
$ rpki-client -vvf rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
File: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft (raw, json)
Hash identifier: hkdAeL7gjv1ZpScRRuAE5f6adNOf9/DKyMBqzS8Ma6o=
Subject key identifier: 23:3F:84:2F:7A:FE:E1:2D:D8:6C:67:0C:B0:AF:6A:01:07:0A:17:36
Authority key identifier: 88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
Certificate issuer: /CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Certificate serial: 18927761A85FA80778F34E7ED07D1295F7055C01
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
Manifest number: 6A
Signing time: Tue 28 Jul 2026 09:13:04 +0000
Manifest this update: Tue 28 Jul 2026 09:08:04 +0000
Manifest next update: Wed 29 Jul 2026 12:57:04 +0000
Files and hashes: 1: 3130332e3132322e31362e302f32322d3234203d3e20333936393832.roa (hash: /OS0f2NWDbFEXqirGqMoLUR1IHwnbDtbJ8lk1eeYlp4=)
2: 323430333a383634303a3a2f33322d3634203d3e20333936393832.roa (hash: Jm1SzTARAHpPF8XgcCqrOsbDyqd1bedbKKWEeTdyjNA=)
3: 881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl (hash: zMZV7XEpKz5DTvGzMYhYk7QcekRMvx+2WoOtYIwkx2U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:92:77:61:a8:5f:a8:07:78:f3:4e:7e:d0:7d:12:95:f7:05:5c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881BEE1F93D58BAEDFAC994B677AAAD03CC59C78
Validity
Not Before: Jul 28 09:08:04 2026 GMT
Not After : Jul 29 12:57:04 2026 GMT
Subject: CN=233F842F7AFEE12DD86C670CB0AF6A01070A1736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:83:dd:5d:1a:5e:e1:05:eb:40:c5:ee:52:
2f:cb:d5:ad:70:0e:e6:4c:8d:dc:08:48:08:39:89:
bf:7a:e7:cc:7e:e4:be:c5:bb:ec:b2:e2:2d:14:15:
fe:4a:7b:78:55:44:58:a6:9c:04:c7:92:8d:05:ce:
da:23:13:ca:4f:04:cd:12:eb:a6:47:10:51:c3:8c:
45:9b:3a:4f:d2:72:70:28:ab:37:60:bb:4c:66:18:
eb:50:11:db:2d:4d:0a:43:9f:91:96:ac:6c:82:64:
1c:37:ef:36:ab:f7:bb:24:cb:a9:b0:5a:02:7e:0e:
58:cc:71:a8:48:79:aa:dd:8b:4c:fb:a5:08:54:0b:
e9:3b:31:94:5f:36:c1:98:29:d0:94:13:fe:67:c0:
11:42:d2:97:89:58:30:32:c7:00:e6:eb:33:21:44:
3d:34:18:1a:80:d2:17:8e:52:c1:37:6f:39:84:54:
0e:90:61:20:a6:9e:23:88:33:73:0b:43:11:cb:1c:
71:96:76:ec:44:f8:1a:1a:12:fe:a6:68:0b:43:94:
c8:4d:3c:85:61:9d:c0:ee:7d:a8:7a:c1:39:ae:bb:
15:31:88:e5:72:8e:b8:44:59:df:41:35:27:e4:0f:
3a:5f:1f:88:d0:7d:e8:34:13:13:12:59:92:3a:d6:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:84:2F:7A:FE:E1:2D:D8:6C:67:0C:B0:AF:6A:01:07:0A:17:36
X509v3 Authority Key Identifier:
keyid:88:1B:EE:1F:93:D5:8B:AE:DF:AC:99:4B:67:7A:AA:D0:3C:C5:9C:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APPIER/0/881BEE1F93D58BAEDFAC994B677AAAD03CC59C78.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:72:1d:84:a6:a4:9c:77:24:96:71:77:0a:d0:a4:0a:e6:
90:c7:69:df:2f:85:a5:1c:a5:ec:50:a2:51:22:1a:b9:b5:9c:
98:12:d2:c6:ff:05:41:ea:0d:d3:aa:52:31:58:e3:fc:1c:b3:
bf:86:7b:f1:de:29:64:d5:80:e2:b8:bd:81:ea:f9:4a:af:d8:
ec:1c:f5:ed:2d:8f:96:c6:f1:f7:76:89:d5:a6:a4:a6:c0:c7:
5d:76:a6:73:d3:11:f1:80:b2:3b:f8:fe:11:d3:af:f1:f5:47:
97:94:b0:49:db:99:3f:44:b2:20:29:8b:86:1c:f4:33:18:b2:
45:db:f0:dd:d6:c5:0c:40:49:15:28:b1:73:f0:aa:ed:e7:1d:
39:24:51:16:d1:09:c2:0e:f7:cb:39:e8:a6:8d:49:94:05:86:
5d:58:2a:6d:83:cc:42:ac:b5:48:69:88:38:95:3d:ff:51:7f:
f3:ba:97:7f:05:69:0f:1f:c0:26:20:b0:53:f1:ca:d5:fd:71:
54:32:3c:dd:9c:18:8a:4e:8b:ca:a3:5f:b5:c8:a0:8d:1a:e9:
f5:e6:54:b6:d2:d5:1c:9e:d8:18:8d:f7:90:10:62:de:71:27:
a8:d1:92:09:78:f5:27:1f:cd:80:43:49:be:d8:ce:77:a5:86:
60:c0:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:38 2026 by rpki-client