
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
File: bKW4t-CigcRnJiJG3wyFnfX4fx8.mft (raw, json)
Hash identifier: wtNwb9nDuiYieahfmfuO895tmh/XTGpRwxp7ZHy82bo=
Subject key identifier: D7:62:F2:FD:46:30:B4:60:04:B4:DC:69:56:A9:96:5F:50:00:63:37
Authority key identifier: 6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
Certificate issuer: /CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Certificate serial: 02E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
Manifest number: 02DD
Signing time: Sat 28 Feb 2026 20:52:49 +0000
Manifest this update: Sat 28 Feb 2026 20:52:49 +0000
Manifest next update: Mon 02 Mar 2026 20:52:49 +0000
Files and hashes: 1: OH2Rz9HO8kPVvreZrpurUQ336jA.roa (hash: eODlkAFjq8gkJ1On0NNiEuhzUFsVMl/aO2ee79E+X3A=)
2: bKW4t-CigcRnJiJG3wyFnfX4fx8.crl (hash: r/t1eZUlY7f8J9DF3LYa7SEhnVY7quGAoJfeoPvaKRk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CA5B8B7E0A281C467262246DF0C859DF5F87F1F
Validity
Not Before: Feb 28 20:52:49 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D762F2FD4630B46004B4DC6956A9965F50006337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:b7:8c:80:8b:3e:ae:56:61:8e:87:ba:af:
d9:44:2c:dd:ab:f0:fc:5c:87:fb:b0:d7:b4:1a:b8:
7f:84:9c:82:ae:e5:88:66:f9:2b:53:b3:2f:33:52:
85:5a:fc:34:3c:b1:e4:3f:c2:21:62:0d:8b:a4:67:
3d:43:42:00:73:e1:57:43:24:38:e3:76:3d:59:41:
00:4e:80:7f:e6:a5:c6:e6:7b:cc:20:72:09:76:b7:
59:5c:40:d3:be:09:63:f8:12:6f:0c:10:be:ec:ab:
f0:88:84:8e:6f:f6:87:64:cc:fc:0e:f1:85:eb:c2:
7a:c2:2f:fb:80:f6:5b:2a:25:86:14:ec:07:cb:e5:
29:ae:b3:89:7f:24:74:6b:a9:ba:66:b5:9f:03:b6:
03:67:35:3c:0a:42:4c:07:7a:45:38:c8:30:3a:3f:
7f:5d:81:01:6b:de:49:b9:51:06:2c:31:ef:cc:2c:
7b:31:2e:8e:0b:3c:d1:e2:9e:d6:4b:b5:ca:6c:0a:
54:d7:61:65:fe:5a:eb:4a:c3:e9:81:5f:e6:76:76:
b1:e5:d3:12:b5:7e:5c:2f:26:1d:ff:3e:27:73:74:
5c:8a:ca:56:73:f2:d3:68:4e:ff:60:9a:b3:3e:03:
b9:6e:44:77:09:d4:5e:b8:82:d0:cd:e2:60:43:30:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:62:F2:FD:46:30:B4:60:04:B4:DC:69:56:A9:96:5F:50:00:63:37
X509v3 Authority Key Identifier:
keyid:6C:A5:B8:B7:E0:A2:81:C4:67:26:22:46:DF:0C:85:9D:F5:F8:7F:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bKW4t-CigcRnJiJG3wyFnfX4fx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/bKW4t-CigcRnJiJG3wyFnfX4fx8.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c1:49:c2:73:ff:31:77:cd:db:d8:07:52:d9:0c:0f:3a:c2:
ee:a1:8d:79:03:a6:af:be:de:61:b7:7e:2a:07:78:63:ad:81:
96:4c:5e:80:43:cd:7e:92:18:1d:c8:0f:2c:3b:68:0a:e4:da:
42:78:40:f2:af:73:3e:42:50:b0:a7:2e:19:0a:b3:5d:da:f4:
6a:9f:dd:c4:60:44:01:77:55:d1:93:66:58:01:1d:1e:7b:52:
d0:5e:22:9b:fb:40:0a:ba:e2:92:b0:a9:9e:95:9b:50:7d:0b:
24:32:ef:96:fc:d9:dc:b3:95:5f:93:49:c1:4c:54:2e:77:e8:
08:e6:be:4c:d0:1f:f5:ae:ab:5d:93:92:68:f0:05:9b:ca:02:
8e:7d:1b:99:d7:d6:bb:fe:1c:7e:91:90:f5:58:ce:f0:55:66:
d9:78:f0:ba:2f:14:b5:1b:06:c4:96:72:72:0d:b8:74:1c:01:
24:67:28:1c:e7:7f:37:19:b4:67:c1:1f:7f:10:ea:70:85:5f:
d8:d4:ee:2e:d4:f2:4e:14:56:cc:6a:39:6b:1c:2d:55:13:85:
ba:06:81:48:bb:65:bf:8c:93:8e:f4:ed:f1:8e:50:2b:cb:5f:
3a:e8:60:7d:57:fa:38:4c:fe:2d:3d:61:ef:b5:4b:3d:c5:de:
cc:42:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:50 2026 by rpki-client