
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
File: ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft (raw, json)
Hash identifier: 6zWPp/EGj2j++easKE/tEdRCAPtuxUFlw3drenoi/eg=
Subject key identifier: 9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 0A26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
Manifest number: 0A12
Signing time: Sat 04 Apr 2026 14:00:11 +0000
Manifest this update: Sat 04 Apr 2026 14:00:11 +0000
Manifest next update: Mon 06 Apr 2026 14:00:11 +0000
Files and hashes: 1: 5HDQAMklDeueQTcmy3OyS-y3Ap0.roa (hash: oi9x9zW2CMBMfkn3Epm3L4Mkd7ng9Dj4vtIZoiSP230=)
2: Nz-X8rR7Phcap4SiInP5wET3C3c.roa (hash: YbGHDs96xLfvMmG5LaEkGYi22GhQO8pYdk4DOlpnQSE=)
3: ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl (hash: mYRnOk3w07dNlcrm6wj31r09ajALKClPGr9tBUGUFIE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Apr 2026 03:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Apr 4 14:00:11 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9E0948674DB51888C393AF9B532AFDB9C59BFD3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:6e:f0:47:be:1b:cf:5e:b9:5d:65:92:4f:
b2:27:2d:a0:b3:21:e5:91:f2:f4:6b:cc:d5:9a:e4:
21:4f:37:ca:ac:5e:f6:27:39:12:11:23:a5:34:8d:
a3:e0:d7:29:71:07:d6:11:45:e9:e6:9b:3f:4c:c7:
3d:76:43:d8:49:e8:33:67:75:1d:9a:98:a6:eb:84:
1e:5f:60:47:25:ed:a2:0a:07:51:eb:c7:83:45:dc:
ca:f8:c0:b0:da:b0:88:65:04:60:d7:32:43:4a:18:
61:f5:65:ac:27:6a:64:b7:dc:aa:ce:ef:f5:9d:35:
8a:ff:0b:b4:9a:61:b6:7b:f0:bf:3c:c2:25:71:75:
c2:df:3d:fd:b5:56:46:a2:e0:92:fe:70:ad:4c:d6:
2a:9f:ce:bc:bb:e9:ed:f3:06:03:42:9f:33:23:f9:
21:35:34:19:af:4a:e0:45:22:f0:95:6d:5e:09:c7:
22:51:00:91:da:d4:36:ac:0b:00:17:ef:a0:39:e1:
69:49:06:d1:07:76:ac:7a:e5:3a:d9:3d:82:8e:56:
c5:12:ba:aa:28:36:e0:ba:81:4c:b2:b4:4e:b7:2c:
47:d8:0d:9b:a6:f7:03:c0:4a:a9:87:4b:22:08:6c:
e2:c2:0c:d0:c8:a7:26:32:a2:3e:6f:f2:ef:4b:31:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:37:1f:f5:cb:d3:09:6f:f3:32:03:a7:a2:5c:49:c0:d8:0d:
8b:82:06:ab:30:ce:69:7d:23:2f:4f:c9:8d:6b:68:49:2b:99:
b1:39:be:59:4c:b6:fb:89:dd:a7:a4:48:08:e9:8c:1d:ea:94:
c2:f9:17:03:ae:40:03:9f:a9:ea:c6:04:96:58:2d:c1:7a:64:
bf:f5:ae:8d:c8:65:df:2f:fc:79:7c:d3:3d:7c:9c:4b:8f:45:
d1:90:8c:00:9f:8c:8a:69:af:4b:a2:32:ad:24:b7:f7:81:f9:
df:51:0d:1e:e2:d4:fc:3e:de:54:dd:40:fd:27:a3:83:17:1e:
c4:8c:3f:07:b3:35:38:04:02:f8:44:da:7b:6f:38:27:ec:a1:
8c:17:a3:d4:5b:4f:e9:11:8c:b1:97:00:49:96:fa:5c:a3:a0:
78:9d:17:47:5f:da:74:03:9b:48:11:b3:9f:25:c0:f2:7d:42:
d8:0d:3c:f2:a7:ad:11:64:2a:db:35:8f:1d:7f:2b:db:52:b5:
fd:3f:d7:bb:c5:8a:d3:c0:0b:65:8b:d3:4d:9b:8d:3f:36:f5:
ba:5f:2f:fe:49:f0:ba:87:26:6f:2a:f3:7a:a5:75:a0:02:94:
2a:6b:28:9d:bb:03:df:d1:86:4c:93:e8:86:cb:6f:9d:de:64:
00:d8:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:22:54 2026 by rpki-client