
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
File: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft (raw, json)
Hash identifier: 4oo5qZVpvIZmtXUJsCPRpDz0xpjBGiB5kmvLXmPCy6g=
Subject key identifier: EF:B1:BD:95:0E:15:E9:28:C3:62:CA:FC:CF:4C:EB:45:5A:9B:78:59
Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
Certificate issuer: /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Certificate serial: 790BCF7B64B0B87D9D584D09A9FE748DAD23B7B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
Manifest number: B5
Signing time: Sun 20 Sep 2026 21:14:25 +0000
Manifest this update: Sun 20 Sep 2026 21:09:25 +0000
Manifest next update: Mon 21 Sep 2026 21:33:25 +0000
Files and hashes: 1: 3130332e3137352e3136362e302f32332d3234203d3e2037343833.roa (hash: M1t938UdIZV1R1GsREb23xynohkO0qzg0e3CIh+SGGk=)
2: 3232332e32362e31302e302f32332d3234203d3e203231383539.roa (hash: KeYIdvmIdFmXoaD7PfpE0neyX1HamQXTrD45lQIfHyQ=)
3: 3232332e32362e31302e302f32332d3234203d3e2037353338.roa (hash: WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=)
4: 3232332e32362e31302e302f32332d3234203d3e2037343833.roa (hash: KY91dZeL6/YwGvfBK0FnKFAVL/6EOM1qXx3UNjlNsSo=)
5: E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl (hash: 69N0fN8TwSnZqXhbxsFSKoX8MnYZ+HvLplLj9NRivfg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 21:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0b:cf:7b:64:b0:b8:7d:9d:58:4d:09:a9:fe:74:8d:ad:23:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Validity
Not Before: Sep 20 21:09:25 2026 GMT
Not After : Sep 21 21:33:25 2026 GMT
Subject: CN=EFB1BD950E15E928C362CAFCCF4CEB455A9B7859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:4d:f4:18:b4:57:2d:11:44:d7:1c:85:8a:
d7:fa:29:a7:e9:08:c1:25:52:ef:00:e5:1a:ff:34:
bc:24:a9:f2:9f:d9:0e:87:f9:72:86:a1:f0:e5:83:
7c:fd:28:48:66:13:9b:ab:30:9f:3e:be:aa:bc:f3:
46:eb:0c:7f:3d:87:c6:6f:44:bc:51:13:82:e3:d8:
22:9d:5f:54:70:8a:76:d2:80:02:b9:a6:7d:1a:68:
3c:39:64:57:ea:89:7a:e8:9e:62:47:31:54:f4:40:
90:e0:93:3d:c2:90:f8:f6:f8:c0:f7:42:d3:0b:b5:
0e:53:70:e0:69:07:1d:3d:5e:d1:b5:03:d8:2e:c3:
12:4d:1b:ac:39:98:cb:6d:05:2e:81:db:a5:ce:ed:
1e:3b:c5:4a:e1:a0:d9:b1:37:3f:69:a9:62:a8:ee:
49:4e:f1:25:49:d3:42:9a:3f:e3:5d:0b:47:7f:a0:
23:20:ab:fa:6e:5f:f3:bb:5d:ac:86:b7:39:48:25:
c1:4d:6c:a7:83:a0:61:4c:36:8a:70:7a:e2:f7:0b:
a7:12:8f:d8:2d:b6:41:22:75:8e:39:71:00:28:b4:
06:c3:e7:ef:2c:c3:61:32:a0:f3:68:0d:5d:e6:29:
ae:18:b4:f4:61:b1:91:20:0b:95:6e:07:05:f5:97:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B1:BD:95:0E:15:E9:28:C3:62:CA:FC:CF:4C:EB:45:5A:9B:78:59
X509v3 Authority Key Identifier:
keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:36:dc:1d:d2:35:a6:10:9f:ad:f2:ac:89:0a:d3:11:43:ee:
42:7e:17:2d:87:f7:2d:0c:5b:58:e7:d1:0e:75:bf:14:79:b2:
9f:d7:d0:04:4b:f3:77:7b:2c:d2:ea:1d:bb:cc:01:62:67:2f:
83:da:63:f4:7e:2a:57:93:c8:f1:5f:73:b1:c2:7a:43:85:cd:
69:88:1d:ae:6c:d6:5c:c2:6e:14:37:28:bc:92:94:8b:d5:d6:
35:0c:1e:44:11:04:70:b3:f2:43:b7:33:3d:b8:90:ff:f4:1f:
23:1b:aa:18:b3:e2:10:52:ac:18:e6:15:47:6b:94:31:ca:06:
d5:2d:f8:9d:86:95:3b:b0:d8:a5:c3:f2:dc:3f:e8:ae:93:46:
d4:27:1a:e1:cd:bf:f3:cb:71:74:52:85:dc:d4:27:89:b3:d4:
1c:3f:e5:b8:e0:80:d8:4b:36:84:bb:a1:55:1b:52:10:5d:7c:
96:1a:b8:23:af:e1:ff:73:c1:19:db:f9:58:0b:cf:e7:3c:87:
cf:7b:19:fa:ee:fa:9f:6c:43:4a:c7:17:16:74:30:0e:86:16:
2e:1b:ca:58:f7:2b:7b:32:44:6a:42:89:7c:81:05:09:f3:d5:
85:37:fd:78:58:bf:49:85:ad:6b:59:8c:5f:96:b3:b5:b6:f6:
f3:74:50:cf
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUeQvPe2SwuH2dWE0Jqf50ja0jt7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMx
RTM4N0VDQjAeFw0yNjA5MjAyMTA5MjVaFw0yNjA5MjEyMTMzMjVaMDMxMTAvBgNV
BAMTKEVGQjFCRDk1MEUxNUU5MjhDMzYyQ0FGQ0NGNENFQjQ1NUE5Qjc4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPk30GLRXLRFE1xyFitf6Kafp
CMElUu8A5Rr/NLwkqfKf2Q6H+XKGofDlg3z9KEhmE5urMJ8+vqq880brDH89h8Zv
RLxRE4Lj2CKdX1RwinbSgAK5pn0aaDw5ZFfqiXronmJHMVT0QJDgkz3CkPj2+MD3
QtMLtQ5TcOBpBx09XtG1A9guwxJNG6w5mMttBS6B26XO7R47xUrhoNmxNz9pqWKo
7klO8SVJ00KaP+NdC0d/oCMgq/puX/O7XayGtzlIJcFNbKeDoGFMNopweuL3C6cS
j9gttkEidY45cQAotAbD5+8sw2EyoPNoDV3mKa4YtPRhsZEgC5VuBwX1lxvrAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU77G9lQ4V6SjDYsr8z0zrRVqbeFkwHwYDVR0j
BBgwFoAU44I9/qIf7wTjJp65rMO9rB44fsswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURO
T0RFLzAvRTM4MjNERkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMzgyM0RGRUEyMUZFRjA0RTMyNjlFQjlB
Q0MzQkRBQzFFMzg3RUNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVUROT0RFLzAvRTM4MjNE
RkVBMjFGRUYwNEUzMjY5RUI5QUNDM0JEQUMxRTM4N0VDQi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGQ2
3B3SNaYQn63yrIkK0xFD7kJ+Fy2H9y0MW1jn0Q51vxR5sp/X0ARL83d7LNLqHbvM
AWJnL4PaY/R+KleTyPFfc7HCekOFzWmIHa5s1lzCbhQ3KLySlIvV1jUMHkQRBHCz
8kO3Mz24kP/0HyMbqhiz4hBSrBjmFUdrlDHKBtUt+J2GlTuw2KXD8tw/6K6TRtQn
GuHNv/PLcXRShdzUJ4mz1Bw/5bjggNhLNoS7oVUbUhBdfJYauCOv4f9zwRnb+VgL
z+c8h897Gfru+p9sQ0rHFxZ0MA6GFi4bylj3K3syRGpCiXyBBQnz1YU3/XhYv0mF
rWtZjF+Ws7W29vN0UM8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:51:04 2026 by rpki-client