
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
File: D0E0940739C7C8A1E39FA993A159F27901AD1227.mft (raw, json)
Hash identifier: FeupxM++Lw30+VK8ZTm+AmKHsbeMFZwP9iM0fLwLigg=
Subject key identifier: A2:A5:CD:53:7C:7D:65:86:2A:63:EC:29:B7:56:E1:6A:18:A3:C0:3B
Authority key identifier: D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27
Certificate issuer: /CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
Certificate serial: 2CCCE12655B46526EF7DB79169731C4158D9248D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
Manifest number: C3
Signing time: Sun 04 Oct 2026 04:49:12 +0000
Manifest this update: Sun 04 Oct 2026 04:44:12 +0000
Manifest next update: Mon 05 Oct 2026 06:31:12 +0000
Files and hashes: 1: 3130332e3131362e36382e302f32322d3234203d3e20313331363230.roa (hash: tWerSUS/Qx9KODXIEVuQ6THdDgPJm7EehcTbFqVHmsw=)
2: D0E0940739C7C8A1E39FA993A159F27901AD1227.crl (hash: Rz8BHVi0knHkm0JCs1Inyq2/SIvUQ5uyEIDD5m7t7Kc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl
rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 22:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:cc:e1:26:55:b4:65:26:ef:7d:b7:91:69:73:1c:41:58:d9:24:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0E0940739C7C8A1E39FA993A159F27901AD1227
Validity
Not Before: Oct 4 04:44:12 2026 GMT
Not After : Oct 5 06:31:12 2026 GMT
Subject: CN=A2A5CD537C7D65862A63EC29B756E16A18A3C03B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:42:3b:be:0b:33:3e:3c:9d:16:d9:3f:92:
aa:8b:52:7c:49:fe:51:5c:0b:ca:99:30:68:e0:86:
6c:60:87:65:db:7b:43:3f:c1:b1:94:4d:0c:5d:ad:
86:53:1e:88:97:2c:e3:46:e6:7b:bd:7e:9b:08:f4:
1f:37:8f:89:e5:d5:85:97:c9:7d:c4:0f:2f:61:ec:
bb:78:3d:2c:60:22:da:03:20:4f:33:df:a8:84:d7:
86:bd:4b:ef:38:c7:9c:d0:eb:48:d5:ae:69:61:b4:
56:39:ec:78:a8:fa:3b:82:43:40:bb:34:a9:7e:7d:
98:68:5b:5f:9f:0e:ae:67:d9:14:17:a4:27:25:8c:
43:48:51:06:1a:a4:9e:a4:20:ce:c8:1a:07:f0:fd:
cd:71:af:e2:7e:81:27:95:a9:24:63:89:7d:e1:08:
79:d8:5d:f5:70:47:ab:05:b9:8b:fb:f7:09:71:67:
7b:93:e6:2b:10:bd:3d:0a:b4:36:7d:cb:29:bc:57:
2b:e1:44:57:e4:02:eb:92:ec:22:b8:50:85:ea:c1:
9b:7b:e7:b5:76:54:2e:50:24:f6:4f:2e:fb:50:10:
88:11:3f:1c:ec:9d:ab:d2:ca:1e:a0:c7:52:4f:db:
07:6c:3f:c1:85:e5:82:7b:d9:68:a0:2d:3c:ef:51:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:CD:53:7C:7D:65:86:2A:63:EC:29:B7:56:E1:6A:18:A3:C0:3B
X509v3 Authority Key Identifier:
keyid:D0:E0:94:07:39:C7:C8:A1:E3:9F:A9:93:A1:59:F2:79:01:AD:12:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0E0940739C7C8A1E39FA993A159F27901AD1227.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SERVCOMP/0/D0E0940739C7C8A1E39FA993A159F27901AD1227.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:60:69:bc:aa:b4:7b:f3:8e:85:b3:db:db:29:5e:39:75:
eb:68:ad:b2:80:3f:85:c8:62:b6:63:ee:e1:34:19:5c:da:a6:
1f:4e:b7:10:d6:c4:5c:ec:2e:3e:d5:ef:5e:13:3c:0c:83:dd:
12:cc:64:1c:ea:e0:2d:4c:f9:08:99:2a:51:66:3e:27:ea:4f:
b0:ac:8f:be:47:63:7e:80:a7:1d:6d:f2:e5:54:03:90:1a:0b:
15:91:a1:f7:13:f0:ef:f7:3a:82:51:78:0b:10:48:2b:14:7c:
98:09:7b:b5:95:02:0f:e4:79:0d:29:a2:05:68:9b:a1:70:85:
82:a5:47:19:49:96:c6:c2:14:b8:74:a6:0b:dc:11:9b:f6:50:
5d:4a:59:f3:26:25:f0:1f:fc:7d:d3:7b:91:e6:b4:0c:4a:7d:
9f:b5:91:f8:91:2d:f6:2d:64:53:65:b3:1b:19:77:e6:60:7f:
bb:83:f0:f9:5c:76:32:84:1a:d4:07:0e:30:6f:97:14:b6:ae:
c5:b4:6e:cf:24:3b:71:28:4c:49:bc:6f:a1:68:29:36:a3:d1:
9f:fb:d5:58:8e:5b:50:30:44:df:66:ab:8d:e1:0d:c5:3f:0e:
04:6d:d0:a6:54:5c:46:3c:a3:e9:fe:25:31:5a:18:4f:af:1e:
8b:af:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:09 2026 by rpki-client