
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
File: 871300497118DBA75FA9B46DE2D7D39663DBDE52.mft (raw, json)
Hash identifier: JwtU3+1uwEv4kTV0zjHUJxxalQQexjv1TlFZZgczFEM=
Subject key identifier: B2:FD:F7:59:EA:49:61:49:9A:42:C4:37:55:76:DD:4C:38:0D:F8:DF
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Certificate issuer: /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial: 2D1DBB72841013C35BC67E7B92EFC5430F614A87
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
Manifest number: B6
Signing time: Mon 21 Sep 2026 23:18:01 +0000
Manifest this update: Mon 21 Sep 2026 23:13:01 +0000
Manifest next update: Wed 23 Sep 2026 00:08:01 +0000
Files and hashes: 1: 871300497118DBA75FA9B46DE2D7D39663DBDE52.crl (hash: z8sZqlrs6rK9FHi2yB6OdTRVss/DCxaExIdbo0mPhYk=)
2: 3130332e3131372e342e302f32322d3234203d3e20313331363334.roa (hash: jhLjBnMm1fhbsjRhkAAaIjaX4J41EYic1BnBWo6KESI=)
3: 3130332e3131372e342e302f32322d3234203d3e20313331363233.roa (hash: Tln46/ulM0jeOxnleoQfL0KZfR8c6xYxi9yDZm65GwA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1d:bb:72:84:10:13:c3:5b:c6:7e:7b:92:ef:c5:43:0f:61:4a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Validity
Not Before: Sep 21 23:13:01 2026 GMT
Not After : Sep 23 00:08:01 2026 GMT
Subject: CN=B2FDF759EA4961499A42C4375576DD4C380DF8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:91:6b:3c:05:9d:31:f8:db:6a:07:4f:7c:
d5:c1:40:55:da:96:94:89:67:fe:a3:84:c2:06:09:
2d:28:10:0b:96:d0:94:1e:b8:ce:c1:14:f8:b1:30:
92:d8:d3:a6:50:26:2b:85:44:f9:68:2e:53:6c:be:
1d:fd:91:d0:fd:63:df:2c:0f:7d:a8:52:99:ad:65:
8e:38:91:f3:84:bd:6a:9b:e2:d5:67:61:e2:8f:06:
5f:39:91:2e:bf:22:b2:89:fe:cf:67:5c:06:4d:d2:
05:0f:e8:39:72:93:54:8e:c8:e7:db:25:f9:8c:c0:
8a:0d:f2:65:9b:f8:3d:fc:20:cd:17:75:5a:e0:a4:
89:30:28:49:e2:6f:a7:04:8b:f8:5d:4b:44:43:f6:
5f:12:9f:9a:66:87:a6:64:cf:e9:2b:18:c6:3e:ea:
08:9d:78:e8:38:a6:81:bd:92:a4:87:69:eb:e3:b6:
24:3a:37:30:ed:51:ef:ad:32:29:47:e5:1a:71:96:
f1:47:3e:e8:a7:ba:d6:a2:0e:53:7c:d9:0d:82:97:
09:44:58:f7:3e:04:41:0d:f7:d6:32:46:63:7c:ef:
04:d1:e7:11:9d:08:06:fc:b3:0d:b8:df:f1:11:3e:
c5:bc:f4:f7:05:cf:e0:44:b6:11:8d:6d:e9:a6:1e:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FD:F7:59:EA:49:61:49:9A:42:C4:37:55:76:DD:4C:38:0D:F8:DF
X509v3 Authority Key Identifier:
keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:58:64:c9:4d:1b:bd:c9:ff:af:e2:04:6b:99:81:43:7d:
8e:51:f7:8a:c0:9e:f8:df:45:56:e1:cc:7f:d9:52:2c:f6:cb:
64:c4:bf:56:19:4e:d3:0d:82:ee:14:4a:f5:cb:5f:c5:46:a1:
69:12:57:cc:3e:db:d4:a0:58:ee:4d:69:ab:5f:af:c7:cc:45:
48:0d:c5:71:a7:32:6f:f4:dc:b5:12:51:96:3f:2d:1c:84:df:
67:55:c0:3c:97:66:7c:89:2e:65:72:34:d1:8c:7f:17:8e:d9:
18:ef:dc:23:3f:03:8d:9f:c5:82:28:ce:c2:7c:64:02:0d:eb:
94:91:8f:47:bb:77:ce:e4:f2:19:bb:4e:25:29:98:56:f2:30:
29:9d:d3:51:68:78:b9:c2:00:39:e8:7f:61:c6:72:97:fc:6e:
00:c3:eb:9f:a7:dd:25:64:30:eb:6f:59:7b:46:2f:4a:84:e2:
c7:53:e9:b2:59:43:af:91:95:36:38:a6:16:47:92:74:0f:e3:
ad:6f:42:b0:bc:25:ac:d5:8c:7b:cd:f4:d3:0c:24:a1:d1:2a:
b9:35:a0:81:fb:e8:6c:db:34:1e:ee:26:aa:81:12:c1:e2:1b:
db:c0:af:2c:c3:31:78:90:74:75:e7:92:bd:22:d4:fa:bb:46:
db:84:ff:7d
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIULR27coQQE8Nbxn57ku/FQw9hSocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxMzAwNDk3MTE4REJBNzVGQTlCNDZERTJEN0QzOTY2
M0RCREU1MjAeFw0yNjA5MjEyMzEzMDFaFw0yNjA5MjMwMDA4MDFaMDMxMTAvBgNV
BAMTKEIyRkRGNzU5RUE0OTYxNDk5QTQyQzQzNzU1NzZERDRDMzgwREY4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuZFrPAWdMfjbagdPfNXBQFXa
lpSJZ/6jhMIGCS0oEAuW0JQeuM7BFPixMJLY06ZQJiuFRPloLlNsvh39kdD9Y98s
D32oUpmtZY44kfOEvWqb4tVnYeKPBl85kS6/IrKJ/s9nXAZN0gUP6Dlyk1SOyOfb
JfmMwIoN8mWb+D38IM0XdVrgpIkwKEnib6cEi/hdS0RD9l8Sn5pmh6Zkz+krGMY+
6gideOg4poG9kqSHaevjtiQ6NzDtUe+tMilH5RpxlvFHPuinutaiDlN82Q2ClwlE
WPc+BEEN99YyRmN87wTR5xGdCAb8sw243/ERPsW89PcFz+BEthGNbemmHpWJAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUsv33WepJYUmaQsQ3VXbdTDgN+N8wHwYDVR0j
BBgwFoAUhxMASXEY26dfqbRt4tfTlmPb3lIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1BFVFcv
MC84NzEzMDA0OTcxMThEQkE3NUZBOUI0NkRFMkQ3RDM5NjYzREJERTUyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzg3MTMwMDQ5NzExOERCQTc1RkE5QjQ2REUyRDdE
Mzk2NjNEQkRFNTIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TUEVUVy8wLzg3MTMwMDQ5NzExOERC
QTc1RkE5QjQ2REUyRDdEMzk2NjNEQkRFNTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYBlhkyU0bvcn/
r+IEa5mBQ32OUfeKwJ7430VW4cx/2VIs9stkxL9WGU7TDYLuFEr1y1/FRqFpElfM
PtvUoFjuTWmrX6/HzEVIDcVxpzJv9Ny1ElGWPy0chN9nVcA8l2Z8iS5lcjTRjH8X
jtkY79wjPwONn8WCKM7CfGQCDeuUkY9Hu3fO5PIZu04lKZhW8jApndNRaHi5wgA5
6H9hxnKX/G4Aw+ufp90lZDDrb1l7Ri9KhOLHU+myWUOvkZU2OKYWR5J0D+Otb0Kw
vCWs1Yx7zfTTDCSh0Sq5NaCB++hs2zQe7iaqgRLB4hvbwK8swzF4kHR155K9ItT6
u0bbhP99
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:13 2026 by rpki-client