$ rpki-client -vvvf rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft File: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft (raw, json) Hash identifier: kk3IKeE5sN3sry+K89YogS7ndQKHJN7NcIxwlF4l01k= Subject key identifier: 16:D8:EA:07:1D:EE:48:E8:BD:44:76:71:40:73:F7:A1:C8:D4:E7:67 Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 477BFA7BCDBC453EE1FFD4734B81F6E7E534D7C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft Manifest number: 0280 Signing time: Thu 12 Nov 2026 16:59:59 +0000 Manifest this update: Thu 12 Nov 2026 16:54:59 +0000 Manifest next update: Fri 13 Nov 2026 17:30:59 +0000 Files and hashes: 1: AS24613.roa (hash: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q=) 2: AS24163.roa (hash: OWbvhoRY5zy3ESQoCDYHmvYMcD23zu2mtSNG2tJQho4=) 3: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl (hash: F/3aHnGldP3/O+/7hBzT8UomexcCtYn7i/aDPh3Nr1o=) 4: AS24614.roa (hash: G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=) 5: AS24164.roa (hash: sIOeJGoPYIpl+PqRCZgUzjJTeH0hyt6alVKPdi1KsqA=) 6: AS9924.roa (hash: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ=) 7: AS24165.roa (hash: 3FIiwNofmm4C5uRAP2kjrOtgHA40Oi5IQqIQn0zG3ZU=) 8: AS4662.roa (hash: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Nov 2026 08:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7b:fa:7b:cd:bc:45:3e:e1:ff:d4:73:4b:81:f6:e7:e5:34:d7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: Nov 12 16:54:59 2026 GMT Not After : Nov 13 17:30:59 2026 GMT Subject: CN=16D8EA071DEE48E8BD4476714073F7A1C8D4E767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:f1:9f:5b:ff:d5:e3:a8:40:0e:6d:30:ee: 0b:50:9b:0d:19:37:9b:af:5c:5c:62:7b:0d:1a:11: 54:7f:f3:07:18:e4:0a:34:25:10:cc:9f:d8:be:b9: ad:d0:68:7e:5a:34:01:35:c1:2a:59:ce:c1:45:70: 49:a8:de:37:b7:e0:2e:7d:35:3f:6b:46:43:19:b6: 84:b3:80:54:6a:3f:a3:d4:11:28:46:11:65:fc:57: 99:d5:bf:ad:07:98:5a:38:e1:f3:46:ab:0e:ed:ae: 8a:75:88:67:89:3b:0c:27:fe:3e:a9:6b:4f:ce:5b: 8c:b5:29:09:b3:f7:90:98:aa:4c:c0:16:b9:f6:6f: 77:1a:81:e6:ad:54:37:83:29:40:a8:fb:13:76:e4: 70:f6:de:3c:55:03:71:65:14:7d:39:3d:69:66:c2: ec:e6:f5:26:3d:03:b6:5a:0a:24:ca:9e:71:49:89: ee:9d:fe:88:e3:0a:82:82:a3:6f:19:b1:83:33:5d: 56:e0:51:de:7c:cf:56:3a:0a:c3:21:aa:92:1b:6d: 35:43:81:8b:94:53:63:b5:42:d1:d1:2c:a1:82:0d: 98:59:ca:79:f2:bc:c8:bb:6c:a8:09:43:b8:a1:86: 6a:1d:1e:e7:16:23:58:92:7e:11:cd:c7:c5:b8:0b: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D8:EA:07:1D:EE:48:E8:BD:44:76:71:40:73:F7:A1:C8:D4:E7:67 X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ee:94:84:16:fa:8b:38:16:00:3d:ad:1e:ba:07:88:ab:ee: 25:0d:af:d4:59:dd:7e:0f:27:67:48:c3:10:b0:d9:14:3e:07: 06:6f:d0:3e:61:52:92:c9:6c:ab:25:04:2b:6c:dc:cf:14:a1: 95:0b:eb:fa:5c:6c:e4:81:af:72:b3:ab:0b:84:89:b5:e1:84: b4:f2:77:70:60:ad:25:9f:e8:5e:7c:4f:c1:3c:16:08:d7:eb: b5:55:3d:72:0b:a4:04:a6:0c:9e:d9:6f:5f:1b:5a:c0:44:68: cf:c8:ae:f3:75:43:cc:a3:8f:56:07:be:3b:bf:f5:56:93:74: d6:66:86:57:23:33:8b:52:15:a7:e9:08:76:f7:cc:66:45:7f: cb:90:a0:a5:84:52:d5:74:93:48:00:80:7e:e4:a8:c1:d8:fd: 69:49:5d:59:85:01:be:d0:3d:7a:1a:24:32:83:df:ac:3b:7f: 80:ca:df:a1:02:e5:a5:9d:85:ed:9a:dc:cb:94:d1:b0:08:b0: bf:0b:89:52:7d:b7:2f:69:ca:88:24:48:3c:a0:35:12:e3:cc: 97:ca:93:7c:06:69:52:ec:cf:ed:7b:82:fa:94:3e:2f:bc:32: a0:0d:48:3a:23:85:f4:ef:37:93:a0:67:e6:b5:67:83:30:e0: cb:7e:c4:0f -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUR3v6e828RT7h/9RzS4H25+U018cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjExMTIxNjU0NTlaFw0yNjExMTMxNzMwNTlaMDMxMTAvBgNV BAMTKDE2RDhFQTA3MURFRTQ4RThCRDQ0NzY3MTQwNzNGN0ExQzhENEU3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColPGfW//V46hADm0w7gtQmw0Z N5uvXFxiew0aEVR/8wcY5Ao0JRDMn9i+ua3QaH5aNAE1wSpZzsFFcEmo3je34C59 NT9rRkMZtoSzgFRqP6PUEShGEWX8V5nVv60HmFo44fNGqw7trop1iGeJOwwn/j6p a0/OW4y1KQmz95CYqkzAFrn2b3cageatVDeDKUCo+xN25HD23jxVA3FlFH05PWlm wuzm9SY9A7ZaCiTKnnFJie6d/ojjCoKCo28ZsYMzXVbgUd58z1Y6CsMhqpIbbTVD gYuUU2O1QtHRLKGCDZhZynnyvMi7bKgJQ7ihhmodHucWI1iSfhHNx8W4C7XpAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUFtjqBx3uSOi9RHZxQHP3ocjU52cwHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvNzA0NDA0MjAxREZF MkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJnulIQW+os4 FgA9rR66B4ir7iUNr9RZ3X4PJ2dIwxCw2RQ+BwZv0D5hUpLJbKslBCts3M8UoZUL 6/pcbOSBr3KzqwuEibXhhLTyd3BgrSWf6F58T8E8FgjX67VVPXILpASmDJ7Zb18b WsBEaM/IrvN1Q8yjj1YHvju/9VaTdNZmhlcjM4tSFafpCHb3zGZFf8uQoKWEUtV0 k0gAgH7kqMHY/WlJXVmFAb7QPXoaJDKD36w7f4DK36EC5aWdhe2a3MuU0bAIsL8L iVJ9ty9pyogkSDygNRLjzJfKk3wGaVLsz+17gvqUPi+8MqANSDojhfTvN5OgZ+a1 Z4Mw4Mt+xA8= -----END CERTIFICATE-----Generated at Thu Nov 12 21:15:54 2026 by rpki-client