
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
File: 871300497118DBA75FA9B46DE2D7D39663DBDE52.mft (raw, json)
Hash identifier: wIZTgd6e2AxZRgu2vVpn4FOp8y1RA189pirWk8kbimY=
Subject key identifier: DF:A2:5B:B2:0B:00:15:5B:DB:8A:6A:2E:3C:60:04:F1:D3:CA:C5:BF
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Certificate issuer: /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial: 121CE93923066662FD4E25F90D9A8F3D7019AD3F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
Manifest number: B8
Signing time: Wed 23 Sep 2026 10:47:19 +0000
Manifest this update: Wed 23 Sep 2026 10:42:19 +0000
Manifest next update: Thu 24 Sep 2026 12:55:19 +0000
Files and hashes: 1: 3130332e3131372e342e302f32322d3234203d3e20313331363233.roa (hash: Tln46/ulM0jeOxnleoQfL0KZfR8c6xYxi9yDZm65GwA=)
2: 871300497118DBA75FA9B46DE2D7D39663DBDE52.crl (hash: gQETha+sgn9j7AvqNLmgjX4mp4zicBtc7GzH5squlDQ=)
3: 3130332e3131372e342e302f32322d3234203d3e20313331363334.roa (hash: jhLjBnMm1fhbsjRhkAAaIjaX4J41EYic1BnBWo6KESI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:1c:e9:39:23:06:66:62:fd:4e:25:f9:0d:9a:8f:3d:70:19:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Validity
Not Before: Sep 23 10:42:19 2026 GMT
Not After : Sep 24 12:55:19 2026 GMT
Subject: CN=DFA25BB20B00155BDB8A6A2E3C6004F1D3CAC5BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:e2:69:1c:eb:cf:31:08:b5:d9:fa:1a:31:
08:45:ef:fe:d7:3c:be:c0:90:45:47:2a:c3:d9:54:
69:17:6c:6f:41:c2:19:17:fd:27:2f:03:3d:25:22:
63:a8:57:0b:a4:3b:93:b0:64:10:66:4e:c2:17:82:
f2:ee:3d:c6:bd:e3:78:84:27:bd:75:54:a8:a8:5e:
1c:0c:39:6f:f7:53:d8:69:41:a0:da:c4:5a:0c:fd:
d4:f6:67:96:b7:ed:bb:bd:01:97:cc:dc:7a:d2:ba:
f1:60:60:58:4e:6b:ff:85:0b:7d:0f:d1:a8:9d:b5:
48:71:ed:92:88:c5:71:29:a0:7e:c4:34:e4:3d:b6:
13:d9:89:c4:a1:81:b7:35:0e:83:39:42:f1:67:7e:
96:05:10:b1:59:52:08:c1:d9:40:42:43:01:88:01:
55:05:95:14:92:6a:85:48:17:d6:5f:ac:a9:66:45:
94:58:75:93:4e:d3:c1:2a:99:c4:56:ff:0e:04:35:
2d:d2:0d:ae:95:85:52:b8:e9:89:3c:2e:92:dd:3b:
9d:92:e3:bf:86:09:07:f6:47:c1:5b:2a:d1:cb:f5:
61:66:be:90:0c:83:80:a7:d8:fa:26:e9:79:3c:c7:
af:b8:54:48:ce:12:a6:08:d4:cb:b1:a7:ff:0a:e2:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:5B:B2:0B:00:15:5B:DB:8A:6A:2E:3C:60:04:F1:D3:CA:C5:BF
X509v3 Authority Key Identifier:
keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6e:2b:74:92:ab:c7:57:ba:bd:f9:79:a6:1d:04:ab:f4:b3:
57:fe:1c:af:c2:4f:bd:cd:76:35:ce:46:ec:1b:39:52:c9:42:
40:16:17:d0:34:34:9e:87:07:0e:c5:a0:74:17:d2:f3:09:ff:
3a:9c:6c:0f:b6:a9:bd:69:82:cf:1a:ac:55:e1:16:a0:92:87:
c5:c3:28:a7:fd:77:a4:5b:02:98:da:e9:34:fe:f3:23:8b:02:
0e:04:b0:12:65:24:75:a2:2a:7d:f0:67:31:33:b5:34:86:f5:
fe:ab:11:20:d3:49:d2:77:44:77:81:ac:5c:0a:5e:b4:14:20:
57:44:8f:60:25:f5:d2:51:83:16:97:42:2b:48:40:62:f9:36:
fc:3b:55:01:be:7f:af:62:c9:34:49:8e:31:ee:73:76:1a:14:
56:a6:63:56:82:e2:28:9c:81:0f:d2:dd:23:62:be:2c:c1:41:
5b:ea:db:62:6d:ae:d9:1f:67:4e:3b:16:98:b4:e3:8f:ca:24:
50:30:c9:12:80:ff:fd:c1:29:77:b5:66:3f:89:76:89:00:af:
0c:75:94:c7:87:d5:c6:9f:0e:72:6d:16:51:ef:5a:06:a8:69:
78:e8:98:98:4f:6a:5f:e1:1f:a7:57:b1:db:70:e5:61:bf:c1:
ad:d2:36:af
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUEhzpOSMGZmL9TiX5DZqPPXAZrT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxMzAwNDk3MTE4REJBNzVGQTlCNDZERTJEN0QzOTY2
M0RCREU1MjAeFw0yNjA5MjMxMDQyMTlaFw0yNjA5MjQxMjU1MTlaMDMxMTAvBgNV
BAMTKERGQTI1QkIyMEIwMDE1NUJEQjhBNkEyRTNDNjAwNEYxRDNDQUM1QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQOJpHOvPMQi12foaMQhF7/7X
PL7AkEVHKsPZVGkXbG9BwhkX/ScvAz0lImOoVwukO5OwZBBmTsIXgvLuPca943iE
J711VKioXhwMOW/3U9hpQaDaxFoM/dT2Z5a37bu9AZfM3HrSuvFgYFhOa/+FC30P
0aidtUhx7ZKIxXEpoH7ENOQ9thPZicShgbc1DoM5QvFnfpYFELFZUgjB2UBCQwGI
AVUFlRSSaoVIF9ZfrKlmRZRYdZNO08EqmcRW/w4ENS3SDa6VhVK46Yk8LpLdO52S
47+GCQf2R8FbKtHL9WFmvpAMg4Cn2Pom6Xk8x6+4VEjOEqYI1Muxp/8K4nljAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU36JbsgsAFVvbimouPGAE8dPKxb8wHwYDVR0j
BBgwFoAUhxMASXEY26dfqbRt4tfTlmPb3lIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BFVFcv
MC84NzEzMDA0OTcxMThEQkE3NUZBOUI0NkRFMkQ3RDM5NjYzREJERTUyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzg3MTMwMDQ5NzExOERCQTc1RkE5QjQ2REUyRDdE
Mzk2NjNEQkRFNTIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TUEVUVy8wLzg3MTMwMDQ5NzExOERC
QTc1RkE5QjQ2REUyRDdEMzk2NjNEQkRFNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3bit0kqvHV7q9
+XmmHQSr9LNX/hyvwk+9zXY1zkbsGzlSyUJAFhfQNDSehwcOxaB0F9LzCf86nGwP
tqm9aYLPGqxV4RagkofFwyin/XekWwKY2uk0/vMjiwIOBLASZSR1oip98GcxM7U0
hvX+qxEg00nSd0R3gaxcCl60FCBXRI9gJfXSUYMWl0IrSEBi+Tb8O1UBvn+vYsk0
SY4x7nN2GhRWpmNWguIonIEP0t0jYr4swUFb6ttiba7ZH2dOOxaYtOOPyiRQMMkS
gP/9wSl3tWY/iXaJAK8MdZTHh9XGnw5ybRZR71oGqGl46JiYT2pf4R+nV7HbcOVh
v8Gt0jav
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:15:49 2026 by rpki-client