
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
File: 0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft (raw, json)
Hash identifier: vgZOCeEHPVl0Vx1C/BvBb2Y0ISG5NxiktGC4givuQCc=
Subject key identifier: 6B:7A:A9:87:0F:52:85:A8:70:AF:F3:2B:E9:5C:D3:AE:82:39:A1:92
Authority key identifier: 0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
Certificate issuer: /CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
Certificate serial: 7915368E7F18B7FAB8D91DE7272905EFD49D20F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
Manifest number: CA
Signing time: Wed 07 Oct 2026 14:08:11 +0000
Manifest this update: Wed 07 Oct 2026 14:03:11 +0000
Manifest next update: Thu 08 Oct 2026 17:35:11 +0000
Files and hashes: 1: 3130332e3136312e37392e302f32342d3234203d3e20313331323733.roa (hash: YAFpG1/bPoaxYEeGXLp+QJ9xPDcGgfmJ/UlyMfUItNA=)
2: 0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl (hash: eqMnZ9j7TZhaKNmy1P8CtkuP/XVxIgpuZoH3J5klXWg=)
3: 3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa (hash: C7eNmWkgWq7ZRC4sPl4B5Q7nePEgx3UhGfhX2eQZEcc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl
rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 14:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:15:36:8e:7f:18:b7:fa:b8:d9:1d:e7:27:29:05:ef:d4:9d:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
Validity
Not Before: Oct 7 14:03:11 2026 GMT
Not After : Oct 8 17:35:11 2026 GMT
Subject: CN=6B7AA9870F5285A870AFF32BE95CD3AE8239A192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:82:e6:5f:3f:c4:e6:1d:6e:43:96:f5:dc:
60:9d:9d:54:1c:97:c4:e0:00:6a:ce:0f:7e:bd:b0:
95:79:86:b3:64:02:6f:46:53:09:c2:e5:95:ba:a5:
14:e2:4b:c9:99:4b:65:04:c1:66:4f:53:c6:96:24:
f0:c1:11:a4:6a:cb:fb:fb:bd:18:0d:3b:14:7b:33:
d4:ca:a8:32:ca:20:46:94:0f:d2:4b:bf:26:ee:76:
f4:7c:35:70:29:c6:6c:87:34:46:9a:20:bf:e2:89:
b8:09:df:73:d2:fd:d6:3c:e5:ce:91:1b:38:0b:a5:
cb:8c:78:54:fb:20:4f:f3:48:0b:f1:d6:18:1d:db:
8d:f9:73:f8:ac:2d:58:9f:00:1b:02:1e:6a:83:b6:
79:a1:dd:72:de:78:60:47:7f:e7:fa:02:a7:19:0d:
a7:02:e8:fa:57:d2:99:e8:43:a5:74:09:93:63:08:
90:a2:6e:b1:cc:a8:72:55:c5:8c:ca:e6:d0:3a:7a:
4b:91:1e:8b:07:33:92:65:fb:51:b5:4a:40:c0:c9:
61:ae:e5:fd:77:8e:33:9c:f3:38:8e:66:43:3a:7c:
da:64:41:08:41:4d:32:c7:8f:b7:2a:17:cf:82:f5:
25:bc:6d:5a:c5:77:96:32:97:52:0f:88:a2:6d:57:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7A:A9:87:0F:52:85:A8:70:AF:F3:2B:E9:5C:D3:AE:82:39:A1:92
X509v3 Authority Key Identifier:
keyid:0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:2a:ba:2b:78:7c:6d:49:cb:2b:cf:47:95:6c:7d:95:86:
9e:6a:df:37:cf:a0:97:99:13:16:16:3b:86:83:55:f7:fb:b7:
4d:1d:a3:11:b3:49:6b:8e:a2:4b:78:bd:97:e8:b2:7c:e4:39:
97:de:a4:d9:ad:fb:5d:cf:47:3e:22:d4:af:9b:42:ec:30:3f:
3a:88:ff:b6:14:4a:f9:2e:15:c0:96:d8:0e:6b:f2:72:8d:df:
8b:f4:7c:4c:bd:ab:43:4f:1e:8a:5f:66:af:80:11:67:b8:1b:
f2:62:52:d8:2f:c1:7f:a3:76:a4:2d:85:c7:1c:19:41:e0:2b:
6d:a3:f9:74:fa:fd:26:3f:ef:ac:3e:4e:fc:33:fb:ed:2c:ff:
e9:17:28:69:bd:d4:c5:7f:78:cc:78:c7:2d:fb:ef:1c:53:90:
14:72:e3:53:fb:4d:4b:54:62:2d:24:ff:82:47:92:7b:06:4c:
1b:81:f2:6b:2c:4e:b6:6a:b4:19:2e:58:1d:10:7e:e3:b7:15:
91:f7:02:b9:6a:b4:e6:ee:55:82:8b:2b:8d:e1:8c:8e:60:3a:
ed:4d:40:80:4b:a6:8c:53:9e:cc:1e:11:5b:2b:b0:89:bb:87:
9d:c4:48:f2:73:a3:0b:c9:66:5d:de:c5:94:83:a1:3c:93:51:
75:cb:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:51:47 2026 by rpki-client