
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
File: ECE230A523016A2711501CE158F766961D12E232.mft (raw, json)
Hash identifier: kIgEmRgseCoaiA1MKTsa1E6Yq4f0fTftC1CrGA7rLZo=
Subject key identifier: 7B:88:A8:5F:58:71:71:0D:87:DE:8F:11:D5:4A:E9:90:C2:8D:CE:89
Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
Certificate issuer: /CN=ECE230A523016A2711501CE158F766961D12E232
Certificate serial: 5FB931E2A36B706A9FF78935F80DFCE8C8295A52
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
Manifest number: B8
Signing time: Fri 25 Sep 2026 16:18:34 +0000
Manifest this update: Fri 25 Sep 2026 16:13:34 +0000
Manifest next update: Sat 26 Sep 2026 19:41:34 +0000
Files and hashes: 1: 3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (hash: oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=)
2: ECE230A523016A2711501CE158F766961D12E232.crl (hash: r04GkQE8F25HUjDDh+R7rVkHIiAbg7SheKx28Lorjdk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl
rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b9:31:e2:a3:6b:70:6a:9f:f7:89:35:f8:0d:fc:e8:c8:29:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECE230A523016A2711501CE158F766961D12E232
Validity
Not Before: Sep 25 16:13:34 2026 GMT
Not After : Sep 26 19:41:34 2026 GMT
Subject: CN=7B88A85F5871710D87DE8F11D54AE990C28DCE89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:e3:e4:dc:d0:77:c5:cb:60:0c:4e:db:32:
25:80:0a:36:c0:b0:56:01:d4:fe:5c:e7:33:16:11:
5b:91:e7:cb:9f:f6:57:8b:79:0e:33:ca:2f:f3:eb:
0e:47:55:fa:4a:43:a5:ce:d8:85:10:db:00:75:22:
4d:28:cc:1b:1c:45:cb:db:62:9a:c7:b6:c6:d9:2c:
cc:5e:f4:9b:45:2a:ad:e9:d7:5e:65:5e:5d:b4:ec:
25:47:8b:b0:95:4d:4d:f9:1a:a4:90:d0:de:bb:d5:
79:27:e4:28:13:40:76:4c:82:4d:25:a9:d4:ef:4f:
e2:2f:6f:bd:68:2e:52:05:66:3e:4b:8a:7c:bf:b3:
23:3a:14:cf:e3:ec:71:a2:ce:ea:37:de:56:c9:70:
09:6a:51:78:06:05:ef:1d:9b:14:54:e6:11:4e:fd:
bb:82:39:c8:3f:b4:f7:ee:d5:dd:fe:31:b8:fe:d5:
fe:ce:cb:0b:e6:b4:5c:f6:fc:d6:c7:d2:a9:59:a0:
48:9a:59:0c:62:93:72:53:4b:2f:31:ee:89:93:58:
c6:ab:a1:4b:09:21:95:3b:44:76:c2:02:89:33:69:
1d:07:b3:7b:d8:2d:19:fb:1e:26:5e:24:fb:56:ad:
5d:5d:08:2c:2a:aa:04:30:13:31:cd:04:b4:24:0a:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:A8:5F:58:71:71:0D:87:DE:8F:11:D5:4A:E9:90:C2:8D:CE:89
X509v3 Authority Key Identifier:
keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:99:2f:6f:16:5e:88:b4:c9:5a:da:6c:fb:7b:45:c3:e4:46:
91:ee:1e:85:ce:49:79:c4:e8:f1:21:56:1a:4f:73:a4:75:11:
7e:b2:cc:e1:8b:eb:cb:29:9e:12:66:84:75:8a:ee:70:bd:54:
3b:75:0e:72:4a:70:b1:7b:44:97:b6:2e:5b:77:be:56:7e:fd:
18:cb:89:0d:6f:aa:8a:df:89:4f:91:d8:d6:05:b0:39:0a:80:
72:32:4b:e6:61:d9:d2:7e:95:de:8d:f6:a5:28:e7:2b:63:1f:
eb:78:b7:4f:ad:6e:e3:49:e9:84:21:4a:c3:43:c1:79:19:1f:
07:93:5e:63:5c:44:8d:e1:a4:ff:c6:30:d3:ce:0b:73:c7:0c:
cd:a1:56:24:e1:1c:a5:88:23:10:b4:83:7e:0c:1b:78:da:14:
1b:5c:de:cd:0d:cd:1c:66:92:c2:82:66:d7:ae:c2:36:af:15:
43:01:51:22:33:3e:02:85:a4:45:51:53:47:b3:f2:f1:f8:b6:
fa:fc:69:ed:62:79:06:47:7a:ba:5d:e1:5f:c2:8c:5a:36:f1:
d9:02:2e:f9:88:57:02:b0:d0:fe:c6:60:8b:7c:f1:5a:9d:7f:
27:85:30:13:40:81:f5:f8:4a:20:eb:27:c9:3a:fd:bd:94:3c:
70:1d:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:27 2026 by rpki-client