
$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
File: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft (raw, json)
Hash identifier: HKnaPoYUme3TEnije5tk1aajHdLdz0vjH7CXDQLZUt8=
Subject key identifier: 17:92:71:9B:19:87:74:54:2C:2E:EA:1E:5F:47:88:93:EA:26:1A:60
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial: 556E5D26444A8E58916D904873536D4A43DC3259
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
Manifest number: 2F
Signing time: Sat 13 Jun 2026 02:43:46 +0000
Manifest this update: Sat 13 Jun 2026 02:38:46 +0000
Manifest next update: Sun 14 Jun 2026 05:44:46 +0000
Files and hashes: 1: 3130332e3232302e3231382e302f32332d3234203d3e203138303431.roa (hash: BPfCiVG9HhUxKhDsiFl88DZrsgfiJtDmqkpGw4VSQe8=)
2: 68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl (hash: zZwoZCgB4vzdLm8HiWT81spC7zyZgRRHhHLfKXGaLkY=)
3: 323430313a6136303a3a2f33322d3332203d3e203138303431.roa (hash: W1whgs9nNrUE4RVKtECQcAsJLL/TFHZVPsexycz3Kms=)
4: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (hash: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6e:5d:26:44:4a:8e:58:91:6d:90:48:73:53:6d:4a:43:dc:32:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Validity
Not Before: Jun 13 02:38:46 2026 GMT
Not After : Jun 14 05:44:46 2026 GMT
Subject: CN=1792719B198774542C2EEA1E5F478893EA261A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:2e:64:c0:53:56:b6:98:76:f8:7f:40:6d:
4c:1a:60:d1:c1:0a:7d:ec:b1:2e:54:93:63:6e:43:
8d:dd:84:53:0a:43:21:ee:73:82:aa:eb:ee:55:f0:
12:6c:9f:ec:8a:40:97:7c:0c:32:57:5c:74:8d:0a:
3a:d8:98:67:d0:2d:e9:b5:c3:6b:4a:39:fb:e4:fd:
a5:9d:95:40:3f:fd:2f:6d:71:f9:d7:50:74:bb:c9:
1e:9d:2c:85:b0:a0:97:b6:ae:00:63:63:fc:0f:e2:
e4:2a:a4:3c:e9:ee:17:4d:f7:2b:98:20:c5:8a:cf:
dd:34:db:35:ba:46:b6:e6:54:d0:bd:dc:88:e4:37:
ec:22:e7:b1:ad:0d:b3:3e:cc:27:eb:93:a9:56:93:
5b:6a:e1:44:20:63:b1:8a:b3:fa:3e:08:d8:03:86:
2b:60:ac:ef:e3:e5:be:46:49:82:e8:da:05:4f:9c:
a0:c0:4c:67:4e:6c:84:72:10:4e:35:29:2b:29:5b:
0f:76:28:38:3f:0a:75:4e:e4:92:71:e7:f1:8d:50:
b1:0a:6d:fd:8c:d2:f1:99:83:7e:37:ea:0b:d0:2c:
20:92:7d:92:d7:f4:af:61:96:b1:4a:8f:3c:9d:dd:
16:f4:30:5b:c9:6d:1b:70:67:84:26:f2:e2:3a:61:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:71:9B:19:87:74:54:2C:2E:EA:1E:5F:47:88:93:EA:26:1A:60
X509v3 Authority Key Identifier:
keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ba:8b:f7:68:43:3e:08:1b:90:3c:69:aa:80:5a:af:02:a8:
45:96:2b:98:bd:97:ba:1f:47:68:29:43:0a:e2:60:6e:2c:15:
ea:47:8d:2f:f5:bb:13:5d:c6:4c:ac:b7:bf:34:c9:da:9e:85:
24:59:84:69:92:b3:94:39:be:e5:19:24:1e:d4:6a:74:91:96:
d7:9d:7c:df:13:62:68:e6:25:57:05:7c:d1:5b:58:a2:b6:16:
65:99:c6:1e:ad:6d:1f:68:97:9f:5b:49:83:79:a3:5a:b3:0a:
cb:51:ac:66:5b:bd:f6:21:d4:4e:d5:92:ec:2b:8b:02:a0:4f:
5d:43:ce:bc:0b:41:79:5f:7e:e4:b9:09:01:28:ec:4a:f0:ec:
da:b2:56:b0:7d:ee:7f:0e:e3:9c:43:ca:88:82:fd:a0:e8:bf:
cb:a2:a1:e8:02:42:3a:d0:a1:89:e5:19:2e:fd:7f:df:34:ee:
3f:b5:ca:6b:62:59:f2:7d:fc:34:f0:b3:b9:44:9c:10:1f:b2:
34:3a:b6:6b:ef:3f:4e:03:e7:c0:d2:92:5d:69:3d:19:b2:e8:
20:6a:27:18:6b:c1:86:b2:13:78:c9:33:70:ed:36:21:2a:e5:
7b:94:1e:9c:15:a2:4f:45:7d:54:0d:2b:0e:99:81:d9:7f:de:
55:8a:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:28 2026 by rpki-client