
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
File: FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft (raw, json)
Hash identifier: 5uJUaNDlDR41XLTkM0vHSMqQ35dzSVhAAPwLq3AdOtU=
Subject key identifier: 7E:05:C1:5B:D4:B4:43:7C:B9:C6:55:E9:16:22:9B:7B:61:8A:B6:BA
Authority key identifier: FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D
Certificate issuer: /CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D
Certificate serial: 3FFD0BBA6EB999B1551B78C5C7F8A7DD894E7956
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
Manifest number: B7
Signing time: Fri 25 Sep 2026 11:12:48 +0000
Manifest this update: Fri 25 Sep 2026 11:07:48 +0000
Manifest next update: Sat 26 Sep 2026 12:00:48 +0000
Files and hashes: 1: 3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa (hash: wQPbhs8yb6ZMLslmBkU07zfcO19/UJCWoWgUHvgY6JI=)
2: FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl (hash: hqTC6e7zZXH7IdkGejUlEngZYotXccd45tTwVDtUWFs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl
rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fd:0b:ba:6e:b9:99:b1:55:1b:78:c5:c7:f8:a7:dd:89:4e:79:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D
Validity
Not Before: Sep 25 11:07:48 2026 GMT
Not After : Sep 26 12:00:48 2026 GMT
Subject: CN=7E05C15BD4B4437CB9C655E916229B7B618AB6BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:4b:a8:51:3d:9c:b2:d0:29:bf:d3:14:8a:
3c:53:97:cf:77:80:f4:2f:bd:b4:ff:7e:0a:82:62:
a1:60:03:46:e9:84:b1:9d:92:c5:14:57:31:2b:bb:
a8:ba:1a:71:30:40:11:ea:4a:c5:9d:be:74:ad:16:
bd:ae:56:12:08:f4:08:ad:d8:c1:d4:1e:36:f6:61:
37:ec:ba:ff:31:f0:75:cd:ac:29:8c:74:3e:6e:ff:
98:31:bc:f5:42:95:0a:c9:73:76:23:ac:0c:a4:8c:
6e:f6:6d:5c:bc:fa:c8:51:4a:ac:5b:e3:52:35:f6:
89:dd:fe:b5:96:61:30:16:28:6d:38:8d:40:4f:ed:
c3:17:51:a5:4e:01:7d:79:52:a2:97:88:6f:c2:bb:
d1:ae:95:2d:41:6b:e9:1f:c2:68:b7:92:d7:9e:61:
d8:04:54:8d:59:7c:bc:6e:fb:04:25:f5:be:c2:82:
a7:21:5e:68:17:1d:b8:fc:30:09:11:e9:63:d1:7c:
59:f3:1b:b6:a4:11:2a:ea:e4:94:49:78:d6:55:62:
c4:17:e4:58:3d:83:fd:65:d6:96:39:71:1f:07:58:
a3:66:32:56:e3:03:45:d8:75:c9:b5:fe:d1:45:4d:
7e:68:fe:1d:e6:d6:ed:7d:6d:19:55:d8:10:92:96:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:C1:5B:D4:B4:43:7C:B9:C6:55:E9:16:22:9B:7B:61:8A:B6:BA
X509v3 Authority Key Identifier:
keyid:FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4d:11:2f:6c:a5:6c:6a:77:f8:3b:39:8f:97:b0:84:4e:df:
18:2d:2a:46:ce:c3:77:ca:7b:e2:71:85:28:34:a5:69:72:4e:
f6:d4:e7:ae:e8:21:e0:3f:2f:08:87:00:31:2b:ba:1b:7b:8c:
07:44:6a:53:eb:e6:e9:43:ce:27:96:d3:1d:d7:43:17:20:41:
96:13:2a:f9:50:40:e5:c6:77:e7:47:9d:d3:f7:6f:34:39:2a:
c1:93:ef:56:fe:cb:32:82:35:db:23:02:98:13:8c:c1:82:44:
39:83:56:6a:ab:5d:c5:57:0d:80:d2:e5:9a:e4:e2:dc:bc:60:
d1:fb:68:35:86:bf:f1:72:c8:dd:c0:84:e2:f0:03:08:a8:04:
5e:f8:52:9d:5f:09:93:94:ed:49:b6:d3:56:22:42:9f:18:cb:
63:85:0c:83:09:2c:59:b9:99:22:eb:3f:3d:50:5a:92:f0:82:
4f:3a:1a:1d:a5:22:81:8c:3b:7f:cd:c4:89:58:60:b7:9a:d2:
92:65:4c:5a:09:2a:ec:c0:3e:e2:b7:c9:1e:33:8d:60:72:84:
06:6f:f8:73:66:b1:d3:31:73:9e:0c:e7:cb:32:19:b5:44:3a:
4f:4f:c6:53:c4:9e:c0:f5:46:a2:9e:cc:9d:f3:bc:9d:43:c5:
73:47:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:55:42 2026 by rpki-client