
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
File: KQF6QhbLesJUItjytuveOXjBS-c.mft (raw, json)
Hash identifier: 3ysU7DxTYeNttITrdf2ESYAcPLGyXPCeHKUtwHUIxKk=
Subject key identifier: 7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17
Authority key identifier: 29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7
Certificate issuer: /CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
Certificate serial: 0239
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
Manifest number: 0238
Signing time: Fri 17 Apr 2026 02:33:00 +0000
Manifest this update: Fri 17 Apr 2026 02:33:00 +0000
Manifest next update: Fri 17 Apr 2026 08:33:00 +0000
Files and hashes: 1: 8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa (hash: 5xd0ZvP39RbAt2K0chW0V9e6/aVioqMYr7abYJ2trW0=)
2: KQF6QhbLesJUItjytuveOXjBS-c.crl (hash: ruMYImj50QuedUPMkkdeUPRCdX2Shfol6AM+mOhasAQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 08:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
Validity
Not Before: Apr 17 02:33:00 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7A1F7A8467004DE364991A45B9A5DA8E67C1AD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:28:2a:6c:31:ba:3c:a5:ca:bb:e8:75:be:
0c:aa:bb:9b:01:5c:ae:5c:7a:34:92:8b:8c:2e:73:
4b:35:eb:94:d8:84:a7:f0:9a:fb:c4:00:00:a4:26:
50:5e:be:cd:2b:a6:79:5c:94:df:42:0f:d2:64:99:
22:75:98:63:cd:00:17:9e:17:3a:52:22:3a:ce:0f:
53:3d:7b:46:ca:e6:52:d8:f5:ae:12:ca:e7:ae:f1:
93:79:90:a9:bf:7f:7a:d2:5e:db:77:11:92:52:11:
68:73:99:8f:a5:ff:c5:6e:8a:e1:a7:57:52:87:a7:
02:af:9d:7d:09:61:6f:a7:a5:07:26:65:96:f5:f1:
be:fc:c6:30:59:e6:81:c2:f2:c6:30:f4:21:92:e4:
42:83:17:ec:f7:d8:3e:f5:ed:64:35:ee:7b:92:da:
50:fa:b2:9e:44:36:31:91:06:80:a4:5b:1c:db:f4:
df:54:7a:24:09:97:04:88:1f:94:1d:be:26:9e:5c:
59:b7:6f:1e:e6:ad:ae:0e:b5:c4:53:62:ac:a8:ea:
94:2a:ce:32:68:cb:28:7f:bf:9b:75:0f:9f:fe:46:
a7:03:1c:ec:7a:2b:99:dd:35:62:a9:0f:ad:b0:17:
f4:5b:5b:48:23:34:6b:bc:cc:35:cc:9a:6d:a8:c4:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17
X509v3 Authority Key Identifier:
keyid:29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d1:21:28:d1:3a:3a:3d:a1:a0:b4:ce:17:b4:92:a6:a6:38:
72:90:7c:ac:8b:a9:2c:fe:0f:6e:ea:d5:35:ff:c4:fa:29:02:
bd:06:8d:08:fb:d6:e9:70:c3:c1:bb:83:7d:ee:50:6e:69:91:
ba:55:33:a8:72:87:4c:60:71:a1:32:fc:74:86:d4:a3:a1:19:
03:84:8f:92:26:b5:23:8e:a8:70:74:68:84:fa:82:4c:e7:d1:
e1:b9:f8:37:cf:3a:c7:c1:b4:05:a7:e5:bd:bd:2d:fe:e3:af:
02:c4:89:14:5b:df:96:61:f7:09:5b:3e:73:ee:8c:15:6c:7c:
54:7d:34:c5:ac:ef:82:a2:de:70:51:4e:d8:85:d7:6c:44:78:
d2:73:2f:16:88:23:43:8d:15:5f:e6:df:38:fb:d6:f0:85:05:
e7:6d:15:08:93:f1:40:fc:19:dd:57:dd:62:b2:b8:8e:90:e2:
49:a9:19:e8:78:ca:8a:8e:f1:68:2a:ba:81:25:b6:93:37:27:
36:3d:a0:fb:ad:eb:25:08:18:a0:32:35:07:16:f9:11:de:c2:
0d:33:52:12:b4:e6:23:3f:b1:74:6e:49:4c:0b:11:1b:dc:c5:
84:90:28:d9:ec:87:99:be:cf:13:b9:82:24:e9:e1:a4:bc:2d:
0b:c1:0f:ec
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkw
MTdBNDIxNkNCN0FDMjU0MjJEOEYyQjZFQkRFMzk3OEMxNEJFNzAeFw0yNjA0MTcw
MjMzMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdBMUY3QTg0NjcwMDRE
RTM2NDk5MUE0NUI5QTVEQThFNjdDMUFEMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtdCgqbDG6PKXKu+h1vgyqu5sBXK5cejSSi4wuc0s165TYhKfw
mvvEAACkJlBevs0rpnlclN9CD9JkmSJ1mGPNABeeFzpSIjrOD1M9e0bK5lLY9a4S
yueu8ZN5kKm/f3rSXtt3EZJSEWhzmY+l/8VuiuGnV1KHpwKvnX0JYW+npQcmZZb1
8b78xjBZ5oHC8sYw9CGS5EKDF+z32D717WQ17nuS2lD6sp5ENjGRBoCkWxzb9N9U
eiQJlwSIH5QdviaeXFm3bx7mra4OtcRTYqyo6pQqzjJoyyh/v5t1D5/+RqcDHOx6
K5ndNWKpD62wF/RbW0gjNGu8zDXMmm2oxOGXAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUeh96hGcATeNkmRpFuaXajmfBrRcwHwYDVR0jBBgwFoAUKQF6QhbLesJUItjy
tuveOXjBS+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUUlTREEv
S1FGNlFoYkxlc0pVSXRqeXR1dmVPWGpCUy1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9LUUY2UWhiTGVzSlVJdGp5dHV2ZU9YakJTLWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9RSVNEQS9LUUY2UWhiTGVzSlVJdGp5dHV2
ZU9YakJTLWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0tEh
KNE6Oj2hoLTOF7SSpqY4cpB8rIupLP4PburVNf/E+ikCvQaNCPvW6XDDwbuDfe5Q
bmmRulUzqHKHTGBxoTL8dIbUo6EZA4SPkia1I46ocHRohPqCTOfR4bn4N886x8G0
Baflvb0t/uOvAsSJFFvflmH3CVs+c+6MFWx8VH00xazvgqLecFFO2IXXbER40nMv
FogjQ40VX+bfOPvW8IUF520VCJPxQPwZ3VfdYrK4jpDiSakZ6HjKio7xaCq6gSW2
kzcnNj2g+63rJQgYoDI1Bxb5Ed7CDTNSErTmIz+xdG5JTAsRG9zFhJAo2eyHmb7P
E7mCJOnhpLwtC8EP7A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:43 2026 by rpki-client