
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
File: CA678C886D87F023B9297877BF550E88E90AE169.mft (raw, json)
Hash identifier: /L6qFb7lavt0t13IO32i+1pHfJudaVN5wyXyomEeni0=
Subject key identifier: 6B:0B:C2:61:73:B4:7E:94:6E:17:6C:CB:AA:13:CA:37:4E:3F:AF:AA
Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69
Certificate issuer: /CN=CA678C886D87F023B9297877BF550E88E90AE169
Certificate serial: 3693019827EA563AEFEA169165BA1D8F39397493
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
Manifest number: B9
Signing time: Fri 25 Sep 2026 17:48:45 +0000
Manifest this update: Fri 25 Sep 2026 17:43:45 +0000
Manifest next update: Sat 26 Sep 2026 18:20:45 +0000
Files and hashes: 1: 34392e3231332e33342e302f32332d3234203d3e203231383539.roa (hash: fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=)
2: CA678C886D87F023B9297877BF550E88E90AE169.crl (hash: A1JOc2JoEWPhwHQCqWaAH9LGSXu3wf4Wyx2zGmSroI8=)
3: 34392e3231332e33342e302f32332d3234203d3e2037353336.roa (hash: UiYvDw3Nz5+XLnUJ6ot0sHBwCYvrMQN4qa4YEtJyIAc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl
rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:93:01:98:27:ea:56:3a:ef:ea:16:91:65:ba:1d:8f:39:39:74:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169
Validity
Not Before: Sep 25 17:43:45 2026 GMT
Not After : Sep 26 18:20:45 2026 GMT
Subject: CN=6B0BC26173B47E946E176CCBAA13CA374E3FAFAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:fa:29:17:d3:c4:d0:2e:e5:d5:00:db:fe:
92:05:65:c2:d5:89:84:5a:25:de:c0:de:0f:c9:cf:
25:67:1c:1b:b8:c7:94:c7:45:4f:ff:59:3c:08:dd:
1c:eb:2b:f3:87:11:d9:70:2a:b7:cf:02:bf:a6:51:
c4:52:07:a4:8c:dd:d8:92:43:1a:81:e1:54:1e:91:
91:dc:f7:fe:64:5c:1d:b3:59:44:49:02:48:d5:80:
4c:d5:6c:33:de:e3:bc:08:a8:92:03:8a:60:6a:10:
e1:04:31:00:2c:0b:8e:78:fa:30:56:44:a0:e9:ef:
57:82:79:90:35:20:4b:bf:67:0f:04:4f:ac:73:f9:
4a:a3:86:c4:92:df:b1:bd:c2:c5:ff:2c:ff:6e:75:
8a:ed:8a:d6:ab:7b:86:70:01:1d:eb:ae:f6:e6:e4:
0c:91:5f:49:59:b7:bb:1c:6c:96:fa:13:5a:d6:22:
e2:26:19:89:b6:40:e4:3b:9e:d2:1b:7f:42:3d:0e:
eb:9e:9c:9c:51:2d:10:65:21:dd:54:b5:aa:8c:0b:
56:34:4b:42:f4:8b:37:9b:96:16:7a:c5:47:99:f1:
ce:7b:f2:3a:06:6f:69:a7:4d:6f:1f:e0:9a:f2:17:
70:a6:9b:9d:c6:bb:27:f9:7d:aa:cb:cf:c7:6d:ca:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0B:C2:61:73:B4:7E:94:6E:17:6C:CB:AA:13:CA:37:4E:3F:AF:AA
X509v3 Authority Key Identifier:
keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:55:9f:76:2c:98:1e:50:1d:dd:4b:6b:d8:2a:b0:79:d2:
a1:91:77:28:07:e6:31:53:ec:9e:2c:ad:ec:d1:06:63:4f:78:
a3:90:2a:6f:10:de:2c:49:80:4d:bb:cb:cd:0e:fd:47:3e:b5:
d6:63:bc:62:5a:7d:85:20:d6:90:78:46:b8:6a:7c:58:61:7a:
f9:f9:dc:42:e6:97:70:f1:89:26:f8:f2:42:23:f0:61:28:a8:
1f:63:67:53:51:73:4f:c9:7c:66:fa:1a:9f:4c:c4:ca:02:31:
8a:c5:dc:aa:40:1a:66:d8:e6:25:93:30:42:59:66:a2:c2:f1:
93:8c:af:90:7c:de:28:63:06:84:49:1a:90:f2:ef:02:2a:fe:
f2:b5:58:17:5d:5c:56:fa:7e:6c:15:43:18:65:a8:42:43:0d:
d9:6a:ab:ba:16:f6:8a:74:79:a6:41:7a:33:0b:77:49:71:fd:
d2:80:64:a5:90:54:ae:0e:43:00:5d:18:9a:e2:30:83:af:41:
8d:e7:68:28:9e:8c:7d:36:99:5d:c7:52:0a:48:6a:18:41:56:
9c:c5:d6:f2:5c:6d:48:f9:2a:b2:13:c5:55:d5:0d:8e:2e:fb:
7e:04:f2:e9:8e:47:40:5d:90:c4:af:4d:07:07:f3:b4:e9:02:
5e:8d:0d:a2
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUNpMBmCfqVjrv6haRZbodjzk5dJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1NTBFODhF
OTBBRTE2OTAeFw0yNjA5MjUxNzQzNDVaFw0yNjA5MjYxODIwNDVaMDMxMTAvBgNV
BAMTKDZCMEJDMjYxNzNCNDdFOTQ2RTE3NkNDQkFBMTNDQTM3NEUzRkFGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTLvopF9PE0C7l1QDb/pIFZcLV
iYRaJd7A3g/JzyVnHBu4x5THRU//WTwI3RzrK/OHEdlwKrfPAr+mUcRSB6SM3diS
QxqB4VQekZHc9/5kXB2zWURJAkjVgEzVbDPe47wIqJIDimBqEOEEMQAsC454+jBW
RKDp71eCeZA1IEu/Zw8ET6xz+UqjhsSS37G9wsX/LP9udYrtitare4ZwAR3rrvbm
5AyRX0lZt7scbJb6E1rWIuImGYm2QOQ7ntIbf0I9DuuenJxRLRBlId1UtaqMC1Y0
S0L0izeblhZ6xUeZ8c578joGb2mnTW8f4JryF3Cmm53Guyf5farLz8dtynzLAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUawvCYXO0fpRuF2zLqhPKN04/r6owHwYDVR0j
BBgwFoAUymeMiG2H8CO5KXh3v1UOiOkK4WkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJWUlZ
SS8wL0NBNjc4Qzg4NkQ4N0YwMjNCOTI5Nzg3N0JGNTUwRTg4RTkwQUUxNjkuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1
NTBFODhFOTBBRTE2OS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISVlJWUkvMC9DQTY3OEM4ODZE
ODdGMDIzQjkyOTc4NzdCRjU1MEU4OEU5MEFFMTY5Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANINVn3Ys
mB5QHd1La9gqsHnSoZF3KAfmMVPsniyt7NEGY094o5AqbxDeLEmATbvLzQ79Rz61
1mO8Ylp9hSDWkHhGuGp8WGF6+fncQuaXcPGJJvjyQiPwYSioH2NnU1FzT8l8Zvoa
n0zEygIxisXcqkAaZtjmJZMwQllmosLxk4yvkHzeKGMGhEkakPLvAir+8rVYF11c
Vvp+bBVDGGWoQkMN2Wqruhb2inR5pkF6Mwt3SXH90oBkpZBUrg5DAF0YmuIwg69B
jedoKJ6MfTaZXcdSCkhqGEFWnMXW8lxtSPkqshPFVdUNji77fgTy6Y5HQF2QxK9N
BwfztOkCXo0Nog==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:23:04 2026 by rpki-client