
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
File: TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft (raw, json)
Hash identifier: pNAk8r80Qcp2g1pIfQzMULggh9b9eEj0wjyicukab4Q=
Subject key identifier: D7:E8:B4:80:C4:C7:27:4D:FF:97:F4:BD:EB:57:C3:3F:84:91:C0:9C
Authority key identifier: 4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
Certificate issuer: /CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Certificate serial: 0DF1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
Manifest number: 0DE6
Signing time: Mon 02 Mar 2026 11:54:33 +0000
Manifest this update: Mon 02 Mar 2026 11:54:33 +0000
Manifest next update: Wed 04 Mar 2026 11:54:33 +0000
Files and hashes: 1: TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl (hash: eJJrdyJZaENogNdAM/iZMIXWw3dGwglnWgQ6kiZiJ4M=)
2: snAHs0ITH_XYDtljaq1F5MNbFhg.roa (hash: Ftw6S66K0ExrjZcPVKbM0s5z5qkQPI1+3FZoM1zFe7U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 16:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3569 (0xdf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Validity
Not Before: Mar 2 11:54:33 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D7E8B480C4C7274DFF97F4BDEB57C33F8491C09C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:fd:0e:fe:75:76:0d:6a:27:8d:10:c0:ba:
72:e2:63:52:46:07:b4:a7:77:ff:17:c3:8a:fe:4a:
ee:dd:00:b3:78:cc:46:fb:ca:d8:37:66:71:3b:b2:
e7:b8:8d:a7:5c:c8:56:6a:90:a2:62:43:21:22:0f:
b9:56:83:12:e6:78:7a:e2:fd:87:17:49:4d:be:6f:
1e:e7:24:68:e5:6b:5a:c6:43:4a:e1:48:66:43:ed:
24:26:55:b6:34:61:d9:79:21:8e:74:55:d9:aa:77:
a7:0c:3d:b8:a5:8f:9a:d3:f7:2d:c4:db:eb:47:bd:
d0:6a:fa:85:b5:c1:0a:19:cf:54:8d:54:76:f4:63:
0d:7f:b8:2a:ad:12:e6:ae:de:e1:a2:ba:be:23:57:
e8:1d:3e:82:7c:96:d4:58:44:86:86:29:f2:ba:61:
45:83:ec:63:62:d1:4f:65:cf:b5:7f:1d:94:fc:4b:
ef:22:65:f0:c4:d0:4a:7a:00:16:2f:ed:df:48:83:
1e:17:ed:b4:68:aa:74:5c:8e:7a:4d:77:64:37:5a:
30:36:85:57:8a:65:dd:8e:01:30:07:89:04:db:66:
c0:45:b4:f4:51:21:e7:2e:ec:9d:38:37:a5:a0:20:
04:ca:b3:82:69:34:91:2e:b7:4c:98:c2:5f:e8:0d:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:B4:80:C4:C7:27:4D:FF:97:F4:BD:EB:57:C3:3F:84:91:C0:9C
X509v3 Authority Key Identifier:
keyid:4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:7a:c6:b4:1e:9e:cd:ca:f2:38:67:42:f4:2a:96:bd:15:
f4:82:1c:14:cb:80:4b:f6:c6:5e:a2:75:c9:ce:d8:1b:e2:74:
e6:b7:da:7a:56:d2:5f:ce:20:a2:39:8e:b1:31:d8:ce:80:cf:
c8:f9:3b:ed:51:9a:2d:95:19:9d:01:2e:9d:f0:33:04:6d:50:
3e:08:83:f9:34:13:b5:01:08:cd:06:3d:13:31:e0:6c:26:49:
75:4b:13:b4:bc:5e:e1:c8:d8:0f:56:d6:b9:1c:3c:42:23:85:
33:43:d6:8a:b7:fd:ac:7d:0a:db:67:61:49:54:9c:78:92:00:
27:95:8e:fd:22:03:28:ce:1f:df:fa:fa:6d:a7:0a:87:d5:10:
6a:6b:51:97:80:bb:04:d6:de:98:61:af:44:9f:94:a7:31:be:
fd:f2:d2:a2:c7:6f:b8:37:fc:bf:b2:7d:c1:62:99:f5:e2:0c:
5b:bf:78:fc:93:cd:1c:e0:b1:8f:12:59:7e:27:dd:49:ff:bd:
c1:6c:e3:d1:5c:e0:e2:eb:de:88:94:a4:52:87:4a:53:23:3d:
c0:cc:45:f4:e8:3a:ec:d6:0a:94:77:22:95:4c:98:d6:53:f5:
e9:a1:f7:17:c5:8e:e8:ac:60:49:4a:33:9a:98:ef:c9:e9:b9:
60:45:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:06:26 2026 by rpki-client