
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
File: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft (raw, json)
Hash identifier: UCeD9HNtccDEUzL52+Qd4u0+myFqpcv4szXmklTDcPE=
Subject key identifier: A3:77:6A:DD:85:45:31:0C:EE:B7:F6:57:6E:71:F5:25:33:D3:B9:B8
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Certificate issuer: /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial: 1100B6D4EA9FA6D6137E996E04A7E70E9E2E5605
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
Manifest number: BB
Signing time: Thu 24 Sep 2026 09:59:24 +0000
Manifest this update: Thu 24 Sep 2026 09:54:24 +0000
Manifest next update: Fri 25 Sep 2026 10:27:24 +0000
Files and hashes: 1: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (hash: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=)
2: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (hash: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=)
3: 34332e3235302e34342e302f32322d3232203d3e203338383531.roa (hash: Wow23AEcmPQDHAfbsYDrdq/Ze5tAj8uj4WfgyeReqLU=)
4: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl (hash: dlUx25aSmqbPdYw9GXulvwdYBr7m2rcHSeIkwL4OzHI=)
5: 34332e3235302e34342e302f32332d3233203d3e203338383531.roa (hash: MJw5fyYTrafx81rPsZJsc1XaHBGLvizET5hyMMB4EiM=)
6: 3130332e3232392e3130302e302f32332d3233203d3e203338383531.roa (hash: LLKqTVeKrjc2C1jKfd0XhQ5DwV55DZrdbsX87bNg7Bg=)
7: 34332e3235302e34362e302f32332d3233203d3e203338383531.roa (hash: zDLGCzxdPFG/4CsCmQW1j4D7LK25mUZpat6DEbpgaZY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:00:b6:d4:ea:9f:a6:d6:13:7e:99:6e:04:a7:e7:0e:9e:2e:56:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Validity
Not Before: Sep 24 09:54:24 2026 GMT
Not After : Sep 25 10:27:24 2026 GMT
Subject: CN=A3776ADD8545310CEEB7F6576E71F52533D3B9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:3b:72:22:99:ad:a1:d4:05:93:a9:96:0d:
5a:c7:fa:d3:19:6d:61:42:8e:95:74:c8:b3:3a:dd:
96:f2:e4:46:c5:5f:c9:e8:40:79:aa:de:ba:3d:6c:
5f:a6:91:67:f9:1a:59:df:a2:59:1e:b9:02:95:20:
cc:06:32:d7:66:67:df:eb:59:4d:24:7c:4a:de:58:
ca:63:e9:75:f1:5d:ca:4e:0c:ae:52:3a:13:b1:0f:
18:04:15:dd:16:73:8b:9e:a4:01:2f:6e:b1:4a:5a:
e7:7e:bb:6e:24:c4:e4:eb:31:da:2c:59:15:ca:6d:
e4:16:a8:b9:a4:cd:bf:1d:c7:8f:5f:92:28:c2:76:
65:a2:ba:ef:c1:17:1a:7f:53:82:b0:53:23:1b:ec:
d7:3a:40:9f:92:d0:e4:4d:94:1c:df:f2:ce:5a:1e:
0d:95:2a:a7:9a:b5:4d:26:29:3c:a6:38:1a:21:b8:
ad:80:87:a6:1e:bf:6d:31:7d:78:8c:37:9a:46:2f:
96:d4:00:ba:4e:85:ef:c4:bc:04:b7:48:1f:5b:40:
b5:f6:15:cd:6f:dd:9d:06:2d:25:90:b6:86:97:e1:
2a:8b:97:ac:42:32:54:11:65:0c:b9:3b:82:1b:ed:
b8:a2:fe:80:50:26:9d:b5:8e:23:1b:eb:c1:c2:39:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:77:6A:DD:85:45:31:0C:EE:B7:F6:57:6E:71:F5:25:33:D3:B9:B8
X509v3 Authority Key Identifier:
keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:82:ec:9f:03:f5:f3:d0:3c:20:95:15:23:a2:de:9b:95:c5:
ba:15:8f:1c:3e:2e:4d:ab:9c:f2:ec:6d:a2:4a:a9:c6:e4:58:
04:24:dc:78:a4:22:6b:70:28:9f:42:d1:47:76:3e:36:34:79:
cd:71:fe:10:ff:27:48:58:d5:16:02:59:7e:aa:c7:ec:e4:52:
dc:39:b8:f9:91:1e:f0:47:32:4b:49:3a:6d:15:ad:e3:68:fb:
6d:60:01:f3:ca:e9:dc:71:80:c1:88:51:24:f7:54:ad:f9:f9:
76:a5:2c:54:3e:89:fb:7f:9e:b0:32:cf:47:fc:91:f8:97:4e:
37:35:6a:62:cf:db:69:7e:d3:83:0d:b1:fb:6f:26:ce:bd:af:
6b:fe:47:23:4f:cc:18:c1:82:fa:94:30:02:b6:c8:e7:91:67:
3d:8c:c3:12:ee:39:dc:99:58:82:d7:85:dc:dc:f7:b0:28:2f:
95:56:06:4c:71:2b:82:8a:f0:e4:1c:f4:16:ce:55:c8:47:b8:
2a:b1:07:bf:0e:47:e0:98:10:f3:39:60:27:d5:38:3f:f0:9b:
a4:d1:22:62:b6:05:96:f3:99:d2:c8:35:f1:ca:80:c7:21:7b:
3d:e2:03:37:ca:ae:87:e5:4f:2f:6d:3d:c3:f4:dd:84:c8:b6:
b3:05:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:08:59 2026 by rpki-client