$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft File: -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json) Hash identifier: vbYTldhqHeJRcM/KaWsCs4SOENPZsBBgr2xzj/adcVQ= Subject key identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D Certificate issuer: /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Certificate serial: 065F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft Manifest number: 0659 Signing time: Fri 27 Mar 2026 08:29:43 +0000 Manifest this update: Fri 27 Mar 2026 08:29:43 +0000 Manifest next update: Fri 27 Mar 2026 14:29:43 +0000 Files and hashes: 1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: mF2Y2bQGZyIfaIpPYi6bnBz/XZ0I7w6dp3e/l9ZUFCE=) 2: 9bdvzNtxJroURAqmtnTtMDcywaw.roa (hash: aiDh8liXCefG1qZ5Rw/TnoadqG7H49y4w8Ut6v6hkAg=) 3: iJmEFfKdLJK9WTWJ3M2zsQL3Ol0.roa (hash: XuGTMc06Lntg/W9vuNwEDfkrn+dDnciDr2hiT6DG3DU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D Validity Not Before: Mar 27 08:29:43 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69: 98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81: 2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d: d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7: 8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63: 3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58: ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43: 86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71: 32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69: 71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10: 3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82: e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c: 8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b: 6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa: 6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef: bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7: 04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee: b8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B X509v3 Authority Key Identifier: keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d7:62:bc:0b:22:c6:06:ad:82:ae:80:26:b8:02:ed:1e:14: ff:d2:98:10:bd:cd:03:18:91:d6:c4:96:d5:e6:8d:1b:59:6d: 8f:1b:db:1c:06:98:13:85:37:d5:db:a5:93:bd:84:00:ea:3d: dd:51:06:64:b2:48:50:1d:c2:81:0f:fa:23:cd:3a:4b:89:50: 06:d7:77:ec:7d:35:6d:31:a9:4b:87:0e:1c:aa:e2:63:d6:ac: 58:04:ec:cf:67:b7:2d:47:42:99:56:5b:b8:a7:32:22:2b:b3: f6:47:b4:56:7c:5c:25:f3:9e:14:93:4d:d2:2d:6e:13:9a:2e: 14:93:b7:1c:b8:6e:f7:2a:3c:a4:59:eb:9a:2e:8f:3d:02:2d: b5:a2:35:40:10:e2:5a:02:2c:5e:77:a4:93:63:8b:21:51:3a: 27:d5:d0:1c:3b:6b:bc:76:59:a1:be:13:98:c9:98:9d:66:37: fb:93:e5:56:e1:17:4a:a9:30:84:2c:3d:b3:cf:4c:92:a3:c3: 65:9b:79:6c:4e:e0:d5:36:c7:60:99:e4:b0:59:79:c2:e2:a1: ac:28:d3:1e:f7:72:f5:ab:04:d7:c7:63:0f:32:cd:e6:13:f3: 73:6c:f1:77:c5:17:15:12:02:ec:42:7a:9b:a9:f7:cf:52:94: d7:ca:67:3a -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlD NjJEQzE2QTMyNTk0MTU2NjQxNDJDOTI3OEM1RERDNEQ4Mjk5RDAeFw0yNjAzMjcw ODI5NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhFOEQzMzk5RjE3RUND NEZCMEVGRDM5MjlGNjQ4MjJGNUVERkVFM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFiG23+XRP3zdTPfOfaZjHCpOnOr8ee7OINs6ogSufav9ju2yZ xNnMerx7jdkNbMOYicA78aRbT/NY946x11U5Z2SiB9vgs+ToYzsXizsz4u6W/fbW 6WGGWMqCuRh8IfjwEvf7VZu+Q4ZLEHNBKyFqUYBUTmt9cTIj3LY/NLldBlrcd/gw aXHZqR4qresWb6I4CqUlED8kJw8Jc4aLMdzUFtYtguakhH9U/pAM1OBVe1FNDI8W 5rwCrTHTRaygL1DLm25aatKl9wbB8U0U7kHIqmxd32E+n6AdkifhkMlO77tVgbmI NYwnuomzFISi9wR1L7BccJxAQWc4XbdP7rj5AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUjo0zmfF+zE+w79OSn2SCL17f7jswHwYDVR0jBBgwFoAU+cYtwWoyWUFWZBQs knjF3cTYKZ0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlP Ly1jWXR3V295V1VGV1pCUXNrbmpGM2NUWUtaMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLWNZdHdXb3lXVUZXWkJRc2tuakYzY1RZS1owLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVVdBWUlPLy1jWXR3V295V1VGV1pCUXNr bmpGM2NUWUtaMC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBu 12K8CyLGBq2CroAmuALtHhT/0pgQvc0DGJHWxJbV5o0bWW2PG9scBpgThTfV26WT vYQA6j3dUQZkskhQHcKBD/ojzTpLiVAG13fsfTVtMalLhw4cquJj1qxYBOzPZ7ct R0KZVlu4pzIiK7P2R7RWfFwl854Uk03SLW4Tmi4Uk7ccuG73KjykWeuaLo89Ai21 ojVAEOJaAixed6STY4shUTon1dAcO2u8dlmhvhOYyZidZjf7k+VW4RdKqTCELD2z z0ySo8Nlm3lsTuDVNsdgmeSwWXnC4qGsKNMe93L1qwTXx2MPMs3mE/NzbPF3xRcV EgLsQnqbqffPUpTXymc6 -----END CERTIFICATE-----Generated at Fri Mar 27 12:42:29 2026 by rpki-client