
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
File: 7F09BA8E95F4407620647B82A775E9C71807F66F.mft (raw, json)
Hash identifier: CS8uKkvn1gdO53qA08Db0g8JNEh5TyIvtCYkkTLcbkM=
Subject key identifier: 0B:85:BA:3A:1C:E1:E4:C1:74:96:96:B9:08:D3:52:AB:C8:CD:A8:00
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 71B0FFDFE39F8BC868CCA11FC7D34803E0EBA155
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
Manifest number: 70
Signing time: Sat 14 Nov 2026 06:45:40 +0000
Manifest this update: Sat 14 Nov 2026 06:40:40 +0000
Manifest next update: Sun 15 Nov 2026 09:59:40 +0000
Files and hashes: 1: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA=)
2: 7F09BA8E95F4407620647B82A775E9C71807F66F.crl (hash: AjBFMyYnwUOQU2B748aLewqZ/2gRLvNZOOcqZ+cuJnM=)
3: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: 1vLg0RhKAOiWHPuZCXExG5dOGIqZKjzG1SikPX/DElo=)
4: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4=)
5: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: VRAV4obUDBldGo4yoQu7Ex5sF4P4Hx2wmUYoif3xgL0=)
6: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo=)
7: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM=)
8: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=)
9: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=)
10: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=)
11: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo=)
12: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY=)
13: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0=)
14: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=)
15: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw=)
16: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k=)
17: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: 4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=)
18: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=)
19: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo=)
20: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=)
21: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU=)
22: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs=)
23: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 09:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b0:ff:df:e3:9f:8b:c8:68:cc:a1:1f:c7:d3:48:03:e0:eb:a1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Nov 14 06:40:40 2026 GMT
Not After : Nov 15 09:59:40 2026 GMT
Subject: CN=0B85BA3A1CE1E4C1749696B908D352ABC8CDA800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:38:02:f9:54:9d:81:94:d3:36:bc:c5:e6:
33:95:5e:75:ca:57:a2:db:33:f5:15:40:f8:7f:4b:
e2:4d:9d:7e:5a:95:36:5f:26:95:de:08:bf:cf:33:
8c:83:cc:dc:cc:8a:c3:8b:15:c1:2b:1f:d3:b7:3b:
5f:51:4b:d6:ff:cc:71:24:63:cd:ab:bc:9f:19:b0:
e0:1a:8d:b0:4a:de:8f:ad:4f:37:0e:06:56:87:b2:
66:cb:7e:f6:08:6c:f0:03:58:ed:b2:86:88:56:b3:
59:16:c6:e8:1c:c3:e0:f5:25:7d:9b:74:16:65:fb:
1b:78:c9:28:95:97:b8:4c:cf:06:b5:04:a1:29:05:
da:42:fd:d8:03:02:be:f8:a6:81:b9:3a:fa:7e:16:
0e:cb:c6:bb:3d:00:34:46:69:32:02:d9:6f:53:1f:
2c:84:4d:0d:68:cb:16:71:9f:9f:db:87:ce:d4:65:
2f:4d:01:9f:a7:ab:0e:34:e5:98:6b:9e:9c:6e:e7:
36:67:28:c1:92:8d:29:98:49:25:cd:5c:32:05:50:
4c:07:9c:d6:a8:4b:85:eb:a8:46:d7:89:61:2d:86:
3b:8c:08:73:64:0b:03:6e:f7:47:17:60:c1:e4:a0:
d1:b5:29:8c:9e:25:b8:94:78:c0:4b:d0:d4:0e:6b:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:BA:3A:1C:E1:E4:C1:74:96:96:B9:08:D3:52:AB:C8:CD:A8:00
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:59:32:b1:a0:1f:be:e4:76:11:0e:39:4f:b1:ba:c4:2a:
2f:4d:80:03:67:04:e7:64:e2:ad:43:07:1c:33:51:3e:c8:c7:
50:39:ac:ac:44:17:c5:81:0b:a0:6e:7d:ed:71:72:68:67:65:
51:ed:02:2a:e0:0d:a6:9e:71:1f:3d:e1:73:e3:30:99:6a:dd:
60:83:6a:18:a2:3f:c4:fa:99:bd:fb:c2:5a:78:f4:0f:60:84:
80:99:ec:8e:63:3e:b1:9b:17:e3:22:75:0e:47:35:6f:96:1f:
89:7c:30:c0:23:31:67:2a:ea:d0:2f:d4:3a:01:aa:e7:e9:14:
ce:f0:0b:e2:e3:12:80:59:c1:d7:4a:8a:ef:fc:b9:58:1d:48:
63:a0:84:63:20:3a:ee:f5:11:56:e3:84:46:4d:1b:f2:78:b9:
95:ca:ac:e9:d2:1c:2b:0a:44:bc:2c:7c:59:97:40:ae:2d:02:
b1:65:26:94:4c:ef:70:b0:35:89:8e:ac:6f:1f:e4:61:b8:06:
3c:20:9f:42:5c:f9:b5:f7:e0:c8:83:7b:1a:20:2d:5d:49:c8:
fd:c6:4c:a2:58:30:89:cb:b1:a8:11:66:01:3b:5f:e6:3b:4b:
b2:f2:76:31:8e:8c:c5:b0:a6:79:db:44:7e:d9:bd:15:03:f1:
2f:27:00:14
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUcbD/3+Ofi8hozKEfx9NIA+DroVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx
ODA3RjY2RjAeFw0yNjExMTQwNjQwNDBaFw0yNjExMTUwOTU5NDBaMDMxMTAvBgNV
BAMTKDBCODVCQTNBMUNFMUU0QzE3NDk2OTZCOTA4RDM1MkFCQzhDREE4MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsjgC+VSdgZTTNrzF5jOVXnXK
V6LbM/UVQPh/S+JNnX5alTZfJpXeCL/PM4yDzNzMisOLFcErH9O3O19RS9b/zHEk
Y82rvJ8ZsOAajbBK3o+tTzcOBlaHsmbLfvYIbPADWO2yhohWs1kWxugcw+D1JX2b
dBZl+xt4ySiVl7hMzwa1BKEpBdpC/dgDAr74poG5Ovp+Fg7Lxrs9ADRGaTIC2W9T
HyyETQ1oyxZxn5/bh87UZS9NAZ+nqw405Zhrnpxu5zZnKMGSjSmYSSXNXDIFUEwH
nNaoS4XrqEbXiWEthjuMCHNkCwNu90cXYMHkoNG1KYyeJbiUeMBL0NQOa2vBAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUC4W6Ohzh5MF0lpa5CNNSq8jNqAAwHwYDVR0j
BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv
MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF
OUM3MTgwN0Y2NkYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzdGMDlCQThFOTVGNDQw
NzYyMDY0N0I4MkE3NzVFOUM3MTgwN0Y2NkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf9FkysaAfvuR2
EQ45T7G6xCovTYADZwTnZOKtQwccM1E+yMdQOaysRBfFgQugbn3tcXJoZ2VR7QIq
4A2mnnEfPeFz4zCZat1gg2oYoj/E+pm9+8JaePQPYISAmeyOYz6xmxfjInUORzVv
lh+JfDDAIzFnKurQL9Q6Aarn6RTO8Avi4xKAWcHXSorv/LlYHUhjoIRjIDru9RFW
44RGTRvyeLmVyqzp0hwrCkS8LHxZl0CuLQKxZSaUTO9wsDWJjqxvH+RhuAY8IJ9C
XPm19+DIg3saIC1dScj9xkyiWDCJy7GoEWYBO1/mO0uy8nYxjozFsKZ520R+2b0V
A/EvJwAU
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:28:44 2026 by rpki-client