
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft
File: Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft (raw, json)
Hash identifier: tLb+PlR9kUXpb4nu0DbZmEJvWeizzXUHq8ozM3+YkBg=
Subject key identifier: CA:C4:81:81:B0:E5:07:27:7E:DA:EC:3A:7D:AF:D0:43:C4:B5:A1:DF
Authority key identifier: 1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA
Certificate issuer: /CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA
Certificate serial: 12CD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft
Manifest number: 12C6
Signing time: Sat 28 Feb 2026 22:53:23 +0000
Manifest this update: Sat 28 Feb 2026 22:53:23 +0000
Manifest next update: Mon 02 Mar 2026 22:53:23 +0000
Files and hashes: 1: DATqF1VlaSz-MapwlM-D2x6-R9s.roa (hash: KFAMqU+h9lvfvsG6l8JSi4EmMkRgSzLn3uRUvNMCpCc=)
2: Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl (hash: 508n4ZY3Y+9r5E43naZ2kzzCJGmJDlZq/jtHF4hPtF4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4813 (0x12cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA
Validity
Not Before: Feb 28 22:53:23 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CAC48181B0E507277EDAEC3A7DAFD043C4B5A1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:97:c5:02:67:60:63:5a:91:e8:d2:ff:49:
29:a3:25:d9:f2:8a:08:5d:a7:e3:ff:17:80:aa:ab:
ae:6f:f3:76:f5:26:c0:a9:17:85:d1:c4:fb:e5:69:
e1:80:dd:ad:01:13:59:9b:d7:b8:90:76:60:25:0a:
ee:17:c3:cc:96:0a:c3:22:74:c9:9c:36:b8:d2:fb:
f3:0c:12:98:6c:fc:b6:ec:4a:d5:9b:df:fc:58:e8:
be:90:74:3f:c3:5c:14:42:53:69:ba:07:3a:55:25:
04:0b:99:b2:0b:1b:19:d8:a7:04:59:19:ee:5b:71:
9b:08:b2:63:f4:e8:58:a6:31:ea:ee:a8:c9:ac:bd:
4a:ef:83:f5:f9:fb:c3:0f:6f:15:be:52:02:fb:0f:
a3:b6:ec:87:2f:d7:e5:33:71:ae:03:d6:52:17:6d:
0f:ba:e1:df:c8:e1:09:a8:9e:b2:6c:fc:83:df:3b:
0f:ac:e8:b4:28:9d:37:ab:1a:c3:c7:0e:32:45:61:
fe:76:37:7a:37:3e:32:f4:b3:c4:39:a9:13:dd:73:
7f:72:52:18:b8:50:a7:dc:19:f6:55:e1:df:2b:18:
81:ae:08:91:24:43:16:73:fd:ba:51:ab:1b:c8:88:
48:43:66:96:d1:45:a6:c1:03:40:b5:47:5c:13:09:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:81:81:B0:E5:07:27:7E:DA:EC:3A:7D:AF:D0:43:C4:B5:A1:DF
X509v3 Authority Key Identifier:
keyid:1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:67:f4:3a:12:1d:9d:b8:a3:85:ef:58:f4:ad:07:7b:58:b3:
75:1d:dc:64:c8:9b:92:ec:df:6b:2e:08:df:8c:58:e4:22:4c:
9d:35:9b:7b:d1:ee:e5:84:57:cf:46:b2:bb:4e:4c:ee:85:3c:
8f:a6:df:ad:e3:a3:22:ad:09:7e:a6:bf:49:d5:ca:0a:89:56:
f6:e3:5b:b8:20:a0:4d:19:ab:63:4c:07:c1:65:23:e7:c6:16:
dd:47:cf:1f:6c:e8:93:f7:d9:85:a7:4d:e1:11:5b:3d:fe:6f:
e8:e4:db:3c:eb:6f:d2:df:82:17:0e:8b:16:78:1d:e0:6f:c7:
fd:1c:3f:98:7b:2f:b6:f6:c2:e5:1e:dc:7c:5a:93:50:8e:a0:
7f:c1:b9:41:cf:9a:da:9d:1f:41:a3:66:39:85:58:f5:89:ee:
9d:6b:25:f7:8f:2e:f9:b9:ba:35:b8:1c:db:4f:3a:de:c1:d3:
dc:fa:87:9e:fa:dc:0b:9f:31:14:46:2d:e0:4f:7c:54:5e:a5:
60:6c:a8:e2:72:ea:0b:63:e3:18:18:34:0e:ee:3f:87:2f:57:
d2:ee:fd:3b:66:c2:91:cc:d9:74:bf:54:ec:46:07:9c:a8:47:
62:b5:8c:bf:1e:83:1c:1b:bd:06:34:04:ef:bc:85:10:30:4f:
93:8f:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:35 2026 by rpki-client