
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft
File: e4JX_9x80ctBlhKc1ASTNSvIO7k.mft (raw, json)
Hash identifier: l77x/DTeOLDP0ARbLIV6D2YrNcfkuKZE9cyn7Ipbj0c=
Subject key identifier: BF:F9:66:CC:34:DB:9F:8E:2C:AE:59:69:35:E3:1A:9A:DD:5D:70:87
Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
Certificate issuer: /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Certificate serial: 04A6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft
Manifest number: 0496
Signing time: Wed 05 Nov 2025 09:59:05 +0000
Manifest this update: Wed 05 Nov 2025 09:59:05 +0000
Manifest next update: Fri 07 Nov 2025 09:59:05 +0000
Files and hashes: 1: S55r6kzbFl_9kG_KyHl41L24iIA.roa (hash: BRyUYGJUIL7sDlzEDuo2ThCsr5ZMxav72B4Ef7gBv84=)
2: e4JX_9x80ctBlhKc1ASTNSvIO7k.crl (hash: TdYMOHLxZ+Xk5Ksqrn3FnP9BWITKPaW8wwr4G/DanE0=)
3: uZDv-R984fA-T8r5VC15UtK0qhA.roa (hash: dXDbV1Ymv0B9+PB/iegmIUpXPv29HrBJ/3BrRjm8PKY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Validity
Not Before: Nov 5 09:59:05 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BFF966CC34DB9F8E2CAE596935E31A9ADD5D7087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:80:b7:5b:78:9c:3e:48:9e:3c:ca:f7:cf:
66:5b:63:f0:47:3d:88:8b:c4:77:32:5d:70:85:b9:
9e:83:35:83:60:17:cb:96:8e:d5:ec:bb:dc:67:50:
42:9d:86:bf:b5:e1:10:0d:fe:1d:0e:12:ed:77:3d:
d3:34:01:68:d0:fc:2a:0e:73:b6:d6:a1:80:72:2d:
89:a7:46:58:93:21:a8:dc:8d:8e:23:db:e2:cb:6c:
29:fe:f2:e5:22:a2:f6:f3:24:41:71:0b:51:34:28:
7f:08:8f:7b:02:7a:21:01:0d:ad:fa:01:3a:1d:5c:
74:1a:4f:9a:7b:63:07:20:a9:32:d7:4f:28:f5:fd:
10:80:80:62:d0:3a:85:66:2a:32:0d:22:f2:a2:64:
12:3b:10:52:d8:32:f8:18:8d:54:9f:1c:db:b3:39:
0d:0d:ae:7c:1f:06:06:4a:9c:d4:de:c5:12:74:0d:
ed:01:2a:0f:49:a1:8d:10:5e:77:4f:8c:42:c8:83:
db:5b:bb:86:09:ec:9a:72:6e:e0:49:c6:cd:30:1a:
9c:42:f0:3a:a3:d1:d1:cb:c9:53:3b:a4:39:3d:ba:
22:eb:b2:7f:ea:54:6b:08:51:d3:11:a3:3f:1e:1c:
28:f5:24:84:60:0a:55:7e:db:67:d3:01:6e:c1:37:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:66:CC:34:DB:9F:8E:2C:AE:59:69:35:E3:1A:9A:DD:5D:70:87
X509v3 Authority Key Identifier:
keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:de:8a:73:c7:e2:24:3e:06:e1:29:26:10:12:38:f4:56:2f:
de:86:51:17:e9:38:0b:d0:37:39:05:62:4c:b5:d3:4e:d9:24:
e6:a6:dd:ec:32:b7:51:b1:45:a5:c2:b2:0d:d5:9e:ef:a6:6e:
40:0b:53:8d:6f:d3:b9:2c:d8:43:4d:dc:b5:57:27:6f:7a:83:
8b:87:fa:28:5e:1d:35:dc:68:64:47:23:e4:23:d6:66:f3:fc:
dc:6c:e0:1a:e2:ca:19:26:9e:bb:eb:ef:37:aa:28:69:61:8e:
30:1d:3d:5a:cb:ee:1c:ea:f5:41:55:f6:56:fe:00:e2:8c:6c:
c4:8a:e8:e0:fe:80:f4:2c:7a:1a:b4:5b:b0:a3:3c:45:28:47:
98:ed:cb:46:05:5b:67:a6:a1:4c:61:cb:fa:36:ab:77:61:d7:
2f:3b:d5:4b:80:17:52:10:7b:c3:50:1e:cc:35:76:be:d3:60:
f0:95:71:a0:52:0c:c4:77:2e:4d:39:02:6c:1b:ec:7d:73:65:
aa:bb:48:d4:d1:d0:31:b8:5e:0d:2c:cb:ae:e8:19:b6:44:4b:
d2:8e:d5:88:90:c5:e9:31:3c:01:f2:77:8b:80:70:d0:b6:10:
7d:0c:c4:40:61:d8:19:09:83:b6:24:4c:08:13:dc:a1:77:1d:
fa:54:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:55 2025 by rpki-client