
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
File: F1F518BDB5085DA9DAA281C529D23491A72DA248.mft (raw, json)
Hash identifier: 31IZmfOAIgV0xUHrIvo2WPTCW2OlBFHJCiNTdXQRJkc=
Subject key identifier: D5:C0:A0:68:69:47:B8:BC:47:06:BA:BE:58:63:3D:03:E0:A2:37:12
Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Certificate issuer: /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Certificate serial: 57D744EC213FE246D8073F83CED934728D503730
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
Manifest number: B3
Signing time: Sun 20 Sep 2026 09:09:09 +0000
Manifest this update: Sun 20 Sep 2026 09:04:09 +0000
Manifest next update: Mon 21 Sep 2026 09:29:09 +0000
Files and hashes: 1: 3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa (hash: IQqTvMCBIJY6Msoqpe6u+k/x2PQIXfWBUEMY1IOks9o=)
2: 34332e3234382e31362e302f32322d3234203d3e20313331363733.roa (hash: yT6GkUFctFjsYfjkimVCCoYgqHwh9a8wPuU6HRbCaVY=)
3: 3130332e3233332e36382e302f32322d3234203d3e203138303436.roa (hash: ORpDWMmcXvXNpOQL2dVJ9nUGlzM0OrO03KuyZerYMOU=)
4: 34332e3234382e31362e302f32322d3234203d3e203138303436.roa (hash: xJeTRYFTpaj0Hh3mWQfQMb0S7i3UbraCF9VeCrKQmyI=)
5: F1F518BDB5085DA9DAA281C529D23491A72DA248.crl (hash: FtMAALGRE15zt2GADQnlLR+Pj6GhXa7qNdNMgcwpC5Y=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d7:44:ec:21:3f:e2:46:d8:07:3f:83:ce:d9:34:72:8d:50:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Validity
Not Before: Sep 20 09:04:09 2026 GMT
Not After : Sep 21 09:29:09 2026 GMT
Subject: CN=D5C0A0686947B8BC4706BABE58633D03E0A23712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:b7:0d:ef:ae:9c:6f:8b:43:dc:2d:f1:bb:
34:e0:d0:d9:9d:28:67:44:ef:1e:71:0e:42:f6:a5:
1e:23:bd:1f:6f:b1:27:9c:e0:40:01:1f:bb:6f:d4:
63:ee:46:b6:2c:e1:04:9b:da:8e:a1:97:6e:dd:d2:
61:6b:2b:24:16:c6:db:b5:fa:08:b0:6b:09:12:2d:
81:92:a3:58:0f:2c:06:51:7d:99:e5:f5:e7:f4:1b:
64:40:37:97:40:ca:c4:1c:02:2b:42:2d:59:ae:d7:
46:ae:38:48:fb:e7:07:e1:d1:78:1e:ff:e3:c3:3d:
28:da:1f:a6:c8:0f:ca:5f:8d:77:d8:fa:a1:3e:3c:
8f:65:e7:9f:aa:09:b7:13:5d:96:f5:65:7e:1a:f0:
68:93:ff:89:e9:ec:37:94:35:3f:97:51:0c:29:f2:
6b:16:28:49:70:dd:b9:3c:0b:e0:b3:4a:02:0c:0f:
18:39:98:32:5e:23:c9:ae:6e:91:21:03:3a:d4:99:
9b:d6:8b:8b:4b:88:41:9e:44:70:f2:65:55:a2:64:
58:98:ec:5f:11:26:12:d7:7e:de:e5:a1:f1:a1:14:
36:ea:a7:6c:16:4e:b9:30:3c:03:3a:51:fe:91:a2:
17:76:12:56:6f:7c:2e:08:ba:60:7c:d0:30:c9:1b:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:A0:68:69:47:B8:BC:47:06:BA:BE:58:63:3D:03:E0:A2:37:12
X509v3 Authority Key Identifier:
keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1f:39:46:07:e8:3b:29:24:6d:a6:7d:17:5c:fa:27:f2:95:
2d:a7:2f:24:6f:b6:40:86:a4:e5:4a:99:5e:ad:2f:07:8c:2f:
03:a5:85:74:0c:97:ad:0f:ac:08:5b:d0:99:b3:19:00:36:3a:
38:b8:d5:33:76:43:4b:66:1d:38:9a:9e:3d:7f:16:6b:db:17:
24:83:78:15:6c:35:47:1b:e9:59:01:a0:7f:c1:a7:8e:d0:98:
31:7e:c2:3c:6e:f0:eb:f3:ad:b9:c9:38:9c:e9:c6:ec:ee:e9:
b8:09:c3:e0:b9:9f:82:f3:20:3c:f5:87:2d:12:de:c9:ee:8c:
20:26:ec:ad:0e:d0:14:ac:c5:ef:fe:2b:d3:3d:0d:f2:30:56:
7c:1c:fe:d3:58:89:3b:d2:73:85:47:69:45:01:cf:2f:36:09:
ce:e6:4c:74:cd:c4:97:12:4c:d8:61:b0:ea:a7:3c:b2:f5:dc:
91:93:72:d4:87:bd:22:1c:e9:20:70:6b:1b:3f:65:f2:79:7d:
98:fb:a6:c7:ae:68:01:3b:ab:28:1c:a2:2b:ad:a5:a7:63:32:
90:21:e9:d8:8d:b6:0e:99:2a:89:1b:9d:07:22:f3:01:aa:b6:
1a:dd:47:8b:06:9e:1d:d9:72:5a:59:c4:53:25:01:6d:c6:f5:
22:54:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:06:02 2026 by rpki-client