
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
File: A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft (raw, json)
Hash identifier: B9bUSEtYSOt6tDU/woCro9O2+TSwL9Gy81kHBmsIt2Y=
Subject key identifier: 54:0E:4D:E2:F9:77:F9:AC:31:BE:99:00:BB:0B:54:C2:4A:E7:49:6E
Authority key identifier: A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A
Certificate issuer: /CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A
Certificate serial: 3755270DC5F8BCD185AE86C109A0D47BD71DEBC1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
Manifest number: F0
Signing time: Sun 15 Nov 2026 02:04:09 +0000
Manifest this update: Sun 15 Nov 2026 01:59:09 +0000
Manifest next update: Mon 16 Nov 2026 04:18:09 +0000
Files and hashes: 1: 3136322e342e3131362e302f32332d3234203d3e20333936393832.roa (hash: fT2QEB2EreHbWWRvrSr8grinnLRhG3E/TvTvBPKkl5w=)
2: A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl (hash: hG0hMsMou85HZa0yV1xeeVPjYh73y7fAw0k2Ps+dc1I=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl
rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:55:27:0d:c5:f8:bc:d1:85:ae:86:c1:09:a0:d4:7b:d7:1d:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A
Validity
Not Before: Nov 15 01:59:09 2026 GMT
Not After : Nov 16 04:18:09 2026 GMT
Subject: CN=540E4DE2F977F9AC31BE9900BB0B54C24AE7496E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:2c:69:89:07:f5:16:2b:fc:eb:41:1c:df:
eb:04:6d:fd:44:f2:3f:f5:fc:c1:62:06:ea:3e:c3:
74:2e:7a:96:30:d0:7d:92:cd:aa:02:2a:0e:c5:6a:
66:12:b4:55:9c:ab:cc:3a:9c:d2:14:06:54:6c:a5:
1f:14:db:39:56:40:90:d1:f0:52:30:5e:cb:88:e9:
29:a7:7c:c7:9f:77:94:a5:49:d7:62:b9:d0:a3:58:
2e:3e:f0:ae:44:9a:66:ac:de:e2:0a:41:24:7e:31:
9e:65:a7:b6:77:f4:28:46:bc:b2:b1:1a:b5:1f:aa:
44:73:bc:e1:45:62:4c:e4:09:2c:32:59:03:1f:f6:
68:f0:4c:e4:88:39:45:37:fd:a9:ac:78:c6:a7:e1:
3f:b3:91:95:c0:c0:33:ad:5a:58:cf:ca:19:09:87:
3b:ae:0a:3e:87:54:45:22:77:f1:a1:f3:06:77:6c:
22:32:56:eb:c5:86:72:93:06:36:cc:b9:8c:ed:f1:
42:52:a4:46:10:9d:46:ed:82:da:fb:84:0c:c4:13:
41:b9:70:68:89:7b:7b:f4:68:6c:4d:32:20:0d:2e:
e8:1d:c4:7f:7c:b8:b9:e6:f5:7f:16:f9:f6:31:27:
55:79:66:45:5f:a6:f7:59:90:15:81:43:a1:45:7c:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0E:4D:E2:F9:77:F9:AC:31:BE:99:00:BB:0B:54:C2:4A:E7:49:6E
X509v3 Authority Key Identifier:
keyid:A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cd:91:de:59:d3:b3:b9:73:84:5b:f9:71:0b:96:07:43:4e:
8e:a9:1f:2b:9e:6f:f4:11:79:2b:40:fd:b3:dc:ee:a9:b5:33:
61:c7:db:b3:49:ec:b3:31:e3:89:3c:b4:88:bf:db:0a:ed:8c:
4a:f3:1e:fa:62:f2:6c:e6:23:49:0b:b8:99:32:ba:db:95:b8:
bc:5b:07:60:b0:d6:16:74:96:f9:9b:bc:07:67:e0:eb:03:92:
0a:a2:19:ad:2e:78:e9:50:6e:b1:5f:f0:90:00:ad:e0:95:69:
b6:c8:27:99:58:fe:b3:a7:7d:f9:38:90:ac:f7:e2:e5:48:39:
ae:b1:b5:b6:e5:34:2c:79:e8:28:94:42:6f:b9:3d:b9:d2:26:
47:c6:10:06:8c:e2:f9:71:2a:d7:b8:24:14:83:70:e5:29:86:
57:1b:a0:92:31:22:c2:3b:76:c7:c7:27:17:9b:bd:a9:4a:5a:
5d:40:23:27:2d:da:40:0f:a1:ab:ce:1f:67:e2:d1:cb:73:f7:
b6:2c:46:11:fb:e1:ed:0d:e2:f9:53:61:47:21:e8:ad:f2:e4:
62:b8:f5:e5:4e:e5:34:4c:d1:d5:6b:e8:b1:48:97:f0:f9:6d:
dd:ca:be:fc:4d:99:5b:7e:b4:31:d7:69:de:a0:a7:a9:8b:bb:
8d:6f:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:14 2026 by rpki-client