
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
File: ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft (raw, json)
Hash identifier: NMw881X7waQ6ToK//Waoc44oDuuhADwvlcw7PTpLQwU=
Subject key identifier: 9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 0A20
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
Manifest number: 0A0C
Signing time: Thu 26 Mar 2026 13:28:41 +0000
Manifest this update: Thu 26 Mar 2026 13:28:41 +0000
Manifest next update: Sat 28 Mar 2026 13:28:41 +0000
Files and hashes: 1: 5HDQAMklDeueQTcmy3OyS-y3Ap0.roa (hash: oi9x9zW2CMBMfkn3Epm3L4Mkd7ng9Dj4vtIZoiSP230=)
2: Nz-X8rR7Phcap4SiInP5wET3C3c.roa (hash: YbGHDs96xLfvMmG5LaEkGYi22GhQO8pYdk4DOlpnQSE=)
3: ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl (hash: flKTnnCXQM0cDyDgNrV93jF9NoUFrWHAzCc+clkH60k=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 03:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2592 (0xa20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Mar 26 13:28:41 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9E0948674DB51888C393AF9B532AFDB9C59BFD3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:6e:f0:47:be:1b:cf:5e:b9:5d:65:92:4f:
b2:27:2d:a0:b3:21:e5:91:f2:f4:6b:cc:d5:9a:e4:
21:4f:37:ca:ac:5e:f6:27:39:12:11:23:a5:34:8d:
a3:e0:d7:29:71:07:d6:11:45:e9:e6:9b:3f:4c:c7:
3d:76:43:d8:49:e8:33:67:75:1d:9a:98:a6:eb:84:
1e:5f:60:47:25:ed:a2:0a:07:51:eb:c7:83:45:dc:
ca:f8:c0:b0:da:b0:88:65:04:60:d7:32:43:4a:18:
61:f5:65:ac:27:6a:64:b7:dc:aa:ce:ef:f5:9d:35:
8a:ff:0b:b4:9a:61:b6:7b:f0:bf:3c:c2:25:71:75:
c2:df:3d:fd:b5:56:46:a2:e0:92:fe:70:ad:4c:d6:
2a:9f:ce:bc:bb:e9:ed:f3:06:03:42:9f:33:23:f9:
21:35:34:19:af:4a:e0:45:22:f0:95:6d:5e:09:c7:
22:51:00:91:da:d4:36:ac:0b:00:17:ef:a0:39:e1:
69:49:06:d1:07:76:ac:7a:e5:3a:d9:3d:82:8e:56:
c5:12:ba:aa:28:36:e0:ba:81:4c:b2:b4:4e:b7:2c:
47:d8:0d:9b:a6:f7:03:c0:4a:a9:87:4b:22:08:6c:
e2:c2:0c:d0:c8:a7:26:32:a2:3e:6f:f2:ef:4b:31:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:48:67:4D:B5:18:88:C3:93:AF:9B:53:2A:FD:B9:C5:9B:FD:3B
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:01:86:ad:ca:17:fb:f6:a7:94:6f:e3:4c:fb:6d:9b:98:38:
66:4d:94:fe:c5:a7:20:3f:62:6b:44:bf:01:b1:96:8b:b7:b9:
ce:c7:80:34:4f:45:03:4e:87:a5:32:4e:b1:3b:ba:8e:07:7e:
a3:c4:b6:fb:30:92:0a:77:16:79:34:49:78:01:57:d7:a6:42:
ff:dc:63:c6:3f:74:0c:dd:17:14:45:77:f4:ce:0f:ef:a0:1e:
c8:ab:f9:d5:46:21:d3:d5:53:4d:c4:cb:71:a3:5f:3a:56:93:
6d:ce:7c:8b:42:8e:b9:a5:d1:a5:87:a1:a1:ff:04:7b:6d:e6:
13:de:80:94:c8:c4:6e:1f:4e:e6:ba:1d:45:b9:03:ba:53:49:
0d:1e:29:8d:1a:0b:66:4b:e0:2c:91:11:be:30:ab:56:e8:e0:
af:b2:5b:3d:66:80:66:f2:5d:27:db:59:d6:3c:10:c5:74:c6:
c4:e2:b8:2e:ac:0c:a6:76:98:c4:a9:f9:8c:0a:e9:48:f4:40:
f6:0e:41:f7:c0:ab:10:d1:da:11:ea:30:f0:a0:15:aa:e0:ad:
f7:98:09:8c:0d:c7:2d:55:e9:44:0e:78:26:f8:35:12:aa:ca:
28:0e:bf:0b:ff:3c:8d:8d:51:b5:83:3e:98:53:ed:e5:75:6c:
99:d0:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:15 2026 by rpki-client