
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
File: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft (raw, json)
Hash identifier: 0UXK78y3uZKlf5/cCIJe/2ecHsg8ulH3Hv+lubbkZnw=
Subject key identifier: D9:02:E7:03:0D:35:13:C5:0E:C1:F3:75:D4:3C:09:66:DE:00:4E:58
Authority key identifier: 1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
Certificate issuer: /CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Certificate serial: 151347E19A3E84DB3CA5EBA63F2F076457410201
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
Manifest number: FE
Signing time: Sun 15 Nov 2026 00:23:52 +0000
Manifest this update: Sun 15 Nov 2026 00:18:52 +0000
Manifest next update: Mon 16 Nov 2026 03:14:52 +0000
Files and hashes: 1: 3136302e31392e39302e302f32342d3234203d3e20313532363130.roa (hash: gltrchavwBKMRLSis9WfQ6ZI8We0DSXE9wkeAfUu3NE=)
2: 3136302e31392e39312e302f32342d3234203d3e20313532363130.roa (hash: JChDx8EuWzqL1gPeTCGF4ozQOt1mwniQnlS9i/3N+jo=)
3: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl (hash: hMBFZMvq+mYjdKYvDv0BTZ4Gw8QC18iuapFwulxCJfA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 03:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:13:47:e1:9a:3e:84:db:3c:a5:eb:a6:3f:2f:07:64:57:41:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Validity
Not Before: Nov 15 00:18:52 2026 GMT
Not After : Nov 16 03:14:52 2026 GMT
Subject: CN=D902E7030D3513C50EC1F375D43C0966DE004E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:cb:1b:79:37:83:e4:6b:24:51:d8:25:a3:
be:10:39:cf:a0:4c:22:9c:8d:f5:7c:30:6b:1b:8a:
d1:43:fd:e7:a9:35:4d:ac:3c:60:72:20:c7:3c:15:
bc:29:e6:41:05:99:2d:17:b2:aa:84:42:12:e1:93:
4d:5b:cd:ad:c7:31:3c:70:c2:75:89:4f:ba:db:63:
8c:f7:37:c2:7e:fe:86:1f:7c:13:4e:9b:35:44:c6:
eb:4b:e2:27:03:49:10:a1:d3:6c:33:d5:69:1e:28:
84:6c:3b:db:db:f3:30:b9:47:fd:60:d9:8e:32:79:
a6:f3:87:66:95:0f:4b:b8:36:57:85:db:84:90:36:
3b:6f:5c:b9:33:dc:ee:63:e7:da:f7:5b:26:e2:95:
d4:1f:9f:93:71:1b:6e:84:a3:e8:1c:e5:0e:ca:f0:
af:50:89:aa:6f:a7:46:55:84:30:09:1c:57:54:76:
8f:70:51:c2:bd:89:2c:eb:a3:af:ae:2d:1a:47:fc:
94:5f:dc:d5:10:97:b1:63:75:bd:d9:16:79:d5:d6:
66:58:68:78:61:fd:bf:c7:13:a5:7c:6c:1b:b9:46:
ee:32:6d:33:2a:34:ff:07:65:10:84:df:7a:40:87:
cd:4b:a1:73:a3:c3:32:d7:68:54:fe:7b:e9:04:0e:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:E7:03:0D:35:13:C5:0E:C1:F3:75:D4:3C:09:66:DE:00:4E:58
X509v3 Authority Key Identifier:
keyid:1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2d:11:4e:3a:1e:27:57:d0:92:e0:a9:0f:3a:8e:35:e3:94:
11:32:98:88:c0:4e:7e:de:96:c6:d7:13:eb:55:cb:db:71:42:
09:8d:44:2c:8a:72:14:fe:62:01:bb:7d:e2:db:96:a4:b3:2f:
42:56:59:42:56:b5:2a:2e:7f:dd:80:29:ba:04:a4:b2:d3:d7:
46:38:e7:b3:d4:e9:83:d4:e1:02:60:9a:8a:ed:0d:b8:de:7a:
b7:c2:42:2a:9c:09:85:32:71:92:81:a2:fe:c4:ed:97:21:a1:
f1:af:b3:a0:14:07:2d:67:0f:16:6b:ab:68:f5:f8:90:aa:5a:
41:5b:2d:44:14:20:9f:06:3b:1d:a5:aa:a9:96:66:13:ef:1e:
18:38:9a:bf:6b:42:24:88:d5:58:5b:76:c8:ca:96:6f:3a:ee:
97:d7:bd:0b:bc:59:ae:74:28:3b:11:22:ac:4a:57:1b:01:b7:
e8:4e:5e:48:c5:4e:a4:a6:04:66:d8:89:dd:04:d4:ad:cd:51:
50:9a:b0:de:62:e2:5a:7b:29:1b:4d:48:ba:26:fa:ef:bc:4a:
8b:7c:b3:b3:9c:18:55:69:61:e9:a6:30:5b:9b:f1:f7:ba:1a:
31:2b:90:40:61:2f:d4:39:ac:36:44:11:ef:d4:5a:67:e1:c4:
74:87:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:07:23 2026 by rpki-client