$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft File: lle2DWn8KCKE7gt1fS6_azqFWiA.mft (raw, json) Hash identifier: OFquFFcOCiy0ns8zhKtEBw/4563zZLKu5oPEAA9lBJg= Subject key identifier: BA:02:EB:AC:09:6F:4F:DC:3F:71:98:53:A6:1C:31:BE:E1:EF:DB:ED Authority key identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20 Certificate issuer: /CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20 Certificate serial: 21 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft Manifest number: 20 Signing time: Mon 20 Oct 2025 10:54:42 +0000 Manifest this update: Mon 20 Oct 2025 10:54:42 +0000 Manifest next update: Mon 20 Oct 2025 16:54:42 +0000 Files and hashes: 1: J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa (hash: K9uASHy/f7hYroRXCwiv67ugUzkSrVLCJa14XITQMSk=) 2: lle2DWn8KCKE7gt1fS6_azqFWiA.crl (hash: 1MjaEG5eVQ/0VA9fNr9otopiZBMoOb50xLtQi8cezFA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 16:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20 Validity Not Before: Oct 20 10:54:42 2025 GMT Not After : Oct 7 15:30:24 2026 GMT Subject: CN=BA02EBAC096F4FDC3F719853A61C31BEE1EFDBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:4a:9d:98:1f:cb:3f:c9:ff:c2:cb:4a:ee: b3:dd:de:93:39:5a:ee:82:f8:6c:40:3d:28:61:35: dd:51:11:7a:6f:71:ec:fb:29:9e:74:89:2a:13:5d: a1:32:fe:cd:01:7d:f6:0d:47:9a:c5:75:96:5d:12: 5b:43:46:ac:1e:f5:18:03:79:97:98:32:05:82:b9: 01:ff:45:f4:0f:90:f7:08:27:81:8e:03:f4:c3:46: 11:92:de:5f:e2:79:84:23:cf:38:94:01:91:c8:5a: c8:c0:fd:44:79:db:0a:08:c4:87:05:c8:d5:22:f9: 90:bd:9b:35:59:52:6e:72:ed:07:ce:b2:7f:63:73: 35:47:16:1b:49:78:59:e3:86:b6:d9:c6:2b:28:a8: 96:67:20:7e:a6:f2:98:9c:9b:d2:2c:59:42:56:2c: e2:ef:bd:90:cb:82:67:e9:62:8f:83:83:81:7f:41: 84:c3:6e:f1:f2:7b:a7:ad:94:11:e9:0a:89:46:8d: 8d:69:d9:dc:43:bd:83:2a:c8:b1:c0:27:4d:c8:0a: 7b:5c:e1:32:67:a0:f0:79:04:70:3e:2f:f9:bb:9a: c5:01:4f:b5:12:6f:8e:3d:3b:01:4c:0f:bf:8e:6e: a3:96:6b:02:21:9f:c0:2a:ff:0c:0e:cd:0b:f3:a2: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:02:EB:AC:09:6F:4F:DC:3F:71:98:53:A6:1C:31:BE:E1:EF:DB:ED X509v3 Authority Key Identifier: keyid:96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:32:f8:d0:69:40:47:da:fc:78:53:6f:5c:6c:80:db:2c:88: cc:d5:f9:fa:4b:59:d0:8d:19:ec:a6:70:23:f6:44:52:86:96: 89:d6:54:c0:ab:a3:08:6c:cb:00:f6:1c:c9:d4:fd:c8:f9:8d: 83:6e:ee:73:57:42:50:9d:fe:d4:42:5a:74:28:33:c5:f5:23: 98:bc:84:54:0e:21:61:72:46:3b:04:18:0b:6a:42:de:a1:73: de:8d:ae:56:8c:e0:1d:ac:63:5a:48:81:60:b2:75:a7:ed:1d: 71:39:5f:16:23:f9:3d:36:1c:3f:85:97:69:48:3e:2e:20:7d: 6e:83:0b:1a:ba:30:c8:3b:c2:15:d7:93:a7:bd:8c:51:fc:92: 12:1f:01:8e:e6:a4:31:ed:fb:03:c0:51:69:3f:2e:1c:72:b9: 10:91:cd:37:ef:e0:c7:8b:7b:dc:4f:10:72:4a:55:5c:fe:dd: 3b:bd:dd:9a:1a:5b:f8:cf:87:be:1d:44:43:35:fe:74:3b:61: e1:6d:82:89:e2:dc:b8:74:dd:89:7e:da:b6:fb:b3:cb:4f:e6: 96:05:b2:4c:c1:b4:8d:73:57:0b:aa:68:88:fb:75:ca:5b:4f: ee:98:d6:98:ba:7e:a0:65:e0:94:f3:1a:fe:e4:f4:f0:6d:7e: cc:97:f1:e6 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjU3 QjYwRDY5RkMyODIyODRFRTBCNzU3RDJFQkY2QjNBODU1QTIwMB4XDTI1MTAyMDEw NTQ0MloXDTI2MTAwNzE1MzAyNFowMzExMC8GA1UEAxMoQkEwMkVCQUMwOTZGNEZE QzNGNzE5ODUzQTYxQzMxQkVFMUVGREJFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOj3Sp2YH8s/yf/Cy0rus93ekzla7oL4bEA9KGE13VERem9x7Psp nnSJKhNdoTL+zQF99g1HmsV1ll0SW0NGrB71GAN5l5gyBYK5Af9F9A+Q9wgngY4D 9MNGEZLeX+J5hCPPOJQBkchayMD9RHnbCgjEhwXI1SL5kL2bNVlSbnLtB86yf2Nz NUcWG0l4WeOGttnGKyiolmcgfqbymJyb0ixZQlYs4u+9kMuCZ+lij4ODgX9BhMNu 8fJ7p62UEekKiUaNjWnZ3EO9gyrIscAnTcgKe1zhMmeg8HkEcD4v+buaxQFPtRJv jj07AUwPv45uo5ZrAiGfwCr/DA7NC/OiMKECAwEAAaOCAgMwggH/MB0GA1UdDgQW BBS6AuusCW9P3D9xmFOmHDG+4e/b7TAfBgNVHSMEGDAWgBSWV7YNafwoIoTuC3V9 Lr9rOoVaIDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9aVVNPL2xs ZTJEV244S0NLRTdndDFmUzZfYXpxRldpQS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bGxlMkRXbjhLQ0tFN2d0MWZTNl9henFGV2lBLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvWlVTTy9sbGUyRFduOEtDS0U3Z3QxZlM2X2F6 cUZXaUEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzTL40GlA R9r8eFNvXGyA2yyIzNX5+ktZ0I0Z7KZwI/ZEUoaWidZUwKujCGzLAPYcydT9yPmN g27uc1dCUJ3+1EJadCgzxfUjmLyEVA4hYXJGOwQYC2pC3qFz3o2uVozgHaxjWkiB YLJ1p+0dcTlfFiP5PTYcP4WXaUg+LiB9boMLGrowyDvCFdeTp72MUfySEh8Bjuak Me37A8BRaT8uHHK5EJHNN+/gx4t73E8QckpVXP7dO73dmhpb+M+Hvh1EQzX+dDth 4W2CieLcuHTdiX7atvuzy0/mlgWyTMG0jXNXC6poiPt1yltP7pjWmLp+oGXglPMa /uT08G1+zJfx5g== -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:49 2025 by rpki-client