
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft
File: Bj-Bjayxcbg1QVq9J4mTki883F0.mft (raw, json)
Hash identifier: lJUqHpS8zWjLaciBsfqPIZ0rHlUNc9u4dCwCLHDvVHM=
Subject key identifier: 1F:49:9D:EC:85:82:AB:EE:62:A2:7F:77:97:82:4C:6A:1C:E1:C5:DD
Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D
Certificate serial: 0325
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft
Manifest number: 0315
Signing time: Tue 24 Mar 2026 23:00:10 +0000
Manifest this update: Tue 24 Mar 2026 23:00:10 +0000
Manifest next update: Thu 26 Mar 2026 23:00:10 +0000
Files and hashes: 1: Bj-Bjayxcbg1QVq9J4mTki883F0.crl (hash: Gh3HOmDP3NrNTesY4O5xSLNNf/bjsGacsJkwIo5tets=)
2: FCe9vDef6jKDykxsvQVMK1QEIXc.roa (hash: 2/1YSwkYwUXj2evMwkGh6bAZSwtKlXnHUjYzsz6xMrM=)
3: ngM9AfLd76RmEwF4fUl-p_U5hjY.roa (hash: /skVHUh6pEhtW0w95j+NY8k26AtfHLky5krAMGko3tE=)
4: pXNunNpANDlwCz6XpDF21Nw8Fmg.roa (hash: aiy97eVFPJDtWAsYsrKI0GsiFPZWmOtUm2TQ9Qpe3fA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 13:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D
Validity
Not Before: Mar 24 23:00:10 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1F499DEC8582ABEE62A27F7797824C6A1CE1C5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:8d:e4:19:6b:75:11:cb:01:c3:f0:8b:77:
4e:ad:a8:ee:4c:32:0c:43:b7:4c:0c:96:12:e7:02:
9e:38:c2:38:c2:de:e0:d3:1d:7d:7f:5c:bf:a9:10:
5a:46:29:46:7d:de:32:c5:73:5b:5b:88:74:47:fb:
88:08:0f:f2:93:ac:1b:f4:da:13:47:54:71:80:91:
86:7c:c1:0f:a1:f7:6a:9c:bd:15:22:a4:bd:c2:41:
60:24:bd:49:0b:23:d1:88:6a:7b:a6:47:c8:05:ef:
3b:ca:44:73:2a:43:98:ad:a8:56:92:6f:35:b5:ec:
33:aa:c8:6e:1b:23:78:44:48:81:3a:3d:1d:96:82:
94:2e:fa:cd:ae:8a:0e:7c:c4:c0:ac:d8:e5:88:f0:
32:32:62:d8:fc:ab:5e:98:d9:f3:f8:be:df:50:ec:
2a:9c:24:d6:dd:32:4c:00:3d:33:33:50:75:35:27:
56:3a:db:81:4f:84:49:b4:ef:bc:76:04:9b:b6:de:
ab:2c:36:38:cb:fa:da:d8:be:03:8b:11:ce:af:2f:
c1:6a:89:49:47:2d:cc:3b:59:e6:ce:e1:6d:1b:8a:
7e:48:1d:5d:5a:8c:85:43:eb:a5:96:22:16:3c:1c:
3e:a9:2d:77:8a:cf:10:da:74:ce:2f:70:3c:21:c6:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:9D:EC:85:82:AB:EE:62:A2:7F:77:97:82:4C:6A:1C:E1:C5:DD
X509v3 Authority Key Identifier:
keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:fc:ff:25:16:94:e8:4d:3c:c5:fe:c6:c8:51:09:80:ce:
a9:a5:42:d1:d8:af:4c:99:3c:67:08:69:27:00:30:e8:84:82:
8f:3c:d1:30:cf:95:62:e9:76:a5:29:05:54:e6:4a:63:3d:9e:
5b:9a:72:06:55:da:79:df:aa:f7:6a:35:00:2a:ce:07:1f:bb:
fa:63:7b:28:d3:5a:45:59:64:9d:55:5e:22:c1:93:8b:e8:db:
aa:a8:db:c6:38:4d:f1:20:40:8c:80:50:9d:0d:ad:15:e8:59:
6f:a4:e6:48:09:9f:01:12:14:59:83:45:44:ee:03:30:c8:38:
56:18:5c:e2:a5:77:bf:42:32:14:68:6c:0f:38:4a:dc:70:38:
44:20:bc:35:74:e8:36:01:64:ad:19:1b:40:89:81:07:97:2b:
6d:52:de:2b:61:51:c8:c5:bf:2a:4e:09:0f:53:19:a3:ca:d0:
67:fb:a0:a2:7b:30:9b:12:a2:d8:fc:64:c9:27:be:cb:b9:67:
f9:ae:04:df:cc:7a:4d:1b:88:c6:e7:44:bc:ce:a4:57:5d:2d:
f3:d0:44:c0:81:0c:aa:14:87:d7:5d:04:eb:d5:7d:78:0b:1e:
44:40:02:ed:37:2c:9e:24:df:e4:2d:1b:74:bc:80:2c:66:e3:
9a:d2:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:30 2026 by rpki-client