
$ rpki-client -vvf rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
File: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft (raw, json)
Hash identifier: TMkrzY59VgEZfx/nXy0x68Gi7NCmj4WiV1wq6+GNjuU=
Subject key identifier: B3:2D:EC:3F:BF:D3:20:B4:81:E2:4A:8F:15:3F:78:9B:DC:CF:BA:6B
Authority key identifier: 59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8
Certificate issuer: /CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
Certificate serial: 1A23C49A9714FCF1465D180A1D6FEAC1D01415DB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
Manifest number: 43
Signing time: Tue 30 Jun 2026 07:33:19 +0000
Manifest this update: Tue 30 Jun 2026 07:28:19 +0000
Manifest next update: Wed 01 Jul 2026 08:15:19 +0000
Files and hashes: 1: 3231312e37362e3134342e302f32302d3234203d3e203138303435.roa (hash: XB6CWToOXl9Eprx8O0GqXMHxNfa/u9YN/n5hJCm5JGA=)
2: 59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl (hash: lVYtME+8Vg9UKEH6TXZ/Xiwr2BkXJLp2R5jCm+NAaJs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl
rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 08:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:23:c4:9a:97:14:fc:f1:46:5d:18:0a:1d:6f:ea:c1:d0:14:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8
Validity
Not Before: Jun 30 07:28:19 2026 GMT
Not After : Jul 1 08:15:19 2026 GMT
Subject: CN=B32DEC3FBFD320B481E24A8F153F789BDCCFBA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:47:9e:11:5f:bd:0d:09:a6:2f:41:64:ab:
e5:dc:61:23:95:5e:5a:31:f0:f0:69:df:db:47:dc:
bb:b8:22:8f:e5:2d:29:62:b9:2a:c5:77:65:ba:5b:
b3:0c:16:44:1f:18:5e:b5:a0:53:6a:f6:7e:e2:6a:
52:3f:7a:a8:94:c4:c0:51:9b:b5:fd:76:13:22:4d:
4e:3a:d0:5b:c5:77:ae:42:c9:61:be:7a:a7:19:8e:
e0:e5:6d:4d:b5:1d:e9:a3:01:c7:fa:5f:16:88:a7:
3e:1b:e4:c1:da:ac:53:05:fb:76:d8:38:e7:31:7c:
d6:37:a1:30:fd:c9:09:84:31:42:7d:60:64:a8:6e:
e9:80:75:2e:4d:dc:60:a0:f0:d2:8f:4e:90:b6:f8:
d3:bb:a0:5c:5e:94:c5:d8:a5:fb:e7:f9:2f:05:50:
75:e9:08:4c:78:10:35:8f:e3:38:80:71:f7:a2:94:
bf:ad:44:a0:48:1d:15:a9:0c:d3:d3:b5:41:60:18:
16:23:5c:7e:a2:8f:82:60:61:7b:2e:fa:1f:b3:df:
1d:ae:6e:31:ce:9a:7f:a2:ea:c5:fd:84:9d:32:c1:
2f:c7:28:26:fb:15:6e:59:5e:fb:ba:4d:0c:2e:2e:
bd:c3:a4:51:26:32:e8:3b:22:ad:79:c1:68:cb:bf:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:EC:3F:BF:D3:20:B4:81:E2:4A:8F:15:3F:78:9B:DC:CF:BA:6B
X509v3 Authority Key Identifier:
keyid:59:DA:68:B6:23:93:24:DC:D6:FD:0C:8F:E9:94:9E:2F:7D:E1:FF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SINOPAC/0/59DA68B6239324DCD6FD0C8FE9949E2F7DE1FFD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:15:cd:9f:da:95:34:1b:d0:e5:5f:e9:3e:57:7d:d4:e9:9a:
ac:19:88:64:7a:e7:2d:1b:7c:2c:82:65:48:94:b1:d4:b6:1f:
72:d5:bc:57:15:d9:a2:4f:1a:bd:e1:4f:1a:05:3c:23:00:50:
92:c1:78:30:76:8d:42:d6:31:3c:1c:30:12:d7:44:21:59:77:
25:66:b1:fa:0e:cd:10:a9:1d:10:d7:fc:cc:c5:78:58:a7:84:
33:ac:72:d7:9e:9d:0e:84:80:6e:0c:43:ad:5c:3b:aa:c7:a7:
ac:c1:6a:02:47:64:69:cb:0c:bb:42:7c:6b:09:c7:61:8c:92:
d0:81:53:df:da:02:68:20:0b:5f:f4:de:f3:fa:f2:bd:e1:a0:
d8:09:b5:ed:e4:c1:b8:5e:0d:9a:94:d9:37:13:12:5a:d6:3f:
98:1e:63:56:5d:e7:83:e1:07:9c:69:e7:c5:ab:1a:10:02:81:
11:b7:ca:b8:95:17:2d:e0:db:96:5f:e4:9a:d1:40:30:ba:74:
f1:7b:e6:e5:9e:25:8e:84:17:a1:f3:3b:f0:45:36:41:02:81:
7c:9e:3e:65:6e:d9:98:5f:77:44:85:cc:54:d6:31:15:95:13:
5e:9d:96:a5:90:cd:23:a8:9a:92:a6:8f:16:38:82:60:46:23:
19:da:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:34 2026 by rpki-client