
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier: E6qQmhMFnReEu72AG+pFJs99WYvUDyW5DcVKOcUMrtw=
Subject key identifier: 88:55:77:54:99:B8:6A:F3:5B:AD:9E:65:8D:00:36:14:94:A7:E6:B1
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer: /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial: 13C9D23B83A5DCCC00FDC6BF2F88E47DA3351B8C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number: B4
Signing time: Mon 21 Sep 2026 02:04:58 +0000
Manifest this update: Mon 21 Sep 2026 01:59:58 +0000
Manifest next update: Tue 22 Sep 2026 04:55:58 +0000
Files and hashes: 1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: TaPWnoQSr9bOvtVIMrZylVgyaAnSMJrr70qxU1QKPh4=)
2: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
3: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c9:d2:3b:83:a5:dc:cc:00:fd:c6:bf:2f:88:e4:7d:a3:35:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Validity
Not Before: Sep 21 01:59:58 2026 GMT
Not After : Sep 22 04:55:58 2026 GMT
Subject: CN=8855775499B86AF35BAD9E658D00361494A7E6B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:d0:14:19:87:aa:98:5f:43:64:3e:7d:00:
78:95:aa:f3:d8:e9:e3:24:c5:f9:9a:19:bd:01:56:
62:f2:64:eb:31:cf:75:8a:cd:75:57:8d:a6:1f:80:
9a:19:55:0c:9e:74:76:2e:62:47:6c:8b:f1:d8:d0:
5d:88:67:ce:44:0b:26:b3:de:c9:6b:7b:64:77:b5:
03:1c:fc:67:cb:06:a1:56:5e:b5:9b:62:36:7e:53:
92:71:67:6f:7f:60:2a:e4:fb:e7:81:38:66:5e:15:
4e:84:d8:25:a9:d6:d6:b1:37:c7:9a:7c:0c:63:96:
05:5e:cd:96:cd:0a:3b:52:cd:34:c8:14:91:1e:84:
e6:c2:a4:e6:c5:45:13:84:20:b2:0c:ca:54:f8:65:
70:18:8d:79:74:b6:0f:b9:4b:a8:98:be:e8:ed:08:
25:c6:68:f7:99:5a:be:30:83:df:8e:a6:b2:1c:f1:
d5:ce:52:a0:48:38:00:2d:6e:3a:37:b3:f9:9b:d7:
a5:43:f6:d1:2b:b1:21:59:c6:f4:9c:f2:77:fd:bc:
11:7f:ed:5a:f9:6d:22:26:86:d5:90:27:63:86:3d:
23:1a:66:d5:aa:25:24:83:ec:6e:67:36:4c:3f:82:
f1:2c:5e:4c:03:d4:a6:7d:7e:8c:f0:f4:61:a6:37:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:77:54:99:B8:6A:F3:5B:AD:9E:65:8D:00:36:14:94:A7:E6:B1
X509v3 Authority Key Identifier:
keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:28:d5:8d:23:0a:7f:02:79:14:91:43:7a:d3:d4:0e:8c:b0:
5f:b5:17:a1:e6:b9:e7:50:a4:0f:c1:36:6d:a5:ce:cc:63:4d:
72:d5:0b:cb:0f:18:1f:8c:c8:19:16:8a:12:79:af:07:03:02:
ad:39:4d:c0:b3:3a:c8:1d:88:2b:bc:68:43:04:22:b3:33:c7:
f8:71:0a:50:1d:8d:ed:3e:3d:03:81:6f:6e:7f:14:5d:d5:99:
ed:53:c1:35:9d:5f:1a:25:f8:be:5d:52:23:6b:73:8a:4a:45:
58:8c:b4:c5:76:44:06:78:bb:ee:56:dc:be:1c:37:63:68:34:
fe:cf:fc:f1:e6:d8:77:18:d7:a5:ed:7d:e9:f4:7e:1d:9d:4d:
fb:8e:aa:34:f7:5d:c9:6a:b9:ad:76:42:50:65:ea:54:a6:6f:
31:f7:6e:58:37:95:3c:bc:22:44:1c:61:58:58:8e:bc:40:df:
0d:64:44:30:57:16:89:25:9f:91:39:0c:3f:05:ac:c5:b2:53:
14:cc:d1:83:34:10:d1:aa:50:56:ed:b1:e1:cb:bd:dc:24:b9:
d2:4d:72:4f:71:6e:74:6b:24:33:fb:40:ac:3d:41:36:70:c2:
88:e1:c1:ea:17:a3:3c:90:d1:b5:b7:ab:da:55:a2:50:92:87:
6a:92:fa:33
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUE8nSO4Ol3MwA/ca/L4jkfaM1G4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4NzhEQTYw
Mjc1RDRGRTAeFw0yNjA5MjEwMTU5NThaFw0yNjA5MjIwNDU1NThaMDMxMTAvBgNV
BAMTKDg4NTU3NzU0OTlCODZBRjM1QkFEOUU2NThEMDAzNjE0OTRBN0U2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwNAUGYeqmF9DZD59AHiVqvPY
6eMkxfmaGb0BVmLyZOsxz3WKzXVXjaYfgJoZVQyedHYuYkdsi/HY0F2IZ85ECyaz
3slre2R3tQMc/GfLBqFWXrWbYjZ+U5JxZ29/YCrk++eBOGZeFU6E2CWp1taxN8ea
fAxjlgVezZbNCjtSzTTIFJEehObCpObFRROEILIMylT4ZXAYjXl0tg+5S6iYvujt
CCXGaPeZWr4wg9+OprIc8dXOUqBIOAAtbjo3s/mb16VD9tErsSFZxvSc8nf9vBF/
7Vr5bSImhtWQJ2OGPSMaZtWqJSSD7G5nNkw/gvEsXkwD1KZ9fozw9GGmNzXXAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUiFV3VJm4avNbrZ5ljQA2FJSn5rEwHwYDVR0j
BBgwFoAUCKA8+cHTr5PP2wosHYeNpgJ11P4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01UUlRD
SC8wLzA4QTAzQ0Y5QzFEM0FGOTNDRkRCMEEyQzFEODc4REE2MDI3NUQ0RkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4
NzhEQTYwMjc1RDRGRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNVFJUQ0gvMC8wOEEwM0NGOUMx
RDNBRjkzQ0ZEQjBBMkMxRDg3OERBNjAyNzVENEZFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCjVjSMK
fwJ5FJFDetPUDoywX7UXoea551CkD8E2baXOzGNNctULyw8YH4zIGRaKEnmvBwMC
rTlNwLM6yB2IK7xoQwQiszPH+HEKUB2N7T49A4Fvbn8UXdWZ7VPBNZ1fGiX4vl1S
I2tzikpFWIy0xXZEBni77lbcvhw3Y2g0/s/88ebYdxjXpe196fR+HZ1N+46qNPdd
yWq5rXZCUGXqVKZvMfduWDeVPLwiRBxhWFiOvEDfDWREMFcWiSWfkTkMPwWsxbJT
FMzRgzQQ0apQVu2x4cu93CS50k1yT3FudGskM/tArD1BNnDCiOHB6hejPJDRtber
2lWiUJKHapL6Mw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:23:50 2026 by rpki-client