
$ rpki-client -vvf rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
File: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft (raw, json)
Hash identifier: YFF74Yd/aSp4LIuZ4vKbV/+BfPLwYbDgedmyOtfARxg=
Subject key identifier: 60:E8:54:61:2A:25:B3:D3:B4:E0:D4:8A:87:36:20:02:10:7D:F3:DA
Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
Certificate issuer: /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Certificate serial: 245F270D7A961C2AB2D2D00F4AAFB4914F14AC89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
Manifest number: 2D
Signing time: Fri 12 Jun 2026 16:42:19 +0000
Manifest this update: Fri 12 Jun 2026 16:37:19 +0000
Manifest next update: Sat 13 Jun 2026 17:37:19 +0000
Files and hashes: 1: 8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl (hash: O9k27lH73euHRho9owmtx7sdPg/wxKngspzEd92MolY=)
2: 3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (hash: 0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl
rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 17:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5f:27:0d:7a:96:1c:2a:b2:d2:d0:0f:4a:af:b4:91:4f:14:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Validity
Not Before: Jun 12 16:37:19 2026 GMT
Not After : Jun 13 17:37:19 2026 GMT
Subject: CN=60E854612A25B3D3B4E0D48A87362002107DF3DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:60:34:6d:58:2c:60:3a:fa:74:37:e1:53:
09:5e:7b:28:c6:74:52:03:a6:36:2b:8b:5d:cd:b6:
0d:da:07:97:33:d2:9b:39:87:41:a3:a8:76:6c:21:
17:c0:a2:76:f7:74:4f:e3:91:85:eb:5d:94:c3:91:
dd:ed:d4:0d:ac:9f:24:c0:8a:30:a8:ea:57:b5:a0:
e7:66:79:22:f2:b7:39:9d:8f:a7:be:42:36:87:bd:
6c:83:dc:a7:86:15:3b:83:db:d8:21:ed:16:5c:cb:
cb:55:81:9f:6f:8d:81:36:65:c3:b5:34:3b:2b:b7:
58:0b:47:0f:bf:62:b8:b6:f4:d7:29:ea:96:92:80:
04:6a:9a:45:a5:5c:2e:42:45:3b:94:84:ff:47:60:
42:6c:10:27:51:28:94:72:0b:ac:0b:36:cb:c1:e1:
13:97:fe:bf:6d:ab:73:05:62:15:20:9e:49:45:4e:
f5:3d:87:9b:69:53:e5:33:2c:ef:d8:0d:14:a7:d2:
fb:e9:b6:7a:98:f7:91:09:e0:1e:df:5f:25:d0:5d:
ca:31:6a:13:f2:89:f1:a0:20:40:3c:01:e0:d6:17:
59:b7:f6:16:7d:d6:3a:22:9c:c1:41:94:ec:60:08:
91:01:07:1c:ad:f2:3d:36:20:8d:9d:73:66:4c:1d:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:54:61:2A:25:B3:D3:B4:E0:D4:8A:87:36:20:02:10:7D:F3:DA
X509v3 Authority Key Identifier:
keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:ff:bc:9c:07:17:61:c1:bc:4e:9f:39:28:42:0f:1e:47:
17:f1:dd:ac:d5:44:c9:b1:3a:c3:b8:2d:aa:59:5d:fd:32:44:
f7:99:ef:ad:94:a8:fd:a3:f4:60:82:81:bd:bd:10:63:9b:ff:
0a:43:2c:f9:d5:21:3d:a3:3a:ee:d5:b5:d1:5a:09:9d:ec:2b:
ef:cc:4b:6c:39:af:46:cf:63:db:d9:b2:6d:e9:dd:08:8a:83:
fc:16:41:28:53:62:d4:8a:c0:75:cb:77:5e:5d:9a:da:f1:16:
9b:01:4b:d3:0a:13:2b:5f:5a:bb:a1:e7:aa:cf:88:9d:06:6d:
27:4d:56:32:9a:44:6e:b8:52:c8:33:4c:da:34:7d:8b:02:3c:
29:29:20:58:50:bc:4a:fb:98:5c:a1:4c:40:58:6a:c5:d4:53:
9f:ca:e4:78:e8:32:52:cd:0e:5a:55:1f:04:c3:fa:64:7d:92:
46:22:4b:4e:21:b8:fd:52:91:6e:58:f2:16:26:57:e4:f6:00:
6e:78:7f:c0:06:9c:5d:5d:fb:51:fe:7c:c1:d8:68:ae:36:65:
f5:19:d1:c2:54:e0:c6:0d:cd:5c:b6:95:0b:b2:83:97:07:a4:
22:71:22:d6:de:28:46:a2:c5:cf:08:1f:d5:ed:ca:9d:4d:87:
72:7b:64:d7
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUJF8nDXqWHCqy0tAPSq+0kU8UrIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2Njc4OTcyQ0JFMzFGOUUzNDZFNEU3N0ZEODc5MkY0
QjEwNjkwQTAeFw0yNjA2MTIxNjM3MTlaFw0yNjA2MTMxNzM3MTlaMDMxMTAvBgNV
BAMTKDYwRTg1NDYxMkEyNUIzRDNCNEUwRDQ4QTg3MzYyMDAyMTA3REYzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42mA0bVgsYDr6dDfhUwleeyjG
dFIDpjYri13Ntg3aB5cz0ps5h0GjqHZsIRfAonb3dE/jkYXrXZTDkd3t1A2snyTA
ijCo6le1oOdmeSLytzmdj6e+QjaHvWyD3KeGFTuD29gh7RZcy8tVgZ9vjYE2ZcO1
NDsrt1gLRw+/Yri29Ncp6paSgARqmkWlXC5CRTuUhP9HYEJsECdRKJRyC6wLNsvB
4ROX/r9tq3MFYhUgnklFTvU9h5tpU+UzLO/YDRSn0vvptnqY95EJ4B7fXyXQXcox
ahPyifGgIEA8AeDWF1m39hZ91joinMFBlOxgCJEBBxyt8j02II2dc2ZMHdIpAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUYOhUYSols9O04NSKhzYgAhB989owHwYDVR0j
BBgwFoAUjmZ4lyy+MfnjRuTnf9h5L0sQaQowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09NUEFM
LzAvOEU2Njc4OTcyQ0JFMzFGOUUzNDZFNEU3N0ZEODc5MkY0QjEwNjkwQS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS84RTY2Nzg5NzJDQkUzMUY5RTM0NkU0RTc3RkQ4
NzkyRjRCMTA2OTBBLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09NUEFMLzAvOEU2Njc4OTcyQ0JF
MzFGOUUzNDZFNEU3N0ZEODc5MkY0QjEwNjkwQS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGbU/7ycBxdh
wbxOnzkoQg8eRxfx3azVRMmxOsO4LapZXf0yRPeZ762UqP2j9GCCgb29EGOb/wpD
LPnVIT2jOu7VtdFaCZ3sK+/MS2w5r0bPY9vZsm3p3QiKg/wWQShTYtSKwHXLd15d
mtrxFpsBS9MKEytfWruh56rPiJ0GbSdNVjKaRG64UsgzTNo0fYsCPCkpIFhQvEr7
mFyhTEBYasXUU5/K5HjoMlLNDlpVHwTD+mR9kkYiS04huP1SkW5Y8hYmV+T2AG54
f8AGnF1d+1H+fMHYaK42ZfUZ0cJU4MYNzVy2lQuyg5cHpCJxItbeKEaixc8IH9Xt
yp1Nh3J7ZNc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:03:57 2026 by rpki-client