$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: 9eqfjmlCuaG5fqmoULkIusqPi319rYhvbq1BxGYkbxc= Subject key identifier: 01:3F:1B:23:0F:FE:6D:AE:C0:CA:5F:2D:2A:B1:16:87:65:67:F6:F1 Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 786D5FE4A81C1E5B8DCAFDB9F37B0E41613C4690 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: FE Signing time: Sun 15 Nov 2026 09:17:51 +0000 Manifest this update: Sun 15 Nov 2026 09:12:51 +0000 Manifest next update: Mon 16 Nov 2026 11:00:51 +0000 Files and hashes: 1: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: zQr4jfzb4b3toXgGFcV9VVg+EaeM1+Ar6NMtff7xjoE=) 2: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) 3: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) 4: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6d:5f:e4:a8:1c:1e:5b:8d:ca:fd:b9:f3:7b:0e:41:61:3c:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Nov 15 09:12:51 2026 GMT Not After : Nov 16 11:00:51 2026 GMT Subject: CN=013F1B230FFE6DAEC0CA5F2D2AB116876567F6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:06:ba:e1:ff:f4:d3:47:e5:77:1a:db:11: 59:a3:77:98:0b:6d:aa:fd:de:05:42:b6:6e:5c:a1: d0:58:0f:bb:34:bf:c0:e3:11:c2:8b:98:7b:43:3c: 9d:0d:2d:cc:98:37:4a:18:18:b8:d8:33:62:96:9c: e9:b1:01:a6:a7:0f:c1:37:e1:ac:83:16:5b:29:5e: 55:f6:c5:f1:e6:d7:8d:d7:9c:e9:ca:eb:d6:c1:8c: ca:e1:a8:3a:c2:3b:4f:66:ca:11:70:16:8e:bf:4e: f2:bd:19:0d:c8:14:6f:14:38:76:a4:35:ff:fa:93: 7e:e3:0b:92:3c:a3:3e:70:98:1d:02:92:29:da:86: 2d:d1:ff:25:e3:5a:12:6e:4a:bf:58:6b:b4:ca:4c: 15:69:34:84:10:66:39:0a:48:66:f0:10:3e:5d:0d: db:2e:92:2a:1a:0a:18:c2:6f:ef:9b:d5:e2:fe:15: 14:4e:10:d3:20:63:cf:05:2f:77:6c:7e:ed:05:57: 05:9e:a2:fa:61:c9:6c:d2:6f:fb:78:ea:b7:a3:39: b6:07:5b:e1:4b:f2:f9:7c:f2:4f:ae:ee:10:b2:98: 67:8d:18:5a:66:5c:a8:71:41:2e:74:13:67:76:6e: a2:71:38:65:34:d4:10:a6:b6:f4:f1:77:4d:0b:22: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3F:1B:23:0F:FE:6D:AE:C0:CA:5F:2D:2A:B1:16:87:65:67:F6:F1 X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:86:0b:39:6b:92:89:2f:fb:e4:ea:3c:34:a8:17:74:91:d5: b5:a2:75:64:05:da:fc:14:74:cb:d6:aa:35:c7:bd:92:ab:23: f8:c0:e6:ca:54:f9:20:c0:64:01:72:67:eb:7b:c2:bc:7e:e6: 2c:fa:d5:ea:40:78:95:25:2b:c6:d1:b3:f6:0f:eb:35:39:fd: 79:a1:5a:02:24:a5:5f:d8:25:82:1e:f3:a0:d6:e6:cf:6c:70: f6:03:74:fc:f2:f1:93:f3:c9:77:c9:f0:5c:97:d5:1a:3c:54: 93:5b:6a:c0:38:d2:c4:de:70:c6:12:c2:e8:5c:65:46:0a:aa: f0:ab:bb:dc:7e:b8:0b:4a:59:d5:59:dc:eb:8e:42:ff:0c:b7: a6:ef:25:d2:96:6e:24:1b:42:bb:61:6b:9b:ba:c8:06:aa:30: 15:55:7a:48:f6:11:bf:cb:05:79:f1:e2:3b:4a:61:0c:7e:27: 40:47:7f:a6:d0:92:76:65:73:36:d8:61:e8:05:6e:db:67:a7: ce:12:9f:38:6d:e5:f2:18:ce:a5:fb:fa:1f:41:9b:b0:d0:13: b3:a3:dd:df:5c:2d:89:34:56:60:0a:ef:79:27:39:8f:9c:05: e1:53:c3:61:f3:f4:89:2d:c4:8e:79:4c:52:16:14:5c:de:fc: d6:52:65:61 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUeG1f5KgcHluNyv2583sOQWE8RpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjExMTUwOTEyNTFaFw0yNjExMTYxMTAwNTFaMDMxMTAvBgNV BAMTKDAxM0YxQjIzMEZGRTZEQUVDMENBNUYyRDJBQjExNjg3NjU2N0Y2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCQa64f/000fldxrbEVmjd5gL bar93gVCtm5codBYD7s0v8DjEcKLmHtDPJ0NLcyYN0oYGLjYM2KWnOmxAaanD8E3 4ayDFlspXlX2xfHm143XnOnK69bBjMrhqDrCO09myhFwFo6/TvK9GQ3IFG8UOHak Nf/6k37jC5I8oz5wmB0Ckinahi3R/yXjWhJuSr9Ya7TKTBVpNIQQZjkKSGbwED5d DdsukioaChjCb++b1eL+FRROENMgY88FL3dsfu0FVwWeovphyWzSb/t46rejObYH W+FL8vl88k+u7hCymGeNGFpmXKhxQS50E2d2bqJxOGU01BCmtvTxd00LIoRBAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUAT8bIw/+ba7Ayl8tKrEWh2Vn9vEwHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABeGCzlrkokv++TqPDSo F3SR1bWidWQF2vwUdMvWqjXHvZKrI/jA5spU+SDAZAFyZ+t7wrx+5iz61epAeJUl K8bRs/YP6zU5/XmhWgIkpV/YJYIe86DW5s9scPYDdPzy8ZPzyXfJ8FyX1Ro8VJNb asA40sTecMYSwuhcZUYKqvCru9x+uAtKWdVZ3OuOQv8Mt6bvJdKWbiQbQrtha5u6 yAaqMBVVekj2Eb/LBXnx4jtKYQx+J0BHf6bQknZlczbYYegFbttnp84Snzht5fIY zqX7+h9Bm7DQE7Oj3d9cLYk0VmAK73knOY+cBeFTw2Hz9IktxI55TFIWFFze/NZS ZWE= -----END CERTIFICATE-----Generated at Sun Nov 15 14:42:45 2026 by rpki-client