
$ rpki-client -vvf rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
File: 0CA9C32F7806470F750EC53431D4F322F0851573.mft (raw, json)
Hash identifier: rTsVJKgfwC4G1If+E+EVfgtVzwMwLpRROsN2FsDNp5o=
Subject key identifier: D8:90:83:BF:EE:29:91:71:EA:93:1F:31:02:16:84:3B:EE:41:8F:FD
Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73
Certificate issuer: /CN=0CA9C32F7806470F750EC53431D4F322F0851573
Certificate serial: 0A04B598ACE1E137790EE8943BCA5F6C327CC4F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
Manifest number: 82
Signing time: Fri 14 Aug 2026 21:33:31 +0000
Manifest this update: Fri 14 Aug 2026 21:28:31 +0000
Manifest next update: Sun 16 Aug 2026 01:13:31 +0000
Files and hashes: 1: 0CA9C32F7806470F750EC53431D4F322F0851573.crl (hash: Ri2CjAJrMKiCvN/o4T5HMHxHzxxYFRGE14ICsb9PGTU=)
2: 3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (hash: 38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl
rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 01:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:04:b5:98:ac:e1:e1:37:79:0e:e8:94:3b:ca:5f:6c:32:7c:c4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573
Validity
Not Before: Aug 14 21:28:31 2026 GMT
Not After : Aug 16 01:13:31 2026 GMT
Subject: CN=D89083BFEE299171EA931F310216843BEE418FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:68:a6:9b:c7:8b:02:f4:31:40:9f:7d:19:
57:56:4f:51:a9:06:7e:e0:11:7d:75:6f:0d:ca:76:
ca:24:7d:4d:b4:97:6d:72:44:f0:ba:6a:98:47:0c:
14:a6:4b:86:3b:fc:d3:a9:0a:7a:1a:31:08:03:da:
ff:d1:65:42:aa:ec:0a:f0:a2:ec:7c:fd:0c:50:54:
1a:f9:96:a8:d7:64:ac:51:21:60:4d:ec:7d:52:a1:
4e:23:de:bf:0d:b7:7c:b4:95:74:d9:68:14:d9:bd:
3a:9f:fa:8c:34:4d:de:fa:81:1c:59:50:06:31:58:
8b:54:64:f9:c1:0c:80:32:69:7f:44:d8:60:4c:aa:
6a:a2:d3:62:29:e3:fe:d7:93:a1:e8:32:29:a7:44:
e4:90:de:f4:0a:b8:bf:c1:47:31:3c:9c:d6:03:cf:
44:c9:ae:a7:2b:f5:cf:61:d5:4f:ed:9f:c2:21:2a:
06:a6:7c:e1:a8:f4:d2:b0:f0:c6:1c:1a:f7:2d:f1:
10:f1:62:d5:94:eb:20:48:49:b8:2f:95:22:2a:5c:
d3:46:70:16:ae:28:7f:da:5e:71:74:d7:33:94:34:
cf:f9:ae:13:da:95:ce:2e:ca:22:b7:75:f9:19:02:
91:d5:de:10:d2:69:d6:34:33:d9:28:1c:12:cd:bd:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:83:BF:EE:29:91:71:EA:93:1F:31:02:16:84:3B:EE:41:8F:FD
X509v3 Authority Key Identifier:
keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:65:61:77:f9:6d:0a:2b:e5:8c:db:4b:5d:23:79:33:58:b9:
8c:92:4d:9f:9d:b5:8d:f4:c0:3e:d6:9a:41:ba:dd:80:84:63:
c8:13:72:ec:fd:57:9d:ad:bc:98:3d:22:58:52:b6:50:4d:d2:
df:54:fa:69:86:7b:37:b7:ae:c7:e2:b6:f9:7e:9e:d1:3e:12:
4c:bd:ad:cf:92:dc:de:ea:80:97:36:bf:b6:ed:aa:54:fa:b4:
c9:e2:1c:31:44:c1:5d:fc:5d:99:b4:69:4a:bb:6c:2e:d9:9e:
f2:8d:52:aa:ec:77:00:9f:f7:a0:82:11:be:ec:1d:3d:b4:2d:
24:c9:d0:97:4a:93:26:ce:d9:6f:1b:3c:7d:34:5f:71:da:e2:
66:01:69:13:24:3a:7e:ca:e5:a9:ae:10:0b:c0:5f:45:73:0f:
8e:40:95:6b:d3:3a:c7:73:30:49:77:16:ac:f7:2d:cd:c0:42:
0d:07:0d:73:77:e1:4b:f9:c4:56:86:7a:d0:11:15:bb:e3:6f:
00:57:95:be:f0:50:24:1e:f7:d4:ac:a6:73:bf:89:a5:49:04:
05:35:52:c1:b7:b6:fa:e6:b0:c4:e8:43:04:bc:6d:eb:65:da:
21:d3:5b:6f:c2:8b:74:e9:4d:99:09:45:ba:2e:aa:fc:c9:d8:
22:3a:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:33:22 2026 by rpki-client