
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
File: gwLeGTWY7cNiItkp-tZng2fWLiE.mft (raw, json)
Hash identifier: gP35M3PsxkRFUzUrM64pNLLJ6Q901QUNbPADkSsC+tg=
Subject key identifier: 75:E9:DF:9E:69:A1:B2:5A:4A:5F:73:92:30:1A:D3:BB:22:51:C2:64
Authority key identifier: 83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
Certificate issuer: /CN=8302DE193598EDC36222D929FAD6678367D62E21
Certificate serial: 1417
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
Manifest number: 140E
Signing time: Sat 28 Feb 2026 22:52:36 +0000
Manifest this update: Sat 28 Feb 2026 22:52:36 +0000
Manifest next update: Mon 02 Mar 2026 22:52:36 +0000
Files and hashes: 1: gwLeGTWY7cNiItkp-tZng2fWLiE.crl (hash: 1/tMcdoBe5tMhV8fpqgzxtLgdpJ1PA3xrNRXCL9K5VI=)
2: lucsKQ_k7erujKxt8qVBkhFkQUM.roa (hash: wgpw6zNUNOjZoXJPctyxIsDj2EpRRl95KQxfyXVX4go=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5143 (0x1417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8302DE193598EDC36222D929FAD6678367D62E21
Validity
Not Before: Feb 28 22:52:36 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=75E9DF9E69A1B25A4A5F7392301AD3BB2251C264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:8b:a3:9a:0f:af:5b:d0:39:19:63:2d:b2:
cd:e0:37:a8:0a:d9:bb:97:01:79:1c:aa:bd:82:40:
68:4d:18:e7:ea:b1:03:48:1f:c9:fe:70:bd:ad:83:
e1:14:a9:c0:be:a3:70:c5:11:f1:72:38:a7:87:b3:
a3:79:20:16:70:34:fe:47:c5:32:35:cc:85:59:c8:
8a:9f:2e:7b:22:6b:8a:f3:fb:ac:3c:33:11:af:98:
23:08:f9:52:5a:e2:10:d3:df:63:f6:cd:9d:36:80:
b2:68:de:1a:8a:53:f7:35:08:6b:29:c3:64:ca:61:
f1:0b:73:88:8a:52:39:b2:f6:1c:82:74:5d:37:43:
a3:e5:32:bd:28:c9:ae:26:c8:96:4e:29:c0:6c:c4:
89:eb:48:11:2f:73:46:35:de:10:72:72:54:90:61:
41:d9:72:39:5c:0b:ff:be:ac:d0:13:e3:b2:c3:05:
36:c8:e4:a2:1e:e7:5a:3a:1d:5c:a2:4d:3e:89:58:
ab:fd:c4:a1:cc:ca:62:76:d7:22:eb:74:f9:d9:8c:
fb:c8:ad:22:81:6e:3d:e4:b8:da:bd:f0:eb:36:f3:
00:cb:2d:61:a9:b9:1e:f7:8c:d2:09:af:63:1b:e7:
c9:a7:3c:95:dc:df:3e:a8:58:0c:f9:3d:a6:b4:ce:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:DF:9E:69:A1:B2:5A:4A:5F:73:92:30:1A:D3:BB:22:51:C2:64
X509v3 Authority Key Identifier:
keyid:83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:53:ac:69:93:4c:6e:f8:80:72:76:51:f8:72:1b:e8:a6:f8:
d2:0f:e6:ed:a3:ba:9c:28:20:85:c3:a7:74:e5:60:8f:83:2e:
6c:0f:52:ab:5a:8b:d4:ce:a9:cf:14:78:f1:3a:5c:fb:dd:60:
a3:69:56:2e:25:1e:28:63:67:b1:f2:fb:e4:87:67:c6:f2:d0:
17:e3:19:68:89:cf:76:2c:fb:45:e8:29:b5:36:77:39:a1:27:
d6:4c:99:11:fe:40:ea:4a:c6:99:95:27:b7:0f:0f:a3:d5:4f:
ff:15:67:b4:44:8d:0d:8d:d5:ec:57:50:f2:6a:e5:6d:9d:0b:
fb:cc:e7:c0:5f:69:63:04:72:29:89:79:54:2e:22:83:e9:48:
c4:b8:87:91:24:b3:55:b9:87:fe:28:dc:8a:fa:97:a0:46:8e:
2d:b8:9c:40:45:6e:be:ff:9f:a6:63:bf:a3:bb:40:42:b2:75:
54:ac:24:6f:bf:3d:fa:71:47:ec:02:4f:cf:ac:8f:d0:21:32:
1b:cd:19:b9:3b:71:57:60:e0:b2:1a:93:3c:24:1e:33:3f:cf:
f2:b3:b8:3d:0a:41:18:03:99:bc:11:10:ef:72:b1:7a:b2:89:
74:76:75:ff:e7:9f:64:76:ae:74:b3:a8:47:cb:59:ac:b3:2c:
67:3f:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:49 2026 by rpki-client