
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
File: 0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft (raw, json)
Hash identifier: i7dp5zS2dxVDF1q9ojfQ6gWpgaLWYk1pU8n5mCkjUaw=
Subject key identifier: 1D:72:6A:B7:E8:53:E6:76:27:17:C2:6A:F6:CD:08:61:3C:F5:47:51
Authority key identifier: 08:26:34:78:70:AE:5C:6B:60:D1:02:9A:54:1A:B2:E6:89:6C:F5:E9
Certificate issuer: /CN=0826347870AE5C6B60D1029A541AB2E6896CF5E9
Certificate serial: 1B225A6B2991D4CDDA8DE4245A683FA273581742
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
Manifest number: B5
Signing time: Mon 21 Sep 2026 22:48:01 +0000
Manifest this update: Mon 21 Sep 2026 22:43:01 +0000
Manifest next update: Wed 23 Sep 2026 00:10:01 +0000
Files and hashes: 1: 3130332e3131352e3130382e302f32332d3234203d3e20313532313739.roa (hash: GnqSOqHIKRnSUe48yc8wA/3RSL3OwN91aIq6irhNf34=)
2: 323430303a656265303a3a2f33322d3332203d3e203633393038.roa (hash: yiaDMH+RG+1Oi2ZJm9NkMQbKlRz53qXOlLRWHQMDjvY=)
3: 0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl (hash: PoH/bjK5mtF+gSNHeLYXtQ7vuHMXAvE5N5khJIk8CEI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl
rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:22:5a:6b:29:91:d4:cd:da:8d:e4:24:5a:68:3f:a2:73:58:17:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0826347870AE5C6B60D1029A541AB2E6896CF5E9
Validity
Not Before: Sep 21 22:43:01 2026 GMT
Not After : Sep 23 00:10:01 2026 GMT
Subject: CN=1D726AB7E853E6762717C26AF6CD08613CF54751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:4d:0d:27:65:af:55:db:58:3a:78:69:c6:
46:e2:f2:5c:6f:41:1b:9b:90:e6:73:09:f3:3e:e1:
74:ed:42:42:91:82:52:0b:52:60:17:9d:b1:5d:9a:
c6:49:fc:d8:b3:08:87:ed:90:88:b8:03:c7:33:59:
c9:92:1a:6a:8e:92:32:5e:43:4c:33:c2:bb:be:80:
19:3a:cb:99:30:72:46:3f:b5:b1:a1:21:4e:cb:9f:
e9:44:50:4e:64:c6:06:cd:db:bb:04:17:21:9d:ec:
85:86:b8:0c:e5:5a:50:2d:05:0f:c7:5c:39:15:20:
46:03:95:04:a8:dc:66:48:1c:bc:68:f7:22:a6:64:
6c:d0:2b:a8:5b:dd:81:b1:8d:3e:a6:4e:51:86:19:
1f:f3:d2:f2:a1:c9:5c:a5:95:75:0f:76:9d:43:30:
97:d2:4c:c5:a1:d0:1b:66:9f:d5:84:a1:66:9f:96:
0c:be:c7:f9:8e:de:de:76:0b:ba:64:6a:34:0e:af:
0e:bb:48:db:1f:73:f4:9c:fd:d2:8b:c6:4f:77:da:
20:f0:05:69:07:04:69:73:77:1e:f8:8a:78:82:5f:
eb:98:4a:22:23:c9:7a:b6:35:98:52:a7:5b:b6:62:
72:c1:8b:bc:65:92:24:cb:d8:6b:62:3b:b6:a1:33:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:6A:B7:E8:53:E6:76:27:17:C2:6A:F6:CD:08:61:3C:F5:47:51
X509v3 Authority Key Identifier:
keyid:08:26:34:78:70:AE:5C:6B:60:D1:02:9A:54:1A:B2:E6:89:6C:F5:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0826347870AE5C6B60D1029A541AB2E6896CF5E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUCD/0/0826347870AE5C6B60D1029A541AB2E6896CF5E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cd:87:6f:45:7a:76:63:a6:4c:a7:0e:e4:ec:fe:0c:ac:dc:
83:1b:6f:5f:2b:3d:4f:60:75:ba:ae:d0:0b:e4:77:0d:d8:5c:
b4:d8:08:c8:4b:c9:6d:c4:d9:59:55:33:5a:ff:e9:7b:eb:98:
72:93:db:d2:b7:1e:cc:37:16:24:05:68:7d:c6:28:36:8c:32:
94:5a:f2:b4:68:aa:20:1d:0d:b6:1d:4c:c1:bb:bd:8c:4b:c2:
16:80:5f:0f:4a:bd:14:2f:43:69:15:22:a8:7f:9b:98:d3:4b:
7d:a3:89:21:72:66:62:98:e1:b8:ff:31:d9:8a:bb:09:02:7b:
c4:5f:1d:6a:10:35:aa:5d:43:ac:88:7f:4e:79:b3:9d:99:5e:
99:75:5f:95:8b:20:70:e8:c5:2f:aa:d8:00:c9:dc:51:ac:af:
57:8e:a3:04:32:bc:a0:ba:dc:cf:d6:4f:f6:04:33:1f:97:d9:
7a:7a:84:ec:28:59:cc:36:99:d4:e5:af:c5:bb:f5:06:c6:6a:
3d:36:09:a3:08:8a:a3:e3:53:f6:81:cd:1a:cb:4b:8b:fe:9e:
d3:c6:c9:34:d5:3f:7a:47:9e:96:6e:6e:15:d7:ee:11:29:cd:
49:77:9d:94:12:08:a2:0a:3a:05:e7:45:b9:c3:c2:db:74:68:
3d:35:d5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:15 2026 by rpki-client