
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
File: E9D732B463775547C17E266980ED23CB1F48AE48.mft (raw, json)
Hash identifier: BJWjv8ikrTNVD8/9a0r09Ux259Y8zR6RYxrwnJSUvMo=
Subject key identifier: 5F:34:11:B4:6C:7E:A1:6D:59:B6:A9:E9:BA:56:EE:35:E4:42:FB:49
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Certificate issuer: /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial: 4AB57D67FEB0808B6600A0F4E376CE5B1119E6B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
Manifest number: B5
Signing time: Mon 21 Sep 2026 15:42:33 +0000
Manifest this update: Mon 21 Sep 2026 15:37:33 +0000
Manifest next update: Tue 22 Sep 2026 19:34:33 +0000
Files and hashes: 1: E9D732B463775547C17E266980ED23CB1F48AE48.crl (hash: vvW93WcwFsOoTRh0cRg/jJZil092/mxaz/kex80KYUs=)
2: 3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (hash: fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 19:34:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b5:7d:67:fe:b0:80:8b:66:00:a0:f4:e3:76:ce:5b:11:19:e6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
Validity
Not Before: Sep 21 15:37:33 2026 GMT
Not After : Sep 22 19:34:33 2026 GMT
Subject: CN=5F3411B46C7EA16D59B6A9E9BA56EE35E442FB49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:3a:6a:8d:6c:94:10:67:66:d3:4a:84:5f:
2f:5d:82:42:8d:9b:1a:88:d0:67:d4:31:7d:45:8d:
c5:c8:7c:23:57:b8:f2:c8:37:38:36:d1:86:80:42:
a0:50:00:8a:9b:9d:7a:17:cb:c6:70:be:d1:e0:d6:
84:79:a0:92:37:62:c4:8b:d9:94:71:81:97:30:bc:
a8:8b:ad:c5:75:09:38:a5:ce:0e:0f:1e:f6:8a:06:
d9:b9:aa:c0:a2:a1:27:47:01:57:b7:ea:00:e9:31:
11:44:b2:1d:70:92:8d:ad:8a:2b:6a:47:f7:d8:1b:
eb:7a:cb:24:b5:ed:16:f0:8c:f4:d2:18:0e:e0:ae:
79:46:a3:2f:20:19:a1:ac:dd:67:00:d7:d0:37:42:
1c:9f:eb:46:7e:5d:6f:ef:7e:4f:4b:d9:fb:c9:cf:
d1:8d:8e:22:c3:b6:d2:19:81:a8:07:9e:c2:3e:20:
46:f9:9f:6e:41:ac:8c:c1:4f:88:f4:5c:4e:ad:5b:
c3:71:f5:ea:3a:41:04:e2:b4:65:7f:72:c3:38:50:
14:35:0a:31:4c:e9:df:cc:71:a6:43:4f:01:6e:8b:
79:e5:ca:9a:b5:09:46:ba:b5:5f:11:9a:a7:57:98:
f6:90:46:76:3d:16:9f:4d:46:03:20:9a:c6:77:ba:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:11:B4:6C:7E:A1:6D:59:B6:A9:E9:BA:56:EE:35:E4:42:FB:49
X509v3 Authority Key Identifier:
keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:ea:c5:03:e8:5b:71:5d:1d:c4:1b:9c:3f:5a:dd:0f:a1:
0a:db:ca:55:39:08:fb:55:83:6d:56:93:9a:21:67:bf:e1:b0:
9f:80:ff:a9:2d:d3:49:13:b2:ef:70:66:d6:e8:ae:44:02:08:
af:4c:77:ae:12:72:f3:0d:e2:51:6e:cc:3c:b3:1b:04:de:48:
8e:70:5e:84:a1:4b:56:89:67:32:9f:ec:47:55:e3:e8:8e:91:
3d:3f:5e:26:62:b4:c0:32:78:6a:75:ea:13:a8:00:7a:fc:f1:
51:b3:1d:94:3a:2a:45:c0:32:04:b4:44:c4:fa:ab:b6:b6:89:
06:6a:cc:5a:87:fb:7b:53:11:de:17:9d:1d:c3:53:1b:ca:ad:
7e:3b:f0:1e:1c:a4:56:7e:8d:3c:2d:96:ce:cf:4f:27:be:5b:
78:cc:a5:99:c9:19:77:f2:48:92:43:bf:27:b5:01:34:45:24:
f2:0b:9d:b0:81:5b:32:40:c8:f1:be:07:48:57:71:54:b2:c2:
c7:a0:07:2d:01:30:1f:7d:55:04:03:51:1d:61:d5:2f:89:7e:
d6:58:bf:85:7f:b3:10:09:1b:3f:fa:9b:65:d5:78:b4:77:9c:
32:b2:99:8a:72:25:21:df:47:a3:20:13:2f:1b:fb:e2:6e:32:
00:13:34:f4
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUSrV9Z/6wgItmAKD043bOWxEZ5rQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlENzMyQjQ2Mzc3NTU0N0MxN0UyNjY5ODBFRDIzQ0Ix
RjQ4QUU0ODAeFw0yNjA5MjExNTM3MzNaFw0yNjA5MjIxOTM0MzNaMDMxMTAvBgNV
BAMTKDVGMzQxMUI0NkM3RUExNkQ1OUI2QTlFOUJBNTZFRTM1RTQ0MkZCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cjpqjWyUEGdm00qEXy9dgkKN
mxqI0GfUMX1FjcXIfCNXuPLINzg20YaAQqBQAIqbnXoXy8ZwvtHg1oR5oJI3YsSL
2ZRxgZcwvKiLrcV1CTilzg4PHvaKBtm5qsCioSdHAVe36gDpMRFEsh1wko2tiitq
R/fYG+t6yyS17RbwjPTSGA7grnlGoy8gGaGs3WcA19A3Qhyf60Z+XW/vfk9L2fvJ
z9GNjiLDttIZgagHnsI+IEb5n25BrIzBT4j0XE6tW8Nx9eo6QQTitGV/csM4UBQ1
CjFM6d/McaZDTwFui3nlypq1CUa6tV8RmqdXmPaQRnY9Fp9NRgMgmsZ3uoObAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUXzQRtGx+oW1ZtqnpulbuNeRC+0kwHwYDVR0j
BBgwFoAU6dcytGN3VUfBfiZpgO0jyx9IrkgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQUNFUkVE
Qy8wL0U5RDczMkI0NjM3NzU1NDdDMTdFMjY2OTgwRUQyM0NCMUY0OEFFNDguY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRTlENzMyQjQ2Mzc3NTU0N0MxN0UyNjY5ODBF
RDIzQ0IxRjQ4QUU0OC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0FDRVJFREMvMC9FOUQ3MzJCNDYz
Nzc1NTQ3QzE3RTI2Njk4MEVEMjNDQjFGNDhBRTQ4Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP3qxQPo
W3FdHcQbnD9a3Q+hCtvKVTkI+1WDbVaTmiFnv+Gwn4D/qS3TSROy73Bm1uiuRAII
r0x3rhJy8w3iUW7MPLMbBN5IjnBehKFLVolnMp/sR1Xj6I6RPT9eJmK0wDJ4anXq
E6gAevzxUbMdlDoqRcAyBLRExPqrtraJBmrMWof7e1MR3hedHcNTG8qtfjvwHhyk
Vn6NPC2Wzs9PJ75beMylmckZd/JIkkO/J7UBNEUk8gudsIFbMkDI8b4HSFdxVLLC
x6AHLQEwH31VBANRHWHVL4l+1li/hX+zEAkbP/qbZdV4tHecMrKZinIlId9HoyAT
Lxv74m4yABM09A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:48 2026 by rpki-client