
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
File: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json)
Hash identifier: wctAYMDMiFsuzsl+6FEjlAPAgNgMrZS08C3L4iqqWMw=
Subject key identifier: DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24
Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
Certificate issuer: /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Certificate serial: 0E1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
Manifest number: 0E0E
Signing time: Tue 14 Apr 2026 23:02:27 +0000
Manifest this update: Tue 14 Apr 2026 23:02:27 +0000
Manifest next update: Thu 16 Apr 2026 23:02:27 +0000
Files and hashes: 1: 9Earbhkqa-LgKS3Zg9gzfEBE5p0.roa (hash: Yro1LcI6Kqx48UAAj4bjWnwW3ENJmLQLiXoZ5hUTbAI=)
2: FXF0lO6EKMfGFrxa8tlZrvsmlqU.roa (hash: ffe3eFzQZ5bTVer3tI679pLNLQMpKZnEK747Ju2K6Qk=)
3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: gWL+n6rv/Z782nrcRVSwgyJFDTJT31FVaOmFg59Dw3E=)
4: aoCWMpsnJlxGVgYTo5eKVxrONMw.roa (hash: fnlUiKyutHjmzMA5ysK7pd75qboQLdU1ymUxPVf3zqA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 18:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3615 (0xe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Validity
Not Before: Apr 14 23:02:27 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac:
c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4:
f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96:
d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9:
fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82:
31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0:
64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c:
10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0:
af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12:
1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2:
f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6:
09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc:
72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b:
da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b:
ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15:
12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f:
15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24
X509v3 Authority Key Identifier:
keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:66:d6:53:34:40:4a:91:22:14:82:33:79:5b:e9:ca:cf:
18:d8:25:64:3a:49:1b:fe:8c:82:16:b0:c6:48:30:56:dd:c7:
ca:0b:cd:a8:a7:ae:0c:24:4f:8f:c5:22:ab:a2:89:ef:a9:11:
41:73:41:79:33:75:81:4d:8e:41:82:ee:c2:a9:8c:21:3f:6a:
71:b5:f3:57:0d:66:29:07:c9:18:d7:00:d6:5c:72:c4:b3:ee:
23:b5:d8:bb:ff:24:42:0d:a0:21:92:6f:22:aa:99:39:a9:3b:
51:45:c6:51:63:5d:5f:1a:22:d9:c6:12:82:5a:6d:f7:5f:7c:
ae:66:07:dd:85:a3:87:70:7b:de:2e:22:1e:ba:7e:45:ba:04:
36:7f:49:2f:fd:d9:d9:35:fb:12:1b:f3:e7:a1:d6:d5:fa:07:
30:9c:30:9e:ba:71:6b:20:bf:de:08:8d:09:c3:be:ac:18:1e:
5e:7c:36:b9:31:b1:ef:33:98:d0:01:30:0c:87:93:75:5c:28:
f7:b3:3b:0e:42:3d:eb:e1:66:c6:43:84:dd:70:1c:17:3f:a6:
d1:41:72:2e:3b:a9:6b:de:49:ce:7a:31:b9:8f:e9:c5:a6:2d:
eb:e5:e4:40:0e:c0:39:cd:cd:8e:c4:78:a4:ea:cb:a3:e1:50:
fe:ee:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 17:50:21 2026 by rpki-client