
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File: 866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier: 0pDZOpO035iBkcbBon/E+SBIlKSjMhZHNrq3FgM+Me0=
Subject key identifier: 04:F5:1C:45:AC:82:42:A4:1E:37:87:2A:8C:32:FC:CA:12:08:65:AF
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial: 2FAD3D24C334A3D0A16D6EBA6EC8598BD38DFB82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number: 8A
Signing time: Fri 14 Aug 2026 20:58:29 +0000
Manifest this update: Fri 14 Aug 2026 20:53:29 +0000
Manifest next update: Sat 15 Aug 2026 22:39:29 +0000
Files and hashes: 1: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
2: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
3: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
4: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
5: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
6: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
7: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
8: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
9: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
10: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
11: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: IeQANeiW1OmuyVmk2+bEOg5wHH6laxC22McqZjT9Ef0=)
12: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 22:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ad:3d:24:c3:34:a3:d0:a1:6d:6e:ba:6e:c8:59:8b:d3:8d:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Validity
Not Before: Aug 14 20:53:29 2026 GMT
Not After : Aug 15 22:39:29 2026 GMT
Subject: CN=04F51C45AC8242A41E37872A8C32FCCA120865AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:d6:51:28:15:2e:01:f7:d8:df:1c:17:f8:
dc:86:af:1b:dd:e6:7c:aa:7e:e9:f3:b8:b1:2a:da:
12:08:24:91:ed:d3:d7:21:01:28:6d:c5:22:1f:52:
f0:6c:1a:96:72:a8:8f:00:0d:37:5c:24:01:78:73:
4c:87:de:c2:08:f3:91:87:7a:0e:3b:e9:30:bc:e4:
46:d3:38:f6:5a:e1:4e:5a:9e:40:0d:f3:cf:02:84:
36:ab:1c:cd:58:c4:e5:ef:c0:33:56:7f:5c:e3:8e:
2e:4d:74:04:64:c9:81:aa:9d:82:be:8d:42:28:61:
07:15:c5:63:be:64:f7:6c:c9:f5:a7:b3:2b:82:87:
33:8a:38:0c:3a:c5:e6:60:7c:54:9e:da:f3:e3:22:
7f:db:e2:18:18:57:3a:68:a6:73:66:00:2a:3f:4c:
ad:5f:18:78:27:20:4f:6a:6e:48:51:63:f1:ce:01:
46:d7:75:ce:dd:43:de:aa:46:3a:4b:f5:f7:af:6d:
da:ea:ac:fb:18:ce:74:bd:b1:cb:59:8b:b9:21:14:
16:46:77:b2:2c:81:02:11:b8:a2:6a:12:db:9c:81:
25:19:7e:30:41:9a:80:23:e1:96:70:5f:ea:13:69:
df:5f:9c:92:14:2e:d7:e8:34:0d:00:a1:70:c2:5e:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:1C:45:AC:82:42:A4:1E:37:87:2A:8C:32:FC:CA:12:08:65:AF
X509v3 Authority Key Identifier:
keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:67:0a:0c:ec:ef:d1:84:7b:41:8e:0f:cd:f0:24:69:39:
69:09:75:ce:e4:32:13:fb:bf:6e:48:8a:a0:41:c5:43:e1:20:
17:a1:34:15:5c:9d:b1:c1:8e:12:7d:a5:e7:b0:6a:75:85:63:
1a:f6:85:b9:cc:9c:6f:50:ab:d5:84:4c:82:e7:d8:95:30:be:
86:17:92:f5:b5:90:a5:7f:a6:1a:52:e3:92:bc:62:c6:6d:f6:
95:02:3e:29:e6:4a:dd:cf:f0:f7:32:cc:3c:69:10:21:d3:7f:
35:be:ae:23:02:c3:79:7a:43:c6:ca:dc:6e:6f:72:c4:10:40:
3d:c4:20:0f:d8:5e:52:74:80:6b:a3:c7:f9:c0:aa:24:4c:23:
cb:71:be:e5:7a:bc:9a:2b:ba:c0:4a:b1:16:6a:83:f6:df:25:
dc:e1:7e:11:53:dc:ee:61:48:8f:1d:ed:7b:ff:10:d4:ea:50:
d3:7e:1b:fc:2d:2b:4d:64:be:d0:0b:5a:66:6e:4e:81:37:36:
0a:62:86:45:e5:5d:ca:d1:bc:87:16:35:75:6a:f8:9c:fd:61:
6a:79:72:ba:eb:eb:74:1b:52:a6:98:70:25:77:45:3c:48:72:
ec:a0:05:c6:5e:e8:26:b3:94:d1:13:58:63:2d:b4:5b:2a:cc:
67:32:6f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:40 2026 by rpki-client