
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File: 36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier: 9iJlzu6C5W7G0woptWmFts/elsYNv5Fw+0qMBW5ky4A=
Subject key identifier: E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 150D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number: 1247
Signing time: Sat 07 Mar 2026 20:54:00 +0000
Manifest this update: Sat 07 Mar 2026 20:54:00 +0000
Manifest next update: Mon 09 Mar 2026 20:54:00 +0000
Files and hashes: 1: 0EV9Waq_8Cf2qfNaIc6o1Ce1S7U.roa (hash: sYZtEfovuYI6eGXv2fre/IamCcA0mP3GieUs/1LghjE=)
2: 0f_-NuP5tkMNqydkxFRz-2kSLAE.roa (hash: qUkbl1kgH0GjE0cskLl2GwkscNyeE9C2Txp6pxLQpas=)
3: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: /U6N/WhXngza5yXllCDR7k6zbWybEGCLYGJDPP5xNLo=)
4: 3hmGqCK4MfQ8p--8Knz4PLEsf4I.roa (hash: Nr/0iXAvSXdC3uAy1eKOiiSrzdWZjWoevPteFP22oDA=)
5: 45QmnsqdWOqNKxUfS08P7N5eAaw.roa (hash: FLKv90LqqAqfzW4ka4s7u8EQzLV4bNEoQgjjXQI2gvk=)
6: 4XfHzwZwVYmznZ5CCJNJ3lOjuEI.roa (hash: bR4SxyCJGeiJnHEswyFDofE+8/L6j5PhW5a8nMPotCE=)
7: 4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa (hash: rr8ai+tHPGty5BupOyE9DelxO6iE+XyM3irun6Qw408=)
8: 5lDuntK7WIoZk0sgHBscqc9RL6w.roa (hash: JX4YhXuPQCIu5bsUWEJxrMbMu1FR56LLIvAcdHfMem0=)
9: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (hash: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg=)
10: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (hash: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY=)
11: AFcm7pM8j5ejCMlAh-5j8-sOEbc.roa (hash: rW1JSOnwV0njBGop5mlA7nJRWoQdJziVa3ds1Te44jo=)
12: AY_50U5vPMRrl8HUUZiPEYGKnto.roa (hash: YyY5kyPyrcgvMnbVZJIfrN9oOpX8/EgZ0i89QU4P1aY=)
13: IS2LrxQcXYojyogdnit3pCUydBw.roa (hash: Tm+olkR0aKGzvS4I3+QR4fxXgoLKRa9UwrX3bgTbZEU=)
14: IVibC69SMkVPpFh5VWNu00soZzc.roa (hash: 4mj7nxLKJP4DJj4m3Jnj5IvmoJabF77XGRvFCH7i908=)
15: J50ylXuhdas2KjTervlhvK74aq4.roa (hash: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I=)
16: O7EZ6j9V8cFiV9bX-EKBNkNR4Z0.roa (hash: 6gvliBqdvkpnm0vNb3P2yjHmVmhuLehtXWxM0187/5s=)
17: SbMnpJykKnyhfqRzZl_0BM-hFZs.roa (hash: 7rwtW35hihjLl/meUt1h7x94RGg2ejnRblaYIEqj3Ws=)
18: TaZFT0Z2aEjX_uleljN2tnB7EGA.roa (hash: PP4dO6TDk2s0Y0yKfFtB/rhNJMl15PM+18VPx1ms1bM=)
19: VPB09wxEXC4KnKhZaK6kgG661Nc.roa (hash: KuU6jWQ8Q2obz6ui/H5nMGWvB/CcAJ5QzqLfteaezWk=)
20: W75m8ClI26gr6u2_zu3FGxiwYc0.roa (hash: rW2O/DwhtBIHzeC1v1EuOht5gYqq1jj3/MARe13l5jU=)
21: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (hash: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI=)
22: YRHxiXt805LQZ1d8Y2knw4hnN54.roa (hash: NISqLBuTIae3loWvUIDNUzIZtFP30DLGraPTFixxuSo=)
23: ZAiGeVD6b-J66tqwkFsZu7Vj4os.roa (hash: X0Wzw79OqatqPrnFcGfAjOJKu6KRgTGGpZArjlzvW0g=)
24: izVRQ7JLPoikKp5m-2SqYrAutUQ.roa (hash: HBf6u6pm8Xxecg4TSXECUcvkRPQipEAyoXUxPHY1K2M=)
25: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (hash: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI=)
26: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (hash: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0=)
27: t-6GfITkRkCZ0DXF1cPUbmXyp-o.roa (hash: 0dRYHzwpqJViiMUMNEZdGm56VlcO6Z1ptTcdyNhGmmc=)
28: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (hash: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0=)
29: yzyNApNJEI49g97BvptpQk2LDZ4.roa (hash: TxxKBZ0glxRQ9j0CWLC8FZvuWkUNUyHuLNRZ5LUHCcQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5389 (0x150d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Mar 7 20:54:00 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e0:b5:4b:6c:0e:cf:e1:3e:e8:88:75:0e:4b:db:c1:2d:c9:
35:d9:e0:f6:d2:0c:bf:7a:ee:b9:70:f6:b2:31:b6:d5:ca:78:
72:73:f7:0e:96:7a:37:8a:46:85:ec:ee:9b:67:d0:42:f4:ad:
fb:7f:6b:d5:a3:d0:b3:8f:08:ac:bf:31:7f:e4:7f:78:0f:f2:
c2:f7:46:cd:08:2b:ad:a0:43:38:52:41:db:37:0f:50:58:63:
52:20:a6:3b:17:2a:74:71:53:f3:61:6b:6a:f7:55:ac:b7:e4:
3c:be:19:dd:2e:ba:b6:42:ef:aa:bb:25:72:a2:fd:28:da:68:
71:35:8c:fa:00:9f:02:8a:32:6f:05:b0:1d:cb:e5:82:2a:ca:
99:4f:39:80:93:3f:6e:76:d1:00:9f:b9:60:39:4f:f9:6a:a8:
0f:04:65:f7:a2:24:18:08:3f:17:bf:f8:b1:77:01:e3:91:b9:
22:f0:77:33:b5:0f:5c:6a:ac:d9:85:78:21:6a:1a:8e:32:01:
a5:b1:7d:b4:a3:59:a8:ed:93:02:2a:15:73:68:65:61:3e:3e:
16:d0:ed:ed:5d:25:a7:49:8f:bf:cf:b9:f5:09:bd:e2:86:d0:
a8:e5:ea:8d:43:4e:ba:d0:56:9f:c8:3d:3c:70:96:df:ee:4b:
b3:27:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 07:59:45 2026 by rpki-client