
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier: QDMAg45MXig8XzKEg8GLKVN4mUqh34qqmfThK+hC9J0=
Subject key identifier: C0:34:5E:02:0D:4E:16:88:FF:F6:08:67:9F:5C:BB:C7:44:E4:49:BF
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial: 74ADB7FDA7DDE28E312CAABFF8B6BB93530C1F8A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 16:18:33 +0000
Manifest this update: Fri 25 Sep 2026 16:13:33 +0000
Manifest next update: Sat 26 Sep 2026 19:24:33 +0000
Files and hashes: 1: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
2: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
3: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: sVn/y9p4w5qFKouaHa+iDDp6uFrbYfhKVw6fGDYwa+I=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ad:b7:fd:a7:dd:e2:8e:31:2c:aa:bf:f8:b6:bb:93:53:0c:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Validity
Not Before: Sep 25 16:13:33 2026 GMT
Not After : Sep 26 19:24:33 2026 GMT
Subject: CN=C0345E020D4E1688FFF608679F5CBBC744E449BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:af:ff:b7:88:f3:fc:51:e7:32:4b:81:0b:
6d:66:9f:34:6e:1c:2f:0a:9b:ac:c1:1b:d3:af:18:
74:a1:ac:8b:62:43:06:47:02:71:6e:68:0b:86:a1:
0a:49:52:07:fe:b0:8d:4e:4e:11:cc:0e:2c:ca:46:
b1:0c:08:0f:03:36:10:f0:53:d6:b5:7e:4a:ff:29:
44:a3:97:f5:6d:6a:5a:a4:35:9b:c6:79:f6:53:e8:
a8:29:08:79:a8:4b:b1:8e:b0:c7:ec:05:df:fe:bf:
63:cf:85:cb:f5:77:1b:7a:b2:ea:11:24:80:21:39:
bf:43:67:b3:ee:bb:85:e2:1c:b6:3b:24:cf:ed:a6:
a4:87:4e:f4:bb:16:ce:db:bf:f6:eb:60:d2:fa:68:
ef:e3:cd:3d:7e:7a:d5:16:88:b6:96:c1:47:95:61:
41:f3:b6:d2:35:2f:02:f1:68:fe:bf:90:5c:5e:fc:
ec:00:52:23:95:98:27:93:54:90:44:69:b3:c0:d7:
5a:3e:59:d2:86:67:c6:79:f5:25:37:0d:a2:4e:ff:
75:f2:45:d0:d6:cc:8c:31:20:41:82:5a:67:52:bb:
6a:9d:c5:8f:e0:5b:8a:12:ef:96:c8:53:c7:df:e7:
05:5a:dd:db:e7:ae:a8:6d:64:fe:cf:67:c1:48:a5:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:34:5E:02:0D:4E:16:88:FF:F6:08:67:9F:5C:BB:C7:44:E4:49:BF
X509v3 Authority Key Identifier:
keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:da:d2:db:aa:42:af:98:f0:d1:d5:fa:62:90:4a:ce:7b:74:
cb:ee:4a:b6:a6:06:64:10:d9:30:f3:22:6e:88:b4:6b:32:a2:
4f:6c:f7:90:cc:03:1d:28:60:dd:9b:ea:29:0d:32:1c:c9:6d:
fa:43:a7:8a:cb:f5:d0:d1:04:90:63:aa:f5:e3:17:11:ad:3b:
43:17:9a:c6:62:79:52:93:85:51:da:2b:81:a4:0f:6a:75:65:
37:e9:c8:c8:ca:64:76:79:bc:91:0c:20:3d:39:43:3a:b3:04:
de:88:15:4e:d8:a1:cb:83:01:b3:56:11:e7:dc:6c:71:bd:4f:
08:3d:53:01:50:6a:9b:99:15:a5:19:c8:ad:81:1d:81:e7:8e:
ac:ef:3e:88:da:9a:8e:6a:a9:44:39:ff:2b:32:c6:89:87:e6:
69:40:2c:a3:cd:20:e4:09:ad:b7:a1:9c:17:9d:ce:8d:78:ee:
bc:20:c8:6a:cf:ee:ee:6e:e4:40:72:d9:d5:4a:be:ea:19:3b:
20:9b:05:de:97:f3:6b:50:06:d9:e9:00:44:20:ce:54:de:28:
71:12:53:a3:72:ea:75:89:27:95:56:bb:9e:99:e4:99:d5:9d:
6c:1e:85:2e:1e:be:a0:94:9a:01:9a:e5:2a:47:67:ac:92:7b:
94:53:3d:2f
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUdK23/afd4o4xLKq/+La7k1MMH4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFFRkJGQ0M1MjY2MjIyQzg0NTNGRTVCNDY4QzM2N0Mw
OTVDOEY2NzAeFw0yNjA5MjUxNjEzMzNaFw0yNjA5MjYxOTI0MzNaMDMxMTAvBgNV
BAMTKEMwMzQ1RTAyMEQ0RTE2ODhGRkY2MDg2NzlGNUNCQkM3NDRFNDQ5QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YK//t4jz/FHnMkuBC21mnzRu
HC8Km6zBG9OvGHShrItiQwZHAnFuaAuGoQpJUgf+sI1OThHMDizKRrEMCA8DNhDw
U9a1fkr/KUSjl/VtalqkNZvGefZT6KgpCHmoS7GOsMfsBd/+v2PPhcv1dxt6suoR
JIAhOb9DZ7Puu4XiHLY7JM/tpqSHTvS7Fs7bv/brYNL6aO/jzT1+etUWiLaWwUeV
YUHzttI1LwLxaP6/kFxe/OwAUiOVmCeTVJBEabPA11o+WdKGZ8Z59SU3DaJO/3Xy
RdDWzIwxIEGCWmdSu2qdxY/gW4oS75bIU8ff5wVa3dvnrqhtZP7PZ8FIpQPxAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUwDReAg1OFoj/9ghnn1y7x0TkSb8wHwYDVR0j
BBgwFoAUCu+/zFJmIiyEU/5bRow2fAlcj2cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVRSSU5F
VC8wLzBBRUZCRkNDNTI2NjIyMkM4NDUzRkU1QjQ2OEMzNjdDMDk1QzhGNjcuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMEFFRkJGQ0M1MjY2MjIyQzg0NTNGRTVCNDY4
QzM2N0MwOTVDOEY2Ny5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lUUklORVQvMC8wQUVGQkZDQzUy
NjYyMjJDODQ1M0ZFNUI0NjhDMzY3QzA5NUM4RjY3Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtrS26pC
r5jw0dX6YpBKznt0y+5KtqYGZBDZMPMiboi0azKiT2z3kMwDHShg3ZvqKQ0yHMlt
+kOnisv10NEEkGOq9eMXEa07QxeaxmJ5UpOFUdorgaQPanVlN+nIyMpkdnm8kQwg
PTlDOrME3ogVTtihy4MBs1YR59xscb1PCD1TAVBqm5kVpRnIrYEdgeeOrO8+iNqa
jmqpRDn/KzLGiYfmaUAso80g5Amtt6GcF53OjXjuvCDIas/u7m7kQHLZ1Uq+6hk7
IJsF3pfza1AG2ekARCDOVN4ocRJTo3LqdYknlVa7npnkmdWdbB6FLh6+oJSaAZrl
KkdnrJJ7lFM9Lw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:22:30 2026 by rpki-client