
$ rpki-client -vvvf rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
File: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft (raw, json)
Hash identifier: DzP7w7NHyfAijJDWM0tE0DzoXPa5huxxgCGrUi1KDH0=
Subject key identifier: B0:19:23:09:DC:88:24:88:C0:8C:AF:BB:D4:B0:0D:CE:A2:35:62:3E
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Certificate issuer: /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial: 09ECB0299F68AE428FF9F581E33BB2200B359E3A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
Manifest number: FF
Signing time: Sun 15 Nov 2026 04:30:15 +0000
Manifest this update: Sun 15 Nov 2026 04:25:15 +0000
Manifest next update: Mon 16 Nov 2026 04:53:15 +0000
Files and hashes: 1: 3138302e39342e33302e302f32332d3234203d3e203633393237.roa (hash: pjcbMKqxFhdZKYgKADpdkIDPG/goMICc5D5clKBpXPM=)
2: 3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (hash: NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=)
3: 3138302e39342e33302e302f32332d3234203d3e2039323939.roa (hash: wXHXnquzJPMvt2eL/0ADugpfutlaQZTySmvZfMnVTRQ=)
4: 7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl (hash: /g61af0+oIFhj/VO9tg+q+TsxLvoPayE4DK81ny/sik=)
5: 3138302e39342e33302e302f32332d3233203d3e203139353531.roa (hash: 1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 04:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ec:b0:29:9f:68:ae:42:8f:f9:f5:81:e3:3b:b2:20:0b:35:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Validity
Not Before: Nov 15 04:25:15 2026 GMT
Not After : Nov 16 04:53:15 2026 GMT
Subject: CN=B0192309DC882488C08CAFBBD4B00DCEA235623E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:83:0c:01:d5:15:e7:de:1b:16:74:de:67:
82:c1:9b:10:55:22:66:13:18:b6:bf:0e:2a:88:55:
7c:70:b5:13:67:fd:35:1f:57:17:ac:2d:05:4b:16:
11:57:9e:26:1a:dc:0c:cf:ae:a7:e1:72:08:b7:84:
03:b1:aa:ab:47:97:77:5e:9b:4d:47:b3:f4:5f:e1:
0e:c0:ab:a7:82:59:e9:1b:c9:db:bc:e4:96:20:73:
43:ec:24:8e:e4:82:7b:1b:13:a8:3e:22:3f:ce:c3:
1f:69:a7:9e:5c:6b:e6:43:66:0f:5b:d0:d4:84:79:
de:a1:f7:fe:45:54:7b:2c:c8:37:e0:dd:25:d4:7d:
34:e5:e9:e4:fd:e7:70:71:48:15:42:b2:80:52:c0:
2a:45:41:2e:05:5a:3c:33:63:72:b1:ac:a6:95:dd:
22:79:4e:0e:07:92:f0:32:0c:bc:1a:f8:3f:48:f7:
ab:85:6a:c2:3f:90:1f:0a:b8:87:29:41:5d:27:ae:
5c:9f:02:4a:41:e6:f0:96:82:30:be:86:72:61:c5:
d4:61:47:52:7c:5f:0e:24:c7:23:40:57:63:5f:3e:
2a:52:89:c7:63:df:3d:a6:e6:05:12:4e:bc:d1:be:
19:e7:e0:81:00:85:f5:94:a8:7c:6e:53:79:b4:62:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:23:09:DC:88:24:88:C0:8C:AF:BB:D4:B0:0D:CE:A2:35:62:3E
X509v3 Authority Key Identifier:
keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8c:c1:c9:cc:41:e5:bc:5f:ba:1f:3c:c5:1d:fb:e1:41:cb:
22:fc:f0:89:e0:84:f6:63:7e:18:58:28:60:ea:ed:95:ef:0a:
48:b2:6c:42:0f:d6:d7:2a:ec:36:d3:2f:a9:64:0b:e9:b8:61:
03:51:f5:22:7d:81:b2:be:9a:a9:bb:1a:dd:31:3c:9a:83:70:
6a:2d:db:17:b9:14:2a:d9:b4:51:f8:5e:42:5b:36:47:16:1d:
5e:79:ac:b3:cb:fa:be:ae:0f:d0:76:16:ac:fc:89:a9:88:9d:
83:e4:9a:90:85:b9:e1:b3:aa:16:42:48:7a:dd:75:92:4d:f9:
c8:1e:e6:27:3c:4e:24:b1:68:14:e4:1c:42:07:07:5c:04:6c:
6c:93:44:a5:87:8a:cc:c4:7a:a0:2c:5f:26:68:f6:28:f3:90:
48:eb:a0:ee:fb:ae:20:b2:3d:35:4f:ab:d2:2f:a1:70:ca:34:
e6:98:fe:1e:72:a5:95:d1:0e:0d:e1:bd:95:b5:28:7c:56:ad:
25:fe:96:a1:cb:60:40:eb:c9:d0:b8:f5:79:01:53:00:f0:46:
da:53:8e:85:85:bb:58:3e:4a:1c:e1:9a:f7:96:a2:79:93:bc:
cd:52:96:59:dc:a0:c0:c0:8d:b7:b7:70:2b:5c:69:dc:40:00:
96:be:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:35:05 2026 by rpki-client