
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier: TO815+GKN0r8BBPukwy/u4cr/dQKkYivwrKAb5D/NnU=
Subject key identifier: 21:D0:07:D6:75:9A:74:0B:78:4C:DA:19:AA:36:DE:AE:4D:FF:69:9C
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial: 465642EB43835B21FFDE588A7827BCDB996BFC8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number: C6
Signing time: Mon 05 Oct 2026 07:42:40 +0000
Manifest this update: Mon 05 Oct 2026 07:37:40 +0000
Manifest next update: Tue 06 Oct 2026 11:06:40 +0000
Files and hashes: 1: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
2: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: Ss+czNiEueNDmGI4HMTOmDQsMVgvFrEHhzZhMWogQj8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:56:42:eb:43:83:5b:21:ff:de:58:8a:78:27:bc:db:99:6b:fc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Validity
Not Before: Oct 5 07:37:40 2026 GMT
Not After : Oct 6 11:06:40 2026 GMT
Subject: CN=21D007D6759A740B784CDA19AA36DEAE4DFF699C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:27:75:90:69:0f:40:be:1c:97:27:a3:a9:
e0:4f:09:5f:ac:b0:de:75:6f:5a:cc:0a:5c:cd:25:
52:33:fc:e3:18:47:d2:31:ae:22:7f:45:e9:bd:9b:
fd:97:c5:05:10:5c:12:76:c1:f3:66:f5:ab:49:53:
99:4f:19:49:47:35:c3:61:67:b1:6e:0c:0b:ed:9c:
5e:d0:e6:36:eb:a5:1e:a4:26:99:93:bb:dd:0a:7c:
dc:33:0b:d4:3b:b8:fe:7a:32:81:a3:52:e6:77:39:
be:25:61:ef:aa:a5:93:ad:9a:20:9b:5b:1f:30:64:
98:f8:63:1b:90:b7:ad:c3:6b:d7:75:5a:e4:a9:fc:
d8:54:77:94:f9:19:ef:01:91:19:56:ca:27:d7:67:
03:0a:53:89:8d:be:b0:2a:d8:a3:68:b0:24:f2:e9:
06:b6:e7:47:4e:01:34:7e:0b:13:ff:1f:bc:b7:33:
92:67:21:d9:91:6c:1b:9e:3f:ba:c0:9f:92:26:fb:
ed:17:fa:25:93:c2:2b:96:d2:12:77:65:c8:45:b8:
a8:20:70:f1:26:d6:5a:de:0f:8c:24:c3:bd:6e:b0:
d3:bb:cd:c6:7b:ea:17:70:94:88:ac:71:79:83:78:
bf:ca:cc:09:7c:61:3d:7a:cb:ef:cb:b2:29:b5:2d:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:07:D6:75:9A:74:0B:78:4C:DA:19:AA:36:DE:AE:4D:FF:69:9C
X509v3 Authority Key Identifier:
keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:bb:3d:4f:ac:83:62:15:41:bc:20:b7:26:61:79:a4:3a:
0d:07:5f:1a:9e:dd:87:0a:98:19:8f:a4:9e:1f:9f:d9:ba:34:
c1:e2:3a:d4:db:4b:44:9a:f3:4a:b5:7f:ea:51:72:75:21:cb:
54:76:d4:25:bb:c2:8f:b5:fc:17:ab:df:a0:22:c4:7a:e0:65:
7c:a2:99:06:c5:05:50:6a:d7:77:cf:1d:3a:02:07:f2:13:91:
51:a1:1c:0f:ae:b0:fb:06:10:07:22:8f:3f:37:a2:c0:7e:30:
04:e6:1f:ae:2f:ed:74:c6:79:f0:c4:0c:6d:17:e9:41:ef:c0:
58:6c:94:6d:99:cb:42:5b:9d:6e:a2:f3:cb:ef:ab:9f:10:1d:
08:55:e5:d1:9e:f3:63:e4:19:1d:9d:b2:5f:f1:e0:ab:31:0f:
b6:36:3f:18:ef:82:9d:a5:71:1f:30:d8:f1:14:21:14:6e:ea:
25:10:d7:e9:94:33:b0:57:f8:94:b6:d3:0e:4c:f9:95:5c:ac:
59:ce:fd:2a:a9:d0:f6:d1:0b:68:b4:f0:a3:ea:08:af:e5:e3:
1c:96:11:3e:bf:48:1b:63:4b:ac:75:2b:63:84:10:17:b6:f9:
e9:fc:f5:22:f2:70:0f:45:47:f0:e0:ae:ee:a3:0c:7f:4d:bb:
d5:28:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:58 2026 by rpki-client