
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft
File: TwAMtt3TdIem3h9-rb2hJwjrLBk.mft (raw, json)
Hash identifier: tA70W4lQf8mqHCzepvD124kyn7wk0KQeMFxznM4y130=
Subject key identifier: 6B:A0:B4:DA:65:03:A1:53:2D:53:60:C1:8E:B1:A3:2E:BA:A6:64:00
Authority key identifier: 4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19
Certificate issuer: /CN=4F000CB6DDD37487A6DE1F7EADBDA12708EB2C19
Certificate serial: 02AA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TwAMtt3TdIem3h9-rb2hJwjrLBk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft
Manifest number: 02A7
Signing time: Sat 18 Apr 2026 05:32:53 +0000
Manifest this update: Sat 18 Apr 2026 05:32:53 +0000
Manifest next update: Mon 20 Apr 2026 05:32:53 +0000
Files and hashes: 1: TwAMtt3TdIem3h9-rb2hJwjrLBk.crl (hash: yNRNHmjt8+7u1NKQhUj8hiikG55nXK+fcG73J8hqOlI=)
2: _d-jZUiEDfO83PbVIn2gqWW69UA.roa (hash: ugvANw5msTs2WUJu2szekovokCLPID5epRFPn6Vko5k=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/TwAMtt3TdIem3h9-rb2hJwjrLBk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F000CB6DDD37487A6DE1F7EADBDA12708EB2C19
Validity
Not Before: Apr 18 05:32:53 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=6BA0B4DA6503A1532D5360C18EB1A32EBAA66400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:5d:3b:a1:99:c6:fb:3b:7a:74:a4:7e:e8:
5a:72:42:8e:25:eb:10:33:c3:96:55:5b:d2:40:e7:
21:01:fa:e3:1d:64:7e:e0:b5:b8:7a:de:05:10:27:
88:10:c4:88:8b:76:b3:fb:b3:98:fc:c7:2e:45:ba:
3e:4d:f3:cc:5a:c3:45:13:4a:8c:de:59:79:85:6f:
c7:ed:14:0d:fb:9d:cd:4a:27:96:94:13:5b:2a:5a:
c5:37:40:d8:78:84:88:fb:2a:90:27:fb:70:2a:9a:
b3:ec:e5:34:d3:1c:48:37:6f:84:0b:e5:23:fe:b8:
e4:55:82:0c:70:55:91:9a:87:e1:9c:f5:5d:94:e6:
76:d7:b8:ab:c8:f5:06:ef:f8:66:29:51:6b:07:7a:
21:fa:de:af:82:f0:c2:5a:1d:3e:91:24:4e:d2:67:
2e:9a:42:d1:1d:72:1a:5b:dd:ee:c5:2e:54:c7:59:
df:c7:dd:5f:b4:1f:6f:95:76:d8:4b:e1:12:ad:2b:
08:8d:9d:2b:9d:7a:eb:da:f6:3e:d0:83:30:38:5d:
4c:4e:f1:fc:c3:30:9a:05:bf:fa:16:d7:1e:3c:fc:
bc:4d:83:8a:1f:5e:cb:5b:73:c2:47:72:92:83:5b:
15:57:fa:95:85:6c:8f:7d:22:03:31:ec:22:d8:39:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:B4:DA:65:03:A1:53:2D:53:60:C1:8E:B1:A3:2E:BA:A6:64:00
X509v3 Authority Key Identifier:
keyid:4F:00:0C:B6:DD:D3:74:87:A6:DE:1F:7E:AD:BD:A1:27:08:EB:2C:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TwAMtt3TdIem3h9-rb2hJwjrLBk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCSKY/TwAMtt3TdIem3h9-rb2hJwjrLBk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c1:c2:c2:8c:86:06:a6:83:31:0b:88:bc:dd:d7:81:4f:8f:
eb:12:1d:1c:af:28:1d:98:0a:47:16:ea:36:99:7c:cc:a2:6a:
60:39:85:c6:87:4c:0d:c3:b4:ce:3e:36:58:16:fe:53:21:f1:
6f:46:e6:2a:63:ad:47:a1:a7:5f:a9:e2:6a:cd:63:37:18:2e:
5b:d2:6e:28:15:d2:72:00:64:3b:3a:b5:96:a3:bc:f9:e7:be:
b0:e5:5b:64:77:77:11:8d:1b:2e:c0:e5:e5:80:aa:fa:a7:a1:
55:66:d7:0e:17:9c:0a:1d:94:43:0b:c1:14:49:58:20:cd:37:
81:73:5a:97:a8:50:6f:05:ec:cc:a3:37:cb:ec:64:eb:31:68:
6a:31:c3:25:fb:44:ee:4f:51:66:53:b4:47:cb:5f:e4:6d:c1:
da:96:b5:9a:f3:d1:19:59:31:31:e3:b0:77:77:01:11:8b:92:
30:45:7e:01:fc:39:4f:94:07:ba:9b:d1:b4:9e:6c:fc:07:f9:
81:01:6b:05:94:61:4c:ab:9e:30:98:14:ce:37:63:9b:57:8d:
30:a3:a8:ce:55:13:35:83:4d:00:81:65:2e:53:d9:7b:35:6d:
0f:3d:2f:8e:41:a5:93:04:57:df:14:21:4b:09:47:6b:91:67:
51:ed:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:42:20 2026 by rpki-client