
$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
File: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft (raw, json)
Hash identifier: 85SdwIRMxxXWTSnbnzylSrHkza7ik7dwXbzqk+DsQ3I=
Subject key identifier: 70:51:99:27:66:1F:1B:86:4E:B5:19:7F:42:8E:7C:AF:EF:51:A5:7B
Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
Certificate issuer: /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Certificate serial: 187D3F7874EBCEE3CFFA47EDF18088B78B4EF9A0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 12:07:25 +0000
Manifest this update: Thu 23 Jul 2026 12:02:25 +0000
Manifest next update: Fri 24 Jul 2026 16:04:25 +0000
Files and hashes: 1: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (hash: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8=)
2: CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl (hash: ycNI6lkGyd81d91hHbb0pos3zEVt6QUwt3+D/crA/Ig=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7d:3f:78:74:eb:ce:e3:cf:fa:47:ed:f1:80:88:b7:8b:4e:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C
Validity
Not Before: Jul 23 12:02:25 2026 GMT
Not After : Jul 24 16:04:25 2026 GMT
Subject: CN=70519927661F1B864EB5197F428E7CAFEF51A57B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:ea:fa:88:86:e4:4c:d9:34:b3:57:55:60:
2d:7e:d4:ad:b1:6c:9d:4d:17:9b:e8:84:75:87:2f:
fd:d4:6e:f5:c6:71:b1:e3:0a:9b:9c:28:54:33:36:
40:75:13:e6:36:30:3e:e9:d5:6a:c5:e2:d5:18:10:
e6:a5:16:9e:50:a7:d1:18:90:1d:b1:75:b7:df:1b:
f4:d6:cc:dd:93:10:2f:6a:03:15:e8:fc:7f:8b:bf:
72:48:53:fe:c4:6f:18:52:32:dd:4a:ac:74:b9:82:
7e:8d:c8:18:17:b3:2a:8a:da:72:84:d8:fa:30:00:
bd:f4:25:a9:d4:a9:46:85:06:d5:f0:f9:c8:41:52:
c6:2f:85:2b:6b:a1:68:d9:8e:b0:24:e2:3e:58:d3:
9e:1f:96:ae:77:a7:a0:e6:87:b4:04:75:65:c9:6a:
4e:a2:d1:f4:da:9f:bd:25:3b:59:55:18:05:2e:7b:
6f:5b:79:71:69:97:f5:6c:1d:5b:a7:a5:50:de:dd:
1f:65:69:b4:74:ce:c8:70:30:c5:55:e5:15:f3:59:
d6:b1:80:89:96:2c:98:ab:66:f7:de:57:4b:fa:83:
e0:a6:e1:bc:68:70:79:3f:fe:93:c0:d6:dd:ca:86:
4c:fb:75:c3:f6:27:32:49:ac:ba:aa:55:19:87:21:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:99:27:66:1F:1B:86:4E:B5:19:7F:42:8E:7C:AF:EF:51:A5:7B
X509v3 Authority Key Identifier:
keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:15:bd:98:b4:4e:00:f6:4c:cf:1c:b8:18:b9:14:05:f2:d9:
3e:ac:ff:f6:af:73:dc:c8:93:47:0f:8b:51:94:fd:30:93:36:
58:87:11:43:50:e9:5e:a9:15:4e:5b:69:2a:f0:44:64:d5:75:
75:ea:a5:89:50:2a:7a:f2:f6:40:f1:39:fd:7b:7b:1d:fb:c0:
0d:44:14:1f:62:92:74:71:1e:dc:22:d9:bf:a3:a7:02:fb:b2:
6a:b8:2c:55:f4:ed:0f:96:9e:69:60:20:01:c1:36:48:ce:75:
aa:da:25:96:42:fc:69:1c:c7:7e:d3:95:57:d5:c2:2b:47:7d:
18:f3:9f:9f:29:05:8b:71:19:db:62:c6:a8:1a:da:e3:57:25:
21:07:9a:26:87:43:db:73:3e:5b:ed:31:38:e2:e0:64:0f:a2:
83:af:9f:ab:83:9d:5f:82:d4:45:f3:81:25:11:eb:ab:bd:8f:
04:2f:8a:1d:69:03:58:af:d9:72:bc:2c:de:54:1a:22:f7:a1:
ca:83:cf:25:63:67:91:c3:8e:be:b7:19:42:f0:46:2d:39:ee:
d8:96:20:6c:61:73:3d:bc:07:60:ce:a2:73:85:02:14:6a:bb:
39:a3:15:1a:8b:7a:b1:8a:be:03:50:ad:56:99:cd:21:1b:14:
5d:1b:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:17 2026 by rpki-client