$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft File: -fSkcv-ge6EOQvfO5h8gWsoWX24.mft (raw, json) Hash identifier: BKmLzecFg3wK3D9qEftBJQewIwUsVxrFvzUcqM3zTpA= Subject key identifier: CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36 Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E Certificate issuer: /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E Certificate serial: 01CF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft Manifest number: 01CE Signing time: Sun 24 Aug 2025 06:42:59 +0000 Manifest this update: Sun 24 Aug 2025 06:42:59 +0000 Manifest next update: Sun 24 Aug 2025 12:42:59 +0000 Files and hashes: 1: -fSkcv-ge6EOQvfO5h8gWsoWX24.crl (hash: pZy0d+qjImghpzEwqOSIXTP8YYUekqST5ro09gGQfqQ=) 2: yXq5oQ7nFJQ5yALQG6FpwcUDWa4.roa (hash: 55pFUzL+IWkCC6IyhkEW284iG2JYr0CF/WpUMLF3piM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E Validity Not Before: Aug 24 06:42:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CAAA6B3B5069218C57DC9251EDA2899A09B8C636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:a0:df:52:48:d7:64:10:9e:19:95:99:5e: 02:28:1a:b0:ea:60:22:10:07:c1:83:43:16:ac:ac: 40:13:43:65:15:93:02:f5:fc:76:d2:1e:f9:98:bf: af:98:cc:c2:22:34:8f:bf:74:70:ff:95:a6:9b:da: b4:4c:40:df:7e:a7:58:2a:06:96:d3:5b:6e:8b:8f: d8:d7:45:04:68:68:68:73:c0:eb:18:10:93:69:ed: bd:7b:e7:61:dc:a0:11:df:9a:66:bc:5e:bc:cc:f9: d2:bc:c7:bf:84:99:14:59:a4:02:86:0d:a4:dd:73: 63:ea:df:a4:9a:23:1a:98:5e:1c:5c:79:96:3d:f1: bb:97:fd:0f:c6:d2:04:19:5f:a4:c2:4c:6c:d6:0c: 21:e1:61:ae:a9:33:91:15:28:07:36:9f:8a:18:c8: 01:eb:4c:3c:56:36:ef:1b:1c:6c:19:36:db:81:02: 89:79:ba:09:11:a3:2c:c8:94:57:c5:45:87:1c:e3: ff:7b:6b:46:73:64:ab:c1:a2:86:ab:5b:2d:2d:ca: 3c:56:31:7f:ad:62:e0:64:66:e3:e8:f5:1e:16:cd: f1:66:9a:cb:76:2d:a0:a2:ff:7b:a8:39:db:fd:38: 96:99:18:2b:7b:ef:a8:20:d4:f4:0f:dd:42:6e:4a: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:6B:3B:50:69:21:8C:57:DC:92:51:ED:A2:89:9A:09:B8:C6:36 X509v3 Authority Key Identifier: keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:55:a7:eb:51:b8:44:95:d6:8d:92:d9:5d:d4:0f:39:70:cc: b0:d9:0d:14:2f:96:6c:4d:f0:90:e2:91:80:f9:9b:5a:23:7f: 11:2f:4f:9b:63:46:d2:fb:5c:94:5c:29:87:7d:a1:0f:71:42: 0d:7e:42:79:87:1e:3f:13:fc:24:3b:47:03:59:c1:f7:0c:38: 2f:5a:48:07:fe:47:d2:f4:8f:bb:9c:f4:85:8f:ae:b7:72:15: ba:06:59:ce:70:cc:87:fd:4a:ec:d0:f1:c4:57:91:b2:0d:c8: b7:18:d8:61:b7:a9:5e:43:03:97:69:4c:6e:fd:48:2e:1d:e2: 4c:64:c7:0f:60:c4:64:5f:8b:80:b6:c6:09:4b:14:71:2d:61: cb:2e:29:3f:c2:6e:92:40:a0:ce:c6:6e:67:db:12:46:ff:19: c0:09:1e:10:a8:5d:4b:96:a4:f4:11:45:34:72:48:cd:ca:7c: be:c8:9d:f2:e7:90:86:5a:e8:93:b7:d6:d9:f6:8b:3a:a4:64: 3c:90:10:03:1e:dd:d0:2c:b8:cb:67:60:a8:12:a9:0e:1a:09: 1c:ea:6e:a0:9f:4c:18:8f:c7:ed:7a:53:08:e0:a1:0a:24:4e: 2e:cb:e7:ca:93:87:f3:a1:54:19:9c:fb:7f:fd:b8:27:10:e8: c0:35:6d:07 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlG NEE0NzJGRkEwN0JBMTBFNDJGN0NFRTYxRjIwNUFDQTE2NUY2RTAeFw0yNTA4MjQw NjQyNTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBQUE2QjNCNTA2OTIx OEM1N0RDOTI1MUVEQTI4OTlBMDlCOEM2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDafKDfUkjXZBCeGZWZXgIoGrDqYCIQB8GDQxasrEATQ2UVkwL1 /HbSHvmYv6+YzMIiNI+/dHD/laab2rRMQN9+p1gqBpbTW26Lj9jXRQRoaGhzwOsY EJNp7b1752HcoBHfmma8XrzM+dK8x7+EmRRZpAKGDaTdc2Pq36SaIxqYXhxceZY9 8buX/Q/G0gQZX6TCTGzWDCHhYa6pM5EVKAc2n4oYyAHrTDxWNu8bHGwZNtuBAol5 ugkRoyzIlFfFRYcc4/97a0ZzZKvBooarWy0tyjxWMX+tYuBkZuPo9R4WzfFmmst2 LaCi/3uoOdv9OJaZGCt776gg1PQP3UJuSoNbAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUyqprO1BpIYxX3JJR7aKJmgm4xjYwHwYDVR0jBBgwFoAU+fSkcv+ge6EOQvfO 5h8gWsoWX24wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkVST09O RUlORi8tZlNrY3YtZ2U2RU9RdmZPNWg4Z1dzb1dYMjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBLy1mU2tjdi1nZTZFT1F2Zk81aDhnV3NvV1gyNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1pFUk9PTkVJTkYvLWZTa2N2LWdl NkVPUXZmTzVoOGdXc29XWDI0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEVVp+tRuESV1o2S2V3UDzlwzLDZDRQvlmxN8JDikYD5m1ojfxEvT5tj RtL7XJRcKYd9oQ9xQg1+QnmHHj8T/CQ7RwNZwfcMOC9aSAf+R9L0j7uc9IWPrrdy FboGWc5wzIf9SuzQ8cRXkbINyLcY2GG3qV5DA5dpTG79SC4d4kxkxw9gxGRfi4C2 xglLFHEtYcsuKT/CbpJAoM7GbmfbEkb/GcAJHhCoXUuWpPQRRTRySM3KfL7InfLn kIZa6JO31tn2izqkZDyQEAMe3dAsuMtnYKgSqQ4aCRzqbqCfTBiPx+16UwjgoQok Ti7L58qTh/OhVBmc+3/9uCcQ6MA1bQc= -----END CERTIFICATE-----Generated at Sun Aug 24 09:08:11 2025 by rpki-client