$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft File: P04GOIatNR_4IoBa-NVplEuN5Rc.mft (raw, json) Hash identifier: 3GIXiWGLwm8fBSvmFdhvLn6Pi5eJYJiKNyd56w8Zcqw= Subject key identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 Authority key identifier: 3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 Certificate issuer: /CN=3F4E063886AD351FF822805AF8D569944B8DE517 Certificate serial: 024B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft Manifest number: 0244 Signing time: Sat 17 May 2025 21:54:49 +0000 Manifest this update: Sat 17 May 2025 21:54:49 +0000 Manifest next update: Mon 19 May 2025 21:54:49 +0000 Files and hashes: 1: P04GOIatNR_4IoBa-NVplEuN5Rc.crl (hash: GEeBTM3IJp+sHPn2GmPWIonUQMuRLmFwOSU5s0ZUBCA=) 2: SxzQu2JcLCF_wo2o8Km5MoiyslU.roa (hash: vztj9hgO/acG0cD2AVDITUYys2TyVA9IF2IDeMQaDNs=) 3: X66ROOvcU3Tt17lyAN_Xbuwpfk4.roa (hash: fUTJRlvKCNq/1cka42QFBc8Vvj3ayCJQBcWw412diEk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F4E063886AD351FF822805AF8D569944B8DE517 Validity Not Before: May 17 21:54:49 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DDE10A410D30FDFE36576E1F8CA356BD6923E1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:93:d0:10:8a:73:44:e5:2d:d9:04:d8:ee: f5:2c:b7:28:7d:1a:3b:13:d4:11:6c:d0:32:40:48: c7:14:56:f8:4e:c6:27:9c:6f:70:33:1c:52:69:df: 65:b6:7c:f8:9c:22:c4:ca:56:16:d5:c3:76:89:ec: b7:04:39:0e:93:44:51:00:b9:8b:81:bf:be:6d:2b: 81:03:dc:99:35:99:85:c7:62:06:01:d2:3f:81:76: 0c:c3:fb:f0:c2:9f:f6:a2:0d:13:b3:a6:d9:8a:56: cb:45:6e:c1:8f:95:64:1d:ac:bb:be:dd:55:40:04: 95:7d:74:b3:76:cc:73:18:dc:06:e7:8e:dd:f1:bc: 25:fc:eb:73:85:bf:0b:80:7a:49:24:d3:a1:d8:37: ad:56:77:d0:bf:5f:1c:cb:f1:3b:b9:36:31:b6:d5: b8:0e:c1:79:ac:4b:49:53:5f:76:33:65:33:e1:9c: f5:89:0d:76:2b:24:f4:72:15:93:3c:6b:f5:56:2c: 34:05:93:d5:d4:e8:bc:57:b6:51:fe:3a:02:87:c0: 07:7b:ce:9b:17:36:30:46:57:95:22:13:ff:90:2b: 75:1e:f1:d9:3c:60:4c:f2:12:00:34:71:5e:17:cd: a6:e9:74:6f:85:84:c1:6d:35:2e:05:73:de:82:2e: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:0A:41:0D:30:FD:FE:36:57:6E:1F:8C:A3:56:BD:69:23:E1:F3 X509v3 Authority Key Identifier: keyid:3F:4E:06:38:86:AD:35:1F:F8:22:80:5A:F8:D5:69:94:4B:8D:E5:17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P04GOIatNR_4IoBa-NVplEuN5Rc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SECUNET/P04GOIatNR_4IoBa-NVplEuN5Rc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4a:46:a3:27:54:65:e0:8a:24:fd:ca:38:4c:24:7f:ec:b5: 8c:8e:28:88:84:ae:d5:f0:2a:b8:72:41:c0:46:6c:20:6f:ab: bc:73:9e:f4:93:b8:10:f4:f3:94:07:9c:c2:99:b8:df:7a:3f: 6f:38:10:1e:7b:0a:f1:af:bb:69:1c:23:bd:21:c1:e2:b4:ce: 60:c8:d9:d7:0d:77:16:01:59:d9:da:66:56:dc:50:95:ed:60: fd:a8:43:3d:74:ec:e2:9f:0a:16:94:79:08:ed:cb:ba:9e:63: f0:57:80:46:2a:be:b0:e7:b1:bd:28:dc:63:66:ba:93:1b:70: 86:bf:eb:59:80:09:83:8c:cc:57:0f:3d:51:00:3b:29:dd:ba: 67:00:ed:49:93:77:63:31:f5:5e:50:d0:8a:8c:78:bd:2d:63: 59:1a:02:50:54:a7:5d:4d:22:83:66:62:04:47:46:4c:a8:9a: 2c:78:0a:56:d4:01:44:8a:24:0a:61:22:ee:49:ed:0b:82:49: 96:73:13:23:a8:89:a3:93:4c:07:00:0c:d0:30:41:32:f7:ee: d1:ab:6f:44:fc:12:63:30:04:19:3b:d4:e4:89:cf:67:5f:ba: 0f:95:40:c5:f2:3c:17:9b:3d:82:48:46:e5:9c:28:1a:40:b5: 0d:d3:df:3f -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgICAkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y0 RTA2Mzg4NkFEMzUxRkY4MjI4MDVBRjhENTY5OTQ0QjhERTUxNzAeFw0yNTA1MTcy MTU0NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERERTEwQTQxMEQzMEZE RkUzNjU3NkUxRjhDQTM1NkJENjkyM0UxRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2fpPQEIpzROUt2QTY7vUstyh9GjsT1BFs0DJASMcUVvhOxiec b3AzHFJp32W2fPicIsTKVhbVw3aJ7LcEOQ6TRFEAuYuBv75tK4ED3Jk1mYXHYgYB 0j+BdgzD+/DCn/aiDROzptmKVstFbsGPlWQdrLu+3VVABJV9dLN2zHMY3Abnjt3x vCX863OFvwuAekkk06HYN61Wd9C/XxzL8Tu5NjG21bgOwXmsS0lTX3YzZTPhnPWJ DXYrJPRyFZM8a/VWLDQFk9XU6LxXtlH+OgKHwAd7zpsXNjBGV5UiE/+QK3Ue8dk8 YEzyEgA0cV4XzabpdG+FhMFtNS4Fc96CLguRAgMBAAGjggIJMIICBTAdBgNVHQ4E FgQU3eEKQQ0w/f42V24fjKNWvWkj4fMwHwYDVR0jBBgwFoAUP04GOIatNR/4IoBa +NVplEuN5RcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VDVU5F VC9QMDRHT0lhdE5SXzRJb0JhLU5WcGxFdU41UmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1AwNEdPSWF0TlJfNElvQmEtTlZwbEV1TjVSYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NFQ1VORVQvUDA0R09JYXROUl80SW9C YS1OVnBsRXVONVJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AAlKRqMnVGXgiiT9yjhMJH/stYyOKIiErtXwKrhyQcBGbCBvq7xznvSTuBD085QH nMKZuN96P284EB57CvGvu2kcI70hweK0zmDI2dcNdxYBWdnaZlbcUJXtYP2oQz10 7OKfChaUeQjty7qeY/BXgEYqvrDnsb0o3GNmupMbcIa/61mACYOMzFcPPVEAOynd umcA7UmTd2Mx9V5Q0IqMeL0tY1kaAlBUp11NIoNmYgRHRkyomix4ClbUAUSKJAph Iu5J7QuCSZZzEyOoiaOTTAcADNAwQTL37tGrb0T8EmMwBBk71OSJz2dfug+VQMXy PBebPYJIRuWcKBpAtQ3T3z8= -----END CERTIFICATE-----Generated at Mon May 19 01:36:32 2025 by rpki-client