
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft
File: 9-nqSCJyPUfjBC-dj7bkK20KZoM.mft (raw, json)
Hash identifier: Ect5eNSM5e2IBz57JE9LunogxC9RPMh7CbSMxCfI8M4=
Subject key identifier: C8:87:76:32:C0:93:24:5F:AE:FB:6C:F0:C2:FE:BB:13:E5:5F:CE:F7
Authority key identifier: F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83
Certificate issuer: /CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683
Certificate serial: 73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft
Manifest number: 72
Signing time: Wed 05 Nov 2025 04:29:19 +0000
Manifest this update: Wed 05 Nov 2025 04:29:19 +0000
Manifest next update: Wed 05 Nov 2025 10:29:19 +0000
Files and hashes: 1: 9-nqSCJyPUfjBC-dj7bkK20KZoM.crl (hash: Rt50zlpWxN5n47UtvqVbu5ytQ5vpOIyVoR3rL9pXnAU=)
2: F_tz9YMtONIj4ey14wz4m4cSAEQ.roa (hash: vCLC3PokhGJHFJYOcIOorW8KHb+s04OzjY9WuV9W2RI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 10:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7E9EA4822723D47E3042F9D8FB6E42B6D0A6683
Validity
Not Before: Nov 5 04:29:19 2025 GMT
Not After : Oct 7 15:30:24 2026 GMT
Subject: CN=C8877632C093245FAEFB6CF0C2FEBB13E55FCEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:93:92:df:ae:22:d2:95:8c:1b:4e:dc:04:
df:b9:19:a1:1d:ab:43:b3:e7:74:3f:48:34:9a:3d:
25:21:c4:30:f1:61:b0:00:7a:95:64:f8:ed:8a:f1:
64:91:92:30:41:26:03:5c:aa:3f:e8:71:1f:58:ef:
b5:c7:86:44:1e:97:09:b5:24:a8:3b:2e:d1:21:56:
e4:9e:85:03:f3:1a:2e:a2:25:3c:f3:c5:69:66:be:
f7:89:40:fc:1b:a5:96:79:de:e2:c7:11:bc:64:1d:
ed:cb:21:51:31:16:3e:5c:a6:73:a0:55:79:25:97:
12:1e:2b:7a:9d:18:5a:da:8c:82:fa:f4:1c:5b:36:
ce:67:a6:11:f3:d1:ee:6c:6d:cd:99:7f:bd:bd:ad:
e1:f3:d2:0f:bb:13:e3:39:56:85:31:07:f6:32:f6:
1e:6b:95:87:3c:57:0c:de:0e:57:19:37:5a:d8:57:
09:6f:51:99:34:a3:80:ed:b3:f6:dc:d3:01:f3:5e:
4c:f2:a2:1e:e6:02:ac:99:c1:0e:a0:9a:51:99:ab:
bb:d2:df:11:f7:9f:c0:6f:f4:74:60:ef:5f:5e:6d:
60:4f:74:8e:f0:96:04:16:fc:85:e6:70:e6:df:dc:
bf:b8:a7:49:16:d9:e6:c4:19:ba:96:f0:65:39:14:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:87:76:32:C0:93:24:5F:AE:FB:6C:F0:C2:FE:BB:13:E5:5F:CE:F7
X509v3 Authority Key Identifier:
keyid:F7:E9:EA:48:22:72:3D:47:E3:04:2F:9D:8F:B6:E4:2B:6D:0A:66:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9-nqSCJyPUfjBC-dj7bkK20KZoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/9-nqSCJyPUfjBC-dj7bkK20KZoM.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:59:87:1d:dd:45:9c:31:6c:06:68:64:7c:f3:ec:a6:19:
13:50:68:5b:be:1c:4e:16:b4:7d:ab:ba:f9:fd:89:f6:b3:6c:
e4:cd:85:7f:5f:36:ab:a5:62:3b:dd:06:e3:39:ce:bb:22:39:
bf:7d:05:58:7e:95:6c:d0:91:83:ff:0f:07:f1:e2:44:3c:27:
25:44:48:73:6f:bf:14:e5:94:d0:7b:da:56:00:9c:1d:14:25:
64:57:4b:d9:1f:cc:62:97:8e:8d:32:d4:4c:20:a1:11:f1:41:
7e:df:28:69:cd:f0:9e:69:9a:e3:79:38:c4:62:c6:94:08:3d:
aa:cb:5b:2f:29:39:e1:79:06:17:64:76:e2:26:4f:6f:14:24:
48:f2:21:30:04:f5:f8:55:82:b5:7b:8c:df:61:21:43:4c:bd:
a2:05:74:f9:9c:d7:33:a0:7a:d5:8e:c6:40:15:88:a8:b7:13:
24:cf:91:2a:59:8e:a1:b9:ce:d5:f9:fd:f4:80:0d:23:9a:d5:
37:dd:6b:ef:99:ed:a3:00:a4:f1:3c:31:3f:09:d5:2b:c1:e4:
64:7a:9d:d9:f4:b9:eb:9c:5f:89:ff:70:38:e1:3d:5b:6e:40:
99:34:ee:3e:92:73:db:f4:3d:97:3f:6f:fd:29:17:51:2a:ba:
f1:26:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:37:05 2025 by rpki-client