
$ rpki-client -vvf rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
File: ECE230A523016A2711501CE158F766961D12E232.mft (raw, json)
Hash identifier: GP3zL4CqNN+76V8wZh9VjaGnw5k0S+NeDLmwPybVWDk=
Subject key identifier: 6B:42:F9:6B:CD:59:54:9E:65:72:77:48:B5:13:33:5F:49:34:4D:90
Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
Certificate issuer: /CN=ECE230A523016A2711501CE158F766961D12E232
Certificate serial: 145AA1506067CEDA1A395238C097BDDC179E4378
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
Manifest number: 63
Signing time: Thu 23 Jul 2026 14:27:40 +0000
Manifest this update: Thu 23 Jul 2026 14:22:40 +0000
Manifest next update: Fri 24 Jul 2026 15:04:40 +0000
Files and hashes: 1: ECE230A523016A2711501CE158F766961D12E232.crl (hash: 2W8/19ngQwN524YGAAFVF1vyZfxQ1nEiaGn8hmz9+BE=)
2: 3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (hash: oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl
rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:5a:a1:50:60:67:ce:da:1a:39:52:38:c0:97:bd:dc:17:9e:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECE230A523016A2711501CE158F766961D12E232
Validity
Not Before: Jul 23 14:22:40 2026 GMT
Not After : Jul 24 15:04:40 2026 GMT
Subject: CN=6B42F96BCD59549E65727748B513335F49344D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:9d:f1:a2:62:42:83:92:f6:f2:bc:6e:b2:
ed:fd:7e:37:9a:79:74:c3:93:77:29:f7:6f:8d:7d:
09:93:5e:49:20:27:0b:64:e5:d4:35:70:a5:3e:3d:
94:68:34:b1:34:35:bd:22:b8:55:62:8e:01:73:0e:
24:31:64:53:7c:84:8a:12:6a:c3:3c:9b:28:3b:56:
23:d7:f7:7c:31:ae:8e:c7:3a:d8:86:61:13:72:19:
c9:c0:96:16:8c:d6:54:bf:a1:2c:df:23:76:32:7b:
b0:fc:89:3b:8f:58:76:07:61:a4:2c:86:e9:c5:12:
ab:f6:ff:81:4e:0e:21:26:5b:24:96:91:bc:95:8d:
1d:65:79:34:82:51:f2:e2:8d:38:9c:51:dc:8e:d6:
4c:fc:bf:f5:19:d4:83:7c:f4:32:c5:c9:40:4c:6e:
78:fd:c4:8d:fe:b7:20:21:4b:2b:30:3c:42:f0:9c:
ef:e0:ec:9a:29:f2:9e:71:ca:aa:44:2d:b2:13:ba:
e8:e0:a3:5e:44:2f:37:22:0f:99:30:12:1d:d3:bc:
53:0b:b9:87:93:2d:f3:b1:e6:4a:b4:f8:0c:bc:67:
1f:f1:c9:16:1d:a1:29:b8:32:21:4d:00:0b:6c:7a:
39:36:4a:3b:f1:d6:96:f7:77:c0:c6:3e:8e:4e:13:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:F9:6B:CD:59:54:9E:65:72:77:48:B5:13:33:5F:49:34:4D:90
X509v3 Authority Key Identifier:
keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:67:2e:ed:0d:83:c4:a3:6d:b5:cc:bb:57:f3:5a:ac:fd:42:
7b:50:8e:fd:f0:d2:d4:02:21:ca:e7:7a:70:a2:6e:43:a0:92:
d1:6d:7b:b8:7e:f5:f5:c9:ac:b0:8b:2f:e0:5b:c2:fb:54:28:
51:f3:69:bc:c7:ca:03:1a:ba:83:a6:18:aa:54:e0:1b:bc:ee:
e3:cb:40:23:cd:f8:13:57:3f:58:8e:59:a6:db:4a:08:00:7d:
f3:b7:86:39:fa:c8:b2:03:ad:20:84:03:a1:00:ce:10:57:5b:
d5:6b:42:a5:4a:3e:81:81:c5:fa:ff:e4:0a:f4:d1:29:a8:fc:
60:d8:16:b3:4e:60:9a:fc:cc:8a:bf:21:7a:8b:ee:ea:fe:05:
3e:de:7d:46:48:b0:a5:fc:32:90:a6:a3:07:44:03:4e:57:11:
b9:46:fc:97:ba:9d:36:9c:7a:94:84:0a:ac:6a:f1:27:d3:d4:
9f:11:56:f5:65:c0:4c:47:9f:a5:5e:22:a6:48:dd:cf:a2:51:
19:f1:4d:48:0d:4b:39:69:27:7c:1a:3d:14:fb:95:d6:e0:1d:
9e:80:4c:46:22:cb:62:44:40:36:c9:1e:0c:69:7d:21:20:19:
eb:e5:59:5b:f7:f5:40:24:b1:7f:b3:97:36:de:16:e4:59:8c:
74:9b:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:33 2026 by rpki-client