
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
File: THcKx8Jx2lspFcoBuVmI0EFPQHw.mft (raw, json)
Hash identifier: gmueuSQuY+V22FTAgMxXzPJ+V253EwydhD9GMdqS/3s=
Subject key identifier: 05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
Authority key identifier: 4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
Certificate issuer: /CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Certificate serial: 0158
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
Manifest number: 0154
Signing time: Fri 17 Apr 2026 05:04:03 +0000
Manifest this update: Fri 17 Apr 2026 05:04:02 +0000
Manifest next update: Fri 17 Apr 2026 11:04:02 +0000
Files and hashes: 1: BERQJ4SepOAwCHhrmQcXKMV6QAQ.roa (hash: xwBrwphP0dOcpDUF5PRZlihDX54NlAP4Th/uwoNWRpc=)
2: THcKx8Jx2lspFcoBuVmI0EFPQHw.crl (hash: Le0D1Sz4Zbay1vlMx8vjxwMseYu0636x+qe8Fgb7m28=)
3: qoAaFseApoYSt0Zi4KthZ1NyXu8.roa (hash: /k1L5O+d1APsTmlT54/61etHCnGdgGGXuj1TwFsFp0w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C770AC7C271DA5B2915CA01B95988D0414F407C
Validity
Not Before: Apr 17 05:04:02 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=05B63B0E8FCE1C5361B22FB87417DDA6E5B28D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:4c:b1:da:c5:51:53:77:f2:82:05:38:0b:
c2:c9:3e:79:2c:2c:49:53:6f:eb:ed:95:f9:b9:ec:
c0:b4:49:b1:31:da:b3:7f:dc:05:af:24:3a:72:f9:
61:41:6f:dd:03:f1:74:5c:ec:bc:97:0b:c4:d2:be:
61:02:f5:5f:50:cb:ec:ec:48:08:91:13:27:0b:42:
95:ed:95:ae:30:a6:10:25:0f:1d:96:91:f5:db:0d:
40:78:58:fd:7f:c4:31:d3:ed:d2:f5:96:43:7c:16:
6f:4f:05:80:99:6d:1e:2f:49:fd:78:2c:99:42:51:
b4:ee:9a:b6:b9:95:ca:ef:11:e0:4d:8b:60:40:da:
0d:57:aa:cd:e2:d0:54:43:35:3f:c0:cc:b2:ea:54:
35:7c:74:51:14:bf:f6:1f:82:a7:ef:3a:0b:ca:47:
b7:06:6e:1d:10:db:54:66:a3:68:f7:6d:97:f3:2c:
a4:a8:27:f2:f4:a4:f6:13:6f:6e:1a:a8:1d:cc:1a:
4a:52:e4:55:94:47:5d:66:dd:9c:9c:97:fc:89:56:
a9:a2:32:e7:51:7e:ad:12:34:79:6b:22:44:72:9d:
e8:99:f5:85:17:67:28:6c:be:3c:04:56:94:7d:fe:
68:6a:9b:c6:53:b7:d6:39:9d:7c:df:45:41:b4:a5:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:3B:0E:8F:CE:1C:53:61:B2:2F:B8:74:17:DD:A6:E5:B2:8D:4F
X509v3 Authority Key Identifier:
keyid:4C:77:0A:C7:C2:71:DA:5B:29:15:CA:01:B9:59:88:D0:41:4F:40:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/THcKx8Jx2lspFcoBuVmI0EFPQHw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/THcKx8Jx2lspFcoBuVmI0EFPQHw.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:45:36:9a:ec:46:f5:94:ac:41:4f:14:e9:20:73:12:d8:27:
3a:08:17:85:ce:84:05:5f:a9:c7:89:06:3b:ce:7f:91:aa:09:
08:78:ec:c5:b4:9c:4b:8d:99:a6:a3:35:63:7d:2b:77:08:6b:
f1:73:61:47:be:24:04:0c:e6:ee:ad:26:e4:51:8d:2a:db:06:
4f:cb:18:dc:9d:af:46:39:7f:6a:a6:0b:99:18:49:50:03:b5:
5b:34:71:be:7a:87:06:15:b0:9f:47:1d:45:9d:09:07:d0:51:
4a:bc:ee:66:00:e9:5d:93:99:0c:15:51:c3:c6:8e:8c:c3:f9:
f0:9e:41:5c:d9:a4:a1:e0:ea:89:51:8b:c3:41:bc:b0:33:ad:
f2:3e:eb:e4:ba:16:19:01:49:45:7f:c6:30:59:a5:6e:08:eb:
18:1f:9d:37:0f:59:77:ef:d3:31:ae:f6:45:ec:b9:ab:7e:14:
7b:47:d7:45:34:b6:08:ca:13:70:d2:26:ed:03:4d:98:95:58:
4c:12:36:97:cd:b4:9f:d4:a2:5b:2c:ec:0d:06:91:52:22:3a:
01:4a:68:fe:5f:b7:0b:da:63:d0:7a:90:a8:b7:b8:b0:d4:8d:
7e:5b:5c:e0:ab:d0:17:e5:62:16:06:26:fc:9d:9c:40:6b:0b:
62:da:38:c1
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEM3
NzBBQzdDMjcxREE1QjI5MTVDQTAxQjk1OTg4RDA0MTRGNDA3QzAeFw0yNjA0MTcw
NTA0MDJaFw0yNzAyMTAxNTMwMjBaMDMxMTAvBgNVBAMTKDA1QjYzQjBFOEZDRTFD
NTM2MUIyMkZCODc0MTdEREE2RTVCMjhENEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuukyx2sVRU3fyggU4C8LJPnksLElTb+vtlfm57MC0SbEx2rN/
3AWvJDpy+WFBb90D8XRc7LyXC8TSvmEC9V9Qy+zsSAiREycLQpXtla4wphAlDx2W
kfXbDUB4WP1/xDHT7dL1lkN8Fm9PBYCZbR4vSf14LJlCUbTumra5lcrvEeBNi2BA
2g1Xqs3i0FRDNT/AzLLqVDV8dFEUv/YfgqfvOgvKR7cGbh0Q21Rmo2j3bZfzLKSo
J/L0pPYTb24aqB3MGkpS5FWUR11m3Zycl/yJVqmiMudRfq0SNHlrIkRyneiZ9YUX
ZyhsvjwEVpR9/mhqm8ZTt9Y5nXzfRUG0pUbpAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUBbY7Do/OHFNhsi+4dBfdpuWyjU8wHwYDVR0jBBgwFoAUTHcKx8Jx2lspFcoB
uVmI0EFPQHwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFcxMDMz
L1RIY0t4OEp4MmxzcEZjb0J1Vm1JMEVGUFFIdy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVEhjS3g4SngybHNwRmNvQnVWbUkwRUZQUUh3LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFcxMDMzL1RIY0t4OEp4MmxzcEZjb0J1
Vm1JMEVGUFFIdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6
RTaa7Eb1lKxBTxTpIHMS2Cc6CBeFzoQFX6nHiQY7zn+RqgkIeOzFtJxLjZmmozVj
fSt3CGvxc2FHviQEDOburSbkUY0q2wZPyxjcna9GOX9qpguZGElQA7VbNHG+eocG
FbCfRx1FnQkH0FFKvO5mAOldk5kMFVHDxo6Mw/nwnkFc2aSh4OqJUYvDQbywM63y
PuvkuhYZAUlFf8YwWaVuCOsYH503D1l379MxrvZF7LmrfhR7R9dFNLYIyhNw0ibt
A02YlVhMEjaXzbSf1KJbLOwNBpFSIjoBSmj+X7cL2mPQepCot7iw1I1+W1zgq9AX
5WIWBib8nZxAawti2jjB
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:25 2026 by rpki-client