
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
File: 273D80570A6F8C43816FAC4F615749C9D6D98E96.mft (raw, json)
Hash identifier: B3BQXJaOG1LqCewuZLDsD+vH7fYsD568xVNdudn4hmY=
Subject key identifier: E0:BB:2E:AD:C1:97:C2:82:7C:C9:BF:D8:F9:EC:72:ED:8A:8B:5B:73
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Certificate issuer: /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial: 69FF1E279563095C9939A38D7A381A4A44434619
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
Manifest number: BC
Signing time: Thu 24 Sep 2026 16:40:38 +0000
Manifest this update: Thu 24 Sep 2026 16:35:38 +0000
Manifest next update: Fri 25 Sep 2026 17:08:38 +0000
Files and hashes: 1: 3136302e33302e39382e302f32332d3332203d3e203332353935.roa (hash: sI8LAtdu8OdYUfd6YrN2QIv70x44wmscxxxuHtT0n54=)
2: 3136302e33302e39382e302f32332d3332203d3e2039393233.roa (hash: 6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=)
3: 3136302e33302e39392e302f32342d3234203d3e20313331363330.roa (hash: U460426ViJjLThyGT9vAizXPCxksDkIxAw3jEOYoAM4=)
4: 273D80570A6F8C43816FAC4F615749C9D6D98E96.crl (hash: Y/uL9+F+CYQ2FUWG/4hne1uELXRc8bM8QAUIFxGLOVo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 17:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ff:1e:27:95:63:09:5c:99:39:a3:8d:7a:38:1a:4a:44:43:46:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Validity
Not Before: Sep 24 16:35:38 2026 GMT
Not After : Sep 25 17:08:38 2026 GMT
Subject: CN=E0BB2EADC197C2827CC9BFD8F9EC72ED8A8B5B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:34:95:dd:35:89:41:30:5a:94:8a:53:56:2c:
c7:89:1b:80:a7:84:28:4f:2c:1e:70:8d:e9:e5:3b:
f4:82:f6:ee:1d:f3:a8:d1:99:25:9b:49:85:e4:df:
49:7d:c8:bb:ca:ca:00:86:26:55:77:14:b3:13:eb:
ee:91:31:f4:8f:bc:c6:67:1e:63:88:b8:51:bf:e1:
2a:48:8d:a2:8f:5f:f1:04:24:1b:20:e9:e2:9a:37:
69:e3:cd:b2:39:d9:36:79:b9:df:7b:7b:ae:e6:8b:
94:bb:bc:39:20:d9:d3:e8:d6:49:b1:69:b0:ae:24:
01:af:81:46:ea:b8:06:84:32:c4:87:41:19:31:94:
ec:76:55:79:bf:33:0d:97:1c:9b:0e:f2:48:25:47:
e5:18:56:0a:0e:d2:91:4e:0b:c3:93:ad:87:5a:68:
ad:b5:a8:e7:6e:96:e2:e9:eb:7a:24:24:ea:f4:60:
62:63:73:a2:13:e0:b2:10:6b:98:fb:5e:2e:a1:e3:
d0:ff:5f:4c:64:85:2a:1f:dd:7a:0f:05:07:8d:da:
cd:f4:32:24:71:93:6f:42:af:3d:7c:35:9a:0b:4c:
e8:49:83:9e:fd:fc:17:7e:08:0d:3e:51:db:e6:7b:
1e:b0:bd:06:03:13:eb:fc:2e:08:bc:2e:2b:81:c9:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:2E:AD:C1:97:C2:82:7C:C9:BF:D8:F9:EC:72:ED:8A:8B:5B:73
X509v3 Authority Key Identifier:
keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a2:de:b9:b3:02:70:e6:ff:c1:c1:df:04:2e:62:22:6c:f2:
dd:af:36:13:03:43:0d:47:ef:28:d4:0e:8c:9e:ae:04:27:3a:
12:ca:6d:98:be:3a:96:16:11:21:e5:72:94:f5:94:1d:a3:b1:
93:5e:e9:9d:59:6a:2a:71:3c:a8:67:d1:67:31:ee:ec:c1:af:
23:a0:d6:34:44:84:cb:ff:03:45:02:76:83:24:8e:ce:9b:7f:
d6:2e:3f:cb:12:1a:9a:ad:5f:01:88:e6:15:bd:56:2f:fe:43:
65:ba:13:6f:31:25:a1:fc:80:05:cf:4c:2d:55:96:99:5d:4b:
b6:a7:ed:d5:a9:a8:8f:60:57:43:54:9e:0e:3d:4a:4f:89:fd:
ea:84:91:fb:67:8e:71:89:0d:e2:4c:26:e9:69:a8:9d:27:08:
8e:2d:88:ba:9e:eb:7b:d1:78:17:c3:bb:3e:ec:e1:40:00:5e:
bb:ec:a8:31:1e:12:2d:ae:94:e9:36:9b:9f:92:f0:f0:7c:d3:
ea:ec:9f:af:01:4b:11:22:be:6b:49:69:99:33:ef:df:8f:78:
b9:73:8a:10:ab:c6:66:47:1f:eb:53:9c:9b:cc:e7:6d:1b:28:
d3:c9:d9:60:4b:34:bb:f5:9a:05:72:8a:ce:56:ef:7c:a5:18:
b3:2a:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:29:28 2026 by rpki-client