$ rpki-client -vvvf rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft File: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft (raw, json) Hash identifier: 3Z4oAbMjlTBqueIYL04Vluq+d0Op8wx4/jju5aZ8RU8= Subject key identifier: 3E:A4:A1:C6:8C:30:5D:3A:5F:CC:2B:BC:DB:C8:0B:16:38:14:3B:39 Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 1EB3F8328AD6EF688B985919AC5A3F93E1D8D76F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft Manifest number: 023D Signing time: Tue 22 Sep 2026 23:50:59 +0000 Manifest this update: Tue 22 Sep 2026 23:45:59 +0000 Manifest next update: Thu 24 Sep 2026 00:15:59 +0000 Files and hashes: 1: AS24165.roa (hash: 3FIiwNofmm4C5uRAP2kjrOtgHA40Oi5IQqIQn0zG3ZU=) 2: AS4662.roa (hash: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=) 3: AS24164.roa (hash: sIOeJGoPYIpl+PqRCZgUzjJTeH0hyt6alVKPdi1KsqA=) 4: AS24163.roa (hash: OWbvhoRY5zy3ESQoCDYHmvYMcD23zu2mtSNG2tJQho4=) 5: AS9924.roa (hash: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ=) 6: AS24613.roa (hash: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q=) 7: AS24614.roa (hash: G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=) 8: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl (hash: 1SdZlpGgAj8oyS28gu9Hl906f32P4oD7Fq2XbWPwm6A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b3:f8:32:8a:d6:ef:68:8b:98:59:19:ac:5a:3f:93:e1:d8:d7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: Sep 22 23:45:59 2026 GMT Not After : Sep 24 00:15:59 2026 GMT Subject: CN=3EA4A1C68C305D3A5FCC2BBCDBC80B1638143B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:38:78:1e:cc:7c:09:48:84:66:2c:56:11: 3d:c9:a1:c9:71:a6:5d:92:26:4a:1b:13:ef:92:75: d1:8e:c6:25:3a:73:6d:91:4a:d8:b7:21:a9:cc:d5: 95:02:77:1f:f5:81:9e:81:fc:de:0d:7d:4e:dc:b4: 14:17:b9:e3:1c:84:fe:bc:22:eb:91:a3:86:ae:7f: fa:86:aa:e1:96:49:12:07:20:b9:e3:74:50:68:6b: e5:96:e9:0f:f2:b8:5d:f0:6f:a9:ac:40:42:f9:28: d3:22:86:9b:d2:a3:a1:ec:fc:51:1c:97:ed:ae:33: 7b:a1:d0:be:c3:af:87:6a:fd:5a:c5:13:0f:72:28: f9:3a:1d:70:9d:31:6b:6a:8b:16:18:56:a4:a6:4f: ef:b5:cb:77:b9:74:11:d6:f1:d8:90:39:f7:27:b6: b0:84:5c:02:62:98:8c:b1:3e:3f:87:11:69:c1:cd: d2:84:03:19:4a:33:1a:45:b9:65:b2:6c:ce:54:6c: 6a:94:d5:f4:5a:6f:ba:5f:78:f2:e5:f8:34:6d:ad: 57:8e:7e:0c:c3:43:24:a9:f0:16:ab:68:ae:07:1f: 6f:5b:6a:51:95:92:48:a1:10:45:24:0e:35:74:96: 1e:a9:2f:ab:ce:7c:06:fc:1c:90:0d:26:a6:95:c8: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:A1:C6:8C:30:5D:3A:5F:CC:2B:BC:DB:C8:0B:16:38:14:3B:39 X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:36:c3:d1:c1:03:91:87:be:87:66:6d:41:3d:c6:10:4e:b6: cb:13:e3:f7:19:45:db:51:37:2d:ca:7e:e7:d0:97:60:8e:fb: d6:08:82:20:61:20:c8:72:7f:5d:37:b0:87:2a:cf:6b:42:50: bf:16:5c:5d:cb:21:5e:0e:48:bb:73:af:39:57:8f:0e:ef:95: ec:ac:17:59:57:14:9f:c8:db:8c:96:ea:2d:22:ce:0c:8f:59: 7d:ad:9b:3f:3f:27:b2:4e:41:6c:fe:00:ae:2f:61:08:f7:86: 37:49:63:4f:f9:e4:2a:83:78:22:64:1d:3d:17:d0:8d:59:40: 59:b0:37:f8:72:17:25:67:68:9a:85:82:e8:da:7b:01:6a:ee: 8c:ad:72:22:74:4c:e9:99:ad:98:ac:6b:5b:12:ad:e1:8e:ca: ca:c5:fc:e1:db:65:84:ea:e3:af:d9:c6:ac:65:d7:02:0d:df: 13:6c:bd:55:44:f7:67:9b:eb:17:59:fd:86:ec:8c:2b:38:f6: 5d:22:fb:74:3c:59:e8:bc:5d:80:56:e8:2f:28:c4:e6:27:49: 70:f1:4e:97:64:f2:0b:eb:3e:28:42:8e:8c:1f:56:3f:33:28: 62:3c:27:b6:92:7c:d2:59:77:97:eb:4e:ea:22:5e:1f:36:a0: 57:78:28:9a -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUHrP4MorW72iLmFkZrFo/k+HY128wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjA5MjIyMzQ1NTlaFw0yNjA5MjQwMDE1NTlaMDMxMTAvBgNV BAMTKDNFQTRBMUM2OEMzMDVEM0E1RkNDMkJCQ0RCQzgwQjE2MzgxNDNCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55Dh4Hsx8CUiEZixWET3Joclx pl2SJkobE++SddGOxiU6c22RSti3IanM1ZUCdx/1gZ6B/N4NfU7ctBQXueMchP68 IuuRo4auf/qGquGWSRIHILnjdFBoa+WW6Q/yuF3wb6msQEL5KNMihpvSo6Hs/FEc l+2uM3uh0L7Dr4dq/VrFEw9yKPk6HXCdMWtqixYYVqSmT++1y3e5dBHW8diQOfcn trCEXAJimIyxPj+HEWnBzdKEAxlKMxpFuWWybM5UbGqU1fRab7pfePLl+DRtrVeO fgzDQySp8BaraK4HH29balGVkkihEEUkDjV0lh6pL6vOfAb8HJANJqaVyGcVAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUPqShxowwXTpfzCu828gLFjgUOzkwHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvNzA0NDA0MjAxREZF MkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJg2w9HBA5GH vodmbUE9xhBOtssT4/cZRdtRNy3KfufQl2CO+9YIgiBhIMhyf103sIcqz2tCUL8W XF3LIV4OSLtzrzlXjw7vleysF1lXFJ/I24yW6i0izgyPWX2tmz8/J7JOQWz+AK4v YQj3hjdJY0/55CqDeCJkHT0X0I1ZQFmwN/hyFyVnaJqFgujaewFq7oytciJ0TOmZ rZisa1sSreGOysrF/OHbZYTq46/Zxqxl1wIN3xNsvVVE92eb6xdZ/YbsjCs49l0i +3Q8Wei8XYBW6C8oxOYnSXDxTpdk8gvrPihCjowfVj8zKGI8J7aSfNJZd5frTuoi Xh82oFd4KJo= -----END CERTIFICATE-----Generated at Wed Sep 23 18:01:19 2026 by rpki-client