$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft File: sso52NF7ENl9WlHg6i-fsbxAzZA.mft (raw, json) Hash identifier: 0m+8b+VUMjbSmVGIYw4SAR7jOYZqUXl16TDTA3GuEqo= Subject key identifier: A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64 Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Certificate serial: 0E17 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft Manifest number: 0D5C Signing time: Mon 28 Apr 2025 09:48:46 +0000 Manifest this update: Mon 28 Apr 2025 09:48:46 +0000 Manifest next update: Wed 30 Apr 2025 09:48:46 +0000 Files and hashes: 1: -Fo1rP2JH21VDlMd3cO6QkahYCE.roa (hash: 4NvsmNGg0Kq/ug8amawwlL75bKqhWL9BAkYEjnmRdVY=) 2: -cxNUwn3Exk4mLkUjgQLtpuiWWk.roa (hash: tiQhU/q434dO4ICEoZ2TUcMELhfApo1aKCgghI64LEs=) 3: 0f1F-k--lVhE6BEirXJdjV-g_Og.roa (hash: KTmpTHscvaQl4Wkksaciy4A6RU3bGy/G8VLi0Av3PBQ=) 4: 3eG-dLnP7KTeCu211rWTfeIY9cg.roa (hash: P2MTwOkPA5QWDpaXZhZlRS3yja8sciVbxNChs2ovWSA=) 5: 4jG_GWihA4ACijmh50TTuxPQwFI.roa (hash: 7gWaHTZVH56QCLkcu3ZOirCzJgESJtHuTL8KvDNhxTU=) 6: AIS3MqJ-wUnRWM7ghnTAY9TpNSk.roa (hash: Irvd12XNP2lBmVEdKTPkZvBpCpB+QzEHd5B1/7IfF0U=) 7: Beh3NbPk9YNKJC-sa6iwFO6-NqI.roa (hash: ypRm933mmJqPBOp6KwGTjPk6icXyrSyWVuTes2Rmyz8=) 8: FA4wD27U2NjsICFIb1jlUS5tEE0.roa (hash: H8UI47mCjAfOW4sZqmay66E/NU4nxPz9DDQw9DSHhKE=) 9: H3kfxgzGXWemURJGTdQh92-s6uY.roa (hash: KCi4efj9UjM2n3uL+ImhoP0NUr9p4Iui11E53shdEvo=) 10: KdQpVoFev0RLtAdoRgMnSEVLA9Y.roa (hash: GbHrP4b/lSe0rDFj7rhKJCerF/xF5+yjUOliojpQYg8=) 11: PIlcTQZrpvftHuYPzYmAoT4S0cQ.roa (hash: SXntXgH0acpRvlPCfZVJqJXoChgJnNU9aOCeQqJCwOE=) 12: USSIyurfIkM-6RC5DKqq-aelgT8.roa (hash: rQXyESJmp+jqQUw4BqwiarMXJJrKgtzOt0W9ZMxfugs=) 13: _DTCmYdWvkfI4YLFtaWsKZEopF0.roa (hash: FwWyn4y1N1d2MR06Lif1qOEfcyPUKsg2DMQoGUwcgks=) 14: a9GkezbnJ5iCyv92_S_zxhNRMiY.roa (hash: MAZn2nBqC392680Ei0hoRHeQZVSupnAMcqDtZzQQsK4=) 15: dNByJ1gDcljGDf4-CC_O78f7Tac.roa (hash: GdYTNSax0090gPKsJ/QL6xnUpNh4YsTBQSDiexQCmlw=) 16: en2bXo9QIS80om6Pw8cCntWZTrE.roa (hash: cSaMWlfnQ/FMpPK9UKqd0bpBoGY6zmKnFn+KaRlTYhM=) 17: fb1CJZcRcbTfpJK925_NT3nztsA.roa (hash: 0WKE7BmeZ1xBZtWgbGT1K+Nym0iO3AAY5MgB2KlGqVg=) 18: irvd03j4xVQIldmSkYpJq2J7eD0.roa (hash: S5tGQkJDn1Ohc+JG9utUPEpyBIHDYSDtJ9hQQVealtE=) 19: k5EZcX40DQ44hk7dl_nCAyWASmM.roa (hash: t/BCzuARSVdT+4bqVxlInK8FQW9Bwd7/tOe/jHbdAo4=) 20: kCCMl5RwnW86RUjKl0QZxSatEmU.roa (hash: NUcBN5YXk+hs0F8K8ZCq6Q5FNs6zfavecMeDczJxcV0=) 21: m0ohmrxLQkqEPviVwC1pRV_MjUw.roa (hash: fm1w1yA2euhRfzxIZUbNUqNy5KhgF7oT7LhyUcCs9LY=) 22: m3W-C1l9XeacJfcVzvOmPfn8ELY.roa (hash: oJ4aAlj0UTVRbe3YRPiyxw1wZwaRAUF8532dNBQBOdk=) 23: oVYf3SYw6tbSMXsr-9FnwQovN30.roa (hash: jupyTuVrpCS27gbFzTs9nIlblq2pST+Ooz+Me5rRB6A=) 24: ppWojtWTCVSw6aqVvwdzBbJbmTc.roa (hash: 2aCi8IOFTfyxTbGTCCbGh/ki2ael5818VeGHjQxhUh4=) 25: qD71CurKLUgVbKKSHeQxUHPCWjM.roa (hash: RSfg+XwsmabaMP1IqSEYtl1fB9qpsGHOMe+Cm9DGFIA=) 26: sso52NF7ENl9WlHg6i-fsbxAzZA.crl (hash: 2TkMHRdA2Zyj+Jash6Lgtjhk/Cu0SytdRtoet407QQk=) 27: tGiYgXZ9UJKXxgcWpty7h8WTTsQ.roa (hash: AotJSyq7KH6uLWjHzpDsVMYx5uY7+QDy2140TrlWqfM=) 28: tsDZLm-_FilFIZdsEU9j793pm9g.roa (hash: 33dgUCEScIEHc+6B+vwT7ea1bXq68kXkGLmYN5PnT3A=) 29: zOpIOd1JFlD1tM9vpM0pYtkMtTc.roa (hash: B67jLKtJ0RuOMwVOdpHnqNAwp8MSX+MFCNqHItEk9Xc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3607 (0xe17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90 Validity Not Before: Apr 28 09:48:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3A2941162F1547E10FB8CAFB53654C81B20D764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:dd:63:7b:0e:33:10:fb:d2:3f:31:95:91: 76:b9:90:47:e0:a9:28:26:70:32:79:c5:7a:77:42: 18:11:a8:2a:37:79:82:93:ae:bf:71:30:c8:2a:e0: e9:a4:81:ff:09:a5:95:c9:4e:b6:1f:44:98:6a:4f: ec:cd:7b:cf:b8:10:70:6d:f8:48:43:26:3c:b2:f3: ce:50:b4:7a:e2:37:13:f0:55:1a:6c:09:e2:03:1d: 66:ef:f5:56:e5:7e:7c:24:ee:5a:88:04:7c:84:d9: e4:27:e2:88:2a:52:63:9e:7b:5b:19:10:5d:4d:36: 27:d7:2c:cd:7f:fb:2f:61:96:6b:e5:9a:b5:90:27: bf:fa:f5:5c:f7:d5:39:59:b8:1c:70:35:23:66:d5: d5:1a:4b:b2:e8:6c:1e:73:f6:3d:cd:bb:b7:fa:2c: 94:ee:a7:e4:50:28:0e:98:36:55:f6:c2:ed:11:33: d8:e3:79:91:76:aa:01:7a:16:11:30:f0:fc:93:06: e5:71:d7:ec:7a:42:69:22:fe:8f:a6:cb:f7:43:67: 6b:ca:c2:d5:a1:b3:52:72:23:a3:1a:07:55:fc:7a: ae:22:62:10:6b:4d:1c:75:c8:02:20:81:1b:43:01: dc:a1:eb:72:50:f2:2c:77:1c:d4:cc:f3:cb:52:b9: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64 X509v3 Authority Key Identifier: keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6a:2d:96:fe:5a:6b:de:01:2e:d1:00:3c:a4:6a:4d:12:76: e2:d1:c8:30:29:ae:ab:e5:49:3e:e9:eb:c8:f4:b0:b2:f1:6b: c0:cc:31:d2:6f:2c:3a:e6:ac:a3:88:a7:a7:d5:81:b8:8f:4c: 0a:7e:25:25:c1:92:45:1f:33:b4:a6:9c:4e:95:a2:ab:df:0a: 0f:29:b2:90:fc:3c:f1:ae:c6:1e:66:66:61:15:07:e9:7d:f2: f6:0d:30:0c:6a:7c:f2:40:e9:5f:0a:fe:28:aa:71:47:fe:28: ac:7a:7b:53:21:f7:62:fc:b8:e2:30:a6:37:8a:66:c1:ff:a0: 13:d7:28:85:b3:ea:c5:de:8d:20:a2:62:cc:bd:1d:6d:8b:10: 1f:3c:43:66:e1:67:9a:23:d1:c3:c6:c2:da:88:f7:b0:d9:ce: 52:4c:92:a6:a9:65:94:86:4b:3a:61:55:8c:d8:bf:8c:0f:20: 86:2c:f8:94:e5:85:18:6f:7f:04:a2:43:34:9d:8e:d5:19:ca: 95:87:ca:f9:48:29:09:16:e0:5b:5c:9e:25:2d:39:69:a2:06: fc:27:9b:8b:fb:1c:14:6f:8b:05:0b:18:7f:44:c6:44:3a:d2: 3a:bd:54:06:3b:4b:33:62:41:c4:a0:48:2e:90:6e:7b:d4:16: 44:c0:35:22 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yNTA0Mjgw OTQ4NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzQTI5NDExNjJGMTU0 N0UxMEZCOENBRkI1MzY1NEM4MUIyMEQ3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC04N1jew4zEPvSPzGVkXa5kEfgqSgmcDJ5xXp3QhgRqCo3eYKT rr9xMMgq4Omkgf8JpZXJTrYfRJhqT+zNe8+4EHBt+EhDJjyy885QtHriNxPwVRps CeIDHWbv9Vblfnwk7lqIBHyE2eQn4ogqUmOee1sZEF1NNifXLM1/+y9hlmvlmrWQ J7/69Vz31TlZuBxwNSNm1dUaS7LobB5z9j3Nu7f6LJTup+RQKA6YNlX2wu0RM9jj eZF2qgF6FhEw8PyTBuVx1+x6Qmki/o+my/dDZ2vKwtWhs1JyI6MaB1X8eq4iYhBr TRx1yAIggRtDAdyh63JQ8ix3HNTM88tSufc1AgMBAAGjggITMIICDzAdBgNVHQ4E FgQUo6KUEWLxVH4Q+4yvtTZUyBsg12QwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg 6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3NzbzUy TkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8v cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQARai2W/lpr3gEu0QA8pGpNEnbi0cgwKa6r5Uk+6evI9LCy8WvA zDHSbyw65qyjiKen1YG4j0wKfiUlwZJFHzO0ppxOlaKr3woPKbKQ/DzxrsYeZmZh FQfpffL2DTAManzyQOlfCv4oqnFH/iisentTIfdi/LjiMKY3imbB/6AT1yiFs+rF 3o0gomLMvR1tixAfPENm4WeaI9HDxsLaiPew2c5STJKmqWWUhks6YVWM2L+MDyCG LPiU5YUYb38EokM0nY7VGcqVh8r5SCkJFuBbXJ4lLTlpogb8J5uL+xwUb4sFCxh/ RMZEOtI6vVQGO0szYkHEoEgukG571BZEwDUi -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net