:60:b4:b3:bd:f3:60:a8: 54:a0:6f:10:1e:46:fc:2b:50:97:d0:83:85:99:e5: d8:69:df:65:fc:20:af:a1:aa:c0:59:c7:8a:41:d4: a8:e2:d1:0e:4e:23:32:ac:a7:77:58:f0:30:90:e3: f4:2e:99:0d:8b:e8:24:ae:3a:c8:5f:1d:13:72:03: 3e:30:58:f4:fa:cb:90:19:a4:a2:08:df:b5:f5:5d: f9:9d:9e:91:fd:5b:84:fe:d4:65:7d:12:f2:03:bc: 0d:2a:7e:1b:6e:40:eb:88:2b:06:79:f5:8f:ab:4e: 51:f4:cd:38:25:c9:c0:22:33:2a:2f:ee:cf:b7:50: 25:af:ad:dd:fc:08:c5:49:95:47:7a:56:4a:44:78: 4b:6b:df:7c:e3:d3:b1:36:d3:f0:6c:61:81:ae:85: b4:4d:59:73:de:49:1a:49:56:c5:59:fe:9e:7f:e8: b3:46:eb:91:51:ab:0f:0d:d6:bb:ff:9f:a1:f3:21: 91:d5:ec:c5:21:bd:a7:63:57:17:18:ed:70:ec:d2: bf:5a:78:5b:1b:fa:62:5d:fd:1a:84:3d:ea:2b:04: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:5A:22:C9:FA:CA:D6:18:43:08:26:3A:5D:34:4A:96:CD:DF:66 X509v3 Authority Key Identifier: keyid:F0:20:EA:F6:D2:4B:74:EE:A5:4A:84:4F:70:23:4D:CA:25:5A:6B:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8CDq9tJLdO6lSoRPcCNNyiVaa8E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PPTECH/8CDq9tJLdO6lSoRPcCNNyiVaa8E.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a0:cf:8d:44:8d:9c:63:bb:bd:79:07:01:60:6b:63:4f:52: 77:6c:1a:17:da:36:a5:42:56:95:e9:d5:11:bd:6c:b0:f7:f7: d8:49:db:d6:78:b3:b3:29:c7:40:62:5a:c9:ef:38:a9:e3:f7: 91:8a:cf:c3:de:5a:a6:bd:0d:ae:aa:47:b6:9c:78:1e:3e:c7: e0:26:8f:47:fc:e4:5f:36:97:7e:0b:ba:b8:9c:8c:27:1f:8f: a5:83:4b:90:2c:63:67:ac:4c:17:82:fc:9c:7d:fe:27:de:9c: c0:8b:42:30:76:cb:43:11:87:55:da:e1:30:1b:9c:95:d9:dc: c0:d0:59:f8:f2:0f:45:73:75:e0:65:1d:98:a5:4b:6a:b2:7a: 2a:52:90:76:55:da:50:99:20:3d:64:a6:4b:cf:47:b6:96:7c: 7d:ce:7e:5c:02:dc:aa:b3:71:4f:c0:6f:27:99:69:43:1c:e2: 80:47:d0:c2:db:2d:75:14:b4:4a:4a:d6:df:4e:64:36:86:a1: fb:eb:a1:b7:41:34:9a:ba:48:03:66:c8:67:96:00:e3:6e:11: 7c:80:7e:34:d3:9c:ff:72:8e:57:2a:2b:06:41:4a:62:45:07: a5:58:63:0f:22:29:d3:9c:f6:3f:eb:98:31:9b:37:c3:9d:44: 22:f6:10:b7 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjAy MEVBRjZEMjRCNzRFRUE1NEE4NDRGNzAyMzREQ0EyNTVBNkJDMTAeFw0yNTEwMjAx MTU1MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU4M0E1QTIyQzlGQUNB RDYxODQzMDgyNjNBNUQzNDRBOTZDRERGNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9imOVgdoQ9jhHHDtwipkL4U71W/on19Xs29ss+f1ZXikBvrrs YLSzvfNgqFSgbxAeRvwrUJfQg4WZ5dhp32X8IK+hqsBZx4pB1Kji0Q5OIzKsp3dY 8DCQ4/QumQ2L6CSuOshfHRNyAz4wWPT6y5AZpKII37X1XfmdnpH9W4T+1GV9EvID vA0qfhtuQOuIKwZ59Y+rTlH0zTglycAiMyov7s+3UCWvrd38CMVJlUd6VkpEeEtr 33zj07E20/BsYYGuhbRNWXPeSRpJVsVZ/p5/6LNG65FRqw8N1rv/n6HzIZHV7MUh vadjVxcY7XDs0r9aeFsb+mJd/RqEPeorBIjjAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUWDpaIsn6ytYYQwgmOl00SpbN32YwHwYDVR0jBBgwFoAU8CDq9tJLdO6lSoRP cCNNyiVaa8EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNI LzhDRHE5dEpMZE82bFNvUlBjQ05OeWlWYWE4RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvOENEcTl0SkxkTzZsU29SUGNDTk55aVZhYThFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFBURUNILzhDRHE5dEpMZE82bFNvUlBj Q05OeWlWYWE4RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBU oM+NRI2cY7u9eQcBYGtjT1J3bBoX2jalQlaV6dURvWyw9/fYSdvWeLOzKcdAYlrJ 7zip4/eRis/D3lqmvQ2uqke2nHgePsfgJo9H/ORfNpd+C7q4nIwnH4+lg0uQLGNn rEwXgvycff4n3pzAi0IwdstDEYdV2uEwG5yV2dzA0Fn48g9Fc3XgZR2YpUtqsnoq UpB2VdpQmSA9ZKZLz0e2lnx9zn5cAtyqs3FPwG8nmWlDHOKAR9DC2y11FLRKStbf TmQ2hqH766G3QTSaukgDZshnlgDjbhF8gH4005z/co5XKisGQUpiRQelWGMPIinT nPY/65gxmzfDnUQi9hC3 -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:28 2025 by rpki-client