
$ rpki-client -vvf rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
File: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft (raw, json)
Hash identifier: I1SIHE2xPJoUIaSYmlWUXemc5+iPhSK/C7K6PIDAYNo=
Subject key identifier: 43:BE:59:BE:06:7E:EA:D1:D1:CF:BF:55:3C:73:8A:26:66:A2:15:31
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Certificate issuer: /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial: 4B83E3E4F828433D1EAAC702568F1420247E0456
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
Manifest number: 67
Signing time: Thu 23 Jul 2026 16:03:11 +0000
Manifest this update: Thu 23 Jul 2026 15:58:11 +0000
Manifest next update: Fri 24 Jul 2026 16:30:11 +0000
Files and hashes: 1: 3138302e39342e33302e302f32332d3234203d3e203633393237.roa (hash: pjcbMKqxFhdZKYgKADpdkIDPG/goMICc5D5clKBpXPM=)
2: 3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (hash: NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=)
3: 3138302e39342e33302e302f32332d3234203d3e2039323939.roa (hash: wXHXnquzJPMvt2eL/0ADugpfutlaQZTySmvZfMnVTRQ=)
4: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl (hash: rt6PxuI67fAPMQVgwYcTh636hdtSig9cbVmyS0ZlT1o=)
5: 3138302e39342e33302e302f32332d3233203d3e203139353531.roa (hash: 1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:83:e3:e4:f8:28:43:3d:1e:aa:c7:02:56:8f:14:20:24:7e:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Validity
Not Before: Jul 23 15:58:11 2026 GMT
Not After : Jul 24 16:30:11 2026 GMT
Subject: CN=43BE59BE067EEAD1D1CFBF553C738A2666A21531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:dc:dd:74:84:df:56:b5:87:48:21:31:a1:
63:b5:f4:fc:71:fc:3e:2d:74:5a:16:39:b0:0c:18:
af:81:c1:1b:51:7e:b4:42:d3:d0:71:1c:58:f6:0b:
fa:db:3d:41:3b:ee:76:65:21:79:04:d6:0b:6b:85:
9d:64:17:d3:ff:69:54:9b:0f:83:24:b7:79:d4:7d:
b2:41:7c:60:79:d4:e0:00:d5:8f:48:6a:b4:d5:6d:
1a:1d:c7:b5:1c:09:b8:06:51:1d:90:39:a3:52:20:
1d:f9:4b:35:9f:8e:90:45:5f:e9:cb:d3:a9:be:ce:
a5:2d:5b:68:74:4c:c2:99:99:0c:63:bf:5b:13:d8:
d3:db:84:58:3e:9a:ee:f6:fe:54:8f:5b:62:02:b2:
ba:d8:7f:ee:1b:b6:eb:73:8e:6d:b0:85:ed:94:a5:
1a:dd:42:52:4d:4d:21:89:ec:f1:5e:82:91:2d:76:
a7:6c:27:60:e1:f4:1f:e6:d5:2d:d9:96:8e:b0:ba:
ba:dc:85:f1:bd:26:e0:07:27:6d:03:81:34:65:c9:
d5:b0:e9:ef:73:bb:7b:32:ff:74:48:b3:a7:66:dc:
c6:72:83:a6:51:69:71:9f:11:e0:7e:3a:6c:0f:d2:
b5:c8:a3:11:4f:30:31:6f:b2:ba:31:2b:f2:e6:85:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BE:59:BE:06:7E:EA:D1:D1:CF:BF:55:3C:73:8A:26:66:A2:15:31
X509v3 Authority Key Identifier:
keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:97:9c:41:30:b2:fd:37:4a:5c:2f:14:40:2a:b6:c3:bc:
9d:62:6f:48:84:5b:e6:0a:c5:14:1a:60:24:98:fc:94:81:f4:
7a:26:91:0d:db:3a:6c:4e:7f:5b:11:50:31:70:91:bf:5d:d9:
25:dd:d1:ed:52:9e:d8:cb:99:e3:ec:70:a3:0c:f5:f7:a6:66:
4e:34:e6:1e:87:a4:ce:65:8d:31:5f:7f:31:40:e5:45:25:10:
2b:bd:dc:4a:9f:1c:c8:99:89:36:56:47:bd:c4:29:ff:76:5a:
ab:09:ba:89:51:13:23:85:39:17:c4:30:7a:5a:23:9f:40:ed:
72:d9:8c:f5:c8:b3:fc:f0:c3:67:ed:af:d9:5f:01:a8:a2:10:
f6:c7:58:92:b0:7a:86:91:9f:e7:ec:17:3e:a7:4c:30:63:39:
6a:7e:57:62:22:b7:95:15:25:55:e3:af:24:2c:1f:cd:7c:82:
56:22:ef:50:98:bd:09:50:ad:01:88:3a:ad:bb:71:d0:c8:76:
85:c6:a5:33:2d:21:ee:4e:c3:12:59:77:21:64:79:fc:11:05:
5c:d6:4b:91:bf:df:6b:b4:d5:ce:2f:49:0f:56:24:d2:d9:50:
bf:8a:94:0c:fb:f4:24:c2:a2:40:b0:53:28:71:88:a7:15:51:
9c:b8:08:cf
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUS4Pj5PgoQz0eqscCVo8UICR+BFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5ODYwMkMwRkZGREJDRDE2ODkzODBCMDVBQzRDRDY5
NEZBRjgzOTAeFw0yNjA3MjMxNTU4MTFaFw0yNjA3MjQxNjMwMTFaMDMxMTAvBgNV
BAMTKDQzQkU1OUJFMDY3RUVBRDFEMUNGQkY1NTNDNzM4QTI2NjZBMjE1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTtzddITfVrWHSCExoWO19Pxx
/D4tdFoWObAMGK+BwRtRfrRC09BxHFj2C/rbPUE77nZlIXkE1gtrhZ1kF9P/aVSb
D4Mkt3nUfbJBfGB51OAA1Y9IarTVbRodx7UcCbgGUR2QOaNSIB35SzWfjpBFX+nL
06m+zqUtW2h0TMKZmQxjv1sT2NPbhFg+mu72/lSPW2ICsrrYf+4btutzjm2whe2U
pRrdQlJNTSGJ7PFegpEtdqdsJ2Dh9B/m1S3Zlo6wurrchfG9JuAHJ20DgTRlydWw
6e9zu3sy/3RIs6dm3MZyg6ZRaXGfEeB+OmwP0rXIoxFPMDFvsroxK/LmhWNvAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUQ75ZvgZ+6tHRz79VPHOKJmaiFTEwHwYDVR0j
BBgwFoAUcZhgLA//280WiTgLBaxM1pT6+DkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkdaLzAv
NzE5ODYwMkMwRkZGREJDRDE2ODkzODBCMDVBQzRDRDY5NEZBRjgzOS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS83MTk4NjAyQzBGRkZEQkNEMTY4OTM4MEIwNUFDNENE
Njk0RkFGODM5LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkdaLzAvNzE5ODYwMkMwRkZGREJDRDE2
ODkzODBCMDVBQzRDRDY5NEZBRjgzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAFhl5xBMLL9N0pcLxRA
KrbDvJ1ib0iEW+YKxRQaYCSY/JSB9HomkQ3bOmxOf1sRUDFwkb9d2SXd0e1SntjL
mePscKMM9femZk405h6HpM5ljTFffzFA5UUlECu93EqfHMiZiTZWR73EKf92WqsJ
uolREyOFORfEMHpaI59A7XLZjPXIs/zww2ftr9lfAaiiEPbHWJKweoaRn+fsFz6n
TDBjOWp+V2Iit5UVJVXjryQsH818glYi71CYvQlQrQGIOq27cdDIdoXGpTMtIe5O
wxJZdyFkefwRBVzWS5G/32u01c4vSQ9WJNLZUL+KlAz79CTCokCwUyhxiKcVUZy4
CM8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:13 2026 by rpki-client