$ rpki-client -vvvf rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft File: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft (raw, json) Hash identifier: 2ztO5zlvz1w0Oo0Aq80vswUBZOJuwDXa4owR2oadz4Q= Subject key identifier: F4:2A:77:44:D2:1E:2D:C1:EF:BD:84:8E:84:41:9D:23:04:C3:14:7D Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Certificate serial: 43D67AB761BB0D55A228E493EDEDCAC264004E69 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft Manifest number: FD Signing time: Sat 14 Nov 2026 15:37:44 +0000 Manifest this update: Sat 14 Nov 2026 15:32:44 +0000 Manifest next update: Sun 15 Nov 2026 16:41:44 +0000 Files and hashes: 1: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (hash: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=) 2: 3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (hash: qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=) 3: 3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (hash: 0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=) 4: 137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl (hash: nXdiA3+aPGDRMwl2HM4szOzeXXF75cPo4viGVq5AQFc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:7a:b7:61:bb:0d:55:a2:28:e4:93:ed:ed:ca:c2:64:00:4e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991 Validity Not Before: Nov 14 15:32:44 2026 GMT Not After : Nov 15 16:41:44 2026 GMT Subject: CN=F42A7744D21E2DC1EFBD848E84419D2304C3147D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f4:15:02:3c:24:ce:93:72:2a:a8:34:ba:8b: c5:32:3e:ee:5f:ab:ba:5f:86:81:9f:17:f2:6f:3f: b7:cc:7b:42:f8:4d:9d:9e:2a:50:43:ad:ad:e9:c2: 1c:f1:b9:33:69:93:e1:7d:8a:98:da:f7:df:da:37: c1:8f:5f:54:e4:5b:b4:2b:0e:9c:86:6b:31:f3:e2: 15:ce:44:f9:6a:a1:37:56:ae:05:7a:b1:b9:c1:5e: e8:cc:2c:b7:c3:9d:8c:2e:49:81:6e:5a:cd:78:5f: 84:7d:1b:b9:1c:d8:75:11:1a:9d:85:22:12:36:44: 61:26:86:a9:56:d6:b0:62:7c:23:8f:7e:29:df:22: 13:c7:fb:03:c8:d4:70:52:c5:15:79:f4:04:19:06: 8d:eb:bf:b5:34:15:8b:01:f3:6a:ed:e8:cc:5c:3a: d8:a3:84:85:65:b1:df:fc:f3:c7:be:e7:c9:b4:fb: 58:d4:8a:98:9b:1d:e0:72:51:b1:81:c9:81:db:d5: 6d:2b:28:d7:5d:44:f9:ca:80:8d:ba:f4:d2:7c:0e: 32:9b:a6:b3:b0:ef:49:2c:3a:24:1b:6f:85:31:2a: f5:3a:3b:1d:d7:c2:44:c9:99:68:eb:ac:b8:d3:4f: 3b:d2:a3:15:ee:84:93:ae:cd:ee:03:c8:4c:60:d5: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:77:44:D2:1E:2D:C1:EF:BD:84:8E:84:41:9D:23:04:C3:14:7D X509v3 Authority Key Identifier: keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:0a:61:14:f8:b9:3f:12:fd:d2:dc:84:c6:0f:3e:ae:c7: 89:04:e2:c3:51:7c:36:89:18:13:2f:41:5a:97:cb:8c:8b:11: 48:35:68:4d:c8:51:67:7c:5f:7a:d6:b5:87:02:9e:ae:02:6c: a5:a8:87:21:eb:33:79:e3:bf:24:80:c8:d8:6b:f4:67:79:b8: c7:d6:12:a1:51:56:f6:10:76:ae:8f:38:69:36:2b:5b:49:15: 26:72:e0:12:c8:7a:e2:d0:82:5e:1b:e5:2f:eb:fc:13:e0:75: a0:2c:a1:c2:9f:30:45:3d:e4:4b:7e:1a:7a:3d:12:1f:e3:24: 82:c3:f3:46:7e:27:6e:16:09:39:20:9e:cf:4b:0d:72:28:5e: f2:db:40:14:97:32:0d:13:77:c2:00:bc:42:1b:13:1d:72:8f: b4:3a:da:50:a7:0f:c3:20:ba:17:05:f0:c7:27:e2:6d:fc:6a: 1a:2f:02:28:fa:54:ac:6e:78:ad:3d:88:e8:f1:fa:aa:b9:4f: 0f:44:75:46:47:0c:7a:a9:2a:48:b8:15:1d:56:c6:98:f0:5a: 1d:cf:f6:28:a4:c3:05:82:f5:fa:d4:ff:ed:b9:54:0c:c6:7a: 75:47:ae:92:f6:59:f4:ce:01:ed:86:6d:ba:06:77:98:21:3b: b3:bb:c3:55 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUQ9Z6t2G7DVWiKOST7e3KwmQATmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM3RENGM0ZFMThFM0M5REIzM0FDNkM1MEU4QkUzNTdE MDcyOTk5MTAeFw0yNjExMTQxNTMyNDRaFw0yNjExMTUxNjQxNDRaMDMxMTAvBgNV BAMTKEY0MkE3NzQ0RDIxRTJEQzFFRkJEODQ4RTg0NDE5RDIzMDRDMzE0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9BUCPCTOk3IqqDS6i8UyPu5f q7pfhoGfF/JvP7fMe0L4TZ2eKlBDra3pwhzxuTNpk+F9ipja99/aN8GPX1TkW7Qr DpyGazHz4hXORPlqoTdWrgV6sbnBXujMLLfDnYwuSYFuWs14X4R9G7kc2HURGp2F IhI2RGEmhqlW1rBifCOPfinfIhPH+wPI1HBSxRV59AQZBo3rv7U0FYsB82rt6Mxc OtijhIVlsd/888e+58m0+1jUipibHeByUbGByYHb1W0rKNddRPnKgI269NJ8DjKb prOw70ksOiQbb4UxKvU6Ox3XwkTJmWjrrLjTTzvSoxXuhJOuze4DyExg1W2HAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU9Cp3RNIeLcHvvYSOhEGdIwTDFH0wHwYDVR0j BBgwFoAUE33PP+GOPJ2zOsbFDovjV9BymZEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOR1RJ QU4vMC8xMzdEQ0YzRkUxOEUzQzlEQjMzQUM2QzUwRThCRTM1N0QwNzI5OTkxLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzEzN0RDRjNGRTE4RTNDOURCMzNBQzZDNTBF OEJFMzU3RDA3Mjk5OTEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9XQU5HVElBTi8wLzEzN0RDRjNG RTE4RTNDOURCMzNBQzZDNTBFOEJFMzU3RDA3Mjk5OTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzbQph FPi5PxL90tyExg8+rseJBOLDUXw2iRgTL0Fal8uMixFINWhNyFFnfF961rWHAp6u AmylqIch6zN5478kgMjYa/RnebjH1hKhUVb2EHaujzhpNitbSRUmcuASyHri0IJe G+Uv6/wT4HWgLKHCnzBFPeRLfhp6PRIf4ySCw/NGfiduFgk5IJ7PSw1yKF7y20AU lzINE3fCALxCGxMdco+0OtpQpw/DILoXBfDHJ+Jt/GoaLwIo+lSsbnitPYjo8fqq uU8PRHVGRwx6qSpIuBUdVsaY8Fodz/YopMMFgvX61P/tuVQMxnp1R66S9ln0zgHt hm26BneYITuzu8NV -----END CERTIFICATE-----Generated at Sun Nov 15 00:11:58 2026 by rpki-client