
$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
File: 21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json)
Hash identifier: xtVjoIbYayCJxHBvVefVJz5veEQQmnV9TO0bk1vU4ws=
Subject key identifier: B9:EE:7C:9D:25:5E:C0:56:78:C6:61:A9:A0:B0:9C:E7:03:2A:39:50
Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Certificate serial: 2680762DC8C72988D920C35A70EEFBFF0EA6671D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
Manifest number: 2F
Signing time: Sat 13 Jun 2026 05:59:11 +0000
Manifest this update: Sat 13 Jun 2026 05:54:11 +0000
Manifest next update: Sun 14 Jun 2026 06:36:11 +0000
Files and hashes: 1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: 5cviOMAu7d0IP0rMli5kHgc3zBIa0rfrRgs8ZEbyzMY=)
2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:80:76:2d:c8:c7:29:88:d9:20:c3:5a:70:ee:fb:ff:0e:a6:67:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Validity
Not Before: Jun 13 05:54:11 2026 GMT
Not After : Jun 14 06:36:11 2026 GMT
Subject: CN=B9EE7C9D255EC05678C661A9A0B09CE7032A3950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:be:97:69:59:71:4f:1d:3d:8e:8a:b9:75:
96:41:06:24:2b:97:9b:f5:a1:b7:9b:a6:74:fd:6f:
98:a1:57:46:22:e6:b3:a8:b7:4d:40:61:9f:25:67:
a7:98:6a:13:ed:15:63:a4:8b:69:3b:d7:82:6f:89:
53:8a:20:12:34:06:0f:90:9a:ef:72:25:a8:1f:07:
6c:f9:00:17:27:31:b0:ec:ac:95:16:46:0b:09:43:
2c:40:be:e6:e8:5b:d8:a1:1a:bb:89:d4:94:de:c6:
f7:7a:da:32:24:af:66:8a:06:e7:cb:3b:47:b4:f2:
78:3c:a4:58:7b:8b:53:01:aa:06:f9:eb:51:0d:92:
7b:ed:c9:b5:26:ef:0e:cc:0f:62:a1:8e:c6:99:5d:
38:90:15:4d:84:ac:d1:e6:84:b0:10:c7:dd:91:b7:
1c:97:77:6e:35:6b:f2:88:b8:4b:f9:40:9a:1a:5b:
9b:14:c9:65:0b:6c:56:c4:f3:be:21:6d:22:91:c7:
b9:b2:5b:8f:23:6c:a4:73:27:72:74:52:65:19:3d:
2c:38:be:27:01:db:df:3e:1f:b1:74:24:f1:7c:eb:
15:40:72:fc:f6:77:d2:20:6a:cc:01:00:00:25:ba:
f3:f3:52:03:f1:2a:a3:97:3b:86:b7:fd:9b:0e:97:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:7C:9D:25:5E:C0:56:78:C6:61:A9:A0:B0:9C:E7:03:2A:39:50
X509v3 Authority Key Identifier:
keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:b2:b8:00:88:51:c2:ca:f3:79:4c:ab:ad:5e:d3:2f:32:
c3:7a:82:50:a5:f1:65:d6:d7:ff:39:fb:6c:6d:b9:73:79:19:
4c:f7:27:b3:46:be:74:24:60:dc:a7:cf:96:b8:20:f2:69:f6:
3f:25:9f:9c:e2:ef:8c:ec:4f:b3:cb:30:e3:4d:62:14:8e:f5:
79:aa:f1:0a:b2:fc:30:f4:a1:36:a6:8a:5f:b2:7f:c5:aa:87:
aa:c8:6a:71:c4:4d:cd:89:ef:08:a7:29:0d:b4:c9:5c:e9:61:
c4:bf:ff:b8:75:fd:4e:1d:44:f8:c3:32:9b:ee:94:d6:3b:8c:
a8:51:ad:1e:fa:a3:b1:f6:19:8c:f3:f5:7d:e7:44:f9:34:7b:
f0:b0:cc:b2:61:8e:93:c4:cf:3a:cd:40:f8:69:a4:90:cb:79:
d4:a6:a3:96:e8:69:c5:30:31:ea:e5:72:a6:f8:41:e2:30:15:
0d:f4:a1:cd:e5:86:66:35:89:16:cf:46:64:ef:63:70:54:2f:
2f:ac:56:32:bc:8d:6a:37:25:08:a3:72:ad:cf:4a:52:03:90:
53:76:de:ee:a9:38:17:55:52:91:47:64:41:02:6e:7a:36:aa:
84:8d:17:df:2c:8c:1b:33:38:48:6d:97:0c:65:52:b1:cf:20:
60:64:1e:b0
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUJoB2LcjHKYjZIMNacO77/w6mZx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5
OTdDNkU4MjAeFw0yNjA2MTMwNTU0MTFaFw0yNjA2MTQwNjM2MTFaMDMxMTAvBgNV
BAMTKEI5RUU3QzlEMjU1RUMwNTY3OEM2NjFBOUEwQjA5Q0U3MDMyQTM5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNX76XaVlxTx09joq5dZZBBiQr
l5v1obebpnT9b5ihV0Yi5rOot01AYZ8lZ6eYahPtFWOki2k714JviVOKIBI0Bg+Q
mu9yJagfB2z5ABcnMbDsrJUWRgsJQyxAvuboW9ihGruJ1JTexvd62jIkr2aKBufL
O0e08ng8pFh7i1MBqgb561ENknvtybUm7w7MD2KhjsaZXTiQFU2ErNHmhLAQx92R
txyXd241a/KIuEv5QJoaW5sUyWULbFbE874hbSKRx7myW48jbKRzJ3J0UmUZPSw4
vicB298+H7F0JPF86xVAcvz2d9IgaswBAAAluvPzUgPxKqOXO4a3/ZsOl2BzAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUue58nSVewFZ4xmGpoLCc5wMqOVAwHwYDVR0j
BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv
MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0
QkEzOTk3QzZFODIuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzIxQ0FBOTI5NDRCNzQw
MzFFN0IwNTI0OUIxRDg0QkEzOTk3QzZFODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPfrK4AIhRwsrz
eUyrrV7TLzLDeoJQpfFl1tf/OftsbblzeRlM9yezRr50JGDcp8+WuCDyafY/JZ+c
4u+M7E+zyzDjTWIUjvV5qvEKsvww9KE2popfsn/FqoeqyGpxxE3Nie8IpykNtMlc
6WHEv/+4df1OHUT4wzKb7pTWO4yoUa0e+qOx9hmM8/V950T5NHvwsMyyYY6TxM86
zUD4aaSQy3nUpqOW6GnFMDHq5XKm+EHiMBUN9KHN5YZmNYkWz0Zk72NwVC8vrFYy
vI1qNyUIo3Ktz0pSA5BTdt7uqTgXVVKRR2RBAm56NqqEjRffLIwbMzhIbZcMZVKx
zyBgZB6w
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:13 2026 by rpki-client