
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
File: iIdg03M-CxguqD1pd8rdCRhXZ7E.mft (raw, json)
Hash identifier: vabvOqAVxMnlIBoW3aZVZ6QzS6YRHE8rOhpDzYyvkLY=
Subject key identifier: 09:9F:1D:FD:24:82:9D:8B:A1:80:24:DE:7F:17:44:0C:49:76:EA:1E
Authority key identifier: 88:87:60:D3:73:3E:0B:18:2E:A8:3D:69:77:CA:DD:09:18:57:67:B1
Certificate issuer: /CN=888760D3733E0B182EA83D6977CADD09185767B1
Certificate serial: 143E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iIdg03M-CxguqD1pd8rdCRhXZ7E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
Manifest number: 143E
Signing time: Thu 26 Mar 2026 11:59:45 +0000
Manifest this update: Thu 26 Mar 2026 11:59:45 +0000
Manifest next update: Sat 28 Mar 2026 11:59:45 +0000
Files and hashes: 1: iIdg03M-CxguqD1pd8rdCRhXZ7E.crl (hash: AAQVeN+Vi/e09BdP0QZXuL16W0InaOiIfc9FZE/QnNQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/iIdg03M-CxguqD1pd8rdCRhXZ7E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5182 (0x143e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888760D3733E0B182EA83D6977CADD09185767B1
Validity
Not Before: Mar 26 11:59:45 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=099F1DFD24829D8BA18024DE7F17440C4976EA1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:b3:8c:50:67:2c:8b:92:15:90:97:ca:c9:
bb:97:eb:a5:a3:c2:e8:de:5d:9f:32:04:71:96:0c:
fb:d8:26:59:dd:87:23:40:b6:f1:53:28:4a:bc:3d:
dc:5e:27:93:8b:80:24:d8:ed:59:82:c5:4a:65:5c:
3b:83:02:b7:78:72:08:d0:0d:5c:06:8c:f8:5d:00:
5d:2b:e8:ee:18:05:e5:81:3c:5b:cc:8b:ce:d3:42:
18:a7:5d:03:59:67:e3:d8:83:1a:1b:ff:d3:8d:59:
13:9f:6f:8a:ff:77:85:3d:80:44:c4:5c:97:42:70:
8b:74:79:41:42:bc:1f:3c:67:e1:93:ba:6f:c1:77:
2d:21:be:69:e7:81:aa:ac:a7:00:19:97:11:1d:ea:
21:b9:2a:6f:1a:36:5c:5c:e9:bd:ab:4f:22:ea:c3:
40:31:51:e2:91:f4:fc:f8:fb:4d:aa:ab:41:9f:92:
d0:ef:cf:1b:6e:21:58:d3:57:fa:4e:c6:7a:de:d5:
98:e7:b3:c6:3e:93:b8:37:a2:30:4e:8c:5a:ed:82:
ec:6e:f8:5a:13:4f:2e:5a:d8:f6:c4:cd:3c:99:47:
57:72:03:58:42:6c:da:0d:87:fc:76:b5:e8:f9:f2:
ff:f7:51:19:b1:73:4b:a2:03:d5:53:5d:b3:7b:0f:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:1D:FD:24:82:9D:8B:A1:80:24:DE:7F:17:44:0C:49:76:EA:1E
X509v3 Authority Key Identifier:
keyid:88:87:60:D3:73:3E:0B:18:2E:A8:3D:69:77:CA:DD:09:18:57:67:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iIdg03M-CxguqD1pd8rdCRhXZ7E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:a1:4c:36:df:f1:a5:6a:18:e5:30:34:56:a7:db:d0:29:7f:
be:8d:3b:24:85:55:5c:c9:47:1d:97:c1:c6:ad:36:8a:ab:1a:
b1:fa:a1:73:23:f8:c3:64:a5:52:38:2b:db:f3:28:d2:01:52:
7f:f2:1f:e5:6c:38:d4:65:e8:18:6a:0f:67:f7:8a:ce:1f:af:
7a:23:e1:42:d5:2a:85:ea:b6:3e:58:47:47:f8:1b:ca:6c:d7:
09:0e:b7:0b:b7:e5:df:5d:54:f1:70:53:36:9c:f0:65:e1:47:
34:6a:a5:7e:eb:79:97:30:99:0c:6b:02:6d:0f:8b:aa:3c:77:
f9:99:b8:f2:23:6b:e2:43:bd:3c:44:de:05:6e:86:cf:8d:2b:
fb:39:d4:ca:2c:0a:51:bc:a4:5a:c4:0f:f7:fc:5c:15:2c:d2:
b0:60:c9:40:51:31:46:81:10:b1:d9:98:6f:73:7e:4b:0b:a6:
58:0f:d1:ea:27:5c:1f:59:f3:2b:6d:c5:8f:f7:85:a5:17:ff:
88:41:79:d5:22:67:5f:d8:74:a2:84:b1:f2:a7:43:c4:59:f8:
5f:fa:f8:54:70:80:9f:9e:3b:99:1b:21:05:da:66:60:45:fe:
b8:77:6a:21:1f:7a:ef:8f:c5:13:19:25:2a:dc:92:cf:c7:b3:
ae:ff:7a:cb
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICFD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4
NzYwRDM3MzNFMEIxODJFQTgzRDY5NzdDQUREMDkxODU3NjdCMTAeFw0yNjAzMjYx
MTU5NDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA5OUYxREZEMjQ4MjlE
OEJBMTgwMjRERTdGMTc0NDBDNDk3NkVBMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Q7OMUGcsi5IVkJfKybuX66WjwujeXZ8yBHGWDPvYJlndhyNA
tvFTKEq8PdxeJ5OLgCTY7VmCxUplXDuDArd4cgjQDVwGjPhdAF0r6O4YBeWBPFvM
i87TQhinXQNZZ+PYgxob/9ONWROfb4r/d4U9gETEXJdCcIt0eUFCvB88Z+GTum/B
dy0hvmnngaqspwAZlxEd6iG5Km8aNlxc6b2rTyLqw0AxUeKR9Pz4+02qq0GfktDv
zxtuIVjTV/pOxnre1Zjns8Y+k7g3ojBOjFrtguxu+FoTTy5a2PbEzTyZR1dyA1hC
bNoNh/x2tej58v/3URmxc0uiA9VTXbN7D+d/AgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUCZ8d/SSCnYuhgCTefxdEDEl26h4wHwYDVR0jBBgwFoAUiIdg03M+CxguqD1p
d8rdCRhXZ7EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09PQklP
L2lJZGcwM00tQ3hndXFEMXBkOHJkQ1JoWFo3RS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvaUlkZzAzTS1DeGd1cUQxcGQ4cmRDUmhYWjdFLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09PQklPL2lJZGcwM00tQ3hndXFEMXBk
OHJkQ1JoWFo3RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi
oUw23/GlahjlMDRWp9vQKX++jTskhVVcyUcdl8HGrTaKqxqx+qFzI/jDZKVSOCvb
8yjSAVJ/8h/lbDjUZegYag9n94rOH696I+FC1SqF6rY+WEdH+BvKbNcJDrcLt+Xf
XVTxcFM2nPBl4Uc0aqV+63mXMJkMawJtD4uqPHf5mbjyI2viQ708RN4FbobPjSv7
OdTKLApRvKRaxA/3/FwVLNKwYMlAUTFGgRCx2Zhvc35LC6ZYD9HqJ1wfWfMrbcWP
94WlF/+IQXnVImdf2HSihLHyp0PEWfhf+vhUcICfnjuZGyEF2mZgRf64d2ohH3rv
j8UTGSUq3JLPx7Ou/3rL
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:26 2026 by rpki-client