
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
File: iIdg03M-CxguqD1pd8rdCRhXZ7E.mft (raw, json)
Hash identifier: TfL00LSZsxxadqAdnHKr7K3DqL2fog6tgj7L6xjraf0=
Subject key identifier: 09:9F:1D:FD:24:82:9D:8B:A1:80:24:DE:7F:17:44:0C:49:76:EA:1E
Authority key identifier: 88:87:60:D3:73:3E:0B:18:2E:A8:3D:69:77:CA:DD:09:18:57:67:B1
Certificate issuer: /CN=888760D3733E0B182EA83D6977CADD09185767B1
Certificate serial: 13E0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iIdg03M-CxguqD1pd8rdCRhXZ7E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
Manifest number: 13E0
Signing time: Wed 05 Nov 2025 10:29:58 +0000
Manifest this update: Wed 05 Nov 2025 10:29:58 +0000
Manifest next update: Fri 07 Nov 2025 10:29:58 +0000
Files and hashes: 1: iIdg03M-CxguqD1pd8rdCRhXZ7E.crl (hash: LnK0nRcNPjjYQhE3HfN6hOYTc3LM58KAccHuLQ+Oit8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/iIdg03M-CxguqD1pd8rdCRhXZ7E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5088 (0x13e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888760D3733E0B182EA83D6977CADD09185767B1
Validity
Not Before: Nov 5 10:29:58 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=099F1DFD24829D8BA18024DE7F17440C4976EA1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:b3:8c:50:67:2c:8b:92:15:90:97:ca:c9:
bb:97:eb:a5:a3:c2:e8:de:5d:9f:32:04:71:96:0c:
fb:d8:26:59:dd:87:23:40:b6:f1:53:28:4a:bc:3d:
dc:5e:27:93:8b:80:24:d8:ed:59:82:c5:4a:65:5c:
3b:83:02:b7:78:72:08:d0:0d:5c:06:8c:f8:5d:00:
5d:2b:e8:ee:18:05:e5:81:3c:5b:cc:8b:ce:d3:42:
18:a7:5d:03:59:67:e3:d8:83:1a:1b:ff:d3:8d:59:
13:9f:6f:8a:ff:77:85:3d:80:44:c4:5c:97:42:70:
8b:74:79:41:42:bc:1f:3c:67:e1:93:ba:6f:c1:77:
2d:21:be:69:e7:81:aa:ac:a7:00:19:97:11:1d:ea:
21:b9:2a:6f:1a:36:5c:5c:e9:bd:ab:4f:22:ea:c3:
40:31:51:e2:91:f4:fc:f8:fb:4d:aa:ab:41:9f:92:
d0:ef:cf:1b:6e:21:58:d3:57:fa:4e:c6:7a:de:d5:
98:e7:b3:c6:3e:93:b8:37:a2:30:4e:8c:5a:ed:82:
ec:6e:f8:5a:13:4f:2e:5a:d8:f6:c4:cd:3c:99:47:
57:72:03:58:42:6c:da:0d:87:fc:76:b5:e8:f9:f2:
ff:f7:51:19:b1:73:4b:a2:03:d5:53:5d:b3:7b:0f:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:1D:FD:24:82:9D:8B:A1:80:24:DE:7F:17:44:0C:49:76:EA:1E
X509v3 Authority Key Identifier:
keyid:88:87:60:D3:73:3E:0B:18:2E:A8:3D:69:77:CA:DD:09:18:57:67:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iIdg03M-CxguqD1pd8rdCRhXZ7E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOOBIO/iIdg03M-CxguqD1pd8rdCRhXZ7E.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:2a:1c:9c:91:65:78:8e:6b:b8:c3:ce:e4:2d:7c:ef:e9:
be:a7:35:0a:24:46:99:6d:02:18:8b:e3:bc:c8:b0:3e:e8:9c:
ef:ae:91:45:16:0c:b7:92:d2:df:f5:19:5c:0e:62:7c:04:29:
97:58:41:5c:9e:38:30:9f:7d:81:0e:e5:73:e5:57:27:00:3f:
27:fd:c3:2d:2f:c0:62:85:5a:7d:74:8e:1d:f1:c2:f0:a2:de:
1a:2c:cf:15:99:cb:7f:6b:cd:66:32:79:7a:38:9b:3a:b3:1d:
4c:fb:76:20:30:1e:4f:14:c3:7c:91:2b:3c:69:7b:b7:aa:27:
11:a8:c2:79:ea:71:3d:67:25:3f:2e:b5:a9:a0:49:40:6f:09:
d0:1d:41:c8:de:7b:53:b0:4f:d3:ba:db:db:9c:ad:55:9c:4a:
94:4e:1d:6b:10:6c:fa:94:f7:80:ac:81:67:dd:7b:fa:ef:b6:
41:d4:36:17:ac:08:ea:70:c1:b3:fd:b1:89:68:b9:02:49:b5:
37:a0:a4:66:4c:c5:05:48:d6:d5:f3:12:f7:3a:87:9a:29:99:
e6:6a:d8:af:d9:7d:40:3a:ad:a0:9e:b1:60:d7:7f:54:36:f3:
2c:d5:fe:a4:09:cf:90:84:7c:2f:e9:da:7a:fa:36:30:0d:28:
46:eb:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:53:20 2025 by rpki-client