
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
File: aJO3oCNNDm2_QupgVacUVov9-KU.mft (raw, json)
Hash identifier: VMa3YS3PtQq6qylKZBUhgzRZJTIM7kJB7dCmRni3Q6M=
Subject key identifier: 5A:63:CF:14:0D:00:74:06:C6:40:81:04:B7:F3:71:7C:AA:07:CE:3D
Authority key identifier: 68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
Certificate issuer: /CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Certificate serial: 66
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
Manifest number: 63
Signing time: Mon 02 Mar 2026 01:54:07 +0000
Manifest this update: Mon 02 Mar 2026 01:54:07 +0000
Manifest next update: Mon 02 Mar 2026 07:54:07 +0000
Files and hashes: 1: 0-awy_8w4O6KARzR5fDujPDfF5A.roa (hash: 5WdSHPlqZUPxCtiJHluPiITdZeXgddc8vHtpMDKVaH8=)
2: 31btbv2Ne8dB_h51f-ZOUVwUSZw.roa (hash: Y56OZQa3eZGYKDu8PQz4+IDeemXTxTI0WG0dKZMEIvw=)
3: VVbqlGmA_ek_QsoEHmuFJ_hL1C4.roa (hash: mc465NWIk7BAgpNQYFMh9PMdcYx/MBi79jxA0RgEMhk=)
4: aJO3oCNNDm2_QupgVacUVov9-KU.crl (hash: skuD5Ep0SkM9enyjpme/oNUw4FHDqvKMMsoIhR5ZnMs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 07:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893B7A0234D0E6DBF42EA6055A714568BFDF8A5
Validity
Not Before: Mar 2 01:54:07 2026 GMT
Not After : Feb 10 15:30:20 2027 GMT
Subject: CN=5A63CF140D007406C6408104B7F3717CAA07CE3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:42:68:9f:f6:1a:07:e4:cd:87:a5:22:4c:
75:46:a1:a9:ad:c0:c8:b9:5b:31:73:9a:1c:8c:65:
ae:32:8c:7a:65:ac:1a:6d:88:aa:a4:6c:d8:dd:c0:
41:f1:82:8a:e0:6c:2c:5a:14:51:91:dd:db:16:6b:
5c:fc:94:90:23:da:b2:2b:ac:d8:0b:dc:3d:c2:34:
73:62:70:c0:5e:06:51:05:c9:e2:66:75:b8:9d:50:
62:28:9c:9d:48:6e:79:6b:14:b3:7b:9a:c4:2f:dd:
cf:2e:b1:96:6d:ac:f0:1c:17:72:af:21:34:1c:06:
c1:8c:c5:2e:5f:7e:04:22:a0:30:7c:ce:9a:6f:a4:
1f:92:7f:ca:be:eb:73:46:94:3d:bb:15:a1:6b:39:
ea:dd:39:f1:62:1e:71:c3:d0:ee:37:73:ed:44:19:
cb:89:08:89:35:66:ae:7c:b9:90:cc:74:67:98:0e:
59:ba:6a:4b:93:e1:88:ff:85:b5:f0:e7:eb:2b:0c:
f5:04:55:42:d4:93:8d:96:31:cf:fc:98:cf:16:8d:
6e:ef:d1:46:3c:f7:75:65:1c:7e:23:c5:26:dc:3a:
d1:84:51:b9:12:c2:2b:f7:dd:9e:1f:97:95:9a:2e:
67:27:78:8e:ed:08:8f:93:e0:53:c4:c6:41:43:7e:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:CF:14:0D:00:74:06:C6:40:81:04:B7:F3:71:7C:AA:07:CE:3D
X509v3 Authority Key Identifier:
keyid:68:93:B7:A0:23:4D:0E:6D:BF:42:EA:60:55:A7:14:56:8B:FD:F8:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aJO3oCNNDm2_QupgVacUVov9-KU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TW1033/aJO3oCNNDm2_QupgVacUVov9-KU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cd:68:82:f7:81:45:d3:4d:4c:d5:3e:64:7a:69:dd:88:be:
bd:77:5a:76:1d:a8:eb:ec:10:77:ea:ab:b7:41:22:bf:b6:8b:
f7:d9:d2:58:f1:b6:f4:c4:e6:94:42:58:8d:81:88:8b:ff:90:
07:fd:aa:bc:8c:67:c0:55:79:9f:46:0f:72:bb:a2:4a:62:d7:
a6:62:e8:f9:99:8a:8e:ab:a9:8a:63:ce:18:eb:2b:9b:29:84:
37:1c:a7:4a:ba:18:a8:82:fe:79:10:f3:e7:76:b8:92:66:fe:
f5:fb:9c:a9:e8:c7:44:4f:91:9c:4d:52:ee:d2:06:22:c9:bf:
c2:78:14:83:ec:56:51:8f:b9:62:87:5d:a7:2c:bd:52:f0:2c:
b7:7d:3e:5f:75:3e:ba:e7:c9:be:ee:2f:46:9f:8c:52:bb:04:
d4:00:82:01:26:bb:9e:6a:c6:8b:03:fc:0c:19:be:c6:9b:4a:
8e:02:b8:f1:d9:f2:60:e0:96:94:51:04:1d:db:14:5b:b7:47:
6c:a6:60:da:b7:bb:8c:ee:8d:f7:5e:2a:5a:53:1c:3c:52:d9:
b4:c8:b2:e5:78:0a:5f:26:64:80:73:1a:71:27:7f:e0:ad:da:
6d:7d:c3:2d:6e:f3:0c:2c:b6:93:c8:67:e7:93:ba:6b:ef:df:
b1:ff:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:49 2026 by rpki-client