
$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File: 157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier: LkvBRkUbeu5b4jy9ZiPxGQsIEXjq8v/yiXKa4hG7GN8=
Subject key identifier: 22:DC:32:45:72:D9:F1:3F:D8:E1:F0:C3:05:54:F6:10:96:11:E7:8E
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 77EA9A488704943DA2316BBD3B499EFFE78C2284
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number: 84
Signing time: Tue 28 Jul 2026 10:23:10 +0000
Manifest this update: Tue 28 Jul 2026 10:18:10 +0000
Manifest next update: Wed 29 Jul 2026 10:33:10 +0000
Files and hashes: 1: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
2: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
3: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
4: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
5: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
6: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
7: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
8: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
9: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
10: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
11: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
12: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
13: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
14: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
15: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
16: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
17: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
18: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
19: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
20: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: Tgtcr/UVzOVk6XTPHeAXt3AW3++5E7Q6yi7yUaso0NQ=)
21: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
22: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
23: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
24: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
25: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
26: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
27: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
28: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ea:9a:48:87:04:94:3d:a2:31:6b:bd:3b:49:9e:ff:e7:8c:22:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: Jul 28 10:18:10 2026 GMT
Not After : Jul 29 10:33:10 2026 GMT
Subject: CN=22DC324572D9F13FD8E1F0C30554F6109611E78E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:2c:a2:1c:5d:e1:77:68:74:eb:4c:72:b6:
f1:d6:a3:0e:9c:9f:cf:36:00:34:68:2b:1d:ff:fe:
8c:83:c3:83:8f:11:bc:bd:96:8d:e9:45:35:13:60:
ed:a9:3f:33:a2:c9:85:fa:87:09:4e:95:a2:d5:33:
7e:e5:ba:cd:3e:65:74:28:b1:1b:98:e1:d3:51:f2:
c6:91:83:00:a0:e5:23:a5:69:0f:db:37:63:e7:c8:
53:b6:e4:b4:3b:c4:61:f3:1e:7b:9a:74:c3:fa:b9:
33:38:4b:af:f0:d5:b9:6d:89:01:66:1d:06:74:25:
a1:cc:cc:c7:7b:1c:1a:48:ef:75:1f:ad:41:c4:17:
71:3d:1a:0a:30:d7:7e:f1:37:77:ad:1c:af:d5:ae:
70:23:01:95:11:d6:4b:54:07:47:d3:ae:65:1a:94:
17:73:a0:27:ad:8b:c1:7f:5d:0d:a1:f2:9e:25:27:
a1:7c:d6:b0:9f:71:4c:15:c1:c5:8d:f9:42:5a:72:
26:49:e7:5c:12:43:c0:12:15:33:9f:88:e6:a6:bd:
8d:e4:95:fe:c6:c0:7e:83:03:9e:fe:7a:ca:36:19:
d8:48:fb:ea:02:1f:32:49:ac:c9:81:55:69:cb:ab:
a3:1b:31:60:fe:c0:97:36:a2:3b:12:e9:d5:d0:17:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:32:45:72:D9:F1:3F:D8:E1:F0:C3:05:54:F6:10:96:11:E7:8E
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:a9:af:ea:b8:c6:5f:2f:99:d8:18:c8:d5:bb:3c:08:d9:
b5:30:43:b7:94:2d:dc:98:e8:d7:68:fd:c3:67:5e:fa:f7:25:
0c:e8:5f:d4:8f:c9:d2:3a:e6:bf:fd:9e:45:8c:bf:d2:ab:15:
df:ba:dc:3f:e3:bd:6e:eb:d0:ff:77:85:73:ec:3c:62:61:8a:
04:f5:15:15:ab:52:82:1e:da:4b:74:61:e1:69:70:4c:ee:2d:
6c:82:8b:c9:90:ac:04:b1:74:92:d1:55:71:0f:b7:0c:1e:68:
64:47:a7:6d:ee:c8:ac:a4:98:b5:c2:3b:c3:a2:50:81:f8:9e:
9d:b9:c2:0e:55:37:5e:cd:39:52:b8:31:d2:3f:8d:a7:d0:8e:
ae:6e:3e:f0:c6:64:35:fc:32:16:16:b7:a6:fd:2a:44:14:03:
9c:ad:a3:5b:4e:5f:a6:61:f7:30:9a:19:18:78:82:80:ef:83:
00:17:8a:70:0c:ce:99:85:b3:00:ee:3b:e8:16:f1:b3:84:83:
fa:6f:8a:fd:13:d6:44:96:30:50:9f:9b:d6:b7:49:9b:2a:65:
15:c2:ad:e9:76:18:d6:d9:44:3d:8d:37:bf:04:c5:03:d0:4d:
20:c7:d7:50:df:aa:84:a6:42:84:6d:27:a6:81:0d:e7:27:7b:
d7:6e:cf:15
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUd+qaSIcElD2iMWu9O0me/+eMIoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA3MjgxMDE4MTBaFw0yNjA3MjkxMDMzMTBaMDMxMTAvBgNV
BAMTKDIyREMzMjQ1NzJEOUYxM0ZEOEUxRjBDMzA1NTRGNjEwOTYxMUU3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiFyyiHF3hd2h060xytvHWow6c
n882ADRoKx3//oyDw4OPEby9lo3pRTUTYO2pPzOiyYX6hwlOlaLVM37lus0+ZXQo
sRuY4dNR8saRgwCg5SOlaQ/bN2PnyFO25LQ7xGHzHnuadMP6uTM4S6/w1bltiQFm
HQZ0JaHMzMd7HBpI73UfrUHEF3E9Ggow137xN3etHK/VrnAjAZUR1ktUB0fTrmUa
lBdzoCeti8F/XQ2h8p4lJ6F81rCfcUwVwcWN+UJaciZJ51wSQ8ASFTOfiOamvY3k
lf7GwH6DA57+eso2GdhI++oCHzJJrMmBVWnLq6MbMWD+wJc2ojsS6dXQF3SNAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUItwyRXLZ8T/Y4fDDBVT2EJYR544wHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMTU3RDUzNjkyNEVF
NkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJTEqa/quMZf
L5nYGMjVuzwI2bUwQ7eULdyY6Ndo/cNnXvr3JQzoX9SPydI65r/9nkWMv9KrFd+6
3D/jvW7r0P93hXPsPGJhigT1FRWrUoIe2kt0YeFpcEzuLWyCi8mQrASxdJLRVXEP
twweaGRHp23uyKykmLXCO8OiUIH4np25wg5VN17NOVK4MdI/jafQjq5uPvDGZDX8
MhYWt6b9KkQUA5yto1tOX6Zh9zCaGRh4goDvgwAXinAMzpmFswDuO+gW8bOEg/pv
iv0T1kSWMFCfm9a3SZsqZRXCrel2GNbZRD2NN78ExQPQTSDH11DfqoSmQoRtJ6aB
Decne9duzxU=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:06 2026 by rpki-client