$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft File: gwvEQQFipY0NsX4KNRVR-7PXUaE.mft (raw, json) Hash identifier: aow/OUW+zPJQB2+tspQDCz6P3HQ6V6ABu6KQyQAxyV0= Subject key identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0D57 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft Manifest number: 0D2A Signing time: Mon 28 Apr 2025 09:18:36 +0000 Manifest this update: Mon 28 Apr 2025 09:18:36 +0000 Manifest next update: Wed 30 Apr 2025 09:18:36 +0000 Files and hashes: 1: 3Kf3vQjh77j-rovWseazIe2p3N0.roa (hash: 07kUCJaDVepBYELuXGf6572F1XUmEmaBDfv569uoqAE=) 2: 9F3wUx7xk_uyyBAckXeo8GtKBCg.roa (hash: Inb/cjQwutVg2dLsNevaryukIUxJX4sS3o22vwCOT7w=) 3: NBMitYmQhIh2rnquqkNjJdTprQA.roa (hash: 9ElOZUZFrBnQxctX56S3T+EwMNiefRafQOIg0vsLUxo=) 4: cmBNJBmOkVoPRxVqC932eEk8U4U.roa (hash: KtkGafBeLiSh3QNd4wYz+hrNvhwahgzQlmZ3K7/RZJg=) 5: gwvEQQFipY0NsX4KNRVR-7PXUaE.crl (hash: uKQ4Tu9TltsND+J8KlNrFMqTqqVdP0yBaTBOpTqdE0A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3415 (0xd57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Apr 28 09:18:36 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01CF58E390EF3AF26464E9734E6C92234FDAA683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:ca:58:28:32:52:b4:ca:c3:69:88:0a:6f: 1e:ba:61:57:db:f6:9a:2c:5c:e0:8e:a8:7f:29:98: 8d:f3:a3:e3:80:8b:fa:31:7a:f0:89:28:84:2a:80: 52:1a:87:ad:db:b9:9e:61:9b:2b:60:ca:1b:a7:80: c9:5e:d9:8c:73:58:37:be:51:ff:f1:ed:fd:11:ef: d1:7d:f5:2a:87:fe:e4:42:e4:db:e2:8c:fd:7e:61: ed:f0:83:c9:d6:a7:bb:2c:8e:e7:8d:11:74:ba:ad: ea:8f:15:43:91:e5:8f:d3:f3:7b:5e:4f:64:dc:38: 04:1b:28:c5:9f:e2:cf:f2:2d:ef:9d:e4:3f:76:13: b2:52:21:c4:11:af:7c:b6:43:96:16:15:f8:fe:4f: 70:44:02:03:f6:dc:4f:c7:7c:91:b7:44:63:73:a9: d6:08:18:ff:64:65:db:3c:be:32:8c:5a:91:1a:d3: f6:88:45:55:17:e1:e8:ac:7d:e8:4c:e8:f1:4e:ef: 84:38:f2:cf:e0:ed:81:60:ec:77:17:3c:62:b9:e7: 8a:e6:38:ea:f6:40:45:86:8a:50:0e:a3:84:cf:cb: 26:da:c5:34:b9:4d:0d:28:c4:2c:11:c8:76:ae:bd: 15:52:b3:8d:35:45:ca:26:87:73:41:cf:17:2f:7d: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:58:E3:90:EF:3A:F2:64:64:E9:73:4E:6C:92:23:4F:DA:A6:83 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:3a:71:82:79:75:1a:6e:15:a5:32:5e:d5:5d:8f:ac:07:6d: c9:f9:15:3e:37:19:0b:c5:e0:20:3c:a4:c2:50:c7:fb:36:dd: c3:eb:a7:3d:89:a9:7b:50:b1:c1:69:f0:aa:d8:fb:f8:13:eb: 0e:25:6d:a1:70:92:cc:86:b7:6a:e7:8b:e0:63:55:b9:74:e6: b0:23:97:3f:f5:33:ed:16:26:b1:06:4f:92:7d:66:0e:f9:f9: fb:57:c3:e8:20:b7:c8:97:60:0d:ad:4f:20:28:78:5f:80:58: 3e:93:44:79:8c:18:18:e6:9a:3d:11:fa:0f:92:5f:6f:d9:c1: 7c:36:7e:15:b3:77:7d:b2:6f:3d:62:e1:39:54:d3:8e:d3:78: 83:8d:aa:a3:34:81:06:fa:21:92:95:71:fb:a9:f2:f9:e8:73: ba:bc:7e:a4:73:34:8a:24:44:9b:5e:d7:4b:ed:f1:99:5b:9f: 40:a2:d9:f7:96:65:89:ec:f2:78:23:ca:7d:ba:64:ca:fd:1c: a9:27:39:17:00:5e:4a:a9:ce:86:b0:06:58:7a:99:c2:2e:fa: bf:0f:56:30:70:28:97:3b:e2:15:25:ab:de:5e:db:bc:14:32: ca:36:91:39:9f:b5:f5:65:a8:5e:53:4d:5f:d2:21:d6:08:cc: ce:cc:98:68 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTA0Mjgw OTE4MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxQ0Y1OEUzOTBFRjNB RjI2NDY0RTk3MzRFNkM5MjIzNEZEQUE2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDY6spYKDJStMrDaYgKbx66YVfb9posXOCOqH8pmI3zo+OAi/ox evCJKIQqgFIah63buZ5hmytgyhungMle2YxzWDe+Uf/x7f0R79F99SqH/uRC5Nvi jP1+Ye3wg8nWp7ssjueNEXS6reqPFUOR5Y/T83teT2TcOAQbKMWf4s/yLe+d5D92 E7JSIcQRr3y2Q5YWFfj+T3BEAgP23E/HfJG3RGNzqdYIGP9kZds8vjKMWpEa0/aI RVUX4eisfehM6PFO74Q48s/g7YFg7HcXPGK554rmOOr2QEWGilAOo4TPyybaxTS5 TQ0oxCwRyHauvRVSs401Rcomh3NBzxcvfbf7AgMBAAGjggILMIICBzAdBgNVHQ4E FgQUAc9Y45DvOvJkZOlzTmySI0/apoMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9nd3ZFUVFGaXBZME5z WDRLTlJWUi03UFhVYUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFTpxgnl1Gm4VpTJe1V2PrAdtyfkVPjcZC8XgIDykwlDH+zbdw+unPYmpe1Cx wWnwqtj7+BPrDiVtoXCSzIa3aueL4GNVuXTmsCOXP/Uz7RYmsQZPkn1mDvn5+1fD 6CC3yJdgDa1PICh4X4BYPpNEeYwYGOaaPRH6D5Jfb9nBfDZ+FbN3fbJvPWLhOVTT jtN4g42qozSBBvohkpVx+6ny+ehzurx+pHM0iiREm17XS+3xmVufQKLZ95Zliezy eCPKfbpkyv0cqSc5FwBeSqnOhrAGWHqZwi76vw9WMHAolzviFSWr3l7bvBQyyjaR OZ+19WWoXlNNX9Ih1gjMzsyYaA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net