$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft File: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft (raw, json) Hash identifier: isy2GxMCK9EED7MoaPLejkGrIwY6tzU/pRnUNVDTTOs= Subject key identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 Certificate issuer: /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Certificate serial: 104B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft Manifest number: 1042 Signing time: Mon 28 Apr 2025 09:18:37 +0000 Manifest this update: Mon 28 Apr 2025 09:18:37 +0000 Manifest next update: Wed 30 Apr 2025 09:18:37 +0000 Files and hashes: 1: Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl (hash: HctjT+v/SPB6L/An7TQ+t6WCmErUQN0V4Em8XVcLA2c=) 2: jFOAcEZVumM_2ehoJfHlpaXcShA.roa (hash: oxuZmH4tmCWLw8FxgYK0anKKOf7pIls25q1O8EEoeqI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4171 (0x104b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9 Validity Not Before: Apr 28 09:18:37 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDF5E74C325D4E5372056CA0EA73238EF4741D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:3a:12:a8:72:83:3a:41:63:15:11:52:87: 39:78:c6:cd:5e:b8:a2:53:b3:15:c7:7b:cc:69:ec: c8:68:60:6a:22:9f:ab:a3:1b:66:e5:2d:d3:5d:4b: ca:11:9e:51:0d:e7:7b:cf:09:27:9f:7a:5d:d6:4f: fd:95:3b:74:2f:cc:78:3d:86:36:1d:9f:8e:67:92: 13:d4:46:03:56:00:53:2a:51:59:01:a7:e5:c9:74: 15:cc:39:3f:ea:be:28:ff:e2:a2:c3:b6:c8:04:a1: 9b:ec:1f:01:71:99:23:2b:69:af:81:ad:b5:a1:55: ac:fb:2b:e0:e4:fd:c2:31:80:6e:1c:04:1b:7a:7a: 92:81:ba:b9:d8:63:bd:5f:1a:1a:1f:81:74:0c:68: 82:48:36:45:a5:c7:80:46:8e:7c:6c:08:61:9c:c0: 99:b8:ed:c2:c1:22:2c:f6:3b:1f:64:c8:30:d5:6e: 39:da:b5:65:f2:ad:9f:fa:29:ef:bd:6f:5c:51:f3: c5:e6:20:06:f4:12:26:47:f8:f9:88:6f:a5:66:bf: 02:8f:f5:2c:70:e4:a9:4a:cf:5d:70:0e:92:cd:29: 08:90:35:4a:00:21:81:0b:89:d8:53:6b:ab:25:7f: 80:97:c5:57:2f:ec:b8:86:2c:94:17:ef:0a:84:6e: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:E7:4C:32:5D:4E:53:72:05:6C:A0:EA:73:23:8E:F4:74:1D:1A X509v3 Authority Key Identifier: keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0b:11:2e:67:56:6b:bb:98:ec:aa:d3:ee:ef:a6:af:0a:02: 0e:d1:e5:f4:b7:08:01:8a:12:8b:6f:82:12:3c:7e:b7:a1:c5: 58:6d:81:35:ec:4d:64:c0:15:77:bb:0f:bf:a3:36:54:63:89: e1:f0:14:2d:b2:46:f6:58:fd:0a:a0:fa:b6:9b:c1:df:81:4a: 5a:c5:e1:30:1f:83:3f:14:68:7b:2d:96:85:11:5d:73:7d:a7: 78:68:9a:de:9b:f1:75:65:d4:b4:3f:a6:76:06:c1:1d:74:50: d1:d1:11:ff:66:11:04:a9:75:fe:66:0c:78:52:bd:f7:65:95: 01:9b:74:03:cd:b5:1e:23:11:4d:c8:59:84:82:90:c1:46:1f: 59:1e:1a:07:b5:1b:c4:32:37:6c:e1:c5:e4:91:f3:44:ca:64: 0b:e6:a6:06:71:58:0e:87:79:fc:76:41:9e:81:ae:b0:c3:59: 23:9e:85:d2:51:b7:bb:2d:ca:e0:71:ed:d4:04:40:9e:7c:67: 7c:11:18:6d:61:ca:8d:92:de:c7:3a:e4:88:2e:73:3b:48:dd: 28:d0:90:fd:1c:c7:0f:dd:fc:27:ae:eb:a3:23:ea:f8:4a:77: 3a:37:15:c9:cd:72:2d:ca:d7:0b:96:d2:14:76:b2:4a:5e:bc: 99:2a:be:f4 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICEEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjc2 MkUwMEE0RkVGQ0REN0YwNTI3M0U0MTUwMjE4QzNBOUZFMTJFOTAeFw0yNTA0Mjgw OTE4MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJERjVFNzRDMzI1RDRF NTM3MjA1NkNBMEVBNzMyMzhFRjQ3NDFEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4JDoSqHKDOkFjFRFShzl4xs1euKJTsxXHe8xp7MhoYGoin6uj G2blLdNdS8oRnlEN53vPCSefel3WT/2VO3QvzHg9hjYdn45nkhPURgNWAFMqUVkB p+XJdBXMOT/qvij/4qLDtsgEoZvsHwFxmSMraa+BrbWhVaz7K+Dk/cIxgG4cBBt6 epKBurnYY71fGhofgXQMaIJINkWlx4BGjnxsCGGcwJm47cLBIiz2Ox9kyDDVbjna tWXyrZ/6Ke+9b1xR88XmIAb0EiZH+PmIb6VmvwKP9Sxw5KlKz11wDpLNKQiQNUoA IYELidhTa6slf4CXxVcv7LiGLJQX7wqEbhDfAgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUvfXnTDJdTlNyBWyg6nMjjvR0HRowHwYDVR0jBBgwFoAUZ2LgCk/vzdfwUnPk FQIYw6n+EukwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWUlNSU5H SU5GTy9aMkxnQ2tfdnpkZndVblBrRlFJWXc2bi1FdWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1oyTGdDa192emRmd1VuUGtGUUlZdzZuLUV1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1lJTUlOR0lORk8vWjJMZ0NrX3Z6 ZGZ3VW5Qa0ZRSVl3Nm4tRXVrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAsLES5nVmu7mOyq0+7vpq8KAg7R5fS3CAGKEotvghI8frehxVhtgTXs TWTAFXe7D7+jNlRjieHwFC2yRvZY/Qqg+rabwd+BSlrF4TAfgz8UaHstloURXXN9 p3homt6b8XVl1LQ/pnYGwR10UNHREf9mEQSpdf5mDHhSvfdllQGbdAPNtR4jEU3I WYSCkMFGH1keGge1G8QyN2zhxeSR80TKZAvmpgZxWA6Hefx2QZ6BrrDDWSOehdJR t7styuBx7dQEQJ58Z3wRGG1hyo2S3sc65IgucztI3SjQkP0cxw/d/Ceu66Mj6vhK dzo3FcnNci3K1wuW0hR2skpevJkqvvQ= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:56 2025 by rpki-client on console.sobornost.net