
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
File: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft (raw, json)
Hash identifier: FPldHHdjSnqCdOoqAEiP2UM0FQ6gm0CJcuB4EjtYfPg=
Subject key identifier: 2D:AE:12:93:A4:71:25:3F:E3:E1:FF:12:60:F8:01:AF:D3:73:6E:E0
Authority key identifier: 1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
Certificate issuer: /CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Certificate serial: 688B68A9B6FA7F081BF6F75FBAD8A78D1E2F8E08
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
Manifest number: B7
Signing time: Wed 23 Sep 2026 02:46:23 +0000
Manifest this update: Wed 23 Sep 2026 02:41:23 +0000
Manifest next update: Thu 24 Sep 2026 03:24:23 +0000
Files and hashes: 1: 3136302e31392e39312e302f32342d3234203d3e20313532363130.roa (hash: JChDx8EuWzqL1gPeTCGF4ozQOt1mwniQnlS9i/3N+jo=)
2: 3136302e31392e39302e302f32342d3234203d3e20313532363130.roa (hash: gltrchavwBKMRLSis9WfQ6ZI8We0DSXE9wkeAfUu3NE=)
3: 1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl (hash: pDErrboit5BmR2pEAfIFwH3Dx+SEpv/8r0i7UWrO5GA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 14:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8b:68:a9:b6:fa:7f:08:1b:f6:f7:5f:ba:d8:a7:8d:1e:2f:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C6B21E990BA9E27E6480A4DF5072F801EA7B51C
Validity
Not Before: Sep 23 02:41:23 2026 GMT
Not After : Sep 24 03:24:23 2026 GMT
Subject: CN=2DAE1293A471253FE3E1FF1260F801AFD3736EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:79:f1:47:ee:6f:c1:20:ef:e9:81:76:25:
7a:b3:13:0e:c0:bf:1a:4a:84:18:cc:1d:a9:73:f2:
dc:4d:4d:c5:6d:91:43:11:f9:a4:72:6c:91:d8:cb:
2c:a9:f6:6d:c1:79:13:1f:77:92:2c:8a:fa:37:88:
7d:59:00:41:05:9b:2c:3e:a8:36:bf:0f:d5:8a:64:
2e:8f:5d:d4:3d:92:30:1a:59:8e:f8:61:51:95:94:
5b:5b:c5:33:1d:50:69:d8:53:b4:a7:1c:4c:8e:7c:
1f:33:2a:e0:e9:b3:63:03:fe:65:c4:f0:e2:4f:c9:
78:59:5b:b5:42:96:bb:7d:1d:3d:34:c7:07:0c:f5:
de:12:c7:97:e0:12:7e:72:a5:0f:a8:d7:63:ad:9e:
e7:8c:ff:3d:5e:27:34:5e:25:8d:ae:1b:84:d2:5a:
3b:74:4b:94:63:73:c4:cd:93:dc:5e:85:cc:66:89:
1e:0d:27:f8:18:e9:58:8b:19:45:5e:ee:83:9c:06:
7c:01:04:38:e6:62:88:1a:bf:24:19:1d:da:ab:96:
83:fc:a4:77:8a:9d:50:96:a5:62:c2:aa:46:8f:42:
c3:5d:13:90:27:50:ab:93:47:99:7f:7c:72:16:24:
4d:2a:58:86:4f:2f:9f:21:d0:7a:36:0b:93:21:a2:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AE:12:93:A4:71:25:3F:E3:E1:FF:12:60:F8:01:AF:D3:73:6E:E0
X509v3 Authority Key Identifier:
keyid:1C:6B:21:E9:90:BA:9E:27:E6:48:0A:4D:F5:07:2F:80:1E:A7:B5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/1/1C6B21E990BA9E27E6480A4DF5072F801EA7B51C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bb:65:aa:97:8d:4e:8a:3d:82:38:ae:d8:7a:04:f6:c0:b3:
88:dc:17:60:dd:b5:44:4b:1e:af:40:17:7a:dc:16:f4:0e:8c:
58:b0:57:c4:e0:a1:68:fa:47:5e:6b:d7:fe:16:ee:bc:2f:9e:
53:b9:b2:23:c5:37:7d:09:f6:e1:54:aa:b5:bf:c3:40:6b:54:
71:b4:8d:1e:12:8d:01:47:10:0d:f0:2f:f8:1a:bc:b5:42:a1:
f4:3d:da:6f:ac:c5:22:12:c2:bf:35:11:0a:3e:ee:94:a6:7f:
f7:e1:fe:4c:11:93:83:3b:8a:84:c0:11:76:96:de:05:3b:6d:
82:4f:36:98:ee:ff:87:b4:22:41:3e:8c:e3:62:f9:ef:2d:be:
8e:eb:20:5a:93:91:1c:ce:a2:3d:62:a5:9b:2c:88:2c:60:90:
e3:b9:2d:2d:7e:84:c1:c8:62:f7:82:10:85:7f:3d:d0:d7:6a:
1d:5f:02:31:8e:9d:4c:ff:e7:79:e4:54:ad:69:5f:fe:5c:44:
34:77:c6:e9:85:67:88:e5:39:7d:df:3e:2e:d4:fb:c3:c9:8b:
2e:5f:ff:a9:85:5c:34:c4:0b:ce:2d:e6:29:06:95:d8:ac:4a:
35:a6:de:66:43:23:12:b3:28:3b:95:81:a9:34:5c:48:a9:2a:
03:ab:50:e8
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUaItoqbb6fwgb9vdfutinjR4vjggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2QjIxRTk5MEJBOUUyN0U2NDgwQTRERjUwNzJGODAx
RUE3QjUxQzAeFw0yNjA5MjMwMjQxMjNaFw0yNjA5MjQwMzI0MjNaMDMxMTAvBgNV
BAMTKDJEQUUxMjkzQTQ3MTI1M0ZFM0UxRkYxMjYwRjgwMUFGRDM3MzZFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+3nxR+5vwSDv6YF2JXqzEw7A
vxpKhBjMHalz8txNTcVtkUMR+aRybJHYyyyp9m3BeRMfd5Isivo3iH1ZAEEFmyw+
qDa/D9WKZC6PXdQ9kjAaWY74YVGVlFtbxTMdUGnYU7SnHEyOfB8zKuDps2MD/mXE
8OJPyXhZW7VClrt9HT00xwcM9d4Sx5fgEn5ypQ+o12OtnueM/z1eJzReJY2uG4TS
Wjt0S5Rjc8TNk9xehcxmiR4NJ/gY6ViLGUVe7oOcBnwBBDjmYogavyQZHdqrloP8
pHeKnVCWpWLCqkaPQsNdE5AnUKuTR5l/fHIWJE0qWIZPL58h0Ho2C5MhomiFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQULa4Sk6RxJT/j4f8SYPgBr9NzbuAwHwYDVR0j
BBgwFoAUHGsh6ZC6nifmSApN9QcvgB6ntRwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FFTFcv
MS8xQzZCMjFFOTkwQkE5RTI3RTY0ODBBNERGNTA3MkY4MDFFQTdCNTFDLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wLzFDNkIyMUU5OTBCQTlFMjdFNjQ4MEE0REY1MDcy
RjgwMUVBN0I1MUMuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TQUVMVy8xLzFDNkIyMUU5OTBCQTlF
MjdFNjQ4MEE0REY1MDcyRjgwMUVBN0I1MUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0u2Wql41Oij2C
OK7YegT2wLOI3Bdg3bVESx6vQBd63Bb0DoxYsFfE4KFo+kdea9f+Fu68L55TubIj
xTd9CfbhVKq1v8NAa1RxtI0eEo0BRxAN8C/4Gry1QqH0PdpvrMUiEsK/NREKPu6U
pn/34f5MEZODO4qEwBF2lt4FO22CTzaY7v+HtCJBPozjYvnvLb6O6yBak5EczqI9
YqWbLIgsYJDjuS0tfoTByGL3ghCFfz3Q12odXwIxjp1M/+d55FStaV/+XEQ0d8bp
hWeI5Tl93z4u1PvDyYsuX/+phVw0xAvOLeYpBpXYrEo1pt5mQyMSsyg7lYGpNFxI
qSoDq1Do
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:33:07 2026 by rpki-client