
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
File: CA678C886D87F023B9297877BF550E88E90AE169.mft (raw, json)
Hash identifier: uyafeQLiziM4RNjs/86zNz61GBtip4GNmKSrx7VpGlc=
Subject key identifier: F8:A7:B7:B2:37:57:A9:2D:3E:00:C5:D9:D9:B2:A3:5B:62:74:35:D8
Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69
Certificate issuer: /CN=CA678C886D87F023B9297877BF550E88E90AE169
Certificate serial: 2443115BC55003D6F6738A86C35955D6E25DAC68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
Manifest number: 82
Signing time: Sat 15 Aug 2026 00:48:57 +0000
Manifest this update: Sat 15 Aug 2026 00:43:57 +0000
Manifest next update: Sun 16 Aug 2026 04:14:57 +0000
Files and hashes: 1: 34392e3231332e33342e302f32332d3234203d3e203231383539.roa (hash: fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=)
2: 34392e3231332e33342e302f32332d3234203d3e2037353336.roa (hash: UiYvDw3Nz5+XLnUJ6ot0sHBwCYvrMQN4qa4YEtJyIAc=)
3: CA678C886D87F023B9297877BF550E88E90AE169.crl (hash: mOSFei0xt1s31hduXtoavzxv/c3AT6Bg3rE4KRPvMbY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl
rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:43:11:5b:c5:50:03:d6:f6:73:8a:86:c3:59:55:d6:e2:5d:ac:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169
Validity
Not Before: Aug 15 00:43:57 2026 GMT
Not After : Aug 16 04:14:57 2026 GMT
Subject: CN=F8A7B7B23757A92D3E00C5D9D9B2A35B627435D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:01:49:ea:99:06:8f:da:60:73:40:53:74:
77:fe:c8:de:57:ec:eb:4c:50:13:83:6f:5c:53:0b:
d4:0c:e9:05:60:50:eb:54:96:12:03:66:45:b9:82:
4c:b2:e6:af:8c:4c:37:04:62:e3:d0:d0:5f:aa:d0:
f8:12:94:da:bf:2a:08:cd:10:19:58:17:6b:ba:c0:
fa:24:f2:d2:dc:3b:28:a7:79:6b:2e:dd:14:f8:8f:
dd:7f:4d:ac:9c:ea:da:df:ac:46:47:b6:de:cc:a6:
b7:d8:48:34:be:16:16:b1:ce:d0:c9:b1:8c:70:e9:
8a:85:b2:1e:ba:37:8a:fa:e4:10:de:0a:84:f9:ed:
0e:48:14:79:6b:83:77:d0:de:c5:e8:58:02:88:59:
c8:2d:4e:12:d9:9c:ee:f3:d3:3e:ba:54:b4:54:e7:
12:94:c3:20:b5:d2:07:b6:f4:3c:9b:48:b1:90:1a:
73:fe:70:f1:78:f8:d1:b3:d3:ca:0d:44:8d:21:9e:
0c:a1:0e:96:24:26:c1:e6:3f:32:84:14:f2:c6:94:
0e:d1:9f:5c:81:1d:24:4f:69:e9:d3:f3:4a:ef:95:
03:a0:36:6d:f5:29:76:63:5f:40:a4:3d:ec:3f:17:
8b:91:4c:1a:0d:ed:6d:b2:15:fb:2d:ae:77:e1:97:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:B7:B2:37:57:A9:2D:3E:00:C5:D9:D9:B2:A3:5B:62:74:35:D8
X509v3 Authority Key Identifier:
keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a0:03:7a:d0:fe:2a:33:a5:f2:a5:56:88:8a:d8:60:13:bb:
82:a7:2f:5b:9f:11:b4:c6:be:81:71:aa:ca:9b:67:13:fc:c2:
af:ea:b0:6b:89:78:32:ab:78:20:ff:30:52:c2:59:cc:59:16:
49:ca:49:00:ce:89:a8:73:fd:67:43:db:2f:d6:18:2c:a6:6e:
88:8d:a3:56:75:97:dc:72:35:19:ae:68:13:75:98:35:44:fe:
43:fa:e7:c7:d1:eb:55:56:37:2b:a2:a1:6d:a8:35:db:6d:97:
b1:18:a5:ca:e4:60:66:9f:83:dc:ec:48:80:10:71:d4:95:60:
3f:ad:80:56:75:32:0c:9b:3f:05:20:05:29:ea:42:15:9b:c6:
a7:14:a8:4c:f2:45:2f:aa:1e:fc:eb:a2:a5:0e:00:dd:b4:aa:
53:c9:7f:bb:e5:2e:91:85:5e:54:58:b6:53:3e:79:11:f6:1b:
47:6c:12:5f:56:85:08:82:a3:dc:bd:1c:7e:f7:31:41:fd:3c:
e2:c7:7c:33:f9:50:a7:24:a7:68:c9:85:0e:34:bd:f3:b5:78:
5d:0a:e1:26:9a:42:25:c1:86:37:af:17:26:3c:3e:ee:bb:04:
82:e2:b5:40:26:7c:91:22:31:8b:bc:c7:04:37:e3:3a:b7:8f:
e4:09:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:34:43 2026 by rpki-client