
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
File: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft (raw, json)
Hash identifier: 5BxPeqvNY4qKWsTCY00Rrl85RPvV6yNMpK/drpUfrb0=
Subject key identifier: F6:C9:3D:5B:79:17:94:41:10:8A:85:63:AF:56:7E:A5:CD:2A:DB:E1
Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31
Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631
Certificate serial: 5AC6F75F431109B6131FD19901B7892C970C96FE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
Manifest number: 94
Signing time: Wed 26 Aug 2026 11:48:17 +0000
Manifest this update: Wed 26 Aug 2026 11:43:17 +0000
Manifest next update: Thu 27 Aug 2026 14:03:17 +0000
Files and hashes: 1: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl (hash: Cxn0FBxexfFC409fOtese3qrd3CfPrqVtKU2kniOc0k=)
2: 3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa (hash: Cd6OMIoEih6thkDQvlDIyWr358PSZmpUGiX23euG7pQ=)
3: 3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa (hash: N130VCEwGnahMmdQnEoFsloWsrRvCZQOZhmdArYbsZw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl
rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 14:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c6:f7:5f:43:11:09:b6:13:1f:d1:99:01:b7:89:2c:97:0c:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631
Validity
Not Before: Aug 26 11:43:17 2026 GMT
Not After : Aug 27 14:03:17 2026 GMT
Subject: CN=F6C93D5B79179441108A8563AF567EA5CD2ADBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:e6:44:ec:39:50:d8:5c:37:27:2c:f5:c0:
04:02:e7:b6:3e:02:6c:f0:47:d1:87:29:72:5c:95:
5b:91:77:00:ed:fe:a6:c1:5c:fe:94:2b:fc:08:d4:
7d:0d:0e:3d:7e:7b:9b:52:c4:2c:69:a8:5e:ab:9e:
d8:08:6e:05:00:2f:ea:ea:a9:1a:b4:07:37:7f:2f:
8f:5d:b9:24:99:92:82:01:80:0d:39:9e:88:dd:9c:
bb:09:0d:ea:d9:14:15:b8:ad:fd:2d:40:70:a5:40:
cd:81:8d:b9:bf:f0:92:89:95:e2:49:b7:e6:35:80:
4f:cd:a1:e7:0e:ce:83:7b:73:e3:13:14:1a:1a:4f:
f8:d2:80:cc:df:d2:b8:08:f0:b2:be:06:71:54:04:
39:29:b4:fa:1a:02:e6:e0:b4:8f:8a:b4:32:c4:6a:
62:64:0d:a6:af:fe:f7:98:5e:6e:f1:02:7c:2d:fa:
95:49:ac:55:79:22:33:03:d0:73:a1:5f:c7:04:d0:
58:7d:17:e9:30:cc:31:aa:7e:cc:75:f5:82:12:6b:
a1:34:64:e0:c8:91:f4:a3:0c:9a:dc:63:72:f5:c7:
52:bb:44:ec:bd:b9:9d:25:73:c8:96:00:27:05:23:
21:05:a6:8f:6b:d9:52:2c:c2:15:0c:10:17:9d:16:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:3D:5B:79:17:94:41:10:8A:85:63:AF:56:7E:A5:CD:2A:DB:E1
X509v3 Authority Key Identifier:
keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0d:70:f4:29:32:10:77:8b:f2:3f:55:d4:df:04:17:f0:8f:
59:36:cb:93:68:98:57:2a:ec:d8:ea:51:54:70:d1:96:21:07:
fb:b5:82:39:b0:ac:eb:97:e7:58:99:d7:d8:48:42:8d:5e:6b:
8a:17:0b:15:fb:43:62:9e:8a:7c:c2:36:5e:2d:df:00:d2:6a:
ab:58:46:e1:ec:98:2a:f5:73:57:df:c2:07:f4:47:52:47:96:
14:7b:42:91:c5:0b:8f:d8:c3:c6:34:7d:9e:7d:6f:b0:a8:8e:
ea:b3:12:a1:c2:f5:56:10:dc:20:08:11:06:53:30:29:e6:01:
a6:03:d1:1b:df:58:28:0b:65:47:fb:b6:b9:5d:7a:1b:b1:c9:
f5:4b:a3:7f:d1:b6:ee:cb:1e:84:f7:45:9f:e8:63:d1:55:05:
48:e1:5f:2a:e5:d2:3d:2b:30:32:33:ed:f2:cb:50:98:a3:1b:
fd:cd:66:1c:c5:b6:dc:3e:fa:f0:9f:f7:33:fd:a2:84:e2:89:
6b:d0:88:63:c6:e4:fc:85:20:31:66:0a:44:c8:1c:ab:ff:a7:
70:50:a6:3b:78:49:59:3d:b0:4a:79:a2:5b:57:a6:80:14:11:
54:aa:ce:21:88:49:f7:be:0e:03:36:92:39:7b:75:aa:20:7b:
d6:54:c3:73
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUWsb3X0MRCbYTH9GZAbeJLJcMlv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRC
RkY4QjYzMTAeFw0yNjA4MjYxMTQzMTdaFw0yNjA4MjcxNDAzMTdaMDMxMTAvBgNV
BAMTKEY2QzkzRDVCNzkxNzk0NDExMDhBODU2M0FGNTY3RUE1Q0QyQURCRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUK+ZE7DlQ2Fw3Jyz1wAQC57Y+
AmzwR9GHKXJclVuRdwDt/qbBXP6UK/wI1H0NDj1+e5tSxCxpqF6rntgIbgUAL+rq
qRq0Bzd/L49duSSZkoIBgA05nojdnLsJDerZFBW4rf0tQHClQM2Bjbm/8JKJleJJ
t+Y1gE/NoecOzoN7c+MTFBoaT/jSgMzf0rgI8LK+BnFUBDkptPoaAubgtI+KtDLE
amJkDaav/veYXm7xAnwt+pVJrFV5IjMD0HOhX8cE0Fh9F+kwzDGqfsx19YISa6E0
ZODIkfSjDJrcY3L1x1K7ROy9uZ0lc8iWACcFIyEFpo9r2VIswhUMEBedFgapAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU9sk9W3kXlEEQioVjr1Z+pc0q2+EwHwYDVR0j
BBgwFoAUE4oFSuICMv502kGn0ftmhL/4tjEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz
LzEvMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMy8xMzhBMDU0QUUyMDIzMkZFNzREQTQxQTdEMUZC
NjY4NEJGRjhCNjMxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzEvMTM4QTA1NEFFMjAy
MzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMENcPQpMhB3
i/I/VdTfBBfwj1k2y5NomFcq7NjqUVRw0ZYhB/u1gjmwrOuX51iZ19hIQo1ea4oX
CxX7Q2KeinzCNl4t3wDSaqtYRuHsmCr1c1ffwgf0R1JHlhR7QpHFC4/Yw8Y0fZ59
b7CojuqzEqHC9VYQ3CAIEQZTMCnmAaYD0RvfWCgLZUf7trldehuxyfVLo3/Rtu7L
HoT3RZ/oY9FVBUjhXyrl0j0rMDIz7fLLUJijG/3NZhzFttw++vCf9zP9ooTiiWvQ
iGPG5PyFIDFmCkTIHKv/p3BQpjt4SVk9sEp5oltXpoAUEVSqziGISfe+DgM2kjl7
daoge9ZUw3M=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:05:33 2026 by rpki-client