$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft File: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json) Hash identifier: m2+E7EYCk7yJ8wXCUFXDY+GfElcE176V0XX5VHY+eIk= Subject key identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Certificate serial: 10C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft Manifest number: 10B7 Signing time: Sun 19 Oct 2025 21:24:38 +0000 Manifest this update: Sun 19 Oct 2025 21:24:38 +0000 Manifest next update: Tue 21 Oct 2025 21:24:38 +0000 Files and hashes: 1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: P1TSXG1OqVPH1UcYz7u28bPB3aqq5K8bsoLtUDmA6P0=) 2: ZVzBBYg3OsXc6aK0aFjdxN7EuUE.roa (hash: LKn7uI6AgBpHG4K40L0bjJxIVTlLba08ez5ruWOAl7Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4289 (0x10c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Validity Not Before: Oct 19 21:24:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87: 39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec: c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b: ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f: fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92: 13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74: 15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1: 9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55: ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a: 92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68: 82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0: 99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e: 39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3: c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf: 02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29: 08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f: 80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A X509v3 Authority Key Identifier: keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:82:f5:5f:fc:c9:a7:ce:29:90:b1:84:d5:0d:f5:10:fe:36: f2:93:87:bd:b5:65:13:25:9c:79:a0:9e:03:59:6a:89:52:17: 85:60:6a:13:59:3b:f0:0f:58:06:29:5e:bb:33:a2:86:fc:8c: 50:c6:9d:e9:57:61:29:53:95:4b:65:f4:49:5d:fd:3a:c0:1b: 49:1e:ba:97:e1:f4:96:fc:f6:88:b3:8e:f3:37:2f:d0:84:c5: 3c:47:04:ce:e4:72:5c:95:ed:a0:fc:7b:b8:ad:d2:2d:21:62: f4:0f:ca:3a:ba:d8:90:80:04:64:f0:73:da:a4:47:ef:25:6d: fe:6d:29:49:47:dd:c0:48:90:c9:af:7e:8c:da:22:8e:cc:1b: 2b:65:04:b4:56:d0:8b:6a:5c:e3:df:d4:b6:6c:25:4a:7c:d5: da:5b:1a:7a:4b:db:4f:a9:9d:c2:72:65:e9:be:7d:43:91:85: a4:0a:38:f1:e7:f5:a2:2e:32:aa:bf:ab:da:6e:d4:07:f9:1c: 80:fa:2f:dd:3b:22:46:87:1b:6e:21:37:92:88:3c:4c:33:0d: 07:f2:0e:a5:4c:55:43:ab:75:8b:7d:e3:27:68:b1:ef:0c:8a: 8f:fc:be:9d:55:17:27:ff:28:8e:03:ad:07:3c:db:4d:c1:45: 7c:a3:6b:7a -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICEMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2 MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNTEwMTky MTI0MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJERjVFNzRDMzI1RDRF NTM3MjA1NkNBMEVBNzMyMzhFRjQ3NDFEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4JDoSqHKDOkFjFRFShzl4xs1euKJTsxXHe8xp7MhoYGoin6uj G2blLdNdS8oRnlEN53vPCSefel3WT/2VO3QvzHg9hjYdn45nkhPURgNWAFMqUVkB p+XJdBXMOT/qvij/4qLDtsgEoZvsHwFxmSMraa+BrbWhVaz7K+Dk/cIxgG4cBBt6 epKBurnYY71fGhofgXQMaIJINkWlx4BGjnxsCGGcwJm47cLBIiz2Ox9kyDDVbjna tWXyrZ/6Ke+9b1xR88XmIAb0EiZH+PmIb6VmvwKP9Sxw5KlKz11wDpLNKQiQNUoA IYELidhTa6slf4CXxVcv7LiGLJQX7wqEbhDfAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUvfXnTDJdTlNyBWyg6nMjjvR0HRowHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWjJMZ0NrX3Z6 ZGZ3VW5Qa0ZRSVl3Nm4tRXVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKC9V/8yafOKZCxhNUN9RD+NvKTh721ZRMlnHmgngNZaolSF4VgahNZ O/APWAYpXrszoob8jFDGnelXYSlTlUtl9Eld/TrAG0keupfh9Jb89oizjvM3L9CE xTxHBM7kclyV7aD8e7it0i0hYvQPyjq62JCABGTwc9qkR+8lbf5tKUlH3cBIkMmv fozaIo7MGytlBLRW0ItqXOPf1LZsJUp81dpbGnpL20+pncJyZem+fUORhaQKOPHn 9aIuMqq/q9pu1Af5HID6L907IkaHG24hN5KIPEwzDQfyDqVMVUOrdYt94ydose8M io/8vp1VFyf/KI4DrQc8203BRXyja3o= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:29 2025 by rpki-client