
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
File: g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft (raw, json)
Hash identifier: v4pb5ZiNdWOYE8yb2qbEhRkCKVPZgAdKY9Ape0JrvVo=
Subject key identifier: 99:49:C4:9D:C8:64:5C:E6:00:E8:EA:0C:24:48:76:20:0B:49:A9:EA
Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
Certificate issuer: /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Certificate serial: 02F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
Manifest number: 02E6
Signing time: Wed 11 Mar 2026 10:54:46 +0000
Manifest this update: Wed 11 Mar 2026 10:54:46 +0000
Manifest next update: Fri 13 Mar 2026 10:54:46 +0000
Files and hashes: 1: frZLp6Fgbt0DRxm9lfre-B7vNG4.roa (hash: Rs2IdH85RiwC1j3ouzrHgnOxmKbOjg7he//GmCo/Dxw=)
2: g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl (hash: OWn2uNN3vRX0q09QHW+U2ivAr9SjjBXhU3h43X3HJlg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 01:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64
Validity
Not Before: Mar 11 10:54:46 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9949C49DC8645CE600E8EA0C244876200B49A9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ee:2c:7a:82:9e:91:78:70:e1:03:aa:dd:65:
79:37:3d:ca:eb:0d:6d:44:73:0b:2e:d6:d9:94:d6:
4a:2c:b9:2b:af:3c:c5:bc:3c:f5:0e:4f:74:a8:18:
06:2c:cb:4e:9c:85:f5:ae:22:b6:69:93:be:92:03:
6a:9c:b0:d4:ff:0a:47:2c:32:d2:81:b5:24:ee:b1:
49:88:5c:65:30:1f:37:b5:1f:c7:39:2f:d8:f5:75:
93:c6:33:af:54:d6:24:e3:79:79:9c:5d:5d:1d:65:
66:4d:6c:ff:d9:d0:56:ee:45:4c:3a:80:c4:06:2c:
b3:0e:a0:fe:69:29:db:46:f1:d1:1d:4f:e7:20:84:
0a:6c:a3:55:11:64:f3:8b:e8:1d:cd:26:bb:0f:d9:
9d:7c:78:30:55:fb:e1:05:f4:a3:36:c7:e7:62:1f:
d6:4d:47:b6:99:7c:7c:8d:e4:1d:31:99:76:94:c5:
3f:57:0f:d3:1c:02:c9:31:53:6e:0b:81:e5:38:23:
f1:54:cf:d3:3c:75:b1:36:07:28:96:63:57:fa:21:
ba:1b:08:0e:4c:92:ba:c9:d1:2d:75:6a:95:8f:24:
aa:b5:00:a7:85:07:22:0d:b6:ea:58:bb:80:fc:ce:
1e:97:8b:a8:72:1a:ea:a2:8c:b5:cb:4b:88:c0:4b:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:C4:9D:C8:64:5C:E6:00:E8:EA:0C:24:48:76:20:0B:49:A9:EA
X509v3 Authority Key Identifier:
keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:85:ad:39:08:bb:17:12:82:88:c4:f2:a2:1e:f5:b5:18:fe:
5c:9f:a7:f7:05:5b:ab:b1:bd:d9:41:6d:01:ad:09:ca:ca:3f:
87:c0:0c:c0:53:81:c2:b3:fe:86:d9:8e:85:95:51:5d:12:bf:
00:73:84:3e:70:78:37:04:8a:62:fd:14:52:8a:9d:c5:6d:44:
ec:2a:d3:f1:79:44:a8:f0:00:9a:27:93:a7:5e:0f:08:50:0b:
ed:c5:87:b0:ad:66:36:c4:ca:99:6f:47:1e:ff:15:49:9f:3b:
d8:64:16:8a:e0:87:d0:d3:fc:6c:53:02:fd:e0:91:e7:54:3f:
a2:ec:6b:bb:3d:fd:14:54:e2:7e:d5:ad:33:c0:a8:57:92:56:
36:69:14:cd:24:d9:73:61:c4:b2:64:fd:18:cc:3a:fb:6e:a9:
2d:85:08:45:b1:bf:ff:ee:41:e9:c2:fd:3f:ad:cf:51:1c:10:
f0:eb:cb:fb:a4:b0:5f:e4:38:58:fa:ad:cb:50:14:6e:3d:04:
d5:17:2a:1b:af:d8:44:41:5b:f8:bf:5c:3e:b9:ca:57:11:17:
ae:50:e3:2d:e7:b4:7c:9b:13:cb:27:26:1e:34:2c:e7:7a:64:
fd:a3:7e:ea:31:7d:90:1f:a5:6a:0b:93:5c:b7:74:d2:d0:dd:
43:ab:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:40:45 2026 by rpki-client