
$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
File: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft (raw, json)
Hash identifier: 11KqrJ55NrwIxcip//N7NIPtZacKcShI9koL9QrpGHM=
Subject key identifier: AC:17:88:12:E3:F5:71:4C:3F:D4:B4:1A:FC:A9:5F:26:16:D4:CC:86
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Certificate issuer: /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial: 2073EA63AC2CFA78B47EF76CABB5C482127AEE8C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
Manifest number: FC
Signing time: Sat 14 Nov 2026 19:09:06 +0000
Manifest this update: Sat 14 Nov 2026 19:04:06 +0000
Manifest next update: Sun 15 Nov 2026 19:36:06 +0000
Files and hashes: 1: 59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl (hash: QvHV+wlgQg77cBUw7Nzgk9TZDghnr2O69u44p+nc+nE=)
2: 3134342e37392e36362e302f32332d3234203d3e203138303433.roa (hash: I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:73:ea:63:ac:2c:fa:78:b4:7e:f7:6c:ab:b5:c4:82:12:7a:ee:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Validity
Not Before: Nov 14 19:04:06 2026 GMT
Not After : Nov 15 19:36:06 2026 GMT
Subject: CN=AC178812E3F5714C3FD4B41AFCA95F2616D4CC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:86:1c:64:18:48:cf:11:11:10:96:d4:18:
0f:b3:97:3f:ac:ea:63:0c:ae:f7:41:57:bb:04:6d:
c3:68:ac:27:b1:1d:c9:a6:8d:0e:e1:29:ef:74:c6:
90:7a:2d:93:35:52:8c:e7:bc:bb:85:69:57:30:78:
89:e9:46:12:13:16:10:94:ef:33:17:2e:dd:5d:25:
c8:b4:ad:9f:43:ce:59:7a:b4:13:b9:99:c1:3d:73:
1a:d6:f7:de:f5:e1:dc:8a:73:65:29:06:83:90:bc:
10:d7:35:71:8b:1e:e0:f0:03:19:02:02:da:9c:ca:
bc:c5:c1:0e:1d:19:e2:4b:cc:57:eb:31:1b:46:f6:
b7:1e:ac:19:56:4b:63:86:e7:ca:6b:6c:a2:d4:85:
20:ea:b3:64:9f:4f:d5:2b:a3:c4:5e:4a:f8:e0:b3:
1c:f0:93:bb:97:93:8c:bc:8f:cd:07:5e:e3:d2:46:
36:55:be:81:3e:20:55:81:73:e5:0b:db:94:53:47:
d9:b6:7a:2a:62:86:0d:7a:d8:70:bb:95:16:77:93:
60:ec:2e:43:72:16:f9:0d:9f:83:4f:84:c0:66:fb:
a7:39:a6:a2:7f:e3:d4:61:46:7d:39:50:b4:93:9f:
68:7e:cc:27:30:e5:d8:fb:e2:4d:6d:a3:fe:33:43:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:88:12:E3:F5:71:4C:3F:D4:B4:1A:FC:A9:5F:26:16:D4:CC:86
X509v3 Authority Key Identifier:
keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:19:fb:e5:06:a2:cf:91:8b:da:3a:fa:89:39:20:97:7a:
2e:97:91:79:55:c8:f6:37:2e:fd:9e:26:b6:57:c9:d5:74:22:
02:62:d9:21:7c:b5:2d:09:55:3e:f7:c7:c2:41:c1:b5:c3:40:
53:b3:1e:8e:e7:63:ed:c4:50:19:80:b8:2f:d2:7f:db:b7:57:
cc:45:6d:63:e2:3c:91:5d:46:03:65:1b:d4:e6:ae:46:6f:ac:
60:0e:70:d4:d0:35:a5:2a:c6:11:3f:34:32:55:87:ae:18:ef:
c0:73:6c:29:c1:20:0a:09:6b:1e:92:b8:2f:f3:ae:28:df:d7:
76:24:e8:6a:c4:36:6e:f6:fe:ed:cb:b8:d1:f1:8a:59:ad:4a:
8f:d0:b4:e4:de:bc:48:3f:7e:3b:bb:1f:8e:a1:51:90:59:6b:
7d:1a:9f:01:15:54:bd:1e:a5:73:46:3c:18:19:59:b4:f3:7c:
9a:1d:c1:5c:84:97:15:97:67:ca:67:78:ad:b0:fe:b4:a8:7f:
8d:81:f9:f9:55:a9:b4:a7:c3:c6:f2:9f:bb:c6:06:40:48:49:
17:b7:c5:ee:a7:b9:63:d0:13:fd:9f:bf:11:50:c2:63:c9:71:
52:b2:0b:e9:41:6f:ff:5f:72:c8:d3:20:ef:af:f7:f1:48:04:
69:4b:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:00:07 2026 by rpki-client