
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
File: rCox8PS9dOdD4i_qMwTVw1CCB7w.mft (raw, json)
Hash identifier: 9+sLLlGVF2UhdPmbXyiiYWrU2W6JXF+XZm6pTNWZ5Uw=
Subject key identifier: AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C
Authority key identifier: AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC
Certificate issuer: /CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC
Certificate serial: 01C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
Manifest number: 01C2
Signing time: Wed 05 Nov 2025 09:29:35 +0000
Manifest this update: Wed 05 Nov 2025 09:29:35 +0000
Manifest next update: Fri 07 Nov 2025 09:29:35 +0000
Files and hashes: 1: oPrfY1U5F1ntqAXhMargLCzxI_Y.roa (hash: 4/vBBYGnOZJRjVv6nWxZDGx14YfNMc4USz9lstEYBhM=)
2: rCox8PS9dOdD4i_qMwTVw1CCB7w.crl (hash: Dlo/GpMNSQzpor7Eylswu0rRAU/Q1nDgfYS+5D43uuU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 20:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC2A31F0F4BD74E743E22FEA3304D5C3508207BC
Validity
Not Before: Nov 5 09:29:35 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=AFA363A84E8BB55D392D2C36ECE11A8D43CB908C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:f3:8f:ef:74:cd:ae:8a:0a:ad:07:a5:fa:
2c:23:7f:20:22:63:2a:5c:8f:ca:c5:6f:ca:dd:ab:
15:aa:7a:70:28:b2:49:27:06:d8:45:48:c3:99:c5:
7e:7e:2f:8b:c7:06:4d:95:ce:10:8e:90:15:18:f2:
c6:be:94:f8:6a:56:aa:c6:3f:d5:87:de:43:3e:e1:
89:b2:c7:4d:d2:4f:c0:f7:e0:2b:18:1b:d2:f9:bd:
27:41:7d:f7:1b:48:55:cb:2e:44:bb:3e:c5:cd:3a:
0e:e0:78:db:a9:9f:dc:1d:f4:48:32:ba:cb:c9:9c:
c3:66:ab:c3:71:00:89:25:e5:3e:5c:9d:e8:3c:14:
85:25:46:1c:22:30:e8:b1:45:94:5d:49:b7:a4:e2:
d0:2f:77:82:eb:d4:2a:2b:92:e5:04:2c:f4:83:9b:
ba:48:53:5f:48:e7:2e:33:11:41:e5:91:3c:04:84:
f1:96:8c:23:da:74:db:4d:dc:e0:9a:9b:33:04:95:
76:58:be:6f:23:69:05:58:63:c1:a0:6f:eb:a5:04:
8c:3d:a9:4c:5e:84:f9:6d:4f:56:50:83:7b:93:86:
2e:ee:2b:5d:a4:64:97:58:bc:43:6d:31:ee:6d:77:
40:0e:62:6b:0a:d5:ef:f4:4d:ba:bc:13:f3:93:b8:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:63:A8:4E:8B:B5:5D:39:2D:2C:36:EC:E1:1A:8D:43:CB:90:8C
X509v3 Authority Key Identifier:
keyid:AC:2A:31:F0:F4:BD:74:E7:43:E2:2F:EA:33:04:D5:C3:50:82:07:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rCox8PS9dOdD4i_qMwTVw1CCB7w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/rCox8PS9dOdD4i_qMwTVw1CCB7w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:6a:09:0c:fa:bb:fe:e1:49:5f:b2:c4:cb:59:3b:7f:45:02:
8e:09:bb:2a:73:a9:ff:c6:54:04:56:9b:a6:e4:44:78:e2:3a:
38:e4:9a:04:83:4f:32:93:0d:7e:28:99:99:6c:9d:97:79:79:
54:b9:53:9d:6a:92:08:64:89:9f:5d:2b:7e:f0:bc:99:4b:9d:
18:06:a4:0c:47:18:64:e7:87:92:c9:d0:e8:f5:6b:7d:f5:20:
8f:76:1e:e7:c1:dc:d3:42:0e:31:58:15:21:af:c1:3f:8e:9b:
68:7f:d4:ad:11:d0:a4:9b:70:d1:00:a7:d6:22:75:66:1f:9c:
af:63:2d:53:d5:04:35:ff:9d:8f:f1:e2:45:b9:31:52:7e:7d:
5f:70:0b:0e:8d:4b:e1:79:4e:6b:22:0d:fa:23:6a:2a:f7:83:
47:66:69:0b:6a:8d:ed:45:c7:e8:9b:31:2e:e0:a9:2d:91:09:
57:83:27:ce:d7:bd:82:4f:2d:89:cb:4f:df:6e:02:6b:47:3f:
bd:b6:e5:5a:a8:a7:ce:00:01:41:c3:3a:d6:91:0b:87:fe:e4:
f3:38:8e:05:e2:13:80:32:18:71:75:1d:93:5c:1f:5f:67:44:
64:63:02:0a:db:99:c2:46:ca:7b:48:c6:c1:61:75:24:a4:e2:
72:30:8d:cc
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUMy
QTMxRjBGNEJENzRFNzQzRTIyRkVBMzMwNEQ1QzM1MDgyMDdCQzAeFw0yNTExMDUw
OTI5MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFGQTM2M0E4NEU4QkI1
NUQzOTJEMkMzNkVDRTExQThENDNDQjkwOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzHfOP73TNrooKrQel+iwjfyAiYypcj8rFb8rdqxWqenAoskkn
BthFSMOZxX5+L4vHBk2VzhCOkBUY8sa+lPhqVqrGP9WH3kM+4Ymyx03ST8D34CsY
G9L5vSdBffcbSFXLLkS7PsXNOg7geNupn9wd9EgyusvJnMNmq8NxAIkl5T5cneg8
FIUlRhwiMOixRZRdSbek4tAvd4Lr1CorkuUELPSDm7pIU19I5y4zEUHlkTwEhPGW
jCPadNtN3OCamzMElXZYvm8jaQVYY8Ggb+ulBIw9qUxehPltT1ZQg3uThi7uK12k
ZJdYvENtMe5td0AOYmsK1e/0Tbq8E/OTuM9VAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUr6NjqE6LtV05LSw27OEajUPLkIwwHwYDVR0jBBgwFoAUrCox8PS9dOdD4i/q
MwTVw1CCB7wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FFTFcv
ckNveDhQUzlkT2RENGlfcU13VFZ3MUNDQjd3LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9yQ294OFBTOWRPZEQ0aV9xTXdUVncxQ0NCN3cuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQUVMVy9yQ294OFBTOWRPZEQ0aV9xTXdU
VncxQ0NCN3cubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGoJ
DPq7/uFJX7LEy1k7f0UCjgm7KnOp/8ZUBFabpuREeOI6OOSaBINPMpMNfiiZmWyd
l3l5VLlTnWqSCGSJn10rfvC8mUudGAakDEcYZOeHksnQ6PVrffUgj3Ye58Hc00IO
MVgVIa/BP46baH/UrRHQpJtw0QCn1iJ1Zh+cr2MtU9UENf+dj/HiRbkxUn59X3AL
Do1L4XlOayIN+iNqKveDR2ZpC2qN7UXH6JsxLuCpLZEJV4Mnzte9gk8tictP324C
a0c/vbblWqinzgABQcM61pELh/7k8ziOBeITgDIYcXUdk1wfX2dEZGMCCtuZwkbK
e0jGwWF1JKTicjCNzA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:55 2025 by rpki-client