
$ rpki-client -vvvf rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
File: F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft (raw, json)
Hash identifier: tfmb7/5hK5YNGefVF2NXqPciHqxyejub8qhrguUc/tQ=
Subject key identifier: 9A:6B:4E:03:3C:4B:79:D9:A1:4C:3B:CA:AC:7B:53:64:2C:0A:DF:E6
Authority key identifier: F8:13:2D:C5:34:38:78:93:75:5F:94:AE:2B:0F:86:85:BA:7C:8D:6C
Certificate issuer: /CN=F8132DC534387893755F94AE2B0F8685BA7C8D6C
Certificate serial: 2FD79272FCFC0DD4438855ED9C83567DBE5E765D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 10:12:40 +0000
Manifest this update: Fri 25 Sep 2026 10:07:40 +0000
Manifest next update: Sat 26 Sep 2026 12:35:40 +0000
Files and hashes: 1: 3230322e382e31342e302f32332d3234203d3e203138343130.roa (hash: tZyg6sWa2FgNEO9W1AtN8+txS3cqFlmDzyg2hHDPbYs=)
2: F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl (hash: KWq7VfHrqRWNBxFZOJqKH04utL4tnbWhDZSiimNlsUY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl
rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 12:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d7:92:72:fc:fc:0d:d4:43:88:55:ed:9c:83:56:7d:be:5e:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8132DC534387893755F94AE2B0F8685BA7C8D6C
Validity
Not Before: Sep 25 10:07:40 2026 GMT
Not After : Sep 26 12:35:40 2026 GMT
Subject: CN=9A6B4E033C4B79D9A14C3BCAAC7B53642C0ADFE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:4f:dc:94:34:1c:6a:2c:69:d4:bb:21:64:
c0:6f:0b:19:c3:72:86:bf:75:b1:e6:11:74:94:6f:
bd:b2:43:a3:37:b1:d7:a3:ce:65:18:d1:58:4d:2b:
7d:95:6f:da:b6:6e:3d:c0:17:16:17:b6:41:78:69:
fa:10:ec:d9:47:b4:5e:65:6b:1d:5e:17:06:5c:50:
32:24:49:84:9d:a1:f1:cc:19:1b:bd:0e:f2:2d:13:
53:7c:d3:18:b7:f2:14:18:da:7d:b2:5a:d6:ee:f6:
54:b1:76:d3:04:75:6c:32:db:09:5e:fb:de:7c:63:
31:b6:3b:c7:f1:58:ad:29:3e:a3:70:f3:80:e7:fb:
87:b6:f4:0f:9a:c4:cd:b5:cf:fd:07:f0:71:75:1d:
5e:a3:5e:21:08:50:f4:6b:a8:a3:ab:a0:8e:b3:25:
24:e9:fc:35:e5:55:1c:54:81:43:13:37:cc:a3:01:
a7:37:f7:13:33:fb:87:1f:aa:a8:20:01:a6:03:77:
ad:24:b4:21:d6:5c:73:c3:31:70:5a:fc:2b:2b:0f:
7f:39:f7:2a:ce:4d:ba:72:55:2e:46:d5:f5:69:54:
90:c6:e3:43:39:8c:4d:ea:ed:5b:81:af:50:16:63:
90:b1:ad:e8:ef:41:9b:33:05:b2:a1:5b:b2:ef:58:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6B:4E:03:3C:4B:79:D9:A1:4C:3B:CA:AC:7B:53:64:2C:0A:DF:E6
X509v3 Authority Key Identifier:
keyid:F8:13:2D:C5:34:38:78:93:75:5F:94:AE:2B:0F:86:85:BA:7C:8D:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8132DC534387893755F94AE2B0F8685BA7C8D6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/104IT/0/F8132DC534387893755F94AE2B0F8685BA7C8D6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:92:8f:93:4e:d5:ea:06:a4:5e:8b:27:6b:79:e9:b2:0b:65:
1f:5c:d3:e3:3c:ae:ad:88:3e:2e:9a:41:57:15:a1:bc:25:ca:
68:4c:0a:d7:3f:75:39:e4:a9:9d:d2:3a:76:66:be:19:4f:6d:
aa:50:f8:27:d9:d7:bc:25:1b:86:6b:97:33:21:d3:b4:e1:db:
0e:81:b7:01:f9:6b:db:f7:93:b8:86:16:f0:5b:c2:61:fa:18:
9a:bd:be:29:00:bc:9d:f9:81:3a:0f:9c:fd:c6:88:ef:5e:ac:
97:90:5a:70:58:6a:23:2e:89:ba:98:e1:72:0c:a4:d7:f9:42:
00:5e:75:b4:2a:3c:c0:e3:e8:31:fe:0c:16:b6:44:28:99:9f:
0f:40:3e:a7:56:fb:01:02:f8:05:7c:9f:e4:be:1a:36:7e:45:
45:4a:52:b2:f7:4f:99:77:e0:cf:d1:33:e6:5e:90:cd:e3:b5:
f9:20:8c:fd:15:02:cc:d6:d0:4f:c0:38:ad:26:fa:fd:85:38:
6a:c3:f4:49:55:26:17:45:69:1c:16:2f:ea:25:39:0e:70:fe:
fe:20:c1:01:e0:37:91:a4:9d:fc:84:86:48:36:93:26:15:b1:
0a:4e:88:29:2d:7b:e5:83:c1:b5:23:04:1c:84:a9:a4:63:d5:
34:25:c1:b7
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUL9eScvz8DdRDiFXtnINWfb5edl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgxMzJEQzUzNDM4Nzg5Mzc1NUY5NEFFMkIwRjg2ODVC
QTdDOEQ2QzAeFw0yNjA5MjUxMDA3NDBaFw0yNjA5MjYxMjM1NDBaMDMxMTAvBgNV
BAMTKDlBNkI0RTAzM0M0Qjc5RDlBMTRDM0JDQUFDN0I1MzY0MkMwQURGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6E/clDQcaixp1LshZMBvCxnD
coa/dbHmEXSUb72yQ6M3sdejzmUY0VhNK32Vb9q2bj3AFxYXtkF4afoQ7NlHtF5l
ax1eFwZcUDIkSYSdofHMGRu9DvItE1N80xi38hQY2n2yWtbu9lSxdtMEdWwy2wle
+958YzG2O8fxWK0pPqNw84Dn+4e29A+axM21z/0H8HF1HV6jXiEIUPRrqKOroI6z
JSTp/DXlVRxUgUMTN8yjAac39xMz+4cfqqggAaYDd60ktCHWXHPDMXBa/CsrD385
9yrOTbpyVS5G1fVpVJDG40M5jE3q7VuBr1AWY5CxrejvQZszBbKhW7LvWE+fAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUmmtOAzxLedmhTDvKrHtTZCwK3+YwHwYDVR0j
BBgwFoAU+BMtxTQ4eJN1X5SuKw+Ghbp8jWwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvMTA0SVQv
MC9GODEzMkRDNTM0Mzg3ODkzNzU1Rjk0QUUyQjBGODY4NUJBN0M4RDZDLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0Y4MTMyREM1MzQzODc4OTM3NTVGOTRBRTJCMEY4
Njg1QkE3QzhENkMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS8xMDRJVC8wL0Y4MTMyREM1MzQzODc4
OTM3NTVGOTRBRTJCMEY4Njg1QkE3QzhENkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUko+TTtXqBqRe
iydreemyC2UfXNPjPK6tiD4umkFXFaG8JcpoTArXP3U55Kmd0jp2Zr4ZT22qUPgn
2de8JRuGa5czIdO04dsOgbcB+Wvb95O4hhbwW8Jh+hiavb4pALyd+YE6D5z9xojv
XqyXkFpwWGojLom6mOFyDKTX+UIAXnW0KjzA4+gx/gwWtkQomZ8PQD6nVvsBAvgF
fJ/kvho2fkVFSlKy90+Zd+DP0TPmXpDN47X5IIz9FQLM1tBPwDitJvr9hThqw/RJ
VSYXRWkcFi/qJTkOcP7+IMEB4DeRpJ38hIZINpMmFbEKTogpLXvlg8G1IwQchKmk
Y9U0JcG3
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:21:39 2026 by rpki-client