
$ rpki-client -vvf rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
File: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft (raw, json)
Hash identifier: PnWnB1/ZO/N88dehyLP0/fvt3ayNVELPcRpHz7HcEh4=
Subject key identifier: 20:25:03:92:D0:33:85:64:92:6E:47:BB:11:65:BB:3C:6A:7F:D1:ED
Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
Certificate issuer: /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Certificate serial: 2B2A85990912F5C6BC2A37DAD65039D731A93EF3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
Manifest number: 64
Signing time: Thu 23 Jul 2026 23:11:58 +0000
Manifest this update: Thu 23 Jul 2026 23:06:58 +0000
Manifest next update: Sat 25 Jul 2026 00:41:58 +0000
Files and hashes: 1: 323430303a373432303a3a2f33322d3332203d3e20313334383233.roa (hash: qqWWtvqYwHtuTqDmq6KrURru6pr7pReD9Wzh4csu0e4=)
2: 3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (hash: sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=)
3: 86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl (hash: +IiFcTwd+dx1yk0dOIj/TUfsqv0cLwPvZmMmE84at8c=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2a:85:99:09:12:f5:c6:bc:2a:37:da:d6:50:39:d7:31:a9:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Validity
Not Before: Jul 23 23:06:58 2026 GMT
Not After : Jul 25 00:41:58 2026 GMT
Subject: CN=20250392D0338564926E47BB1165BB3C6A7FD1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:84:6d:05:b6:8b:f5:1d:4d:e3:a0:93:eb:
e9:b2:bb:ce:58:5d:c3:f5:97:65:87:fb:45:12:f3:
7c:cc:30:1f:c0:68:ce:a4:8f:e3:d5:73:4a:b0:22:
95:0e:75:07:26:f7:c4:89:16:f4:40:65:22:db:88:
af:04:b5:ae:6a:ad:e3:5e:de:ed:5b:87:bf:d1:5b:
6c:9e:40:a0:f1:5c:d7:54:90:c3:a6:ff:eb:03:b2:
63:8a:fd:76:2e:d5:05:92:c5:57:ae:27:54:60:c0:
f0:ae:64:e8:04:bf:e6:92:8d:e3:8e:55:f5:11:99:
60:42:45:09:67:3f:fa:ad:d4:25:2a:3d:0e:c7:b5:
f0:e6:d5:43:bc:4e:37:65:1e:79:bb:93:c9:d6:47:
00:4f:16:48:1c:46:d4:ec:6d:c5:61:0a:81:dd:88:
02:28:31:00:2e:43:4a:56:9c:96:d8:6e:6e:d1:63:
c5:f2:d9:39:52:7a:92:50:ed:c4:43:3f:9f:96:5e:
ec:97:21:8a:83:86:ee:f5:75:e3:b5:93:bc:42:63:
a9:43:cd:91:92:11:8b:9e:6e:f5:f0:73:37:31:83:
be:92:34:f7:4b:fe:51:01:c2:72:f9:a7:9f:1e:d7:
8a:d2:e9:f8:76:25:fd:82:2d:d9:a9:de:55:a1:d5:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:03:92:D0:33:85:64:92:6E:47:BB:11:65:BB:3C:6A:7F:D1:ED
X509v3 Authority Key Identifier:
keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:0b:e5:4a:00:91:29:c1:76:b6:16:15:75:58:b4:b3:a5:1e:
b1:4a:a2:91:09:77:b5:a8:0a:2c:bf:e5:d1:e0:5c:92:2d:29:
01:83:2d:f0:48:d9:b7:35:b5:34:b9:da:04:f8:3f:65:89:76:
92:65:ce:d4:29:2f:b7:8a:34:4e:b9:26:9d:33:16:c2:76:46:
f0:1b:c8:aa:6d:01:47:1b:c7:d9:84:6c:10:e7:e4:c3:f7:70:
8c:cb:16:ee:bb:39:57:09:46:81:c3:a3:a3:7f:70:a8:5a:19:
12:3a:e2:a8:cb:ed:35:b8:35:45:92:5b:a7:d7:e7:30:cd:4d:
60:79:97:5a:d0:2a:60:82:a0:23:55:20:42:36:2e:14:41:9e:
9f:86:05:e2:67:a2:b2:a8:2c:35:b9:25:a6:9f:90:18:ea:65:
dd:ad:ef:aa:99:86:0a:61:b2:51:c0:fb:e2:f7:f0:5f:72:28:
91:32:15:7a:43:97:7c:07:36:6a:dc:2c:7e:4c:45:4c:b2:bb:
f4:b7:ff:32:ac:a2:67:5c:e9:63:20:38:14:3a:c8:63:32:48:
ee:2d:bb:c9:b2:82:d2:d1:05:9c:d9:48:44:fb:74:8b:c6:9d:
09:d1:a1:16:18:8a:8f:bf:ca:35:a6:bf:c4:10:f1:2c:d9:48:
66:ad:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:41 2026 by rpki-client