
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
File: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft (raw, json)
Hash identifier: YRP7dkfcIWWGIFMECq/14piakrli/4YzBTSWHBvGTYQ=
Subject key identifier: 56:2C:C5:D3:CD:99:FF:44:99:D3:07:A8:C9:FA:0E:C5:5A:E7:CB:3B
Authority key identifier: 80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
Certificate issuer: /CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Certificate serial: 514CDA1D09926C74F7F48E4DB11DFD3EEF21CC74
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
Manifest number: B5
Signing time: Wed 23 Sep 2026 11:17:41 +0000
Manifest this update: Wed 23 Sep 2026 11:12:41 +0000
Manifest next update: Thu 24 Sep 2026 14:01:41 +0000
Files and hashes: 1: 3135372e32302e3139392e302f32342d3234203d3e203633383937.roa (hash: MfbOWwd7Hn558DgriVzN99X3bjQPD3CS9r1j+Tc4hjs=)
2: 3135372e32302e3139382e302f32342d3234203d3e20313430323134.roa (hash: sra5TL/z+TPl4yH11V9uosS6My/3wmncjZTTFXrHtmI=)
3: 809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl (hash: /1OPOvZwuaOFWItjwtdyN+409lGE3QXuBhYI7XxqAd4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4c:da:1d:09:92:6c:74:f7:f4:8e:4d:b1:1d:fd:3e:ef:21:cc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809400EAA50A7EB3BAC78EED2B98CD40B809FE9E
Validity
Not Before: Sep 23 11:12:41 2026 GMT
Not After : Sep 24 14:01:41 2026 GMT
Subject: CN=562CC5D3CD99FF4499D307A8C9FA0EC55AE7CB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:7d:d6:2d:22:01:e2:76:8f:e6:48:13:b7:
31:18:4e:56:e3:bf:cb:13:6d:a9:1c:6b:84:59:d0:
7a:01:a6:73:6c:59:51:2e:8f:10:cf:a0:5b:4b:2a:
59:8e:65:89:a5:2d:51:50:f4:b6:b7:db:47:8e:2c:
e3:dc:e9:ce:26:10:f3:ba:5f:31:3a:f6:9f:d8:58:
35:d2:8d:46:65:a5:73:b0:ee:29:61:d0:8a:82:f0:
08:b1:a8:53:42:6b:3d:d1:af:07:d9:da:c1:6e:20:
e7:86:13:a6:64:a5:03:c2:7f:1c:4f:ca:45:53:bf:
0d:bb:32:b6:7b:6a:44:e3:5f:9c:f1:5a:ac:3d:1e:
69:cd:60:e7:0f:14:5b:f9:55:bb:9f:1a:c9:6f:e1:
bf:c1:31:bb:84:f3:49:91:64:fc:39:7c:bc:5e:c3:
9c:11:de:92:8d:12:64:d0:38:55:f9:06:60:ca:59:
5a:d1:77:98:8e:b9:89:09:50:6b:e4:a6:66:74:c3:
d6:02:bf:c1:01:65:fd:85:b1:e6:6c:66:c0:4a:96:
50:4e:1e:d9:79:9b:22:c5:81:2c:02:80:94:da:37:
6b:dc:6d:4f:9f:6f:c4:39:dc:34:7f:f6:59:e4:e4:
8b:32:3f:47:9c:17:b7:b0:f2:68:4b:bb:f9:91:37:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:C5:D3:CD:99:FF:44:99:D3:07:A8:C9:FA:0E:C5:5A:E7:CB:3B
X509v3 Authority Key Identifier:
keyid:80:94:00:EA:A5:0A:7E:B3:BA:C7:8E:ED:2B:98:CD:40:B8:09:FE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/1/809400EAA50A7EB3BAC78EED2B98CD40B809FE9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1f:54:6d:bb:af:8c:c8:5f:c8:2e:b0:bb:48:b8:d6:73:bb:
1a:bf:13:23:79:12:75:25:b1:3c:cc:c1:e4:08:7a:e4:32:cd:
3e:8c:5b:d1:0f:e9:88:08:93:d5:a3:43:6a:58:5a:18:b5:96:
6b:49:1f:54:a3:c8:3a:2b:07:45:89:3e:07:05:d5:6c:a6:00:
cb:4f:c0:06:94:9f:8f:46:8f:b5:27:35:5a:98:c1:36:bc:83:
86:6a:af:02:2d:1c:ba:d7:88:4c:88:36:64:39:2e:74:42:31:
5f:54:4d:17:bc:5d:70:5d:cc:31:b2:4d:a4:cb:93:4c:06:6e:
a3:0e:6f:58:70:25:98:02:39:b8:d3:b2:c6:0c:64:83:38:09:
7b:23:a5:f2:45:2c:4b:26:6a:f9:e9:aa:72:3e:f0:2d:f4:ed:
e0:fb:e0:94:2a:d8:42:18:6b:28:fe:0e:0e:a9:5f:a1:ef:ac:
65:54:77:93:52:64:19:cb:d5:60:80:9d:fb:8d:05:81:d1:5b:
dd:1c:77:9e:36:fe:5b:8d:fa:c0:20:b9:4a:49:03:7f:fe:82:
8b:81:77:fc:91:d5:8d:d4:51:53:b2:53:86:c5:2b:22:af:12:
1b:c0:90:11:0f:e7:cc:65:e2:20:b7:54:c7:26:32:3d:47:c8:
53:5b:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:37:35 2026 by rpki-client