
$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier: NiGExWqc2UQRWCP+LKGZW/GdXbxtZA7YuOaREyijS+Y=
Subject key identifier: DC:E3:D5:B5:38:FF:01:B2:2A:2E:20:A8:1B:D4:1B:78:54:F1:69:34
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer: /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial: 76E9DFBAAD53723311996E1A46E94F836813EA9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 23:31:58 +0000
Manifest this update: Thu 23 Jul 2026 23:26:58 +0000
Manifest next update: Sat 25 Jul 2026 00:36:58 +0000
Files and hashes: 1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: aNVoCdi1IkNjnEvLe1Nfb958UefltoPDak0RMDluO04=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e9:df:ba:ad:53:72:33:11:99:6e:1a:46:e9:4f:83:68:13:ea:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Validity
Not Before: Jul 23 23:26:58 2026 GMT
Not After : Jul 25 00:36:58 2026 GMT
Subject: CN=DCE3D5B538FF01B22A2E20A81BD41B7854F16934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:d4:21:c7:1a:c2:da:dd:17:c8:a3:86:ee:
5f:e2:48:60:e3:8b:72:06:06:82:9b:89:94:b6:dd:
c4:b3:49:19:8c:60:18:a9:77:9f:ee:16:38:86:0f:
52:6d:bc:a3:14:52:7a:90:f0:00:d5:f1:3a:76:f2:
e7:ec:e0:a4:9e:e5:eb:00:63:95:ce:bc:5e:d0:86:
ad:1d:1c:09:85:81:18:fb:b4:06:35:af:f5:8c:d6:
be:31:16:bc:d2:9a:10:5b:f6:9c:ed:8d:46:ae:98:
ed:12:e4:ca:d5:3d:47:8c:7a:7f:9f:6e:a8:89:32:
9e:d0:af:3d:00:24:2c:02:be:5e:00:e3:1a:87:95:
0d:a5:df:4d:13:9f:b6:c9:7d:b5:2d:3c:d8:29:63:
80:b3:d6:91:8c:68:f3:3e:9e:03:0a:5a:2b:46:f0:
75:29:79:d2:7b:ae:a6:0b:9a:1c:3b:e1:e2:f6:06:
7c:35:f9:a4:e3:e2:93:98:3a:c1:ed:cb:50:bd:57:
0a:c4:3f:23:9a:06:df:3e:a2:d3:8e:81:fb:24:05:
42:b3:bc:df:1d:74:06:fb:42:69:4e:01:ae:2d:89:
46:17:cf:bf:8a:da:e6:fb:8f:ad:e1:99:72:a2:c7:
a9:c5:da:4b:f6:74:52:82:9f:00:ec:77:1f:c6:c9:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:D5:B5:38:FF:01:B2:2A:2E:20:A8:1B:D4:1B:78:54:F1:69:34
X509v3 Authority Key Identifier:
keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fa:43:df:ca:28:24:fd:ba:ec:75:e6:c2:f2:2f:36:94:ea:
8a:e9:16:cb:e8:f3:ac:f7:66:73:24:9b:b6:e6:5a:73:77:07:
ee:dd:d1:ef:5d:5f:c4:9f:d9:57:4b:66:0c:7d:58:c8:54:d7:
15:c1:5d:8d:64:b7:e2:19:a4:12:6b:50:e6:fd:bb:34:f7:15:
33:42:b0:52:da:de:67:d3:39:74:eb:43:c6:7d:69:2e:cb:a5:
3b:dd:6c:60:f5:0d:62:f8:fa:94:f8:eb:c6:0d:00:24:6c:38:
6d:be:80:31:7e:17:30:4e:7f:f1:56:34:e5:aa:c3:11:36:13:
06:ac:12:95:20:21:ce:40:7b:14:98:43:ba:6b:48:b5:86:e2:
f2:5b:32:ba:df:ed:f0:ac:0f:f9:3c:51:a9:dd:71:70:1f:01:
b7:28:9e:3c:a5:08:de:ec:d9:50:1b:30:d5:3b:64:86:31:ef:
cd:99:e3:65:b3:e7:90:f7:40:fe:04:dc:94:ed:0d:b6:8f:bc:
72:64:41:07:9e:f7:2a:d8:7d:26:a7:c6:af:21:e2:a6:fb:12:
a1:91:b3:0f:b4:9a:43:df:eb:c4:1d:7f:fe:52:b4:98:2c:d0:
06:c1:ca:41:5f:96:e0:d8:3e:73:21:70:4d:00:86:bb:dc:48:
32:90:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:07 2026 by rpki-client