
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QYCLOUD/MD0Rjx9rjZoJeBEveGKeiaAH62Y.mft
File: MD0Rjx9rjZoJeBEveGKeiaAH62Y.mft (raw, json)
Hash identifier: G8wopsnGWzLlZfbKt3tgm2ap4XztLoWcnoY18SoLDYY=
Subject key identifier: 8E:F8:9A:44:7A:FD:EB:9B:58:FE:E3:84:02:E2:D0:2C:E1:BC:16:1C
Authority key identifier: 30:3D:11:8F:1F:6B:8D:9A:09:78:11:2F:78:62:9E:89:A0:07:EB:66
Certificate issuer: /CN=303D118F1F6B8D9A0978112F78629E89A007EB66
Certificate serial: 04D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MD0Rjx9rjZoJeBEveGKeiaAH62Y.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QYCLOUD/MD0Rjx9rjZoJeBEveGKeiaAH62Y.mft
Manifest number: 04D2
Signing time: Mon 13 Apr 2026 10:32:28 +0000
Manifest this update: Mon 13 Apr 2026 10:32:28 +0000
Manifest next update: Wed 15 Apr 2026 10:32:28 +0000
Files and hashes: 1: MD0Rjx9rjZoJeBEveGKeiaAH62Y.crl (hash: eXvltcG81/yDmql47Z1saul6jFRjzzC+TjiUEQqyj2A=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/QYCLOUD/MD0Rjx9rjZoJeBEveGKeiaAH62Y.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/QYCLOUD/MD0Rjx9rjZoJeBEveGKeiaAH62Y.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/MD0Rjx9rjZoJeBEveGKeiaAH62Y.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 23:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303D118F1F6B8D9A0978112F78629E89A007EB66
Validity
Not Before: Apr 13 10:32:28 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8EF89A447AFDEB9B58FEE38402E2D02CE1BC161C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:23:ea:90:dc:b3:2a:b9:08:7a:b3:84:58:
aa:72:46:17:7f:92:5b:db:a9:8a:d9:15:87:d6:c8:
84:1f:d5:f0:51:7f:f7:61:24:5b:7a:7e:8e:2c:e5:
20:2c:c9:27:08:a3:8c:2a:dc:eb:35:61:54:5d:ca:
fd:70:ed:f4:54:06:46:88:13:9a:15:1a:45:b8:77:
99:6d:ee:9b:3b:50:6b:b1:dc:e6:1b:c1:d4:c3:2e:
b2:f8:c7:07:b4:58:cd:3c:31:ab:06:77:12:e4:b3:
98:ab:0f:17:93:89:36:46:90:f3:e6:c1:7b:1a:be:
e9:09:6d:52:53:f8:dc:a9:9b:8d:91:44:e7:af:51:
6d:ce:ab:39:37:e1:83:9f:b8:da:57:07:bd:25:63:
c3:c5:a0:ca:22:4d:51:9c:9d:39:2e:a6:cc:86:b6:
0c:f5:1f:39:3a:27:0c:16:a5:b7:60:c5:0f:68:45:
21:fe:00:3e:16:22:53:29:30:cd:03:0f:44:af:7f:
c8:ea:6a:24:ed:0f:09:5a:ec:1e:8e:5c:4d:cd:c8:
7c:5c:49:38:e2:02:87:e7:15:a8:08:a2:a0:a1:9b:
00:ed:3d:71:3e:11:ec:39:00:c8:b9:96:ae:f6:b9:
66:a8:9f:0a:a6:4c:d2:77:be:9f:7c:25:7b:dd:1b:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F8:9A:44:7A:FD:EB:9B:58:FE:E3:84:02:E2:D0:2C:E1:BC:16:1C
X509v3 Authority Key Identifier:
keyid:30:3D:11:8F:1F:6B:8D:9A:09:78:11:2F:78:62:9E:89:A0:07:EB:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QYCLOUD/MD0Rjx9rjZoJeBEveGKeiaAH62Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MD0Rjx9rjZoJeBEveGKeiaAH62Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QYCLOUD/MD0Rjx9rjZoJeBEveGKeiaAH62Y.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:7a:a9:ff:83:88:51:99:f5:ba:a5:fa:ad:b2:8d:e1:4c:1d:
81:67:bf:b8:b8:52:9f:1c:f3:58:db:f3:4c:97:d2:59:df:5f:
64:e5:ef:be:af:b4:18:68:8e:52:bb:18:2c:7f:01:4c:c3:0b:
72:30:02:4b:aa:f1:1f:bc:d7:a3:fc:9b:57:36:12:5e:9a:2f:
3c:8d:5c:6e:ff:2d:d7:07:6e:54:a1:8a:bd:93:64:6e:0f:ba:
02:ba:b7:ed:e6:82:c3:59:69:b3:90:3a:b9:b9:09:6e:81:8a:
c9:9c:b8:65:ff:b1:e0:b6:9c:27:03:76:9f:eb:37:c7:5c:ac:
b4:7f:1c:40:74:1d:28:51:df:28:a7:dc:7e:af:9a:1a:af:66:
2e:8c:62:30:60:57:3b:10:49:46:46:09:45:9b:1f:5c:07:0e:
cc:05:2e:8c:00:40:dd:99:cc:ff:e0:1a:85:06:f2:78:04:9b:
df:5b:b2:08:4d:58:c1:9b:e3:3b:56:d2:02:c6:6b:89:65:15:
d0:f2:11:ed:bf:94:bb:7b:d9:9e:ab:3a:53:ae:f6:36:21:4f:
5b:e6:37:2d:6f:3e:ce:00:e3:cf:06:b5:7c:21:aa:5b:0a:95:
bf:3f:4f:8c:0c:8c:be:c3:f9:ba:18:14:40:36:4a:73:7d:c8:
88:ce:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 20:38:55 2026 by rpki-client