$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft File: 9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft (raw, json) Hash identifier: Vn3+D0t4LBLbmcfe0XLCiDjnieum3QM0iPcvpGLGYAo= Subject key identifier: 4B:2A:49:AD:9B:38:17:4C:A6:85:B9:07:4B:95:5C:0C:AB:2A:D8:B2 Authority key identifier: F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E Certificate issuer: /CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E Certificate serial: 0389 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft Manifest number: 037A Signing time: Mon 28 Apr 2025 09:51:14 +0000 Manifest this update: Mon 28 Apr 2025 09:51:14 +0000 Manifest next update: Wed 30 Apr 2025 09:51:14 +0000 Files and hashes: 1: 9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl (hash: PjvoPxTGo3RDKbtTxBNxaW0VwbmTfkOfFW9ZC/J6sxc=) 2: JsDTPWAf15qfLMItUrrUBq2jc64.roa (hash: xeaFz4La1PqyGNnwULTYlk/clEVFbYlmuZYjevOxFw4=) 3: RCrOxpT_tuFRAaggi2o6x5EU74U.roa (hash: XyjGW8jT7U602QhLoM4jseJHIQviQ+sdF4Hobd8Yfmw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F72B8D549DE8BBC6DE02456C670D1B1A05AFE80E Validity Not Before: Apr 28 09:51:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4B2A49AD9B38174CA685B9074B955C0CAB2AD8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:c4:26:df:6e:e9:bf:43:2d:2c:0d:27:06: 9f:47:cd:df:94:75:89:60:69:aa:45:a5:5e:e6:de: 46:e6:ba:e2:c4:40:dc:91:66:6a:99:cb:8b:4b:4a: 80:30:da:28:cd:ef:b8:b2:80:2b:09:9b:b8:fa:6e: 39:12:d7:fd:5e:90:22:02:48:24:77:e5:46:75:92: 71:3a:c6:77:77:c6:57:18:6a:51:2e:66:f1:88:0e: c9:0f:bc:29:cb:81:6c:10:d3:b2:2a:5b:26:ca:80: 21:73:ac:b7:c8:14:90:5e:b9:3e:50:52:d1:61:b3: 54:4c:5c:b3:2d:16:3c:f9:57:d9:a0:e2:f6:11:54: 7f:af:5c:e2:24:8c:b0:bf:4f:f8:f2:2f:37:c9:40: e4:28:a3:35:64:d4:ee:91:5a:0d:ad:ef:08:ab:8c: 4a:86:c7:60:15:cf:2a:0a:bb:e2:3a:cd:43:6c:bc: 2e:1d:79:c0:c8:2e:e5:48:01:30:51:92:9b:56:b9: 42:bb:8e:e0:b3:2f:82:54:cb:be:42:85:f2:ed:f3: 06:06:5c:1c:98:92:bf:96:d6:8d:25:c3:d1:79:1f: 59:1c:a9:26:64:a5:83:8a:53:67:3c:8b:96:09:89: f2:18:c5:ee:24:3f:74:63:97:84:ad:59:1b:5f:92: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2A:49:AD:9B:38:17:4C:A6:85:B9:07:4B:95:5C:0C:AB:2A:D8:B2 X509v3 Authority Key Identifier: keyid:F7:2B:8D:54:9D:E8:BB:C6:DE:02:45:6C:67:0D:1B:1A:05:AF:E8:0E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9yuNVJ3ou8beAkVsZw0bGgWv6A4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCC1223342/9yuNVJ3ou8beAkVsZw0bGgWv6A4.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ac:79:d5:21:26:15:76:20:04:42:dd:62:3f:f9:47:fe:d8: cf:dc:ec:78:78:dd:82:92:8d:8f:d9:1c:45:5f:5e:e3:8c:5a: e7:57:5e:40:78:44:01:79:fc:6a:7f:00:3b:01:25:9b:1a:ab: 69:0f:a0:9a:e5:dd:11:c3:05:21:a8:48:f5:c5:c1:86:38:5a: 48:f6:54:18:34:e5:f6:db:d2:05:cb:ab:61:59:24:66:8e:1d: a2:0d:b8:c6:23:88:97:55:95:49:19:d0:d2:ac:95:16:a7:f8: b0:2a:77:c8:20:ef:23:a8:39:76:d8:3d:c9:e2:6a:51:0d:bf: a0:7d:ac:0b:fe:b6:f1:67:85:a0:a5:bc:21:33:17:63:94:e9: d2:7a:65:34:75:40:ca:4b:f6:23:83:43:96:ce:9e:63:2d:c3: d7:9c:30:3f:cf:68:78:3d:b4:b3:4b:14:ff:35:a1:c5:7e:1d: 4b:67:55:76:b1:c8:de:48:ea:f5:0e:60:27:16:8c:f1:00:37: 6c:65:fc:2f:3f:d9:64:78:c1:d9:a4:81:3e:6e:7e:3c:ed:82: 50:9a:0f:f5:23:ff:7e:17:f0:14:3c:60:c2:5a:a7:b9:c3:31: 38:e3:d1:46:a5:b0:bf:87:f0:fd:9e:b8:72:21:22:af:90:5f: 73:6c:ca:0b -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjcy QjhENTQ5REU4QkJDNkRFMDI0NTZDNjcwRDFCMUEwNUFGRTgwRTAeFw0yNTA0Mjgw OTUxMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCMkE0OUFEOUIzODE3 NENBNjg1QjkwNzRCOTU1QzBDQUIyQUQ4QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCH8Qm327pv0MtLA0nBp9Hzd+UdYlgaapFpV7m3kbmuuLEQNyR ZmqZy4tLSoAw2ijN77iygCsJm7j6bjkS1/1ekCICSCR35UZ1knE6xnd3xlcYalEu ZvGIDskPvCnLgWwQ07IqWybKgCFzrLfIFJBeuT5QUtFhs1RMXLMtFjz5V9mg4vYR VH+vXOIkjLC/T/jyLzfJQOQoozVk1O6RWg2t7wirjEqGx2AVzyoKu+I6zUNsvC4d ecDILuVIATBRkptWuUK7juCzL4JUy75ChfLt8wYGXByYkr+W1o0lw9F5H1kcqSZk pYOKU2c8i5YJifIYxe4kP3Rjl4StWRtfkndzAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUSypJrZs4F0ymhbkHS5VcDKsq2LIwHwYDVR0jBBgwFoAU9yuNVJ3ou8beAkVs Zw0bGgWv6A4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENDMTIy MzM0Mi85eXVOVkozb3U4YmVBa1ZzWncwYkdnV3Y2QTQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBLzl5dU5WSjNvdThiZUFrVnNadzBiR2dXdjZBNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RDQzEyMjMzNDIvOXl1TlZKM291 OGJlQWtWc1p3MGJHZ1d2NkE0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSsedUhJhV2IARC3WI/+Uf+2M/c7Hh43YKSjY/ZHEVfXuOMWudXXkB4 RAF5/Gp/ADsBJZsaq2kPoJrl3RHDBSGoSPXFwYY4Wkj2VBg05fbb0gXLq2FZJGaO HaINuMYjiJdVlUkZ0NKslRan+LAqd8gg7yOoOXbYPcnialENv6B9rAv+tvFnhaCl vCEzF2OU6dJ6ZTR1QMpL9iODQ5bOnmMtw9ecMD/PaHg9tLNLFP81ocV+HUtnVXax yN5I6vUOYCcWjPEAN2xl/C8/2WR4wdmkgT5ufjztglCaD/Uj/34X8BQ8YMJap7nD MTjj0UalsL+H8P2euHIhIq+QX3Nsygs= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:35 2025 by rpki-client on console.sobornost.net