
$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
File: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft (raw, json)
Hash identifier: Y9h2ImKJ+zGfu1UM96M/VXNXDLRw8soO2o1sH9XN8Eg=
Subject key identifier: 0F:31:31:9D:1B:10:F0:D4:5E:4B:8D:B7:B0:4D:73:EC:4C:D0:BE:E1
Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31
Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631
Certificate serial: 6B67531860CF7B859EA01A6525C8FC5B73ABC10A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
Manifest number: 08
Signing time: Wed 13 May 2026 04:41:51 +0000
Manifest this update: Wed 13 May 2026 04:36:51 +0000
Manifest next update: Thu 14 May 2026 08:19:51 +0000
Files and hashes: 1: 138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl (hash: PZI011ayKqE9J+6oUflJEXo8Npur+BjqYqP7S/yvNOI=)
2: 3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa (hash: Cd6OMIoEih6thkDQvlDIyWr358PSZmpUGiX23euG7pQ=)
3: 3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa (hash: N130VCEwGnahMmdQnEoFsloWsrRvCZQOZhmdArYbsZw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl
rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:67:53:18:60:cf:7b:85:9e:a0:1a:65:25:c8:fc:5b:73:ab:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631
Validity
Not Before: May 13 04:36:51 2026 GMT
Not After : May 14 08:19:51 2026 GMT
Subject: CN=0F31319D1B10F0D45E4B8DB7B04D73EC4CD0BEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:c3:2d:f4:1d:99:7b:d5:87:e0:29:2e:38:
51:f2:9e:08:fb:dc:53:5e:30:6e:3b:ef:61:26:db:
aa:9e:e8:f0:e8:ca:6e:c2:58:71:99:b1:83:f6:8c:
54:b4:2e:f4:5f:b3:ae:5b:bf:29:49:88:e1:31:f9:
8d:49:d5:8c:a5:98:0c:01:21:1d:04:90:61:9b:2d:
fa:6c:9b:8b:38:a9:7e:d2:95:66:38:57:43:23:6e:
eb:68:da:fb:cf:96:0c:20:1d:e4:03:23:10:cc:db:
af:9f:bb:8b:49:3e:56:ee:62:16:df:0b:98:b6:67:
da:3f:c4:bb:f6:40:8e:f3:3f:e9:e2:73:f1:e5:fe:
e7:30:1e:39:25:73:e6:02:98:45:67:b5:a4:df:1a:
ef:c0:4b:ef:3b:be:ce:c9:0d:af:23:09:06:9f:d9:
d3:b3:5b:92:18:65:16:ad:46:a1:27:1a:58:51:3c:
f0:bf:58:6f:e0:c9:bd:50:24:04:bb:d7:14:89:b1:
87:b9:93:c9:e5:3d:d2:5c:a1:5b:ba:40:3a:0f:9a:
71:ab:e8:38:36:ba:34:0d:b8:1c:51:1d:7a:93:c6:
cf:dd:0a:a0:75:78:a9:3d:20:ad:c6:f8:9d:e1:7e:
a3:7e:eb:f1:29:f4:0a:b0:d5:c1:a0:d3:68:ca:e2:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:31:9D:1B:10:F0:D4:5E:4B:8D:B7:B0:4D:73:EC:4C:D0:BE:E1
X509v3 Authority Key Identifier:
keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:89:ee:53:09:6c:7c:ed:0f:7e:fa:e2:04:aa:ed:49:53:b7:
14:50:00:28:47:3b:71:89:75:74:31:86:e3:58:64:33:73:7b:
34:ae:22:72:95:d5:7d:cc:94:76:a2:0f:5c:d6:c7:37:a4:69:
10:22:7b:ca:fe:56:0f:10:f7:26:45:c7:4f:08:a9:79:36:fa:
bf:26:b3:3e:8a:50:60:5b:e2:c0:cd:a1:33:00:b4:90:14:4e:
e4:0b:d0:26:39:f9:55:7c:1b:08:54:3c:46:79:fe:f1:a2:d6:
05:84:f7:98:d7:67:f3:b9:ee:5d:5f:09:5f:cb:53:9f:43:35:
b2:7b:ec:23:aa:f1:43:ce:37:55:95:ab:40:62:7d:37:24:79:
03:c3:e6:4d:09:57:87:a6:d5:64:30:51:83:39:2e:3b:00:10:
de:fb:88:33:10:5f:08:4e:21:0a:0c:10:c2:2b:3b:f3:5e:26:
24:e8:45:47:90:b0:3d:4b:0e:86:51:cb:e2:48:16:de:13:69:
73:4f:08:1b:01:dd:b6:d0:96:9c:a5:38:6c:ad:74:fb:0e:33:
66:fa:7e:4f:31:05:ee:b4:42:73:e2:42:2a:71:94:f0:d5:a9:
85:6a:a8:ac:8b:f8:f7:fe:3e:24:57:fd:1f:77:78:50:17:10:
ff:f6:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:54 2026 by rpki-client