
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
File: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft (raw, json)
Hash identifier: r0HDPTPiArHhBGNVaE7FvjD37DBFdTceLx1VTG2Fc0A=
Subject key identifier: 91:74:AE:4C:65:D1:D7:A5:C2:0D:B5:9E:C0:1A:49:EE:90:FD:2C:20
Authority key identifier: 1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
Certificate issuer: /CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Certificate serial: 53387E8CE38BBB663DED5D1392643C9189B6F799
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
Manifest number: BA
Signing time: Fri 25 Sep 2026 05:52:02 +0000
Manifest this update: Fri 25 Sep 2026 05:47:02 +0000
Manifest next update: Sat 26 Sep 2026 09:16:02 +0000
Files and hashes: 1: 3136302e31392e39312e302f32342d3234203d3e20313532363130.roa (hash: JChDx8EuWzqL1gPeTCGF4ozQOt1mwniQnlS9i/3N+jo=)
2: 3136302e31392e39302e302f32342d3234203d3e20313532363130.roa (hash: gltrchavwBKMRLSis9WfQ6ZI8We0DSXE9wkeAfUu3NE=)
3: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl (hash: hbhcdkBze22+4e5ccpOQh7jafL2reRBDzxl5E3aKfcw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 19:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:38:7e:8c:e3:8b:bb:66:3d:ed:5d:13:92:64:3c:91:89:b6:f7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Validity
Not Before: Sep 25 05:47:02 2026 GMT
Not After : Sep 26 09:16:02 2026 GMT
Subject: CN=9174AE4C65D1D7A5C20DB59EC01A49EE90FD2C20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:21:fc:0b:11:3f:b2:a5:16:78:2c:30:2c:
0b:df:f9:01:b7:28:d5:25:05:07:0d:fa:55:ff:1f:
40:08:18:b9:bf:97:e3:ad:bd:8c:0d:a9:52:12:8d:
c9:aa:73:a0:d1:b5:a1:96:3f:e5:09:7e:49:44:6e:
ea:15:02:ba:73:fc:ec:58:c9:9b:dc:81:cb:b2:c7:
e3:9a:a2:6b:86:8b:84:99:52:a5:aa:89:54:3f:cd:
8a:49:12:aa:78:17:d7:4c:28:5b:a4:9f:e7:06:00:
e6:1e:27:cd:cf:e5:c2:d5:76:4c:6d:23:70:38:0c:
6a:fe:6c:d0:fc:82:cf:d5:0e:14:92:16:1d:57:24:
d0:b9:33:71:52:72:c0:bd:7b:b0:d9:80:6d:d0:3b:
0c:80:cd:e3:82:08:3e:5c:0e:78:65:59:f4:72:ac:
db:53:4a:16:2f:fe:ef:21:cb:33:51:6b:84:2c:ea:
0d:1f:7f:7f:b6:2f:67:dd:36:31:53:78:fd:8b:9d:
e4:bf:4a:5a:af:e0:df:69:b4:24:ef:76:8a:76:35:
f9:72:01:9a:87:f7:64:87:a2:e1:38:59:39:e9:8f:
0d:ef:ea:50:7b:53:bd:0f:a9:60:9a:74:e1:87:35:
a3:2a:27:b3:fd:e3:a6:4c:d2:dd:d7:a4:aa:21:9d:
09:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:AE:4C:65:D1:D7:A5:C2:0D:B5:9E:C0:1A:49:EE:90:FD:2C:20
X509v3 Authority Key Identifier:
keyid:1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:53:5b:f0:c4:6a:e3:93:3c:65:08:b8:5d:24:fd:de:07:18:
b7:d9:52:da:da:4d:08:f9:62:03:73:2b:f5:2a:00:2f:fd:64:
b7:36:51:7e:1d:f1:7e:02:27:31:9e:78:73:e4:07:78:12:8f:
82:e9:dc:45:ad:a1:48:27:8c:92:f5:7e:ee:0e:9b:ce:7c:47:
39:69:c8:07:81:65:bf:a5:29:f9:f4:85:eb:ed:87:d0:45:4c:
bc:fe:6d:4e:be:ef:06:1e:82:59:8d:ee:d5:79:2d:e7:b0:53:
9c:f1:41:10:0c:0f:0b:9d:3b:b1:3f:70:b8:4c:8d:07:a7:eb:
61:a3:b1:5f:86:4c:0f:6a:17:28:bf:50:3a:b3:f3:28:f8:84:
d4:23:15:d2:ca:cc:ce:f2:a1:b8:e9:3f:c3:96:06:ed:92:3a:
c8:b1:7d:ad:97:18:bd:1a:81:7c:69:88:34:77:6f:79:c5:e1:
0d:d8:80:1d:72:24:ba:7b:fa:34:b0:45:93:fb:15:fa:a1:99:
b8:d5:c4:0a:f4:c4:81:23:f5:5f:19:ce:d8:66:e6:78:a4:ea:
8c:1c:50:10:a4:d0:36:36:a9:79:c0:5c:1f:d2:1a:3d:88:49:
b5:fb:51:9d:11:e5:83:18:49:11:36:07:c4:13:f4:8b:e8:31:
15:11:d7:ed
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUUzh+jOOLu2Y97V0TkmQ8kYm295kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2QjIxRTk5MEJBOUUyN0U2NDgwQTRERjUwNzJGODAx
RUE3QjUxQzAeFw0yNjA5MjUwNTQ3MDJaFw0yNjA5MjYwOTE2MDJaMDMxMTAvBgNV
BAMTKDkxNzRBRTRDNjVEMUQ3QTVDMjBEQjU5RUMwMUE0OUVFOTBGRDJDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4iH8CxE/sqUWeCwwLAvf+QG3
KNUlBQcN+lX/H0AIGLm/l+OtvYwNqVISjcmqc6DRtaGWP+UJfklEbuoVArpz/OxY
yZvcgcuyx+OaomuGi4SZUqWqiVQ/zYpJEqp4F9dMKFukn+cGAOYeJ83P5cLVdkxt
I3A4DGr+bND8gs/VDhSSFh1XJNC5M3FScsC9e7DZgG3QOwyAzeOCCD5cDnhlWfRy
rNtTShYv/u8hyzNRa4Qs6g0ff3+2L2fdNjFTeP2LneS/Slqv4N9ptCTvdop2Nfly
AZqH92SHouE4WTnpjw3v6lB7U70PqWCadOGHNaMqJ7P946ZM0t3XpKohnQmHAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUkXSuTGXR16XCDbWewBpJ7pD9LCAwHwYDVR0j
BBgwFoAUHGsh6ZC6nifmSApN9QcvgB6ntRwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv
MS8xQzZCMjFFOTkwQkE5RTI3RTY0ODBBNERGNTA3MkY4MDFFQTdCNTFDLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzFDNkIyMUU5OTBCQTlFMjdFNjQ4MEE0REY1MDcy
RjgwMUVBN0I1MUMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8xLzFDNkIyMUU5OTBCQTlF
MjdFNjQ4MEE0REY1MDcyRjgwMUVBN0I1MUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmU1vwxGrjkzxl
CLhdJP3eBxi32VLa2k0I+WIDcyv1KgAv/WS3NlF+HfF+Aicxnnhz5Ad4Eo+C6dxF
raFIJ4yS9X7uDpvOfEc5acgHgWW/pSn59IXr7YfQRUy8/m1Ovu8GHoJZje7VeS3n
sFOc8UEQDA8LnTuxP3C4TI0Hp+tho7FfhkwPahcov1A6s/Mo+ITUIxXSyszO8qG4
6T/DlgbtkjrIsX2tlxi9GoF8aYg0d295xeEN2IAdciS6e/o0sEWT+xX6oZm41cQK
9MSBI/VfGc7YZuZ4pOqMHFAQpNA2Nql5wFwf0ho9iEm1+1GdEeWDGEkRNgfEE/SL
6DEVEdft
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:59:11 2026 by rpki-client