
$ rpki-client -vvvf rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
File: 80E31B34932B532C4E8E3C56961B54B65049E2EC.mft (raw, json)
Hash identifier: QHvY/l8/USxh6zIa2NgGPzedhsswoTHcPc2t4mjC8G8=
Subject key identifier: 5A:54:4A:46:9A:D9:35:78:4A:CE:0D:9C:A4:57:D1:9A:9D:5C:B0:90
Authority key identifier: 80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
Certificate issuer: /CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Certificate serial: 5B3CD5BADDB4B5711BE16202E6CF0167EF8430BC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
Manifest number: B9
Signing time: Thu 24 Sep 2026 05:57:42 +0000
Manifest this update: Thu 24 Sep 2026 05:52:42 +0000
Manifest next update: Fri 25 Sep 2026 07:41:42 +0000
Files and hashes: 1: 3130332e3132322e3232342e302f32342d3234203d3e2039333131.roa (hash: fzU8RtsGV4TNCQ7MR55p+XlAPj4v9vlErlpjtlyLj2I=)
2: 3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa (hash: X2loQ1JbKCqeWcOjYZ1pP8S0M3dhQIM7WiLMc1+Ob+E=)
3: 80E31B34932B532C4E8E3C56961B54B65049E2EC.crl (hash: FnoU1Dwr/wsynTucGGdLToWRLnzu4laOB7dCIGclYOc=)
4: 3130332e3132322e3232352e302f32342d3234203d3e20313331363138.roa (hash: sORBzbqmqNWPqZ8veaI5tIb9ZDZdlEJnzWefAvjLc+Y=)
5: 3130332e3132322e3232362e302f32342d3234203d3e20313331363138.roa (hash: t/CiG/navgG66/2NbQuoaTxz29Uea1agfBUQ96M71Kg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3c:d5:ba:dd:b4:b5:71:1b:e1:62:02:e6:cf:01:67:ef:84:30:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Validity
Not Before: Sep 24 05:52:42 2026 GMT
Not After : Sep 25 07:41:42 2026 GMT
Subject: CN=5A544A469AD935784ACE0D9CA457D19A9D5CB090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:ec:f4:2a:84:11:db:1c:9c:42:71:33:80:
6d:c7:36:83:04:c4:48:59:88:50:98:ed:84:84:ed:
4f:83:f0:d4:fd:ba:48:b2:4d:c4:fe:1c:e8:66:e4:
97:bb:a4:27:e4:b1:a9:48:8a:a2:17:e4:36:5b:a2:
ee:16:ef:c2:ee:96:54:05:d9:28:33:2c:b4:16:73:
ab:af:62:7f:bd:c9:2f:91:0f:97:79:d0:b1:93:0d:
2e:59:ed:72:8e:0d:52:f2:a9:50:f3:2f:55:89:de:
a4:7d:66:e5:4f:d0:80:8f:f8:cc:97:99:e2:a1:d7:
a6:66:79:4d:3d:4c:0f:67:a6:07:1e:0e:99:e9:a3:
1c:90:6b:37:3e:9f:26:72:f2:6a:85:cd:34:13:f6:
22:62:2a:7f:81:20:f9:b3:3c:21:06:2c:ec:3f:4a:
da:dd:11:aa:ea:0a:10:fd:22:6a:46:b8:41:b4:1f:
ba:cf:0b:9c:b7:30:94:08:37:f6:77:71:eb:21:3c:
a3:08:b5:47:81:af:0c:0f:dc:66:36:d2:53:6e:5c:
cd:d6:aa:91:ce:ab:2f:c3:c5:5a:3b:11:e2:39:f6:
e9:f3:31:f5:fc:a5:50:39:3d:25:10:09:cc:d8:13:
ff:ce:0a:15:4e:e8:66:a6:e3:f6:31:a0:d3:29:3a:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:4A:46:9A:D9:35:78:4A:CE:0D:9C:A4:57:D1:9A:9D:5C:B0:90
X509v3 Authority Key Identifier:
keyid:80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:ce:97:77:e6:59:a0:d0:27:c6:9a:99:d8:1c:35:61:da:
c1:27:f5:e6:2b:95:13:6a:5d:f3:9f:e2:11:73:27:bf:2e:6b:
b1:4a:78:93:c6:d3:b4:28:79:d3:c7:9f:7b:dc:1b:9a:cb:f2:
7c:05:d1:41:a9:3d:28:b3:83:02:0e:24:03:bd:c6:4f:b0:9c:
c0:d0:ac:59:40:79:28:0d:9b:78:b6:15:9a:50:aa:9b:65:10:
7b:e9:54:95:c6:d9:ae:fc:db:40:e2:99:1f:31:0b:e6:53:5c:
ff:8c:7e:cd:a0:33:0c:25:aa:13:4c:b6:f4:a0:ff:8d:5b:9d:
3d:a8:06:60:d3:1a:da:b2:f1:c0:99:6d:b4:6e:19:1d:25:0c:
13:4d:ec:89:06:5f:e7:80:ad:52:58:82:0a:64:68:d5:c6:e2:
29:bd:33:2a:53:75:b7:20:7c:4f:30:94:27:d1:0b:32:c9:b3:
14:ff:85:4b:98:50:23:83:2f:ce:79:23:97:2a:d5:b6:3e:77:
6a:51:93:03:c9:a1:98:84:6e:e4:b7:46:64:e9:36:ba:2f:6d:
67:b0:4a:61:5d:06:15:49:53:64:a9:ad:17:bc:aa:2b:3f:4a:
e9:17:d8:ce:cb:52:cd:b3:8e:c1:f1:b1:f6:e0:36:9e:c0:ea:
dd:2a:9e:97
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUWzzVut20tXEb4WIC5s8BZ++EMLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBFMzFCMzQ5MzJCNTMyQzRFOEUzQzU2OTYxQjU0QjY1
MDQ5RTJFQzAeFw0yNjA5MjQwNTUyNDJaFw0yNjA5MjUwNzQxNDJaMDMxMTAvBgNV
BAMTKDVBNTQ0QTQ2OUFEOTM1Nzg0QUNFMEQ5Q0E0NTdEMTlBOUQ1Q0IwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY5+z0KoQR2xycQnEzgG3HNoME
xEhZiFCY7YSE7U+D8NT9ukiyTcT+HOhm5Je7pCfksalIiqIX5DZbou4W78LullQF
2SgzLLQWc6uvYn+9yS+RD5d50LGTDS5Z7XKODVLyqVDzL1WJ3qR9ZuVP0ICP+MyX
meKh16ZmeU09TA9npgceDpnpoxyQazc+nyZy8mqFzTQT9iJiKn+BIPmzPCEGLOw/
StrdEarqChD9ImpGuEG0H7rPC5y3MJQIN/Z3ceshPKMItUeBrwwP3GY20lNuXM3W
qpHOqy/DxVo7EeI59unzMfX8pVA5PSUQCczYE//OChVO6Gam4/YxoNMpOrVvAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUWlRKRprZNXhKzg2cpFfRmp1csJAwHwYDVR0j
BBgwFoAUgOMbNJMrUyxOjjxWlhtUtlBJ4uwwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9O
NFlFUy8wLzgwRTMxQjM0OTMyQjUzMkM0RThFM0M1Njk2MUI1NEI2NTA0OUUyRUMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODBFMzFCMzQ5MzJCNTMyQzRFOEUzQzU2
OTYxQjU0QjY1MDQ5RTJFQy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZJU0lPTjRZRVMvMC84MEUz
MUIzNDkzMkI1MzJDNEU4RTNDNTY5NjFCNTRCNjUwNDlFMkVDLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
YlnOl3fmWaDQJ8aamdgcNWHawSf15iuVE2pd85/iEXMnvy5rsUp4k8bTtCh508ef
e9wbmsvyfAXRQak9KLODAg4kA73GT7CcwNCsWUB5KA2beLYVmlCqm2UQe+lUlcbZ
rvzbQOKZHzEL5lNc/4x+zaAzDCWqE0y29KD/jVudPagGYNMa2rLxwJlttG4ZHSUM
E03siQZf54CtUliCCmRo1cbiKb0zKlN1tyB8TzCUJ9ELMsmzFP+FS5hQI4Mvznkj
lyrVtj53alGTA8mhmIRu5LdGZOk2ui9tZ7BKYV0GFUlTZKmtF7yqKz9K6RfYzstS
zbOOwfGx9uA2nsDq3Sqelw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:21 2026 by rpki-client