$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft File: S0bOj4AxurdTZNpb2YHoiFBPtBE.mft (raw, json) Hash identifier: VyRPey6JtTwflbbNDq1GldIZLEXvTZGTFa/ch8W3PYA= Subject key identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 Authority key identifier: 4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 Certificate issuer: /CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Certificate serial: 0364 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft Manifest number: 035E Signing time: Thu 03 Jul 2025 10:02:01 +0000 Manifest this update: Thu 03 Jul 2025 10:02:01 +0000 Manifest next update: Sat 05 Jul 2025 10:02:01 +0000 Files and hashes: 1: 0RiPsY5FYj3RHk7B_mS9wZ09mqE.roa (hash: ea8m34CBH0ZOqRWPKR7+MF7SGmP1lQ8LqYox08FFlfA=) 2: S0bOj4AxurdTZNpb2YHoiFBPtBE.crl (hash: tj1sTbHCdipiVN+NGV3Faz2r8haIf1XPPi/NIguLWXA=) 3: gvuqU97BQh8iwwrzBihAHZnbh0w.roa (hash: zjQUcdJH2EqejRdU27C+2gZzas7q3Yci19ATSpT17y8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B46CE8F8031BAB75364DA5BD981E888504FB411 Validity Not Before: Jul 3 10:02:01 2025 GMT Not After : Oct 8 15:30:28 2025 GMT Subject: CN=7D808F522FB8E9CA40671093E5880F17BE181866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:a1:14:ae:2d:4e:58:84:39:95:79:9b:95: dd:c8:e6:2b:a8:6d:4d:b1:42:88:6c:e1:4e:6b:c2: 68:b1:25:df:5b:e1:db:49:5b:42:0c:9c:3c:d7:34: 1d:2f:ba:2a:be:b1:c7:96:56:8d:45:3e:07:11:e4: 14:89:2f:d8:7e:c4:80:dd:4a:d3:c5:43:25:e1:cb: 5f:37:1c:61:b3:02:36:0f:3f:d8:81:0d:34:6d:e1: e1:c3:70:cc:6e:b8:57:7b:53:7f:d9:6a:0b:ee:19: ac:c2:81:b8:9f:e2:a9:85:9d:ad:ff:9d:9d:9b:4f: ab:8b:34:23:34:a1:8e:0a:ed:2a:ac:c0:0f:7b:58: e8:a2:02:b1:ed:01:81:ce:16:dc:ac:7e:fd:b6:90: ca:d8:b3:b0:8a:e5:07:b0:f2:23:15:9c:c0:2b:b4: a8:67:15:18:b4:d7:8c:86:6d:0d:b9:75:54:b0:99: 39:d2:83:c3:85:b2:a2:6b:f7:ef:71:42:b0:05:61: 11:b8:42:b1:7a:78:48:20:64:82:26:7d:bb:c4:3a: 91:62:54:1a:eb:c5:43:50:ba:cb:48:59:8c:0b:60: 54:3c:03:e4:d4:0d:4c:2a:27:29:ce:7c:06:6f:1e: e7:00:c6:ff:e3:34:fa:b8:81:f5:b3:20:50:e8:49: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:80:8F:52:2F:B8:E9:CA:40:67:10:93:E5:88:0F:17:BE:18:18:66 X509v3 Authority Key Identifier: keyid:4B:46:CE:8F:80:31:BA:B7:53:64:DA:5B:D9:81:E8:88:50:4F:B4:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/S0bOj4AxurdTZNpb2YHoiFBPtBE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/S0bOj4AxurdTZNpb2YHoiFBPtBE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:53:42:c5:22:97:ea:e5:6c:e3:ef:9a:0e:cf:59:b3:c0:8f: b2:e3:4d:e6:04:3c:51:45:2d:d5:0a:a2:45:94:d6:88:24:a0: 28:7b:17:c3:f9:b5:d0:48:cd:6c:cb:dc:00:d9:e9:10:99:54: 26:80:0d:53:18:bd:79:a3:ea:a1:3e:ad:86:15:5f:49:bf:19: 7f:fd:91:72:72:e5:a5:e1:ed:b0:af:7d:ae:1d:2f:10:f4:5b: 8e:3b:d8:95:65:73:03:a1:3c:37:14:b6:ad:78:07:8d:e1:26: ab:60:af:9c:d3:40:4f:b4:cc:d2:b5:9f:d4:d4:48:56:1f:4e: 23:23:7e:0c:0a:89:26:9a:5a:17:b3:8d:a7:e3:03:bc:ab:cd: f1:b6:8f:6b:a2:fe:af:a4:3d:00:20:0a:7a:b9:37:50:42:09: 7b:e3:fe:50:87:d2:ee:70:e7:28:75:b9:91:f8:ab:f4:7c:15: f0:29:92:88:45:17:ce:3c:8a:70:b9:3b:af:11:9c:27:1c:62: 52:a1:f8:13:a0:52:62:cb:67:67:f3:d8:b2:21:26:6e:24:c3: c9:c5:ea:13:3f:e5:37:6b:8b:00:46:7e:bb:32:49:c6:5d:e0: 9a:31:8b:46:20:80:2d:b6:4f:3d:39:c8:2d:01:9f:2f:d0:84: 85:b3:6c:e6 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEI0 NkNFOEY4MDMxQkFCNzUzNjREQTVCRDk4MUU4ODg1MDRGQjQxMTAeFw0yNTA3MDMx MDAyMDFaFw0yNTEwMDgxNTMwMjhaMDMxMTAvBgNVBAMTKDdEODA4RjUyMkZCOEU5 Q0E0MDY3MTA5M0U1ODgwRjE3QkUxODE4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC3aEUri1OWIQ5lXmbld3I5iuobU2xQohs4U5rwmixJd9b4dtJ W0IMnDzXNB0vuiq+sceWVo1FPgcR5BSJL9h+xIDdStPFQyXhy183HGGzAjYPP9iB DTRt4eHDcMxuuFd7U3/ZagvuGazCgbif4qmFna3/nZ2bT6uLNCM0oY4K7SqswA97 WOiiArHtAYHOFtysfv22kMrYs7CK5Qew8iMVnMArtKhnFRi014yGbQ25dVSwmTnS g8OFsqJr9+9xQrAFYRG4QrF6eEggZIImfbvEOpFiVBrrxUNQustIWYwLYFQ8A+TU DUwqJynOfAZvHucAxv/jNPq4gfWzIFDoSVDDAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUfYCPUi+46cpAZxCT5YgPF74YGGYwHwYDVR0jBBgwFoAUS0bOj4AxurdTZNpb 2YHoiFBPtBEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO X05PMS9TMGJPajRBeHVyZFRaTnBiMllIb2lGQlB0QkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1MwYk9qNEF4dXJkVFpOcGIyWUhvaUZCUHRCRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RBSVdBTl9OTzEvUzBiT2o0QXh1 cmRUWk5wYjJZSG9pRkJQdEJFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL9TQsUil+rlbOPvmg7PWbPAj7LjTeYEPFFFLdUKokWU1ogkoCh7F8P5 tdBIzWzL3ADZ6RCZVCaADVMYvXmj6qE+rYYVX0m/GX/9kXJy5aXh7bCvfa4dLxD0 W4472JVlcwOhPDcUtq14B43hJqtgr5zTQE+0zNK1n9TUSFYfTiMjfgwKiSaaWhez jafjA7yrzfG2j2ui/q+kPQAgCnq5N1BCCXvj/lCH0u5w5yh1uZH4q/R8FfApkohF F848inC5O68RnCccYlKh+BOgUmLLZ2fz2LIhJm4kw8nF6hM/5TdriwBGfrsyScZd 4Joxi0YggC22Tz05yC0Bny/QhIWzbOY= -----END CERTIFICATE-----Generated at Fri Jul 4 14:58:44 2025 by rpki-client