
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
File: 639Ki3shDbkgjtWANXBF5Zcd4NM.mft (raw, json)
Hash identifier: av/MzijqjtQRKHHOlUf7YrySwDZ4UOAxbOMUVV0A5aI=
Subject key identifier: C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
Certificate issuer: /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Certificate serial: 0583
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
Manifest number: 0578
Signing time: Thu 16 Apr 2026 19:03:21 +0000
Manifest this update: Thu 16 Apr 2026 19:03:21 +0000
Manifest next update: Sat 18 Apr 2026 19:03:21 +0000
Files and hashes: 1: 639Ki3shDbkgjtWANXBF5Zcd4NM.crl (hash: XjLyb4Zw/6uSMGhhBwWtDFXxWOa3MOV08X5RmvPL8+4=)
2: ALxxmI-MtTvV7so9NokBSyZ9pNc.roa (hash: bfyUeHCmQJ48LfOm63XlAVSRh9tG9IAeNiGx7Io5itQ=)
3: Kt9aVSyn_wl64iWodFIOFpiQsOU.roa (hash: rn/LxYkXmXNCqvI4W3UBpA7ULgf6rQqP98Pfg+LZMgk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1411 (0x583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Validity
Not Before: Apr 16 19:03:21 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C6A29DDF6672B4B2BCE6751586815CB88C94C3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:fa:15:8c:15:9a:4d:1c:8b:ed:2f:a6:30:
71:6e:32:0a:3f:9e:03:fa:73:5b:3c:c1:6f:14:e8:
07:0c:56:1f:ee:4e:7e:71:31:a1:af:e5:b7:3d:c9:
ba:2e:17:47:e1:d0:f8:0e:22:06:73:6a:8e:5f:c4:
43:cb:58:6a:9a:a5:1f:08:b4:e1:bb:60:67:97:99:
93:b5:40:a2:41:02:0c:d3:99:cc:19:34:5c:4f:11:
d5:66:75:21:59:c9:34:34:d2:f5:ea:95:70:2a:9b:
12:bf:29:9a:66:58:be:b6:e6:61:56:10:ea:9e:87:
12:b4:44:1b:64:6c:a3:ad:8b:78:4d:4a:4e:fd:f7:
e9:a6:16:bb:20:7b:ac:33:37:49:bd:bd:18:b2:e6:
45:fe:8c:4f:08:e7:34:6f:b7:92:18:8f:74:1c:c9:
8d:11:e8:7a:b1:7a:ba:14:0d:5a:43:89:16:b6:75:
3f:5c:bc:c2:e7:13:53:47:12:1f:12:93:7d:90:bd:
3e:c3:6d:70:09:f5:e2:5f:5e:d0:03:49:6a:a9:8d:
07:7c:f1:2c:3b:a7:95:d3:09:df:93:b2:66:8e:2f:
06:30:cf:78:34:29:89:46:bc:f3:22:3a:b1:43:2d:
1d:71:8e:38:d8:67:db:b4:02:24:76:0f:76:15:e9:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A2:9D:DF:66:72:B4:B2:BC:E6:75:15:86:81:5C:B8:8C:94:C3:F3
X509v3 Authority Key Identifier:
keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b1:57:83:bb:c2:94:37:a5:2a:7c:91:a6:70:ec:dd:a7:f0:
0f:46:09:7f:5f:95:56:7c:10:b1:16:37:41:98:f1:28:92:14:
65:02:c9:02:02:b3:6f:f9:b0:43:0f:2a:d3:df:34:cf:17:8d:
79:a7:d0:ef:32:35:ab:2f:aa:ce:9a:5b:fd:c2:3e:e0:af:f3:
5b:06:10:1f:c3:5c:ee:05:9d:51:5c:df:05:64:d2:0b:7e:13:
8f:96:b7:04:2a:92:69:60:15:4c:c4:2c:9f:f4:ee:a1:02:6d:
a6:02:65:b3:a5:a4:75:3b:7d:8c:83:d1:f2:f1:8a:35:8e:90:
56:2c:69:e9:14:83:62:3f:b3:54:64:45:9e:12:e2:68:16:86:
27:6d:cc:6f:25:82:07:0e:8d:ba:97:18:e4:02:6f:fc:84:bb:
a0:ab:dc:38:d1:6c:af:ab:b9:2b:d5:bc:ab:af:0e:c9:17:02:
f1:8b:a1:dd:a9:be:db:c0:86:c4:2b:01:3d:7b:e3:57:c9:2a:
b9:8a:fa:f6:a5:b7:62:91:20:b5:1d:f1:34:f9:24:ec:8e:15:
3f:71:d4:4e:06:1f:8d:b9:b2:f7:26:44:7b:71:dc:b9:2d:91:
d0:f5:41:56:6b:ec:9d:4d:1c:25:82:0d:43:fc:26:e0:ef:3d:
9b:b5:b0:8e
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI3
RjRBOEI3QjIxMERCOTIwOEVENTgwMzU3MDQ1RTU5NzFERTBEMzAeFw0yNjA0MTYx
OTAzMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2QTI5RERGNjY3MkI0
QjJCQ0U2NzUxNTg2ODE1Q0I4OEM5NEMzRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv7voVjBWaTRyL7S+mMHFuMgo/ngP6c1s8wW8U6AcMVh/uTn5x
MaGv5bc9ybouF0fh0PgOIgZzao5fxEPLWGqapR8ItOG7YGeXmZO1QKJBAgzTmcwZ
NFxPEdVmdSFZyTQ00vXqlXAqmxK/KZpmWL625mFWEOqehxK0RBtkbKOti3hNSk79
9+mmFrsge6wzN0m9vRiy5kX+jE8I5zRvt5IYj3QcyY0R6HqxeroUDVpDiRa2dT9c
vMLnE1NHEh8Sk32QvT7DbXAJ9eJfXtADSWqpjQd88Sw7p5XTCd+TsmaOLwYwz3g0
KYlGvPMiOrFDLR1xjjjYZ9u0AiR2D3YV6chxAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUxqKd32ZytLK85nUVhoFcuIyUw/MwHwYDVR0jBBgwFoAU639Ki3shDbkgjtWA
NXBF5Zcd4NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTFdB
VENILzYzOUtpM3NoRGJrZ2p0V0FOWEJGNVpjZDROTS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvNjM5S2kzc2hEYmtnanRXQU5YQkY1WmNkNE5NLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTFdBVENILzYzOUtpM3NoRGJr
Z2p0V0FOWEJGNVpjZDROTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQCjsVeDu8KUN6UqfJGmcOzdp/APRgl/X5VWfBCxFjdBmPEokhRlAskCArNv
+bBDDyrT3zTPF415p9DvMjWrL6rOmlv9wj7gr/NbBhAfw1zuBZ1RXN8FZNILfhOP
lrcEKpJpYBVMxCyf9O6hAm2mAmWzpaR1O32Mg9Hy8Yo1jpBWLGnpFINiP7NUZEWe
EuJoFoYnbcxvJYIHDo26lxjkAm/8hLugq9w40Wyvq7kr1byrrw7JFwLxi6Hdqb7b
wIbEKwE9e+NXySq5ivr2pbdikSC1HfE0+STsjhU/cdROBh+NubL3JkR7cdy5LZHQ
9UFWa+ydTRwlgg1D/Cbg7z2btbCO
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:15 2026 by rpki-client