
$ rpki-client -vvvf rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
File: BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft (raw, json)
Hash identifier: +kx/IaqSB/okHYtqVTxPIgRm//lEcIxZVLXDx7GJ/Og=
Subject key identifier: 24:ED:B1:EC:89:09:F0:4C:7D:26:C1:99:50:F1:4B:DE:43:9E:29:3D
Authority key identifier: BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1
Certificate issuer: /CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
Certificate serial: 084D8F25C05E02A511AC0B6EF380A87E8305F5BE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
Manifest number: B7
Signing time: Fri 25 Sep 2026 20:39:07 +0000
Manifest this update: Fri 25 Sep 2026 20:34:07 +0000
Manifest next update: Sat 26 Sep 2026 21:21:07 +0000
Files and hashes: 1: BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl (hash: XpfQppRbk4y499j2TCwXWv4iAlghHd+d/13/s8vZ2CU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl
rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4d:8f:25:c0:5e:02:a5:11:ac:0b:6e:f3:80:a8:7e:83:05:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
Validity
Not Before: Sep 25 20:34:07 2026 GMT
Not After : Sep 26 21:21:07 2026 GMT
Subject: CN=24EDB1EC8909F04C7D26C19950F14BDE439E293D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:49:d4:25:8b:6c:2c:bf:e2:5a:7c:cc:ee:
00:bd:ac:aa:b9:7d:ef:ef:07:87:b5:47:62:9e:b6:
3d:bf:90:b0:11:5c:ed:9a:22:08:51:89:9d:13:dc:
83:47:03:72:a7:41:3b:b4:ba:77:32:f4:50:9b:1c:
99:b8:47:f4:e6:d1:c8:5a:9a:88:2b:ce:d0:51:1e:
5f:ee:86:89:ed:d1:b8:04:c5:66:9d:03:b0:41:7f:
8c:40:e7:0c:cb:fb:98:9f:f3:1f:d0:02:ec:91:c3:
40:c1:51:16:19:a8:76:5a:bd:00:14:30:7a:93:e4:
aa:e2:e9:2e:20:d3:12:47:ce:44:1d:c8:09:02:51:
0e:4e:60:b3:c0:39:13:25:89:f1:14:82:56:41:3e:
53:41:8a:92:69:69:d6:10:a1:4c:f0:00:69:5a:7b:
6b:8c:73:35:f2:fa:81:52:6c:d9:22:58:9a:6c:27:
8c:41:a2:bb:77:ab:23:b8:66:89:eb:1f:cb:3e:2c:
d0:f9:96:e3:1f:13:56:97:a6:f3:12:9e:a7:90:10:
fd:05:76:c2:f1:af:4d:55:5b:09:19:8e:93:f7:58:
aa:43:2e:dd:6a:ad:66:a5:16:93:be:51:81:0c:94:
21:22:e7:c8:4b:33:32:d6:ef:b5:6a:8a:9c:f3:8d:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:B1:EC:89:09:F0:4C:7D:26:C1:99:50:F1:4B:DE:43:9E:29:3D
X509v3 Authority Key Identifier:
keyid:BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0b:43:50:6c:df:5f:6a:8b:8c:7b:74:84:ab:b4:c1:53:8f:
eb:69:3a:82:6d:52:b0:38:39:ec:6b:f3:e9:8b:2a:c1:c5:a8:
50:c9:33:49:5f:24:02:e9:3d:1a:18:57:6e:c9:43:da:db:2c:
2c:c7:16:6a:b9:24:e8:b8:91:fb:87:df:5c:65:7c:7d:6f:cd:
11:9f:65:ef:e6:26:c2:a6:fd:ce:97:1a:fd:81:45:53:07:17:
80:72:81:0c:38:5a:ed:eb:58:b7:df:fd:1f:ad:59:c2:2c:86:
78:4b:22:2c:5c:4f:de:77:63:84:01:e7:3f:ef:b6:67:00:08:
1d:e8:2a:1a:9f:6d:6f:5d:0d:0d:19:89:6f:73:2f:37:13:7a:
39:0d:a9:d1:2d:5f:b9:ac:af:8f:9e:16:e8:2d:f3:45:ae:50:
e1:9f:82:75:22:9a:1a:10:e5:80:8b:fb:3e:08:10:d6:68:de:
59:7c:05:cc:f7:f3:81:dc:99:47:7a:05:26:5b:d8:17:29:87:
43:8b:c6:86:3e:40:72:8e:35:27:2e:04:fa:dd:d1:38:3a:f2:
c2:9a:8c:0b:1e:1d:61:24:fa:b2:f5:04:c0:c0:54:05:04:3a:
8f:ce:21:5d:5f:7e:fd:95:14:58:7b:62:d8:b9:8b:3a:f9:9c:
d4:f2:10:21
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUCE2PJcBeAqURrAtu84CofoMF9b4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNFQTA3OTMwMDg2QTEzREM1MjUwNDVCQzdFNEE5ODAy
RTlEMTJFMTAeFw0yNjA5MjUyMDM0MDdaFw0yNjA5MjYyMTIxMDdaMDMxMTAvBgNV
BAMTKDI0RURCMUVDODkwOUYwNEM3RDI2QzE5OTUwRjE0QkRFNDM5RTI5M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvknUJYtsLL/iWnzM7gC9rKq5
fe/vB4e1R2Ketj2/kLARXO2aIghRiZ0T3INHA3KnQTu0uncy9FCbHJm4R/Tm0cha
mogrztBRHl/uhont0bgExWadA7BBf4xA5wzL+5if8x/QAuyRw0DBURYZqHZavQAU
MHqT5Kri6S4g0xJHzkQdyAkCUQ5OYLPAORMlifEUglZBPlNBipJpadYQoUzwAGla
e2uMczXy+oFSbNkiWJpsJ4xBort3qyO4ZonrH8s+LND5luMfE1aXpvMSnqeQEP0F
dsLxr01VWwkZjpP3WKpDLt1qrWalFpO+UYEMlCEi58hLMzLW77VqipzzjVjPAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUJO2x7IkJ8Ex9JsGZUPFL3kOeKT0wHwYDVR0j
BBgwFoAUvOoHkwCGoT3FJQRbx+SpgC6dEuEwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0xPQkFM
UExVUy8wL0JDRUEwNzkzMDA4NkExM0RDNTI1MDQ1QkM3RTRBOTgwMkU5RDEyRTEu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQkNFQTA3OTMwMDg2QTEzREM1MjUwNDVC
QzdFNEE5ODAyRTlEMTJFMS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dMT0JBTFBMVVMvMC9CQ0VB
MDc5MzAwODZBMTNEQzUyNTA0NUJDN0U0QTk4MDJFOUQxMkUxLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
dAtDUGzfX2qLjHt0hKu0wVOP62k6gm1SsDg57Gvz6YsqwcWoUMkzSV8kAuk9GhhX
bslD2tssLMcWarkk6LiR+4ffXGV8fW/NEZ9l7+Ymwqb9zpca/YFFUwcXgHKBDDha
7etYt9/9H61ZwiyGeEsiLFxP3ndjhAHnP++2ZwAIHegqGp9tb10NDRmJb3MvNxN6
OQ2p0S1fuayvj54W6C3zRa5Q4Z+CdSKaGhDlgIv7PggQ1mjeWXwFzPfzgdyZR3oF
JlvYFymHQ4vGhj5Aco41Jy4E+t3RODrywpqMCx4dYST6svUEwMBUBQQ6j84hXV9+
/ZUUWHti2LmLOvmc1PIQIQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:47:44 2026 by rpki-client