
$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json)
Hash identifier: q1FwOABpILFBFVybH81dKOaIVPO/mRsylqpsQOWtBEM=
Subject key identifier: 45:A7:A7:16:CF:2D:D2:51:AA:32:E6:36:BC:B1:06:74:E1:30:32:02
Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Certificate serial: 5800BB8D395C25853F4E063C306BA2CBB78664DF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
Manifest number: 83
Signing time: Fri 14 Aug 2026 14:52:06 +0000
Manifest this update: Fri 14 Aug 2026 14:47:06 +0000
Manifest next update: Sat 15 Aug 2026 15:05:06 +0000
Files and hashes: 1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: ecKqziQlgAaReL856ocrZrBTuvsmgFmQSnvxH7bjItk=)
2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 15:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:00:bb:8d:39:5c:25:85:3f:4e:06:3c:30:6b:a2:cb:b7:86:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Validity
Not Before: Aug 14 14:47:06 2026 GMT
Not After : Aug 15 15:05:06 2026 GMT
Subject: CN=45A7A716CF2DD251AA32E636BCB10674E1303202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:9d:c2:60:41:a4:51:e9:07:68:7c:b5:98:
a5:03:48:96:ba:fd:13:eb:c0:ab:2a:ac:31:e9:71:
e3:23:91:24:bb:af:bf:91:2e:47:79:be:95:67:ee:
32:f5:53:91:f0:e6:54:45:65:6f:96:62:53:8e:41:
8e:cc:2d:43:98:8f:8a:86:dd:19:6b:eb:28:95:e8:
5d:19:5a:95:ce:3d:70:fe:07:97:bd:2f:b3:1a:68:
52:c6:17:a6:9a:84:f8:a2:c8:ae:e9:3a:b4:fc:ad:
cd:a8:6d:a7:0d:84:0e:0b:bb:6b:d1:04:41:5f:81:
52:c6:34:59:ef:d7:4a:77:d1:2f:ab:93:16:02:91:
c9:34:42:1a:2d:63:d1:96:8b:f3:28:1b:d8:c9:24:
9f:5e:05:28:3c:c3:8e:45:73:ae:eb:c6:46:75:72:
7e:3d:c2:6d:ef:80:5b:85:d5:cf:ab:b9:b8:96:7e:
f7:35:89:46:72:67:da:a5:e3:1c:36:d5:76:f8:0d:
f2:a6:78:65:d5:d9:b9:39:32:10:43:02:26:f9:fb:
4d:66:21:4c:43:c5:30:ce:2b:0e:3a:8f:47:eb:21:
32:aa:38:77:21:9b:30:49:2a:9c:50:e0:26:54:88:
e5:55:82:33:44:c9:4f:0c:37:64:08:a5:2b:18:96:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:A7:16:CF:2D:D2:51:AA:32:E6:36:BC:B1:06:74:E1:30:32:02
X509v3 Authority Key Identifier:
keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ff:ff:b1:6c:58:b1:04:46:0b:02:bb:69:42:13:b3:69:c9:
e5:35:aa:da:8f:9f:f7:55:0f:13:65:ba:4b:79:dc:06:4b:64:
d0:cc:98:8d:20:69:f0:57:55:06:9e:a9:73:7c:e7:7e:7c:57:
7c:0a:c1:3d:87:bf:f9:13:04:78:be:59:18:fa:25:61:39:72:
e0:2a:da:09:e8:fd:78:92:46:68:1d:8f:b6:73:52:2a:8e:4a:
fa:90:b0:8d:96:29:b5:19:b3:89:a0:43:97:ba:4c:7f:0c:68:
78:38:8c:9b:3d:26:b9:2c:92:2b:7c:8a:2c:c4:53:f5:c4:60:
77:06:23:bc:c3:73:19:2a:4d:2e:90:64:77:8b:ae:c0:ea:f2:
68:1e:d4:a2:c8:b0:12:97:e6:82:29:0f:82:42:ae:8d:c9:3d:
ec:5b:a6:40:19:f5:0a:6c:9a:9c:75:e9:3d:6e:bf:8b:e8:54:
40:58:92:6e:93:8d:42:06:f3:98:8b:37:09:d4:42:65:16:d6:
2a:cb:ad:9d:9d:70:ad:dc:d8:c0:a0:d4:de:34:b2:6b:c3:39:
18:5e:68:48:48:76:42:1f:85:f1:da:7d:e1:05:42:3d:84:6b:
02:f5:0c:6a:a0:eb:f4:cd:ea:fc:d4:c6:fc:25:aa:a5:e5:83:
db:9a:e5:e1
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUWAC7jTlcJYU/TgY8MGuiy7eGZN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5
OTdDNkU4MjAeFw0yNjA4MTQxNDQ3MDZaFw0yNjA4MTUxNTA1MDZaMDMxMTAvBgNV
BAMTKDQ1QTdBNzE2Q0YyREQyNTFBQTMyRTYzNkJDQjEwNjc0RTEzMDMyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTp3CYEGkUekHaHy1mKUDSJa6
/RPrwKsqrDHpceMjkSS7r7+RLkd5vpVn7jL1U5Hw5lRFZW+WYlOOQY7MLUOYj4qG
3Rlr6yiV6F0ZWpXOPXD+B5e9L7MaaFLGF6aahPiiyK7pOrT8rc2obacNhA4Lu2vR
BEFfgVLGNFnv10p30S+rkxYCkck0QhotY9GWi/MoG9jJJJ9eBSg8w45Fc67rxkZ1
cn49wm3vgFuF1c+rubiWfvc1iUZyZ9ql4xw21Xb4DfKmeGXV2bk5MhBDAib5+01m
IUxDxTDOKw46j0frITKqOHchmzBJKpxQ4CZUiOVVgjNEyU8MN2QIpSsYlh+DAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQURaenFs8t0lGqMuY2vLEGdOEwMgIwHwYDVR0j
BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv
MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0
QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw
MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP//+xbFixBEYL
ArtpQhOzacnlNaraj5/3VQ8TZbpLedwGS2TQzJiNIGnwV1UGnqlzfOd+fFd8CsE9
h7/5EwR4vlkY+iVhOXLgKtoJ6P14kkZoHY+2c1Iqjkr6kLCNlim1GbOJoEOXukx/
DGh4OIybPSa5LJIrfIosxFP1xGB3BiO8w3MZKk0ukGR3i67A6vJoHtSiyLASl+aC
KQ+CQq6NyT3sW6ZAGfUKbJqcdek9br+L6FRAWJJuk41CBvOYizcJ1EJlFtYqy62d
nXCt3NjAoNTeNLJrwzkYXmhISHZCH4Xx2n3hBUI9hGsC9QxqoOv0zer81Mb8Jaql
5YPbmuXh
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:29:10 2026 by rpki-client