
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
File: U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft (raw, json)
Hash identifier: JRqCKWn8QJzshyb7uEQQ0QFXbD+Ay7DEMSMeokW2rQg=
Subject key identifier: C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
Authority key identifier: 53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
Certificate issuer: /CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Certificate serial: 0D53
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
Manifest number: 0D44
Signing time: Wed 05 Nov 2025 09:58:42 +0000
Manifest this update: Wed 05 Nov 2025 09:58:42 +0000
Manifest next update: Fri 07 Nov 2025 09:58:42 +0000
Files and hashes: 1: 7sHAh5jiw6-sVg6mb4z9C6JB4l8.roa (hash: emematTS1MjVyXh/NTYR7rNCzoRendxnVTI41VCw+HM=)
2: U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl (hash: lUQXZj1TzQNtfbkFgv5MwgCdAF5iZD4Goz3ZUSruRME=)
3: mCHvVHpGfKuhmttRNl9HHQHBTAI.roa (hash: hn0Bq3ZnhNo3VNrymOZK60+U8Y38hEilSnlLyRNaQmA=)
4: uzg8l_54iYpkBtNcz2YHsk-cwVQ.roa (hash: mdmtjFhDZrDdFx85+7QIaCznxJR20knq4vWizVXwtBc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 20:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53CB7B17F4F7D250DC9BA2CDD61A742DBA37FC10
Validity
Not Before: Nov 5 09:58:42 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C2361BCDA273943824CF5CA4F4A5747143939EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:6f:e3:cd:db:54:f5:fe:14:0d:01:e3:62:
17:da:d1:fd:19:ff:b9:fc:a3:23:8a:e9:6b:2e:fc:
6b:03:41:84:d8:37:5a:e8:0f:e0:c5:00:8a:fa:d8:
9f:6b:11:e2:71:4a:02:6e:35:db:ff:3d:22:69:bc:
91:81:9a:42:d1:09:42:8a:39:03:9d:8e:d7:94:3e:
b1:02:8e:8f:49:f6:99:b5:88:47:0e:88:58:1f:9c:
13:c1:f9:a1:af:43:14:1e:7a:86:8d:8b:c0:8c:fe:
27:d1:35:26:e3:c4:6d:3f:51:2b:fd:1e:5b:f7:7e:
d4:57:e4:0f:5e:1d:ad:df:5f:3f:a7:13:f5:1c:8b:
20:2d:c7:77:55:fe:cc:43:d2:28:aa:21:48:03:49:
68:19:63:46:e0:9f:c2:56:31:e9:75:4e:41:7e:d8:
75:20:52:df:b7:77:3f:8b:1e:02:04:a1:12:36:a5:
8b:20:f0:46:7f:62:b0:25:a9:ba:a2:5b:10:7b:50:
f1:25:9e:43:73:10:47:a9:04:85:3c:39:65:51:52:
6e:38:55:c3:30:71:22:12:fe:1c:b3:1c:2f:5e:13:
46:77:8a:73:42:15:66:05:dc:24:9d:25:ab:3a:0d:
98:7c:b4:9d:82:d3:40:b5:dd:bc:34:25:79:e1:eb:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:1B:CD:A2:73:94:38:24:CF:5C:A4:F4:A5:74:71:43:93:9E:B5
X509v3 Authority Key Identifier:
keyid:53:CB:7B:17:F4:F7:D2:50:DC:9B:A2:CD:D6:1A:74:2D:BA:37:FC:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U8t7F_T30lDcm6LN1hp0Lbo3_BA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WISTRON/U8t7F_T30lDcm6LN1hp0Lbo3_BA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e8:4f:a2:af:54:4f:e0:b1:83:c9:9a:05:cb:71:33:ef:7d:
c8:c7:ac:e5:36:5d:46:38:67:8a:07:e8:38:f7:d1:1d:a5:c2:
12:f7:cc:8f:af:08:a6:b8:6c:74:c4:3c:a3:37:f3:ab:5d:fe:
90:cd:37:3e:4c:ef:46:6f:50:44:c2:64:dc:70:44:69:d2:53:
65:24:55:9c:db:a9:8e:92:ff:eb:9e:6a:12:fb:a7:d1:11:87:
73:e0:aa:e5:04:76:54:95:9e:34:ad:74:50:4f:fa:a8:3d:d5:
cb:0c:30:0a:60:2c:e0:08:8f:95:52:40:d8:3a:04:e0:a1:a6:
a8:11:b4:a8:65:04:ba:d5:14:65:cf:11:14:27:84:e2:02:76:
e6:a2:61:bb:10:a2:bd:f6:e3:bd:5a:f8:96:36:76:78:13:d4:
6f:b3:fc:de:d0:c9:89:c5:50:b4:0b:cc:53:77:bb:e9:15:62:
73:62:cf:d8:63:34:59:2b:42:c0:e9:78:14:7e:89:3f:8e:7c:
23:00:7a:da:cc:4c:ff:ae:c0:18:c7:5c:28:34:2a:d6:05:fb:
08:97:a2:3b:ab:7a:d0:a0:62:ff:86:af:cc:bd:17:6d:bc:12:
88:98:d1:34:e7:2c:82:37:2a:33:37:bc:96:b5:c1:20:28:e7:
ad:4c:9d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:20:45 2025 by rpki-client