
$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft
File: 61F2C234A51074E0978404BDC79AA79130040B00.mft (raw, json)
Hash identifier: pc0BVJUG+ns/vLKptpUU9WCZrKKenDgXIAELm9TDuOg=
Subject key identifier: 6C:80:F8:44:6C:35:9A:10:A3:E2:BD:07:EE:01:AF:D7:17:78:CA:C7
Authority key identifier: 61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00
Certificate issuer: /CN=61F2C234A51074E0978404BDC79AA79130040B00
Certificate serial: 41CD31077ED1814A2E51705BF2A202BB42967BE7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft
Manifest number: 31
Signing time: Sat 13 Jun 2026 06:09:13 +0000
Manifest this update: Sat 13 Jun 2026 06:04:13 +0000
Manifest next update: Sun 14 Jun 2026 08:22:13 +0000
Files and hashes: 1: 323430353a623863303a3a2f33322d3634203d3e20313331363734.roa (hash: zPchVf+BzdWdK6jtiyFuKEMvAaWvPZafeIufyi+NDAU=)
2: 61F2C234A51074E0978404BDC79AA79130040B00.crl (hash: F0nMeySYXY5l+n4yREbmrpQfNRvwHcy4srkBxAovYAM=)
3: 3130332e3134372e3133302e302f32332d3234203d3e20313331363734.roa (hash: hPsd6S2D9hMin8P77QyQ2OhAm+/bYf9j5m2G2tBdGrg=)
4: 3130332e3134372e3133302e302f32332d3234203d3e20313331363737.roa (hash: VGWA54tpU9ZSYiEjleM6DRC35GLg1lZvqOaYCzFR4yI=)
5: 323430353a623863303a3a2f33322d3634203d3e20313331363737.roa (hash: AnPDeDj6hR2bEdYvy6SAFA3A/pHmArnFaxzCcI0NAKA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl
rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:cd:31:07:7e:d1:81:4a:2e:51:70:5b:f2:a2:02:bb:42:96:7b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61F2C234A51074E0978404BDC79AA79130040B00
Validity
Not Before: Jun 13 06:04:13 2026 GMT
Not After : Jun 14 08:22:13 2026 GMT
Subject: CN=6C80F8446C359A10A3E2BD07EE01AFD71778CAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:4e:83:fb:f3:85:e2:37:c9:22:ba:c8:ec:
f7:10:19:f3:8b:55:15:da:8c:4a:e9:87:df:e2:4b:
aa:41:16:19:38:a1:6f:e0:71:e6:00:92:ac:f0:b3:
b3:fb:38:56:8f:57:30:f5:58:0c:cd:54:d0:e1:f7:
b5:ae:23:88:19:07:44:b3:ad:c4:83:d7:86:54:5c:
9d:71:bc:fc:30:9e:e9:5a:29:ef:be:3b:d6:7d:ec:
61:eb:c7:b5:bb:a4:29:03:38:f3:7f:93:20:85:1e:
b1:e8:5e:4b:34:74:ab:93:f8:1c:8e:1b:87:a9:bb:
dc:19:a1:91:fc:ef:fb:fd:5a:84:fc:15:6a:53:1e:
2a:a2:c7:ec:db:f2:4f:96:a4:06:2a:c2:97:ae:7c:
ee:23:11:2b:1f:69:df:33:ad:80:0d:71:54:1a:9e:
b5:af:61:5a:57:39:a1:0e:7d:34:e2:db:9a:4f:5f:
d4:bf:1b:b0:86:29:52:d2:e1:c5:d6:f3:a5:3d:6e:
86:4f:60:d3:ab:57:74:29:bc:43:f1:3b:de:eb:df:
38:b7:3d:07:76:1d:8a:13:44:33:30:25:c3:5c:c2:
1b:08:3c:05:9a:c2:d0:6d:18:67:a6:81:ce:17:11:
86:d7:45:73:34:46:74:5b:1c:bd:20:02:ab:58:3e:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:F8:44:6C:35:9A:10:A3:E2:BD:07:EE:01:AF:D7:17:78:CA:C7
X509v3 Authority Key Identifier:
keyid:61:F2:C2:34:A5:10:74:E0:97:84:04:BD:C7:9A:A7:91:30:04:0B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61F2C234A51074E0978404BDC79AA79130040B00.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENRICH/0/61F2C234A51074E0978404BDC79AA79130040B00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dc:4d:b0:c0:37:0c:1b:6a:3f:ee:00:f4:1e:d3:6a:a7:c4:
04:7a:e5:db:68:83:c3:71:2b:26:4f:e0:b0:de:eb:86:d7:f3:
9b:4e:c9:12:ac:8f:48:26:87:bd:f0:f3:ca:88:af:0d:f5:f7:
0e:9a:91:e6:f4:da:de:e2:1c:d4:a9:87:af:b0:48:8c:8d:35:
17:91:3a:42:eb:27:d5:69:a6:7a:0b:c3:ec:67:7c:5a:6a:35:
b4:47:7d:ef:49:67:02:86:28:46:cf:d8:a7:d7:c2:78:d7:c2:
16:cb:7e:74:a1:b0:45:65:d1:d1:21:13:c8:8f:be:e3:26:05:
60:fb:98:b0:dd:25:c3:e0:7c:43:75:6f:72:88:f2:1c:9b:bd:
2c:c5:66:35:e8:64:6e:c5:7e:0b:fc:e8:c3:23:6a:78:6d:1c:
1f:6a:39:7f:ab:b8:e4:3f:ad:1a:bd:25:8a:34:5f:c8:8b:68:
16:22:df:c4:83:38:a0:c6:59:d2:9d:70:37:1c:94:61:98:57:
5a:22:4f:13:52:0c:99:5c:f0:1a:00:bd:55:97:28:4c:5b:50:
db:05:32:7e:20:5f:b2:c9:d2:87:6d:57:54:e5:c3:d0:2b:b6:
c5:ed:5d:d3:d2:b9:45:06:ab:30:26:4f:a0:6a:6d:5f:e5:05:
69:05:78:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:43 2026 by rpki-client