
$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
File: AAED3548B647C9B95804411BAB19736F229C5A54.mft (raw, json)
Hash identifier: O827vWZ2o9V8IkMrFyeIbeI0CGw5/RORvOZfUfSOIfc=
Subject key identifier: 26:E4:0E:27:C9:61:B1:AE:B8:C6:89:0A:96:28:95:45:D9:B1:51:3D
Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54
Certificate serial: 08B70EFBA5AED075750D2D8E7F96DEEA928318A4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
Manifest number: 2D
Signing time: Fri 12 Jun 2026 17:02:23 +0000
Manifest this update: Fri 12 Jun 2026 16:57:23 +0000
Manifest next update: Sat 13 Jun 2026 18:58:23 +0000
Files and hashes: 1: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (hash: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0=)
2: AAED3548B647C9B95804411BAB19736F229C5A54.crl (hash: zjCJ7RaS4pEoMEy/n8AQXkk9hVQi/0DC00WWQi3aKpU=)
3: 3231302e3234342e3139322e302f31392d3230203d3e2037343738.roa (hash: W335AiMtYbmtyFJ/6qInNtRm+Ld5a3fuzl0Q/nTZ7Xs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 18:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b7:0e:fb:a5:ae:d0:75:75:0d:2d:8e:7f:96:de:ea:92:83:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54
Validity
Not Before: Jun 12 16:57:23 2026 GMT
Not After : Jun 13 18:58:23 2026 GMT
Subject: CN=26E40E27C961B1AEB8C6890A96289545D9B1513D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:37:8b:9f:68:8d:dd:25:1d:f5:c1:a5:e4:
26:dc:ba:4e:35:a9:c4:f4:bf:9a:c1:b7:cf:f5:b3:
0d:41:37:a8:63:f5:9f:67:8b:a7:00:1a:63:ef:5b:
d2:ca:9e:a1:9c:62:81:35:4e:fd:fa:56:d8:5f:ec:
4c:b5:5a:01:81:2c:65:ad:dd:5a:f8:02:1a:2e:41:
f8:0a:d9:85:4d:ed:77:a7:03:ee:a6:3c:fa:12:ee:
29:77:d0:e6:bc:89:a7:0f:1b:b4:80:fc:65:8f:ca:
c1:a4:ba:74:3c:d3:41:39:5f:7f:2b:2f:36:ef:cc:
29:65:29:c1:b4:09:80:30:8c:2d:02:6b:e1:4a:bd:
95:62:ad:9e:87:04:1d:1b:51:d7:fb:79:bb:fd:89:
84:88:27:0f:ec:fc:c9:6f:21:03:cc:36:ea:48:39:
b2:be:74:a8:2b:26:ed:7d:4d:70:9e:9a:99:5d:0f:
c6:71:4a:09:36:0a:19:f6:8d:fb:23:90:77:4f:96:
b6:b3:26:6d:43:16:3d:fe:e9:d3:a7:de:46:48:05:
2a:4e:e7:e4:02:f8:4d:f0:5c:47:25:9b:cc:70:c7:
19:ec:20:73:96:45:56:24:af:d2:32:57:c9:0b:5b:
29:d5:e4:f0:f6:38:b0:26:23:9d:c1:0e:8b:82:aa:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:0E:27:C9:61:B1:AE:B8:C6:89:0A:96:28:95:45:D9:B1:51:3D
X509v3 Authority Key Identifier:
keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2c:7e:d4:1a:29:26:b2:d8:ba:32:2d:bc:b0:82:af:45:65:
4c:76:97:69:95:e5:f2:59:96:09:bb:2c:6a:60:6d:44:c6:91:
67:07:6c:fb:ab:c5:bd:8a:02:a4:1c:ff:db:38:d7:71:df:46:
62:73:9f:de:92:e7:20:21:3e:e9:66:c1:49:1b:c6:6d:fb:49:
58:e0:53:8d:43:09:ef:61:43:10:c8:56:0e:ab:17:13:16:f9:
25:7b:75:f7:82:86:b0:0d:d9:bf:d9:d8:43:85:cd:c8:5d:b2:
61:ff:ab:30:73:cf:c0:89:52:f2:10:f5:9a:c9:1a:19:89:82:
1b:8d:7b:ef:2e:fd:76:61:89:7e:00:7f:9c:02:e1:64:e3:3a:
e8:01:cf:e5:9f:9b:8d:aa:30:0b:4b:f5:c2:33:e4:11:63:6a:
ca:8b:79:35:12:f7:9a:9d:ed:86:bd:fb:82:4c:39:9a:03:2f:
17:8f:36:72:d7:07:83:91:0b:ab:9b:08:22:5a:5a:99:1f:88:
d6:cc:69:b6:2e:99:9f:73:29:1b:ed:c1:69:aa:c8:02:d1:81:
cf:b0:6e:a3:6b:be:b1:74:13:e2:4e:65:3d:c7:d9:28:03:98:
09:15:1a:9f:81:c7:73:6d:26:72:37:04:fa:43:eb:f9:70:63:
f6:22:7a:62
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUCLcO+6Wu0HV1DS2Of5be6pKDGKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy
MjlDNUE1NDAeFw0yNjA2MTIxNjU3MjNaFw0yNjA2MTMxODU4MjNaMDMxMTAvBgNV
BAMTKDI2RTQwRTI3Qzk2MUIxQUVCOEM2ODkwQTk2Mjg5NTQ1RDlCMTUxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJjeLn2iN3SUd9cGl5Cbcuk41
qcT0v5rBt8/1sw1BN6hj9Z9ni6cAGmPvW9LKnqGcYoE1Tv36Vthf7Ey1WgGBLGWt
3Vr4AhouQfgK2YVN7XenA+6mPPoS7il30Oa8iacPG7SA/GWPysGkunQ800E5X38r
LzbvzCllKcG0CYAwjC0Ca+FKvZVirZ6HBB0bUdf7ebv9iYSIJw/s/MlvIQPMNupI
ObK+dKgrJu19TXCempldD8ZxSgk2Chn2jfsjkHdPlrazJm1DFj3+6dOn3kZIBSpO
5+QC+E3wXEclm8xwxxnsIHOWRVYkr9IyV8kLWynV5PD2OLAmI53BDouCqkgvAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUJuQOJ8lhsa64xokKliiVRdmxUT0wHwYDVR0j
BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv
QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2
RjIyOUM1QTU0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvQUFFRDM1NDhCNjQ3QzlCOTU4
MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGksftQaKSay2LoyLbyw
gq9FZUx2l2mV5fJZlgm7LGpgbUTGkWcHbPurxb2KAqQc/9s413HfRmJzn96S5yAh
PulmwUkbxm37SVjgU41DCe9hQxDIVg6rFxMW+SV7dfeChrAN2b/Z2EOFzchdsmH/
qzBzz8CJUvIQ9ZrJGhmJghuNe+8u/XZhiX4Af5wC4WTjOugBz+Wfm42qMAtL9cIz
5BFjasqLeTUS95qd7Ya9+4JMOZoDLxePNnLXB4ORC6ubCCJaWpkfiNbMabYumZ9z
KRvtwWmqyALRgc+wbqNrvrF0E+JOZT3H2SgDmAkVGp+Bx3NtJnI3BPpD6/lwY/Yi
emI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:08 2026 by rpki-client