$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft File: yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft (raw, json) Hash identifier: mQXdv4dbuamn1ugLzqmZw/xsbI6QF3hsFV7GjUm9ckI= Subject key identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B Certificate serial: 0F13 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft Manifest number: 0EF7 Signing time: Mon 28 Apr 2025 09:49:53 +0000 Manifest this update: Mon 28 Apr 2025 09:49:53 +0000 Manifest next update: Wed 30 Apr 2025 09:49:53 +0000 Files and hashes: 1: TC5O4BU5yifgspTLoBB-6tROqas.roa (hash: 5Z2V+asSnh0jJDO/1WCHnbOIIe8nc85aTk1atgqeHk4=) 2: bEyFLfDyPGGaE222hmgguAfkah4.roa (hash: 6kWlk6NMCJgw+qUJ8W9n1rIs/qfAK1WraQQkWjTOZ2Q=) 3: pjDSIqC07G2sc-JK1QvHVm6USe4.roa (hash: IBXNxPSvmGuAezCUvdgSujSlh2wGI05dKUepw9tjhZ4=) 4: yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl (hash: BYBZg0C/KkHWXX/TL1iNlpjfIzMNG996xSA9Iv3qED8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3859 (0xf13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B Validity Not Before: Apr 28 09:49:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2B0A22299F3D186B0FFF5D7474FC5E38D5A00AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5b:cb:71:84:7e:97:e2:d1:b0:e7:e6:76: 33:a0:6e:d9:3b:30:81:a1:46:17:2b:6d:c8:d1:91: 13:61:9e:b0:9b:c4:52:5e:7d:d7:2b:ee:a1:d1:8d: 56:f3:ca:c8:e3:37:9d:04:92:c8:43:71:df:a6:ed: 99:5e:6d:42:9b:ac:13:d5:9b:d3:78:19:36:7b:41: e2:87:db:4b:7e:cf:ea:2e:27:c9:f5:70:a2:cf:2d: 31:f6:2f:ea:a8:3a:9f:5b:c5:f5:f0:16:3c:09:76: 80:2e:09:71:ba:5c:ba:20:e4:af:e6:41:58:7c:fa: 1d:6b:ee:a6:c3:c3:7e:e1:64:fc:8f:19:71:e1:fa: 21:d2:25:b6:c3:c1:0a:4b:9f:cc:0d:fc:43:68:c8: 35:1c:f9:1a:aa:a9:8b:41:8a:e0:7d:a2:2a:0c:87: 45:23:71:f9:df:20:9a:95:4f:38:33:12:8f:5d:db: 42:89:5a:a7:be:40:87:54:88:c0:c0:9a:57:35:9a: b1:c0:d4:ce:01:e2:3f:a2:8d:20:8a:d1:d0:83:8d: 0b:99:4a:dd:a1:c3:9e:cf:aa:5f:fd:6a:eb:fd:4f: 98:72:19:78:dc:d2:fd:6b:73:2c:a4:63:31:b7:a8: 91:f0:9d:c0:5c:26:36:13:90:35:2f:7b:1b:1b:bc: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:22:29:9F:3D:18:6B:0F:FF:5D:74:74:FC:5E:38:D5:A0:0A:D0 X509v3 Authority Key Identifier: keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3b:20:c8:7f:05:dc:52:45:d6:0f:01:67:bc:1b:aa:4d:55: ac:bb:a4:85:47:91:cc:54:62:4e:cb:c4:15:38:68:d5:b9:7e: f0:dc:8e:57:b6:34:00:74:19:d2:ff:54:d3:44:3e:43:3b:06: d7:53:d0:db:ee:ec:cf:f1:6c:86:cd:50:70:91:bd:16:7c:cb: 7b:d0:0e:bd:d4:0c:39:98:e8:9c:58:94:29:99:6d:a4:ed:05: b6:ec:f8:a0:56:43:31:90:7d:e8:11:62:6b:68:2f:63:af:e8: 47:9e:4f:d7:72:6d:f6:4a:23:c8:36:c1:1b:d2:89:3f:1d:0e: e6:4a:e6:d4:e0:d4:fe:ed:e1:fe:b1:6f:43:0e:36:14:e1:03: 48:79:cb:ae:03:89:a0:da:da:43:55:13:d7:b3:58:01:ff:a9: 17:09:b7:82:2c:bb:f1:d4:df:d1:24:b5:2d:05:57:bc:81:5b: 2b:47:15:84:24:bd:d1:ed:9a:71:46:d8:30:4a:c4:78:68:2b: cb:8f:e7:b1:ea:63:54:c6:fa:e3:0d:1c:36:da:64:e7:dc:a0: 87:8b:2a:7b:6e:8b:eb:02:fc:36:54:d4:0f:9f:c0:db:68:fe: a3:d8:d9:1a:d0:3a:bc:66:5f:0e:a0:32:88:10:8c:57:24:15: 4d:2a:a2:50 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ex QjcxRUZBQzZGNkFBNDMwMjc2MDlDMThBNzM0OTgyNzY0NTU0QjAeFw0yNTA0Mjgw OTQ5NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJCMEEyMjI5OUYzRDE4 NkIwRkZGNUQ3NDc0RkM1RTM4RDVBMDBBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCztVvLcYR+l+LRsOfmdjOgbtk7MIGhRhcrbcjRkRNhnrCbxFJe fdcr7qHRjVbzysjjN50EkshDcd+m7ZlebUKbrBPVm9N4GTZ7QeKH20t+z+ouJ8n1 cKLPLTH2L+qoOp9bxfXwFjwJdoAuCXG6XLog5K/mQVh8+h1r7qbDw37hZPyPGXHh +iHSJbbDwQpLn8wN/ENoyDUc+RqqqYtBiuB9oioMh0UjcfnfIJqVTzgzEo9d20KJ Wqe+QIdUiMDAmlc1mrHA1M4B4j+ijSCK0dCDjQuZSt2hw57Pql/9auv9T5hyGXjc 0v1rcyykYzG3qJHwncBcJjYTkDUvexsbvHQjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUKwoiKZ89GGsP/110dPxeONWgCtAwHwYDVR0jBBgwFoAUyhtx76xvaqQwJ2Cc GKc0mCdkVUswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOVEVB U1kveWh0eDc2eHZhcVF3SjJDY0dLYzBtQ2RrVlVzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS95aHR4NzZ4dmFxUXdKMkNjR0tjMG1DZGtWVXMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5URUFTWS95aHR4NzZ4dmFxUXdK MkNjR0tjMG1DZGtWVXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTsgyH8F3FJF1g8BZ7wbqk1VrLukhUeRzFRiTsvEFTho1bl+8NyOV7Y0AHQZ 0v9U00Q+QzsG11PQ2+7sz/Fshs1QcJG9FnzLe9AOvdQMOZjonFiUKZltpO0Ftuz4 oFZDMZB96BFia2gvY6/oR55P13Jt9kojyDbBG9KJPx0O5krm1ODU/u3h/rFvQw42 FOEDSHnLrgOJoNraQ1UT17NYAf+pFwm3giy78dTf0SS1LQVXvIFbK0cVhCS90e2a cUbYMErEeGgry4/nsepjVMb64w0cNtpk59ygh4sqe26L6wL8NlTUD5/A22j+o9jZ GtA6vGZfDqAyiBCMVyQVTSqiUA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net