
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File: JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier: o963f5XZOJlx1bIswRPwXKbDu7XP9Le0h8q5IaEOgL0=
Subject key identifier: 56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer: /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial: 0578
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number: 0574
Signing time: Wed 25 Mar 2026 19:28:23 +0000
Manifest this update: Wed 25 Mar 2026 19:28:23 +0000
Manifest next update: Fri 27 Mar 2026 19:28:23 +0000
Files and hashes: 1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: u3h8BunyDrBiA4atTmvNV0LGNQchIXoetL60zGcYiw8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1400 (0x578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
Validity
Not Before: Mar 25 19:28:23 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
X509v3 Authority Key Identifier:
keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:19:43:05:76:b1:ad:aa:51:08:d1:60:b1:aa:cd:ff:40:
c8:23:99:ea:bf:4b:fd:54:32:4e:54:82:7c:5c:a7:dd:98:c0:
d0:1c:54:72:23:f9:4a:2f:a0:a4:56:7e:bd:03:e7:b4:4b:b8:
27:0a:27:86:f5:a6:27:81:a1:92:28:08:8a:9c:a3:22:1c:cb:
46:9d:17:ad:92:4a:d4:2a:c4:23:5b:22:95:30:f6:b6:7d:0b:
d3:97:87:a3:87:1b:4e:55:01:c9:6f:be:7c:0d:8f:f2:78:71:
41:c7:c3:05:ef:11:09:e1:52:5f:33:f7:e8:7b:8d:b0:bb:a7:
98:c0:f1:64:88:ef:43:95:77:fc:32:bd:59:58:25:d3:03:55:
62:3d:e3:50:b6:fc:b1:1f:0e:91:6e:f9:18:c9:4a:e7:79:8d:
1a:95:d4:34:3a:1e:9a:d0:38:96:a4:76:6f:88:d8:d4:67:70:
88:b8:49:10:6f:4c:d6:ac:3f:ae:2a:91:75:8f:29:b8:f4:db:
81:0a:b3:88:4b:a9:5f:24:36:d7:d0:4f:17:20:be:1a:a0:4a:
e5:43:ca:b5:31:c2:c8:03:c8:7a:95:19:99:65:e7:43:2e:84:
69:7f:cd:07:ed:ed:be:c0:1b:48:5c:85:d6:30:22:98:7c:13:
85:e8:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:14 2026 by rpki-client