
$ rpki-client -vvf rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
File: ECE230A523016A2711501CE158F766961D12E232.mft (raw, json)
Hash identifier: Uh80+0yoEHmqCvWMEjVl5H13eNT7PMCgGWRN+lUOLoQ=
Subject key identifier: 9D:3B:C6:72:FF:66:5E:A8:2E:F0:41:26:53:86:25:9E:00:CA:53:21
Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
Certificate issuer: /CN=ECE230A523016A2711501CE158F766961D12E232
Certificate serial: 48E3AB78118888715318F6256BBBD78EF1C67322
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
Manifest number: 2D
Signing time: Sat 13 Jun 2026 09:34:36 +0000
Manifest this update: Sat 13 Jun 2026 09:29:36 +0000
Manifest next update: Sun 14 Jun 2026 11:00:36 +0000
Files and hashes: 1: 3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (hash: oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=)
2: ECE230A523016A2711501CE158F766961D12E232.crl (hash: JWn3tKy9PLwa1yvCSkrBM4DcOwNA1QI94Y8V0jZPWR0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl
rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e3:ab:78:11:88:88:71:53:18:f6:25:6b:bb:d7:8e:f1:c6:73:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECE230A523016A2711501CE158F766961D12E232
Validity
Not Before: Jun 13 09:29:36 2026 GMT
Not After : Jun 14 11:00:36 2026 GMT
Subject: CN=9D3BC672FF665EA82EF041265386259E00CA5321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:15:00:f3:d5:e1:fb:49:b4:09:6e:75:8f:
ec:49:86:43:eb:7e:68:9b:71:ea:98:94:a0:a3:9f:
85:de:c4:39:c5:5e:76:17:df:15:8c:0f:59:97:9a:
6c:b2:08:93:a7:99:ed:26:88:b8:b2:56:a8:34:aa:
a4:92:49:44:e5:53:c9:bf:bf:81:c5:3e:7f:fc:22:
a6:d6:48:00:fa:58:61:de:90:68:7b:cb:5a:81:7f:
2c:e8:45:c6:5c:0a:c3:b3:e4:29:79:8a:88:e4:37:
1b:ce:32:c5:89:73:10:da:c2:4b:e2:93:85:dd:ad:
69:9f:fb:14:1c:99:f4:e5:c6:c5:89:31:b4:ff:b7:
82:a1:b6:b7:ea:e0:48:95:bc:85:23:b7:bf:75:97:
fc:c7:20:d2:f6:97:61:a3:96:68:fb:be:40:52:b9:
3c:d6:1a:f9:b7:0e:8a:27:19:ca:a1:2a:43:b5:9d:
fd:69:3e:3c:8e:16:f3:64:bf:3b:14:65:c7:e8:30:
6a:ba:f5:15:9a:f1:03:f0:e0:e0:25:c7:07:2a:a6:
eb:01:04:df:80:7b:6b:98:0c:10:35:9e:5b:a4:ea:
26:a2:e5:ce:a4:cf:87:ed:44:2a:ca:67:2d:72:ea:
e6:09:62:d7:76:31:7b:24:0f:ca:df:b5:98:8f:f9:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3B:C6:72:FF:66:5E:A8:2E:F0:41:26:53:86:25:9E:00:CA:53:21
X509v3 Authority Key Identifier:
keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:42:05:72:60:d3:f9:41:66:24:01:92:18:78:64:ef:63:b4:
9f:b4:3f:d3:c7:ec:ec:1a:9d:00:92:b4:58:a0:3d:d0:4b:61:
c7:c7:1d:87:ff:56:6c:a2:dd:40:2f:40:17:a0:48:f3:9c:6c:
5e:da:51:51:91:5e:00:a3:97:67:5a:41:6c:35:91:fe:ef:6d:
eb:79:8c:ca:aa:5d:f1:cb:e7:dd:28:77:ea:9e:11:c7:ca:ed:
55:7b:0f:93:dc:d5:d4:b3:c8:7e:3c:44:8f:8e:bf:af:c1:a6:
dc:be:8d:83:94:42:92:09:91:d4:88:35:cd:8a:3b:ef:c4:d3:
f5:39:9b:2a:57:f5:7d:54:ea:c8:8c:75:d9:b4:cd:47:df:42:
0c:0e:e9:d1:d0:1b:5e:23:2b:f2:0a:c6:21:dd:51:88:c0:41:
33:70:65:59:97:60:9c:58:3f:90:2c:d1:df:58:05:6a:d0:ac:
eb:7b:1d:0f:0a:bd:87:89:f9:5c:ef:90:2a:a5:02:3f:21:b7:
04:01:6b:a3:42:32:86:8c:7e:f1:8d:c0:44:51:5f:3e:3c:79:
78:a9:ab:35:cf:82:e4:3d:e2:d9:09:b4:89:2d:43:52:58:31:
3a:17:ea:7f:d3:77:d7:60:ff:04:40:65:a5:d8:42:3d:4f:8d:
d8:25:1b:6b
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUSOOreBGIiHFTGPYla7vXjvHGcyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2OTYx
RDEyRTIzMjAeFw0yNjA2MTMwOTI5MzZaFw0yNjA2MTQxMTAwMzZaMDMxMTAvBgNV
BAMTKDlEM0JDNjcyRkY2NjVFQTgyRUYwNDEyNjUzODYyNTlFMDBDQTUzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWxUA89Xh+0m0CW51j+xJhkPr
fmibceqYlKCjn4XexDnFXnYX3xWMD1mXmmyyCJOnme0miLiyVqg0qqSSSUTlU8m/
v4HFPn/8IqbWSAD6WGHekGh7y1qBfyzoRcZcCsOz5Cl5iojkNxvOMsWJcxDawkvi
k4XdrWmf+xQcmfTlxsWJMbT/t4Khtrfq4EiVvIUjt791l/zHINL2l2Gjlmj7vkBS
uTzWGvm3DoonGcqhKkO1nf1pPjyOFvNkvzsUZcfoMGq69RWa8QPw4OAlxwcqpusB
BN+Ae2uYDBA1nluk6iai5c6kz4ftRCrKZy1y6uYJYtd2MXskD8rftZiP+Ts/AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUnTvGcv9mXqgu8EEmU4YlngDKUyEwHwYDVR0j
BBgwFoAU7OIwpSMBaicRUBzhWPdmlh0S4jIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkhSSS8w
L0VDRTIzMEE1MjMwMTZBMjcxMTUwMUNFMTU4Rjc2Njk2MUQxMkUyMzIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvRUNFMjMwQTUyMzAxNkEyNzExNTAxQ0UxNThGNzY2
OTYxRDEyRTIzMi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05IUkkvMC9FQ0UyMzBBNTIzMDE2QTI3
MTE1MDFDRTE1OEY3NjY5NjFEMTJFMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkIFcmDT+UFmJAGS
GHhk72O0n7Q/08fs7BqdAJK0WKA90Ethx8cdh/9WbKLdQC9AF6BI85xsXtpRUZFe
AKOXZ1pBbDWR/u9t63mMyqpd8cvn3Sh36p4Rx8rtVXsPk9zV1LPIfjxEj46/r8Gm
3L6Ng5RCkgmR1Ig1zYo778TT9TmbKlf1fVTqyIx12bTNR99CDA7p0dAbXiMr8grG
Id1RiMBBM3BlWZdgnFg/kCzR31gFatCs63sdDwq9h4n5XO+QKqUCPyG3BAFro0Iy
hox+8Y3ARFFfPjx5eKmrNc+C5D3i2Qm0iS1DUlgxOhfqf9N312D/BEBlpdhCPU+N
2CUbaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:20 2026 by rpki-client