
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ATT/VRjTaiHoQb_taL2Agyl1Nd1wiwU.mft
File: VRjTaiHoQb_taL2Agyl1Nd1wiwU.mft (raw, json)
Hash identifier: ErkzZU+C+mq8IBy8s3yyVMTwg/fLOZiJ4bhydbdjsMk=
Subject key identifier: 59:7A:D5:6B:BA:CC:F5:22:FE:4C:3A:D3:89:36:8E:46:4E:04:0A:F1
Authority key identifier: 55:18:D3:6A:21:E8:41:BF:ED:68:BD:80:83:29:75:35:DD:70:8B:05
Certificate issuer: /CN=5518D36A21E841BFED68BD8083297535DD708B05
Certificate serial: 0DB8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VRjTaiHoQb_taL2Agyl1Nd1wiwU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ATT/VRjTaiHoQb_taL2Agyl1Nd1wiwU.mft
Manifest number: 0DB8
Signing time: Sat 28 Feb 2026 22:53:39 +0000
Manifest this update: Sat 28 Feb 2026 22:53:39 +0000
Manifest next update: Mon 02 Mar 2026 22:53:39 +0000
Files and hashes: 1: VRjTaiHoQb_taL2Agyl1Nd1wiwU.crl (hash: L6aZXRld06yjZZza+CM1nNsXOdM//poqOqOZK6WOF+U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ATT/VRjTaiHoQb_taL2Agyl1Nd1wiwU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ATT/VRjTaiHoQb_taL2Agyl1Nd1wiwU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/VRjTaiHoQb_taL2Agyl1Nd1wiwU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5518D36A21E841BFED68BD8083297535DD708B05
Validity
Not Before: Feb 28 22:53:39 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=597AD56BBACCF522FE4C3AD389368E464E040AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:d4:21:f9:53:db:c2:21:31:e4:7b:17:88:
0b:0e:99:dc:06:36:8c:cd:49:c4:55:34:39:8d:28:
21:a6:88:7a:84:e9:d7:5c:c7:99:5e:ee:55:16:d0:
39:73:ac:9b:59:c5:e7:38:64:9c:57:20:a8:b3:0b:
38:42:18:ad:a3:f8:88:11:cc:4b:57:98:92:cb:dd:
47:4b:2c:50:e1:c3:a6:74:0d:a7:5b:10:b5:91:72:
c6:48:f3:6c:c8:2d:78:de:61:ec:0b:0e:66:41:5b:
bb:7c:23:b2:d7:9a:0b:57:65:63:2d:58:a4:e1:4e:
74:7a:9e:ab:09:c7:a0:68:68:91:8b:57:54:26:40:
35:ff:5f:ba:64:c4:74:23:2a:7b:31:80:ae:db:ef:
ee:33:1a:80:22:cf:57:8c:f9:9e:c4:3d:69:7a:0d:
35:fd:a6:75:82:c9:55:05:cc:c1:85:0d:4b:c0:80:
37:75:75:8f:5e:e7:53:ab:fa:5a:f8:48:0c:ed:47:
8b:d8:e0:ee:ab:b1:bc:d1:bf:2c:2a:14:4a:60:db:
6a:09:ec:57:b6:88:df:f6:0f:d4:20:8d:cd:68:a3:
59:77:61:ce:c0:5f:36:d4:99:34:f0:d5:c5:ae:f2:
a1:d4:e6:c8:f4:bd:82:cd:7c:b6:3f:43:e1:05:dc:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:D5:6B:BA:CC:F5:22:FE:4C:3A:D3:89:36:8E:46:4E:04:0A:F1
X509v3 Authority Key Identifier:
keyid:55:18:D3:6A:21:E8:41:BF:ED:68:BD:80:83:29:75:35:DD:70:8B:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ATT/VRjTaiHoQb_taL2Agyl1Nd1wiwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VRjTaiHoQb_taL2Agyl1Nd1wiwU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ATT/VRjTaiHoQb_taL2Agyl1Nd1wiwU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:45:73:66:84:bf:ed:cc:fd:b9:d5:34:36:a4:76:ff:d4:
c4:18:2f:ba:af:2b:f5:02:86:35:8e:64:77:94:df:cf:fa:16:
26:75:ac:07:e0:31:d3:50:cb:b0:c3:f4:97:f2:d9:0e:a0:a1:
28:ab:39:02:8f:42:af:53:fc:28:39:65:3e:f0:96:79:6e:6b:
06:bb:d3:70:b1:9f:e6:4d:28:d6:c4:94:fa:33:19:17:cc:e6:
3f:8d:a5:ab:4f:80:66:e8:ca:39:97:8b:01:0d:72:d9:53:d4:
65:56:a9:79:0f:0b:d7:78:05:54:b0:c5:24:b2:17:66:fe:cf:
71:49:5d:ae:bd:77:f0:7d:6d:56:dd:4e:a6:0e:21:e9:b7:a5:
dc:4d:14:f0:af:63:ce:4f:dc:9c:33:42:dd:46:c4:64:d9:53:
dd:20:99:d7:ba:4e:84:66:0b:d3:19:90:e2:bc:a0:2e:5e:c4:
be:5b:d7:6e:dd:f6:4f:1f:11:01:c8:14:90:63:b0:a1:36:33:
e0:01:ab:0d:fa:e1:75:c6:0a:e5:8d:16:88:ee:a0:fe:48:4a:
18:c3:a2:af:5f:2d:4a:02:51:a8:a8:bf:6e:06:bb:8e:3b:c9:
f0:43:cb:6b:5c:5e:ea:09:22:c2:9a:e6:f9:6b:e2:5b:2c:22:
a2:91:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:28 2026 by rpki-client