
$ rpki-client -vvf rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
File: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft (raw, json)
Hash identifier: fdaQlLsS1WahXcGo7oYgiNWSpVbVBjn1rZQid5L5TRY=
Subject key identifier: BE:BE:74:2D:08:D7:85:8D:B1:4D:34:B0:BF:C6:26:27:CC:D8:51:90
Authority key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B
Certificate issuer: /CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B
Certificate serial: 17967693E2C034786A6979FF5655C1E72DA141BC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
Manifest number: 64
Signing time: Thu 23 Jul 2026 22:31:51 +0000
Manifest this update: Thu 23 Jul 2026 22:26:51 +0000
Manifest next update: Fri 24 Jul 2026 23:57:51 +0000
Files and hashes: 1: 3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa (hash: OqVP0uLmbV0LsJpz9XRBwsukxxQL93Tm+zzp3azYLeM=)
2: BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl (hash: fuNvc2q5mCSkIj86jgMAUvjk5LgJxM1caPK22NiulRk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl
rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:96:76:93:e2:c0:34:78:6a:69:79:ff:56:55:c1:e7:2d:a1:41:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B
Validity
Not Before: Jul 23 22:26:51 2026 GMT
Not After : Jul 24 23:57:51 2026 GMT
Subject: CN=BEBE742D08D7858DB14D34B0BFC62627CCD85190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:8f:a9:da:9d:ea:ea:cd:d0:3d:84:90:27:
77:ab:f1:77:4f:76:f1:1d:cb:58:cc:dc:7a:52:a3:
b8:a4:76:b6:89:90:69:67:fe:2b:4d:b5:2e:e4:25:
15:d9:a4:67:b7:e1:55:f7:61:8f:75:b8:00:ff:bb:
b2:a0:9c:09:3f:52:a7:8c:25:eb:06:c9:f3:95:bf:
14:1f:f2:ef:f2:72:b8:7d:c8:9c:20:37:49:cc:44:
00:ab:29:7c:f2:f7:98:5a:a9:ab:8c:74:d3:ef:6e:
8f:b0:61:e2:2f:d4:88:2d:be:bb:c4:09:c7:59:4b:
27:0d:41:d8:cf:39:6b:ee:80:70:9d:b6:9e:a5:a3:
1c:91:1e:79:b3:2a:ac:6b:e0:f1:bb:df:58:1d:11:
23:5a:83:1a:61:ad:3c:3b:4a:df:f8:d3:d0:ac:26:
5e:d2:06:50:0d:c5:f8:1e:8b:f6:34:01:7b:c4:1e:
83:0f:81:22:ce:5f:af:d6:fd:a6:f0:33:8f:fa:aa:
ad:c4:21:5e:e2:c1:6d:01:cd:ef:3f:ec:29:ce:3f:
5b:b1:07:c8:41:fe:ce:3a:6a:bd:e9:08:37:de:c7:
28:e1:ea:76:5c:36:d1:d3:6e:1a:82:08:c5:6e:a1:
96:09:20:f5:2f:fa:b7:29:a9:b2:68:80:bc:54:94:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:74:2D:08:D7:85:8D:B1:4D:34:B0:BF:C6:26:27:CC:D8:51:90
X509v3 Authority Key Identifier:
keyid:BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7d:7d:83:f5:d5:2d:8c:ec:95:3a:8e:d9:e9:ff:a6:c8:c1:
f6:e8:2a:01:d0:7f:cf:86:0f:dd:9a:a6:18:86:62:68:a0:c9:
71:e2:b0:2e:1d:2e:ab:bd:1c:30:24:1e:1d:ab:67:7f:9a:dc:
2b:37:76:9e:8b:aa:a6:5c:73:db:09:a6:a2:bc:c4:05:ac:ea:
7d:49:0d:f5:30:f9:1e:a3:32:76:e6:01:ce:12:2e:97:c0:8c:
b2:e7:31:4d:8f:55:6d:54:0c:31:e1:24:e0:b9:4b:32:5d:6a:
23:98:f6:0b:ca:2f:f4:29:3b:b4:ab:a9:0b:cd:24:4e:52:b5:
96:5c:5e:d1:1b:d8:6b:f4:17:d6:5f:3e:7f:6c:f6:e7:62:25:
6e:12:dc:82:76:01:35:f0:c7:a8:5e:ea:e4:21:e6:d9:c3:1e:
fd:f5:49:40:00:78:ee:ab:ad:40:24:d6:d1:3b:13:09:30:37:
f6:76:07:29:98:40:7d:44:b9:ff:ed:19:fc:74:87:b0:02:27:
55:c2:28:34:d7:89:66:50:d0:88:40:66:ed:0e:c0:fc:c9:72:
15:1a:8b:c9:f3:7d:11:77:13:1e:49:12:36:93:71:dc:9f:27:
71:e8:35:8a:de:ce:ab:ec:ec:e4:55:d2:8d:35:5e:ba:d8:50:
0e:6f:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:46:31 2026 by rpki-client