$ rpki-client -vvvf rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft File: 0291B733B1EED1AF7E817D958CE6F13A585F0695.mft (raw, json) Hash identifier: ER6kjs5gEpB1FwcWT8DzoEaZnlfPOWoSQ7naNymUetc= Subject key identifier: 2A:00:36:DF:2A:D0:3B:41:D1:3B:90:1D:F7:55:1C:F4:57:6D:51:15 Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 Certificate issuer: /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Certificate serial: 491CDAC112973833BB0187D5BE831ADEA6C7DA2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft Manifest number: B7 Signing time: Wed 23 Sep 2026 22:43:53 +0000 Manifest this update: Wed 23 Sep 2026 22:38:53 +0000 Manifest next update: Fri 25 Sep 2026 02:08:53 +0000 Files and hashes: 1: 323430313a353561303a3a2f33322d3332203d3e203138303431.roa (hash: CrzulhqYuNBjNzDQRC8BOsQxP+QuAw4ZbCFe65kH3fw=) 2: 3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (hash: WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=) 3: 3231302e37392e3135302e302f32332d3234203d3e203138303431.roa (hash: XF9vSkheKC1NRFUS3alvj8iCKGl0+/ZaB+X31yisdf0=) 4: 0291B733B1EED1AF7E817D958CE6F13A585F0695.crl (hash: D07ryVMW64X0xcLIL/wKiA6uIe/uA80FZmuGvRaXDDw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1c:da:c1:12:97:38:33:bb:01:87:d5:be:83:1a:de:a6:c7:da:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695 Validity Not Before: Sep 23 22:38:53 2026 GMT Not After : Sep 25 02:08:53 2026 GMT Subject: CN=2A0036DF2AD03B41D13B901DF7551CF4576D5115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:07:8d:55:d9:49:96:17:da:d6:67:91:e0:9f: 03:90:ed:54:04:81:9e:11:97:52:5c:2f:58:c8:4f: ba:92:0c:95:98:f4:1f:99:e8:a8:70:1b:1a:56:00: fd:77:69:d7:de:c3:7c:51:2d:e2:07:81:55:ac:5f: f1:2a:04:ca:a4:aa:ea:7c:0c:ca:82:7a:67:3f:98: d0:2a:db:bb:d8:0a:d5:9b:bb:4b:64:b9:b8:39:dc: 0c:6b:6a:ed:e7:da:bc:0c:fc:eb:21:4b:a5:ab:af: 8a:90:4a:5c:83:25:a9:69:50:35:64:8a:09:49:50: 99:29:58:0f:0f:87:f5:a3:0e:77:c5:fb:a2:1b:2d: 7c:fc:67:29:f7:44:95:c6:bb:2e:c7:8e:71:19:c8: 08:42:5b:50:c4:b6:94:f5:90:a4:63:e5:da:05:64: a7:d4:7f:2a:65:8e:19:17:f9:9c:31:6e:b8:6c:0a: 04:44:e6:bd:00:35:5a:fa:f8:a2:2a:74:5e:d0:b2: 96:d1:cf:04:a1:ed:4b:92:89:40:b7:26:86:ac:76: 7d:ef:58:a1:dd:b7:97:ed:9b:65:88:39:bb:98:ec: 0e:24:e7:0e:a5:a2:72:7b:30:6d:1e:9d:b2:6f:d3: ee:d0:b2:24:a9:71:1b:92:d1:be:b6:ee:43:9e:24: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:36:DF:2A:D0:3B:41:D1:3B:90:1D:F7:55:1C:F4:57:6D:51:15 X509v3 Authority Key Identifier: keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:95:bd:87:81:fe:92:e7:8a:8e:74:79:6f:4c:54:d9:75:0e: 43:65:16:61:15:69:09:e5:55:c0:40:bf:80:fe:c5:e0:80:ee: 2e:24:31:4b:fe:f1:21:ec:6c:18:47:b8:cb:b3:eb:7d:ee:23: 8c:fc:03:69:a9:93:86:9d:23:4f:4c:03:c9:96:45:57:1c:7f: d2:ec:81:96:37:6c:67:72:5c:43:eb:98:10:d1:5f:02:20:7a: 40:6f:6d:5e:63:00:62:bd:e6:17:f8:bb:2a:c7:d1:b6:82:8f: a9:99:f8:00:78:2b:a4:45:72:69:ba:42:fe:fc:54:44:c9:80: 64:d2:62:2b:b5:aa:7b:45:a1:2e:3f:cf:29:6d:91:2d:36:2f: bd:d1:df:80:c4:8b:b7:99:88:40:23:b4:c5:da:36:34:86:0d: ac:94:4c:51:cc:63:9b:ab:b4:a7:59:b4:01:08:79:34:eb:4d: f4:9f:41:b8:49:9f:2e:c4:be:df:cc:9a:e9:53:0a:f2:a7:64: e9:a2:c9:ee:0a:39:d7:ab:c8:a7:cc:a9:c3:1d:39:47:87:3a: 5f:14:d9:e4:20:76:33:f4:1e:dc:50:37:25:5b:2d:7a:08:10: fa:f1:de:f8:a0:00:1c:24:6b:8f:08:42:89:05:b3:a1:19:38: bf:ac:db:b4 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUSRzawRKXODO7AYfVvoMa3qbH2i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1 ODVGMDY5NTAeFw0yNjA5MjMyMjM4NTNaFw0yNjA5MjUwMjA4NTNaMDMxMTAvBgNV BAMTKDJBMDAzNkRGMkFEMDNCNDFEMTNCOTAxREY3NTUxQ0Y0NTc2RDUxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsB41V2UmWF9rWZ5HgnwOQ7VQE gZ4Rl1JcL1jIT7qSDJWY9B+Z6KhwGxpWAP13adfew3xRLeIHgVWsX/EqBMqkqup8 DMqCemc/mNAq27vYCtWbu0tkubg53Axrau3n2rwM/OshS6Wrr4qQSlyDJalpUDVk iglJUJkpWA8Ph/WjDnfF+6IbLXz8Zyn3RJXGuy7HjnEZyAhCW1DEtpT1kKRj5doF ZKfUfypljhkX+ZwxbrhsCgRE5r0ANVr6+KIqdF7QspbRzwSh7UuSiUC3Joasdn3v WKHdt5ftm2WIObuY7A4k5w6lonJ7MG0enbJv0+7QsiSpcRuS0b627kOeJGvdAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUKgA23yrQO0HRO5Ad91Uc9FdtURUwHwYDVR0j BBgwFoAUApG3M7Hu0a9+gX2VjObxOlhfBpUwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAv MDI5MUI3MzNCMUVFRDFBRjdFODE3RDk1OENFNkYxM0E1ODVGMDY5NS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8wMjkxQjczM0IxRUVEMUFGN0U4MTdEOTU4Q0U2RjEz QTU4NUYwNjk1LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWkFULzAvMDI5MUI3MzNCMUVFRDFBRjdF ODE3RDk1OENFNkYxM0E1ODVGMDY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACWVvYeB/pLnio50eW9M VNl1DkNlFmEVaQnlVcBAv4D+xeCA7i4kMUv+8SHsbBhHuMuz633uI4z8A2mpk4ad I09MA8mWRVccf9LsgZY3bGdyXEPrmBDRXwIgekBvbV5jAGK95hf4uyrH0baCj6mZ +AB4K6RFcmm6Qv78VETJgGTSYiu1qntFoS4/zyltkS02L73R34DEi7eZiEAjtMXa NjSGDayUTFHMY5urtKdZtAEIeTTrTfSfQbhJny7Evt/MmulTCvKnZOmiye4KOder yKfMqcMdOUeHOl8U2eQgdjP0HtxQNyVbLXoIEPrx3vigABwka48IQokFs6EZOL+s 27Q= -----END CERTIFICATE-----Generated at Thu Sep 24 03:20:53 2026 by rpki-client