
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
File: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft (raw, json)
Hash identifier: iOmQIsLTl0MaUuDJ6MWzUHxWH3IJ9t/Qip5NCNe3RE8=
Subject key identifier: 76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 0BB3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
Manifest number: 0B84
Signing time: Thu 26 Mar 2026 11:28:00 +0000
Manifest this update: Thu 26 Mar 2026 11:28:00 +0000
Manifest next update: Sat 28 Mar 2026 11:28:00 +0000
Files and hashes: 1: 8H-C-hcNWc3YzFXBkFik5joXhAo.roa (hash: 2GH1UOk0jOEJ87aWXHQHvoZYFalAGp+fPvknALQKfKM=)
2: Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl (hash: LYOKsozXE94OIBEg4Rj9nlWRl9X6xq/3ORY7i7wTxdY=)
3: a-34vFk51zoYFLydAL6smF7fNSk.roa (hash: TChg2MvnqPqUHQJDHWyMTWSu10rYCt64+Vpowcpzx+Q=)
4: eCo1oLH7_qTPVi-sOomp0nsRzAQ.roa (hash: OM7pMTlX7VIPQbf5tZ9FnnHk8iAOFxNpr+y1u0OT69w=)
5: xCeerbNQbCjuFk6yLezQCULFhoQ.roa (hash: pxOV+oFA0pz5SA2LMx1FFl75LQ3+gVk7x0xieYQ8PyI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Mar 26 11:28:00 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=76E7A08E8E67F4BA25AFA80D692B380CB1C7019A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:bb:0e:03:91:e0:51:5e:54:04:35:13:d6:
1c:90:13:e7:54:b0:c3:f3:41:11:e9:65:59:cd:3a:
a2:d9:ca:61:07:10:e9:c2:6c:45:b0:08:f8:12:3a:
b9:39:3e:aa:80:96:99:58:92:b2:aa:84:f0:9a:8b:
23:cb:98:0c:6e:a2:bd:67:e5:7f:d9:51:d8:8a:e7:
dd:56:ed:71:47:88:4f:fa:88:ae:ca:3b:e8:88:35:
b9:85:8c:c6:26:be:f7:5d:eb:39:1c:d4:a0:1e:2a:
d8:e2:8b:df:81:b3:cc:be:16:d3:5d:a5:c7:9a:0e:
4c:44:d6:8a:ad:2b:ad:42:6b:ce:8f:44:74:7a:94:
e1:b5:53:ee:69:53:73:c6:21:26:a8:da:00:51:51:
f6:f4:35:4c:0d:9f:cc:d5:f1:24:5c:19:c2:99:76:
e6:1e:06:80:f8:f6:1c:5a:8d:93:0b:eb:52:68:d4:
c1:d4:e5:b3:d1:d1:ca:e0:8c:a8:1f:fb:9f:6e:fc:
7c:40:1d:e9:60:1f:0e:fd:ee:2f:ea:d9:54:ac:a3:
a5:cd:27:c9:c5:84:8b:53:7f:c1:17:7e:2c:e6:1e:
92:3b:f7:0b:39:35:7b:c1:41:91:16:10:0d:ed:de:
06:81:40:15:32:cf:bc:37:85:16:2c:de:09:5c:7d:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:A0:8E:8E:67:F4:BA:25:AF:A8:0D:69:2B:38:0C:B1:C7:01:9A
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:93:87:b4:cc:00:59:d1:e7:9b:5a:c7:04:9c:e3:30:be:f3:
80:ce:70:4c:b8:d3:1f:3c:f9:db:bd:48:15:55:4e:1e:f3:08:
86:8e:c7:5b:c3:81:74:12:63:9f:f0:a3:2e:39:8b:70:d0:32:
e8:c3:fc:3e:64:a9:a4:42:1f:02:c7:28:31:4f:b8:a1:e2:d9:
5e:01:92:21:b5:6b:47:84:a3:9d:ba:5c:ac:19:ee:69:5a:38:
1f:89:b6:87:32:37:ce:1d:82:55:97:ad:b8:e3:dd:f2:68:15:
7a:06:bb:fb:f5:0f:23:0c:d0:01:cf:6a:6e:fd:74:69:a1:d4:
6a:7b:af:cd:b3:5b:fd:35:c4:e1:dc:eb:8d:2b:b9:b1:f5:2b:
b8:2f:07:58:dd:b0:a6:6a:e6:9f:b1:36:00:d4:21:3d:61:2d:
14:cf:02:d2:56:a7:da:fa:99:78:f2:0a:28:ee:4c:9d:88:45:
6f:84:29:2b:d3:3e:bb:f3:dc:7c:62:5e:8d:26:83:a3:90:b5:
fb:fa:6b:bb:01:c9:ba:f1:71:ba:8b:39:7b:e6:66:2b:0f:bb:
b1:42:e6:f4:d3:d6:72:b8:6f:15:3e:59:ff:a2:7d:1e:b0:4e:
40:09:d6:29:b7:45:ae:e7:ee:b9:ab:74:8a:24:dd:3f:c1:00:
e2:2f:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:59 2026 by rpki-client