
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier: Qq7r8flmbjkGSDf+rSG4C/cc7hcFykMAM3HDTekGEi4=
Subject key identifier: 67:64:7F:99:7A:B5:38:5D:CA:28:FB:3B:80:8C:12:5C:5B:C9:BC:84
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer: /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial: 46D513B6428DDB56F92E49152EB880F2EB73FF4E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 22:09:27 +0000
Manifest this update: Fri 25 Sep 2026 22:04:27 +0000
Manifest next update: Sun 27 Sep 2026 01:47:27 +0000
Files and hashes: 1: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: y7yrYyb/6L9GUBr2t8edZPOsEQ7V7QAll/gfzRqMmTg=)
2: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d5:13:b6:42:8d:db:56:f9:2e:49:15:2e:b8:80:f2:eb:73:ff:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Validity
Not Before: Sep 25 22:04:27 2026 GMT
Not After : Sep 27 01:47:27 2026 GMT
Subject: CN=67647F997AB5385DCA28FB3B808C125C5BC9BC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5c:3f:36:da:ba:dd:59:19:92:09:8e:db:4e:
7f:15:23:fc:31:c6:83:f7:8c:64:ee:ac:52:49:52:
e1:6d:1b:c6:06:9b:22:40:b3:ae:fb:d1:00:67:43:
93:9b:91:df:50:48:59:9f:15:4f:de:e2:39:67:1b:
12:2a:33:9f:d1:72:e9:e0:f2:e5:94:ea:9e:0a:23:
85:89:9b:f3:2d:c6:40:b1:0f:bd:5e:82:b9:d8:7e:
09:f4:56:3d:21:12:86:c0:46:57:93:a5:cd:b8:76:
8c:b9:99:ed:cf:b8:2a:3c:16:17:f8:20:a0:3d:5c:
47:4f:f3:27:95:1e:7b:4f:6b:19:df:97:00:cc:09:
00:93:e9:dc:1a:8e:a9:0b:69:c0:43:cb:a5:2c:46:
9d:ac:00:f6:c5:f5:3a:36:d7:cb:f2:c3:5e:0d:d6:
f8:18:59:06:3b:b0:71:91:15:8c:14:fc:ba:51:79:
24:a3:23:3f:78:7e:da:ea:2d:53:68:b9:03:57:1c:
21:0f:f8:18:49:2d:de:dc:86:a5:11:3c:33:1a:8a:
99:74:cc:48:6c:c0:8e:4a:79:99:87:4f:8f:53:30:
af:39:d3:32:ce:62:2a:b9:5b:7c:92:68:63:78:fd:
52:cb:85:e7:fc:61:6a:db:52:06:90:18:cf:f9:09:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:7F:99:7A:B5:38:5D:CA:28:FB:3B:80:8C:12:5C:5B:C9:BC:84
X509v3 Authority Key Identifier:
keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:a2:e3:8f:37:43:b6:60:71:71:01:90:8c:d7:13:7f:48:
a2:06:c4:e6:78:0f:24:8e:49:fc:d4:9c:aa:b0:e4:8b:5f:8f:
3a:0c:9c:b6:d5:1f:fe:0d:74:a1:88:44:81:5a:aa:6a:d0:ba:
4e:46:a9:65:71:dd:31:6c:1b:94:e9:9a:99:8e:b3:bd:80:54:
56:13:42:c8:ea:20:74:d4:8c:c8:4d:9a:e5:c2:19:f4:a7:19:
e0:eb:a6:04:0d:d1:01:5c:ef:48:5d:2d:2e:e3:c7:b8:47:c2:
30:00:47:2b:4b:76:ea:c6:99:42:70:bd:46:4b:aa:40:35:a0:
e6:02:7e:8b:32:4d:52:da:45:d2:ef:90:85:1c:d1:a6:d0:ae:
12:4f:de:49:48:a9:b8:36:4e:af:93:42:f6:8f:32:04:08:d7:
c3:10:ee:b0:3d:b3:c9:f9:df:99:90:6a:c4:14:3d:ed:3b:d8:
51:10:4b:23:64:34:59:9b:28:b7:57:6d:64:1a:d4:6b:6f:19:
e6:40:0a:6f:df:3f:a9:af:ec:0a:a1:6f:ab:8a:8c:78:f9:b3:
b9:7d:b4:ef:d8:d3:28:ca:55:4f:d1:db:03:17:3e:2c:2c:88:
b0:6b:20:d8:91:88:84:c5:98:b2:05:d1:cc:b9:15:e2:77:82:
52:79:06:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:23:31 2026 by rpki-client