
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
File: U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft (raw, json)
Hash identifier: i64cQPjdYnlt2iFaTvl7+Nubna1+HHXflHIpWQTKdIA=
Subject key identifier: 8B:CF:9A:17:20:F5:F3:38:5D:2E:74:23:1D:E4:57:15:25:E4:C7:45
Authority key identifier: 53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5
Certificate issuer: /CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5
Certificate serial: 027D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
Manifest number: 027D
Signing time: Tue 28 Oct 2025 17:57:11 +0000
Manifest this update: Tue 28 Oct 2025 17:57:11 +0000
Manifest next update: Tue 28 Oct 2025 23:57:11 +0000
Files and hashes: 1: U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl (hash: tXqmEe8l8XHpisidAHTbXnjQu1KixSWA2U8fClnCEAw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 23:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53906E2E2EFE7491DB19B1C209EA178C39A0DAE5
Validity
Not Before: Oct 28 17:57:11 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=8BCF9A1720F5F3385D2E74231DE4571525E4C745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:a5:3f:4b:26:51:f8:59:a2:01:cc:24:7a:
56:fe:69:eb:2d:0e:e9:54:ee:fc:bb:3a:c4:0a:9c:
5a:da:2c:8a:ac:6d:2b:48:9f:68:5f:9a:0b:9f:50:
7e:d5:a1:86:e2:a8:c1:d4:2d:4c:19:5d:09:04:bf:
4d:e8:bf:6d:0a:73:6b:68:52:e8:6f:16:de:39:35:
43:b1:10:97:de:d8:cb:b8:f0:83:d4:d0:20:42:37:
3b:3b:5d:dd:36:0e:73:6f:44:cf:36:22:a9:45:c2:
51:7d:d9:2a:74:a1:4a:b1:2c:05:0d:96:e1:0b:ae:
3c:58:6d:e9:35:80:99:53:1c:61:4c:92:84:53:84:
59:2c:36:bb:b6:32:6f:a6:cb:e7:40:e5:2c:4d:9b:
21:1d:e9:78:14:0b:bf:f8:b0:c4:07:a3:5e:7a:73:
60:84:d4:c2:bd:08:41:da:fe:ad:4e:44:59:9b:f5:
ec:b9:5b:21:01:e7:9b:9b:1b:d7:9d:22:3c:c9:1e:
87:a6:d0:02:3a:91:23:b4:94:4e:11:43:b0:5f:d3:
c3:a0:c2:e5:db:22:2e:60:bc:19:2e:08:94:25:94:
6b:ff:78:2f:2f:9b:2a:24:99:54:da:76:71:70:26:
8d:5c:07:3a:8b:fa:34:61:44:7e:8d:0f:92:c6:d3:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:9A:17:20:F5:F3:38:5D:2E:74:23:1D:E4:57:15:25:E4:C7:45
X509v3 Authority Key Identifier:
keyid:53:90:6E:2E:2E:FE:74:91:DB:19:B1:C2:09:EA:17:8C:39:A0:DA:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U5BuLi7-dJHbGbHCCeoXjDmg2uU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/U5BuLi7-dJHbGbHCCeoXjDmg2uU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:32:66:6f:8f:15:01:60:a7:42:4d:3a:b5:f1:c4:6a:55:6f:
f1:d3:39:da:e5:eb:6c:0f:55:a2:06:23:9b:05:bb:55:d8:ba:
be:e3:eb:a9:2b:98:4c:3f:75:d9:8d:d6:24:12:59:97:ee:b2:
ce:56:ae:a8:3e:ce:0c:09:a7:15:82:02:56:c8:81:56:df:0c:
ea:f4:19:ee:8d:fc:72:72:51:cd:b0:69:2e:0b:d9:69:10:02:
06:0f:1c:87:6d:7d:05:e6:99:f0:f5:d6:dc:34:17:ff:1f:fe:
28:38:c4:b2:a3:30:ba:0a:52:36:7f:c7:6a:f4:1e:d7:f7:75:
07:52:18:2e:5d:44:3f:1a:b0:a3:1d:9f:d2:e9:05:5d:3f:fc:
9a:e2:c6:59:bb:33:68:9a:aa:b9:dd:f6:66:11:78:0c:83:7d:
77:c4:db:55:8d:d3:42:95:13:aa:19:8d:cf:23:cc:12:3e:82:
c1:72:11:3b:44:45:f5:30:45:58:78:3e:6a:98:34:fc:6d:f2:
11:5a:26:e5:47:7b:75:53:dd:b6:42:54:1d:9e:bc:7d:ec:d4:
39:19:a7:f2:d8:81:91:f6:3c:d9:15:65:33:e7:48:96:b2:69:
39:c8:8d:7a:60:20:fa:c1:00:b0:bc:96:22:86:fa:8d:4f:87:
02:f7:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 23:10:17 2025 by rpki-client