
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
File: 4592562459B88E861D7E40B269B64ECC6927CDE5.mft (raw, json)
Hash identifier: 6XYyj7IsT+kYugYyKyQgvCc8EMeKf1WdSOJOenhKCZU=
Subject key identifier: BA:01:F4:BB:1A:AB:8B:ED:BE:02:13:E3:BD:16:4C:36:67:20:D7:27
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial: 79D8875F6B5593FF3DDC0486264E5E5050217F8B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
Manifest number: 84
Signing time: Sat 15 Aug 2026 03:14:10 +0000
Manifest this update: Sat 15 Aug 2026 03:09:10 +0000
Manifest next update: Sun 16 Aug 2026 04:33:10 +0000
Files and hashes: 1: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (hash: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=)
2: 4592562459B88E861D7E40B269B64ECC6927CDE5.crl (hash: QqRUHpJEkbH3LZ+yteFG/LaPNhhdzDmt1Kvd0qvVzuY=)
3: 323430353a666263303a3131313a3a2f34382d3438203d3e2039363738.roa (hash: joPc3+MjFuw7kL3yGQZOnak472nktiLP+PUKx5xfoZI=)
4: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (hash: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=)
5: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (hash: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d8:87:5f:6b:55:93:ff:3d:dc:04:86:26:4e:5e:50:50:21:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Validity
Not Before: Aug 15 03:09:10 2026 GMT
Not After : Aug 16 04:33:10 2026 GMT
Subject: CN=BA01F4BB1AAB8BEDBE0213E3BD164C366720D727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:8c:32:f3:c2:b3:df:9e:c7:7b:e0:31:d4:
f7:b2:3a:b0:05:d6:1e:34:19:1e:3e:d8:fb:5c:13:
4a:a5:8f:4d:c4:0f:30:18:4c:41:9f:e8:4f:21:44:
09:f9:56:a3:71:97:a0:d0:ef:41:91:db:ab:41:a7:
1c:12:0e:13:75:a8:69:62:41:79:db:e3:2c:7e:38:
3c:a1:d4:19:6d:87:a7:e3:17:0a:23:bf:6d:5e:74:
ba:d7:fd:43:aa:11:b5:1e:4f:35:2a:52:32:a6:8a:
4f:58:5e:0c:ff:75:ba:59:68:d5:ad:d4:9e:6c:76:
c0:34:b9:8c:d6:4d:a5:5f:62:0a:6f:97:d2:0e:7a:
e5:25:84:49:df:0c:20:5e:9f:49:cf:2f:ca:c3:fa:
76:45:b8:ab:3a:f3:80:58:f0:d7:dd:ae:bd:a0:13:
3a:bd:e5:ab:e1:6b:8c:e7:a4:d5:c5:3c:9b:4b:0a:
20:68:45:3e:f8:2b:2b:5b:a6:1f:35:3f:41:34:4c:
25:e2:4d:85:79:5d:d5:fa:f6:25:36:3c:a5:14:01:
c0:03:b5:ae:4e:43:69:79:e7:b2:be:f1:c6:cc:94:
7f:e3:9d:02:82:c4:a5:41:a2:59:e4:89:98:52:21:
61:28:8f:a5:ac:80:60:ee:c6:76:8c:38:31:8b:8c:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:F4:BB:1A:AB:8B:ED:BE:02:13:E3:BD:16:4C:36:67:20:D7:27
X509v3 Authority Key Identifier:
keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:45:fb:d3:cf:bb:bd:ab:27:5b:f0:f7:d2:8a:25:0f:40:
1e:4e:c3:26:30:96:97:54:61:b6:28:4a:a5:ea:53:e2:a5:d4:
d5:56:19:a2:82:ed:3a:64:22:f0:a4:3a:f5:66:40:0c:29:70:
ca:0b:d9:e5:af:33:0e:bc:fc:57:ec:8e:10:b9:a7:59:6a:64:
de:8c:52:2d:8e:a8:9c:55:c1:b3:14:68:c3:b4:94:93:56:d8:
b8:8d:f7:a5:53:ba:dc:c4:46:ce:70:f8:ce:5f:cc:58:c3:0f:
e1:79:77:6b:7c:f2:db:23:e6:e0:5c:59:ee:c3:71:db:bd:5d:
0e:2a:d5:3e:97:51:47:01:9d:90:27:3a:53:30:f3:c0:39:ad:
35:1d:fa:b0:8b:20:44:65:5e:41:b2:f0:c8:4b:95:d0:45:ae:
18:48:98:fc:f1:eb:59:95:9b:56:d4:b3:bc:ee:15:9e:4f:21:
05:35:cc:eb:40:65:a7:05:ab:c7:10:53:43:ab:e9:20:b7:fe:
2f:ca:57:b1:b3:f9:8d:85:fa:49:77:f2:69:5f:25:7b:43:11:
af:c2:be:12:1f:63:04:f3:85:05:c5:1c:90:92:ce:38:f2:9e:
ad:12:ad:12:19:6b:a7:4d:64:a4:b8:66:c3:de:c3:cf:35:d9:
7e:4f:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:48 2026 by rpki-client