
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
File: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft (raw, json)
Hash identifier: zUgnzZ+8wfA+UcSNlIG5c37k9IDMG2Ur1ktXRAWjch0=
Subject key identifier: CD:AE:C1:7F:B4:85:9A:D3:4D:CA:C3:5E:4F:E5:7F:E7:38:8F:09:4B
Authority key identifier: 5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D
Certificate issuer: /CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D
Certificate serial: 727B3AF9875941469F5244A564F94ABCBC14E441
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
Manifest number: 0A
Signing time: Fri 15 May 2026 22:12:44 +0000
Manifest this update: Fri 15 May 2026 22:07:44 +0000
Manifest next update: Sat 16 May 2026 22:29:44 +0000
Files and hashes: 1: 3136302e3138372e3230302e302f32342d3234203d3e203338303437.roa (hash: y6F85fIDPHVAvBtzdu5R7Sx6xIWYFOo9//jso0kPGMs=)
2: 5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl (hash: 95uvCap+SmqW1GezNOkL+icmOVEGodFy5Au2fJ3QUAk=)
3: 3136302e3138372e3230312e302f32342d3234203d3e203632353137.roa (hash: 8yHvYhdJJ9fLsL7Jt/4h751xCSPOoZp026K/sE/wCVc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl
rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 16 May 2026 21:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7b:3a:f9:87:59:41:46:9f:52:44:a5:64:f9:4a:bc:bc:14:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D61A267754DE88CD8451A63D9D2285FD5AF457D
Validity
Not Before: May 15 22:07:44 2026 GMT
Not After : May 16 22:29:44 2026 GMT
Subject: CN=CDAEC17FB4859AD34DCAC35E4FE57FE7388F094B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:8c:06:a2:20:ee:d5:32:bd:35:9e:c8:61:
e4:6b:f0:c6:5f:99:0c:5f:7f:0f:12:70:bb:96:62:
96:dd:1c:6c:41:73:8f:a1:3b:3c:2b:f5:ea:b7:e6:
dc:22:b4:f5:da:2a:bd:fa:a4:fa:34:39:83:13:52:
31:57:60:4f:95:2a:5d:e0:65:a4:8d:04:96:cf:4d:
f5:9f:8b:5c:69:45:49:4c:01:4b:6c:da:b1:c5:e0:
ec:40:4f:6e:57:f9:3c:53:35:cf:2d:f2:11:61:3b:
80:dc:0a:4c:69:eb:8b:ec:d1:60:0a:96:16:5d:47:
70:1d:05:40:c8:33:91:80:0a:7c:be:13:4c:d3:a7:
06:67:ba:b0:71:30:d7:af:3a:4f:db:60:7a:53:05:
4e:da:e1:53:e5:86:09:6a:5a:20:1a:f8:50:2d:d0:
21:2e:e2:54:64:53:86:fb:d4:89:c9:ff:30:ce:f5:
54:d6:9e:0e:a2:74:94:9c:6a:a9:4c:b0:2d:5b:7a:
48:f8:f7:31:ff:dd:50:d4:e4:e9:36:6c:56:9f:de:
7e:e7:d1:99:e8:3d:21:c6:1f:90:2a:f3:f8:a8:f0:
fb:3f:89:f9:3b:ae:ea:75:d5:87:f5:4d:32:10:39:
ce:55:ec:cb:ef:e2:1f:18:19:70:c7:f5:f2:bd:58:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:C1:7F:B4:85:9A:D3:4D:CA:C3:5E:4F:E5:7F:E7:38:8F:09:4B
X509v3 Authority Key Identifier:
keyid:5D:61:A2:67:75:4D:E8:8C:D8:45:1A:63:D9:D2:28:5F:D5:AF:45:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/5D61A267754DE88CD8451A63D9D2285FD5AF457D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWAN_NO1/1/5D61A267754DE88CD8451A63D9D2285FD5AF457D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ba:1b:97:bf:0f:56:fe:1a:52:43:bd:fd:5e:98:7f:f2:19:
e8:bf:1e:9d:97:23:c0:e1:15:35:c8:75:8f:5d:3e:e5:5c:eb:
3a:64:d0:99:e2:8f:fe:0a:7c:73:4d:33:db:f7:cf:a3:b5:cf:
b7:1d:12:e1:c7:77:5f:8c:39:c2:7e:7c:6d:5b:a3:3f:5a:0e:
79:05:df:31:c4:0b:be:6e:b0:77:24:a8:c5:30:25:db:4c:e9:
0e:04:64:41:fa:75:5b:8b:e0:4a:cf:c9:1c:27:95:b2:e5:7b:
c0:a7:77:ea:03:0c:6b:68:79:12:fc:62:76:b3:42:8a:6b:0c:
ef:34:c0:08:6f:29:d4:38:f3:d3:18:d2:54:27:7b:88:17:8e:
b7:d6:a3:cd:b2:e9:f7:09:d8:25:04:d1:9d:6c:19:f0:85:45:
94:c4:2a:b2:94:20:df:bb:b0:58:a0:c8:e3:64:36:a3:e1:ea:
b7:58:2b:0b:78:c1:ee:4d:15:2a:cc:56:d6:40:87:01:68:74:
dd:14:fb:92:62:f5:d4:1a:b1:5a:c8:d2:ae:ca:6f:ef:c2:1a:
01:a5:09:78:4d:48:05:45:19:f3:99:15:19:0d:d1:dd:ee:c2:
af:82:3f:78:de:b4:d4:91:67:b1:89:76:0a:fb:3d:d0:60:93:
b5:0e:74:ec
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcns6+YdZQUafUkSlZPlKvLwU5EEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ2MUEyNjc3NTRERTg4Q0Q4NDUxQTYzRDlEMjI4NUZE
NUFGNDU3RDAeFw0yNjA1MTUyMjA3NDRaFw0yNjA1MTYyMjI5NDRaMDMxMTAvBgNV
BAMTKENEQUVDMTdGQjQ4NTlBRDM0RENBQzM1RTRGRTU3RkU3Mzg4RjA5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jowGoiDu1TK9NZ7IYeRr8MZf
mQxffw8ScLuWYpbdHGxBc4+hOzwr9eq35twitPXaKr36pPo0OYMTUjFXYE+VKl3g
ZaSNBJbPTfWfi1xpRUlMAUts2rHF4OxAT25X+TxTNc8t8hFhO4DcCkxp64vs0WAK
lhZdR3AdBUDIM5GACny+E0zTpwZnurBxMNevOk/bYHpTBU7a4VPlhglqWiAa+FAt
0CEu4lRkU4b71InJ/zDO9VTWng6idJScaqlMsC1bekj49zH/3VDU5Ok2bFaf3n7n
0ZnoPSHGH5Aq8/io8Ps/ifk7rup11Yf1TTIQOc5V7Mvv4h8YGXDH9fK9WDH3AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUza7Bf7SFmtNNysNeT+V/5ziPCUswHwYDVR0j
BBgwFoAUXWGiZ3VN6IzYRRpj2dIoX9WvRX0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJV0FO
X05PMS8xLzVENjFBMjY3NzU0REU4OENEODQ1MUE2M0Q5RDIyODVGRDVBRjQ1N0Qu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzAvNUQ2MUEyNjc3NTRERTg4Q0Q4NDUxQTYz
RDlEMjI4NUZENUFGNDU3RC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RBSVdBTl9OTzEvMS81RDYx
QTI2Nzc1NERFODhDRDg0NTFBNjNEOUQyMjg1RkQ1QUY0NTdELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
sLobl78PVv4aUkO9/V6Yf/IZ6L8enZcjwOEVNch1j10+5VzrOmTQmeKP/gp8c00z
2/fPo7XPtx0S4cd3X4w5wn58bVujP1oOeQXfMcQLvm6wdySoxTAl20zpDgRkQfp1
W4vgSs/JHCeVsuV7wKd36gMMa2h5EvxidrNCimsM7zTACG8p1Djz0xjSVCd7iBeO
t9ajzbLp9wnYJQTRnWwZ8IVFlMQqspQg37uwWKDI42Q2o+Hqt1grC3jB7k0VKsxW
1kCHAWh03RT7kmL11BqxWsjSrspv78IaAaUJeE1IBUUZ85kVGQ3R3e7Cr4I/eN60
1JFnsYl2Cvs90GCTtQ507A==
-----END CERTIFICATE-----
Generated at Sat May 16 04:48:13 2026 by rpki-client