
$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft
File: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft (raw, json)
Hash identifier: pDTbv2Jcc0Lk+ToXnWYX5TzTV94YSspeYAnbyWUR6wY=
Subject key identifier: 55:1A:01:37:1B:0A:C8:73:F6:22:A1:B2:C8:79:75:E3:DE:F7:B9:62
Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3
Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3
Certificate serial: 1A9098796BEB33E7D7AE0420D42FC57DD46C7489
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft
Manifest number: 84
Signing time: Sat 15 Aug 2026 00:33:55 +0000
Manifest this update: Sat 15 Aug 2026 00:28:55 +0000
Manifest next update: Sun 16 Aug 2026 01:24:55 +0000
Files and hashes: 1: 3130332e3131372e3133322e302f32332d3234203d3e203231383539.roa (hash: V7xrPLp5f+XdiNXnNwOKJbYVBx4iv5pqsU5W1y0I9ac=)
2: 3130332e3131372e3133322e302f32332d3234203d3e2039363737.roa (hash: L4VMPfmAF+ujWD/W3Q/uT3gBZ3GdNZkDF1QTrHGw11I=)
3: 3130332e3131372e3133322e302f32332d3234203d3e2037353336.roa (hash: AS3qH/RjBUke7M3rlCKwKKx7OXc4/iKqzu9OBdcpsSg=)
4: 21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl (hash: RZkqMmWPs/QUy2Z675CqhuVtebFat+Uv8swvTCRUyOY=)
5: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (hash: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl
rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 01:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:90:98:79:6b:eb:33:e7:d7:ae:04:20:d4:2f:c5:7d:d4:6c:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3
Validity
Not Before: Aug 15 00:28:55 2026 GMT
Not After : Aug 16 01:24:55 2026 GMT
Subject: CN=551A01371B0AC873F622A1B2C87975E3DEF7B962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:e1:cf:e4:c8:5c:bd:c2:9c:62:ad:94:4a:
54:02:d2:b5:13:b9:98:b0:96:c4:18:e2:8a:16:05:
cf:4a:f5:e8:1a:58:04:74:69:f3:f2:f8:53:41:af:
99:f8:c2:07:64:e9:28:9d:28:a1:aa:0e:72:f0:c7:
c8:69:3c:56:64:e4:96:42:c6:ae:5b:32:d7:01:c9:
ef:c5:3f:de:a9:a1:96:4e:de:4c:b9:38:6b:30:08:
5c:17:e6:3b:22:91:5c:00:99:a2:78:18:45:58:f6:
3e:e9:e7:db:27:b5:94:7d:31:01:8a:9d:6e:89:ee:
e2:9d:2f:53:6d:ee:6f:50:b8:88:79:bb:8e:71:88:
53:be:23:14:30:fb:19:ed:55:6f:98:00:cc:7b:fd:
6d:25:8b:b2:73:58:ef:71:16:f3:93:cd:30:97:3a:
7a:53:11:eb:ec:b9:26:e8:2a:ea:10:5f:f8:5b:93:
fe:35:a9:82:a0:a5:b9:a1:e6:3b:37:1e:da:8f:24:
89:f6:d2:27:5c:5f:e2:24:d9:12:75:75:f1:be:91:
2f:8e:77:88:ee:f8:87:c0:c3:fd:b4:d8:41:d1:64:
94:27:9c:13:3e:89:0a:25:f6:f2:2e:fe:73:1f:ad:
68:61:89:de:6e:b4:4b:81:e8:33:cd:c2:72:1e:9f:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:01:37:1B:0A:C8:73:F6:22:A1:B2:C8:79:75:E3:DE:F7:B9:62
X509v3 Authority Key Identifier:
keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:70:f2:61:e5:a4:ef:30:70:b0:73:4d:1d:27:ac:45:c9:
be:b6:88:08:3a:91:f0:80:f5:25:87:dd:ec:8c:ec:75:97:96:
5f:a5:35:67:44:8b:8f:0a:46:7a:21:06:a0:7e:ad:22:62:df:
44:0d:8e:54:8b:fd:b2:1f:2f:e7:a0:25:72:d0:c9:82:35:27:
58:ac:39:f9:0a:ad:ae:6c:02:c8:c1:43:37:ea:2e:10:ca:52:
43:bc:bb:7e:cb:e4:29:d0:21:4c:44:c3:21:b0:04:cf:52:dc:
5f:66:54:4b:ed:7b:4d:30:e9:6a:d1:a6:f1:10:ef:77:e6:47:
9d:17:aa:f6:74:a0:f7:01:d6:80:48:f3:cf:20:6c:51:43:33:
c5:02:a7:fd:ed:c0:27:16:7f:5a:79:61:56:e3:ca:de:2f:76:
9d:e9:90:c3:aa:fb:08:ae:4b:f3:4c:77:31:b2:82:fb:ff:b0:
78:e2:4e:f7:3f:e2:ab:0d:d3:9a:80:cb:92:56:d8:75:15:a3:
6b:7b:1f:11:cf:a1:b5:53:28:02:24:9f:b5:9b:5a:4d:69:8e:
bc:03:44:c5:98:6d:9b:10:ec:ac:22:a5:08:bc:05:c9:e6:21:
e1:16:45:7f:95:fb:a3:94:dc:ff:03:0b:96:db:e7:56:81:df:
4d:27:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:05 2026 by rpki-client