
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
File: THcKx8Jx2lspFcoBuVmI0EFPQHw.mft (raw, json)
Hash identifier: Vaw9tSIcKZeeZwsW2bJ8bYFdbsBkRZOqLVImFGkGyPk=
Subject key identifier: 05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
Authority key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Certificate issuer: /CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Certificate serial: 0170
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
Manifest number: 016C
Signing time: Tue 21 Apr 2026 20:05:08 +0000
Manifest this update: Tue 21 Apr 2026 20:05:08 +0000
Manifest next update: Wed 22 Apr 2026 02:05:08 +0000
Files and hashes: 1: BERQJ4SepOAwCHhrmQcXKMV6QAQ.roa (hash: xwBrwphP0dOcpDUF5PRZlihDX54NlAP4Th/uwoNWRpc=)
2: THcKx8Jx2lspFcoBuVmI0EFPQHw.crl (hash: fRzv07zapPMNltOesgJLNlqO4K+fUKtnmZTeGiKzSjo=)
3: qoAaFseApoYSt0Zi4KthZ1NyXu8.roa (hash: /k1L5O+d1APsTmlT54/61etHCnGdgGGXuj1TwFsFp0w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 02:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Validity
Not Before: Apr 21 20:05:08 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=05B63B0E8FCE1C5361B22FB87417DDA6E5B28D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:4c:b1:da:c5:51:53:77:f2:82:05:38:0b:
c2:c9:3e:79:2c:2c:49:53:6f:eb:ed:95:f9:b9:ec:
c0:b4:49:b1:31:da:b3:7f:dc:05:af:24:3a:72:f9:
61:41:6f:dd:03:f1:74:5c:ec:bc:97:0b:c4:d2:be:
61:02:f5:5f:50:cb:ec:ec:48:08:91:13:27:0b:42:
95:ed:95:ae:30:a6:10:25:0f:1d:96:91:f5:db:0d:
40:78:58:fd:7f:c4:31:d3:ed:d2:f5:96:43:7c:16:
6f:4f:05:80:99:6d:1e:2f:49:fd:78:2c:99:42:51:
b4:ee:9a:b6:b9:95:ca:ef:11:e0:4d:8b:60:40:da:
0d:57:aa:cd:e2:d0:54:43:35:3f:c0:cc:b2:ea:54:
35:7c:74:51:14:bf:f6:1f:82:a7:ef:3a:0b:ca:47:
b7:06:6e:1d:10:db:54:66:a3:68:f7:6d:97:f3:2c:
a4:a8:27:f2:f4:a4:f6:13:6f:6e:1a:a8:1d:cc:1a:
4a:52:e4:55:94:47:5d:66:dd:9c:9c:97:fc:89:56:
a9:a2:32:e7:51:7e:ad:12:34:79:6b:22:44:72:9d:
e8:99:f5:85:17:67:28:6c:be:3c:04:56:94:7d:fe:
68:6a:9b:c6:53:b7:d6:39:9d:7c:df:45:41:b4:a5:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
X509v3 Authority Key Identifier:
keyid:4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:3c:29:6f:90:45:79:02:18:03:60:9b:ff:43:86:0a:c4:
62:6f:0a:f0:c3:7e:d6:82:ef:d0:d5:07:53:ed:be:7d:54:3f:
83:b2:c8:71:2b:ba:d2:d4:93:40:97:0d:43:4c:c6:83:eb:2d:
6b:e0:95:16:56:85:d9:ed:fc:1c:1f:b9:c5:f7:cf:d9:37:a6:
b6:10:37:ec:98:0b:bf:d2:d6:06:8b:62:50:83:d1:28:96:25:
69:41:b5:0f:c1:bb:7d:78:92:21:b1:d1:15:33:94:5f:c3:4f:
4d:09:92:82:f3:21:53:dc:4b:18:a1:37:96:a7:1b:9c:3a:53:
11:fa:9f:d6:a1:60:f2:7c:8b:5f:e0:25:20:65:33:42:42:73:
6a:b8:1a:66:82:16:9e:56:36:af:dd:56:44:5b:ab:be:ae:96:
6e:72:ae:ec:80:27:19:8a:eb:da:c3:67:c1:4d:cd:34:fa:a8:
06:40:fd:90:bf:5a:ee:5b:89:ca:c6:ea:84:93:7d:a9:73:82:
aa:9a:d1:72:27:f4:f5:d7:bc:29:64:fb:bb:37:3d:6f:73:21:
c8:00:07:3c:aa:d4:7d:cc:da:3b:78:93:57:a6:e8:03:5e:09:
fe:89:a6:d7:00:86:d3:65:34:ea:59:16:c4:c3:06:7f:3a:d6:
58:a3:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:41:31 2026 by rpki-client