
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
File: rCox8PS9dOdD4i_qMwTVw1CCB7w.mft (raw, json)
Hash identifier: xrZ3icx6dLDWi9/5NXO7wy7+Q+QsijizHXGkXMQh1Qw=
Subject key identifier: AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C
Authority key identifier: AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC
Certificate issuer: /CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC
Certificate serial: 0234
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
Manifest number: 0231
Signing time: Mon 20 Apr 2026 22:04:26 +0000
Manifest this update: Mon 20 Apr 2026 22:04:26 +0000
Manifest next update: Wed 22 Apr 2026 22:04:26 +0000
Files and hashes: 1: oPrfY1U5F1ntqAXhMargLCzxI_Y.roa (hash: 4/vBBYGnOZJRjVv6nWxZDGx14YfNMc4USz9lstEYBhM=)
2: rCox8PS9dOdD4i_qMwTVw1CCB7w.crl (hash: VW3WBdWb1Z8poBEEA8EHJCJYPYRdC8bbcAhfm3iOanY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 14:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC
Validity
Not Before: Apr 20 22:04:26 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=AFA363A84E8BB55D392D2C36ECE11A8D43CB908C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:f3:8f:ef:74:cd:ae:8a:0a:ad:07:a5:fa:
2c:23:7f:20:22:63:2a:5c:8f:ca:c5:6f:ca:dd:ab:
15:aa:7a:70:28:b2:49:27:06:d8:45:48:c3:99:c5:
7e:7e:2f:8b:c7:06:4d:95:ce:10:8e:90:15:18:f2:
c6:be:94:f8:6a:56:aa:c6:3f:d5:87:de:43:3e:e1:
89:b2:c7:4d:d2:4f:c0:f7:e0:2b:18:1b:d2:f9:bd:
27:41:7d:f7:1b:48:55:cb:2e:44:bb:3e:c5:cd:3a:
0e:e0:78:db:a9:9f:dc:1d:f4:48:32:ba:cb:c9:9c:
c3:66:ab:c3:71:00:89:25:e5:3e:5c:9d:e8:3c:14:
85:25:46:1c:22:30:e8:b1:45:94:5d:49:b7:a4:e2:
d0:2f:77:82:eb:d4:2a:2b:92:e5:04:2c:f4:83:9b:
ba:48:53:5f:48:e7:2e:33:11:41:e5:91:3c:04:84:
f1:96:8c:23:da:74:db:4d:dc:e0:9a:9b:33:04:95:
76:58:be:6f:23:69:05:58:63:c1:a0:6f:eb:a5:04:
8c:3d:a9:4c:5e:84:f9:6d:4f:56:50:83:7b:93:86:
2e:ee:2b:5d:a4:64:97:58:bc:43:6d:31:ee:6d:77:
40:0e:62:6b:0a:d5:ef:f4:4d:ba:bc:13:f3:93:b8:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C
X509v3 Authority Key Identifier:
keyid:AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8f:ab:52:fe:46:1c:c0:74:06:66:9a:5e:28:a5:4c:da:6a:
15:ac:49:8a:0b:93:26:95:1f:d2:84:ac:79:56:b9:fc:fe:23:
4c:1f:d9:81:5b:3d:cc:3a:80:16:4a:6c:3c:c5:1a:76:c6:72:
89:09:eb:ee:78:36:cd:7f:e3:43:76:06:6c:26:39:e9:ec:45:
06:74:66:0c:ea:f5:40:fb:b7:e3:38:5b:ce:a0:06:ec:fb:b3:
d9:c5:52:0f:79:c3:e0:6a:cd:c4:f5:80:31:1f:2c:d3:d4:88:
88:35:fa:f2:e3:df:9b:fc:a0:4b:76:96:f5:34:4a:9a:b4:1e:
6a:c8:e8:f0:d1:d5:ad:76:11:71:b3:c9:c2:bd:0d:e7:80:df:
78:6c:ab:eb:26:e2:80:b3:b4:86:c2:35:26:10:76:a9:f3:78:
ec:80:bf:8e:f6:5f:94:68:8a:98:f4:b1:fc:b4:56:0e:d6:ff:
ef:3d:38:a1:e7:88:2c:12:47:df:12:28:5b:ad:09:5d:19:64:
75:be:fa:31:c3:a4:66:ca:91:12:d2:a8:14:72:94:e5:f9:dd:
67:cc:57:9a:ca:fb:69:80:8b:ad:b8:56:1e:a5:60:16:f8:a6:
5c:5b:ed:93:6f:b9:db:61:0e:7e:3d:a8:04:9a:c8:91:d0:70:
94:a2:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 11:28:01 2026 by rpki-client