
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
File: 866155EC56EF0A61BC489259EA6B444F2596FF9E.mft (raw, json)
Hash identifier: 4osaWnkdr+6Y8Z8cFDRM43QldpQ3H6U3AN+P1ysh46E=
Subject key identifier: AD:9E:0E:2E:E8:7C:19:D7:23:8F:AA:05:8C:DB:7C:EA:EC:B9:58:3D
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial: 3A3AABD5B001074B5516D4538EA255F856E60AC5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
Manifest number: 0105
Signing time: Sun 15 Nov 2026 09:37:53 +0000
Manifest this update: Sun 15 Nov 2026 09:32:53 +0000
Manifest next update: Mon 16 Nov 2026 11:34:53 +0000
Files and hashes: 1: 36312e35382e33342e302f32352d3235203d3e203138303138.roa (hash: sEbgj8r5BW9LG+uLbdsnQ3mfWS9qyXUgDZxxUrhdajU=)
2: 3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (hash: QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=)
3: 3132322e3235352e39342e302f32382d3238203d3e203138303138.roa (hash: 1FyQfERQbzRtqHMN+lCM3804V/dGWG068p//0dtL/f4=)
4: 36312e35382e33322e302f32302d3234203d3e2032393134.roa (hash: 5f4R2kruXwvonwhPEwdiJqWNobqGweT9ncTpgiNvvP8=)
5: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (hash: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=)
6: 3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (hash: 5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=)
7: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (hash: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=)
8: 323030313a6434303a3a2f33322d3332203d3e2032393134.roa (hash: 95cinPFxr6M1UrLSOID8fzCFDcqIv0aWY/wubzGwKoY=)
9: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (hash: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo=)
10: 866155EC56EF0A61BC489259EA6B444F2596FF9E.crl (hash: qU6ab3v9gevZfdarZFx2hmAgFxyLs0IhYOv+DUieRMg=)
11: 3132322e3235352e39332e3131322f32382d3238203d3e203138303138.roa (hash: DCuf39QCWplBT1yHKKE16KE93ZquNcCivbp7rdZaTpo=)
12: 36312e35382e34312e3132382f32392d3239203d3e20313331363138.roa (hash: E6IxpTdYXlAMqeX0+c0IU8U2bczaMIO7WYlkAnDJQFE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3a:ab:d5:b0:01:07:4b:55:16:d4:53:8e:a2:55:f8:56:e6:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Validity
Not Before: Nov 15 09:32:53 2026 GMT
Not After : Nov 16 11:34:53 2026 GMT
Subject: CN=AD9E0E2EE87C19D7238FAA058CDB7CEAECB9583D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:aa:26:24:da:8f:d9:80:1a:5d:42:c7:ba:
af:83:c5:9f:2d:27:0a:22:9b:3d:80:76:33:0f:30:
43:c4:44:ed:a9:62:53:06:46:bd:fd:62:2e:d6:c3:
65:dc:3d:3b:a1:bd:6e:27:cd:5f:79:d7:97:cc:ef:
5e:a0:fd:9b:ca:b3:b3:bc:8c:b9:d0:a7:a1:cf:8e:
6d:f6:6a:16:22:0e:8b:9e:4a:2c:0c:31:a5:b8:6e:
ff:fd:23:73:1c:15:50:a9:0f:31:22:39:8a:d6:fe:
14:08:b3:d3:cf:c1:c1:4d:4d:39:32:ea:18:75:dc:
11:11:95:8f:a7:0a:16:5c:b5:7d:bf:61:b5:73:93:
5e:16:b5:a8:ea:21:2b:8d:0f:c9:d5:a2:2b:1f:8b:
ae:2a:ad:98:81:2b:49:c5:9d:2a:a1:0d:fc:8c:38:
ab:c8:94:67:64:7c:13:e8:ac:2a:55:96:5d:be:d0:
dc:8c:a8:d1:ef:e3:b7:12:6d:ef:9e:53:06:7f:a6:
f0:ae:ca:c8:90:74:4b:af:dd:eb:d6:94:df:b7:33:
bf:bb:71:31:5f:e4:bf:19:48:ea:e6:41:47:4c:6a:
14:1b:5e:cc:63:a0:9c:8b:21:fb:fa:a5:75:61:aa:
28:a2:f1:dd:e7:f8:fc:f9:63:9d:70:b1:69:2f:a8:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:0E:2E:E8:7C:19:D7:23:8F:AA:05:8C:DB:7C:EA:EC:B9:58:3D
X509v3 Authority Key Identifier:
keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:83:08:cc:e6:93:29:68:e1:4d:47:d7:0f:b0:26:0a:af:
69:72:c2:6c:5d:7e:56:58:f6:ee:22:5a:fe:c9:78:27:13:29:
46:00:f4:fa:d0:12:a4:4b:41:6b:43:2e:46:ad:78:21:e0:89:
79:12:1e:9a:26:bb:5a:f0:12:68:d4:be:f4:da:03:96:b5:4c:
90:ba:07:3c:46:d4:07:50:eb:1b:bc:87:51:0c:78:cf:c1:0a:
d7:00:98:1f:9b:2c:27:61:9c:aa:10:4b:1d:fb:2e:b8:4b:27:
88:76:39:8d:d7:45:a4:17:e8:ff:b1:db:ef:33:ef:5d:2a:d2:
42:c3:be:73:e2:8a:b6:58:33:97:83:10:e8:05:8f:51:d3:f3:
24:df:bc:5c:5a:3f:ee:ba:06:61:8c:d2:57:79:e3:4b:dc:c2:
4e:3d:b9:52:14:44:0b:49:67:2e:7c:64:d2:f5:93:98:66:94:
2e:ae:9e:3f:eb:c0:e4:85:5b:d9:2c:31:ce:61:c5:f1:d4:1d:
fe:50:6d:5b:44:30:ec:be:c3:61:a3:53:20:bc:d2:2a:40:0c:
b1:23:00:08:10:12:8d:e4:a7:43:63:13:a2:d5:9e:99:97:b6:
bd:7f:f8:99:8e:78:61:c0:b8:49:9a:6f:c9:3e:3a:6b:2e:65:
ef:ae:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:17:31 2026 by rpki-client