
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
File: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft (raw, json)
Hash identifier: lCe0pJ3vVocn0kuOGyL7tEd+uKkyIVA+HQk64CYrw6E=
Subject key identifier: A6:64:EB:A3:CA:A7:04:FE:7C:F8:6E:0F:EE:EC:F6:17:2D:C8:DA:A4
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Certificate issuer: /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial: 03762A900A8078C3524F3B5DEF333D1F94B9430B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
Manifest number: 0100
Signing time: Sat 14 Nov 2026 23:33:47 +0000
Manifest this update: Sat 14 Nov 2026 23:28:47 +0000
Manifest next update: Mon 16 Nov 2026 01:08:47 +0000
Files and hashes: 1: 3130332e3232392e3130302e302f32322d3232203d3e203338383531.roa (hash: tICRKYTZOzxAH+xauRRyzgK+DbniFJH+4FNF7MVsLrY=)
2: 34332e3235302e34362e302f32332d3233203d3e203338383531.roa (hash: zDLGCzxdPFG/4CsCmQW1j4D7LK25mUZpat6DEbpgaZY=)
3: 3130332e3232392e3130302e302f32332d3233203d3e203338383531.roa (hash: LLKqTVeKrjc2C1jKfd0XhQ5DwV55DZrdbsX87bNg7Bg=)
4: 34332e3235302e34342e302f32332d3233203d3e203338383531.roa (hash: MJw5fyYTrafx81rPsZJsc1XaHBGLvizET5hyMMB4EiM=)
5: 34332e3235302e34342e302f32322d3232203d3e203338383531.roa (hash: Wow23AEcmPQDHAfbsYDrdq/Ze5tAj8uj4WfgyeReqLU=)
6: E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl (hash: iqOA/BynWk0b9YZPXIFbvSH/p+FJFGujIyh8pRLsRCo=)
7: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (hash: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 01:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:76:2a:90:0a:80:78:c3:52:4f:3b:5d:ef:33:3d:1f:94:b9:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Validity
Not Before: Nov 14 23:28:47 2026 GMT
Not After : Nov 16 01:08:47 2026 GMT
Subject: CN=A664EBA3CAA704FE7CF86E0FEEECF6172DC8DAA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:1e:d4:d3:54:92:91:d5:31:2e:6e:be:4f:
25:78:84:f9:3c:a7:fe:48:7c:75:75:2e:8c:39:79:
a6:0d:e9:21:74:d2:09:fa:8a:80:b1:f7:d9:71:8c:
ac:ad:19:98:90:ed:f3:74:9c:29:e5:99:72:9e:c4:
39:3b:77:2d:8a:9b:dc:72:c1:02:45:3f:f4:46:e0:
53:ab:4b:45:f5:f7:08:25:79:51:31:7b:7f:9f:07:
1c:fd:63:2b:b7:e4:09:83:e4:4f:48:d3:24:a9:00:
0d:13:ce:fa:23:92:84:3b:bf:d0:a8:5b:7c:6d:28:
db:34:8b:98:f5:1b:e4:98:fa:72:c1:9f:7e:c5:7e:
09:4a:d1:b2:d8:01:81:ec:fb:5a:61:c2:b5:8d:a9:
74:41:aa:b4:29:20:29:9f:87:0e:b8:09:68:e9:7e:
16:07:65:c8:a0:5e:64:9e:eb:4e:5a:a5:8a:27:a2:
18:c4:07:a9:41:23:65:a8:45:b8:f8:83:72:ba:ca:
67:9b:46:d5:e5:48:17:d7:c7:c1:1b:24:a2:00:e9:
82:e3:28:7a:30:a6:a4:b1:a5:a0:15:e2:1f:15:f3:
5c:4c:85:f0:e6:18:34:0a:ba:7a:d3:68:47:93:39:
1e:a2:6f:a4:40:36:5a:49:77:48:9d:e7:03:c4:c5:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:EB:A3:CA:A7:04:FE:7C:F8:6E:0F:EE:EC:F6:17:2D:C8:DA:A4
X509v3 Authority Key Identifier:
keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5f:a8:a7:f7:11:14:db:8d:05:5b:ad:43:ad:9c:8e:21:67:
79:62:0f:a7:0e:c2:0e:0a:78:85:52:67:08:dd:92:b6:42:65:
85:52:c5:89:ab:ce:65:18:7a:b6:70:0d:61:2f:e6:c5:1a:e5:
c2:4d:7e:8f:cd:b8:12:42:c7:38:22:14:07:20:29:5e:4f:d7:
66:fa:24:4a:1e:05:ee:ef:13:b0:d2:f4:67:3f:f1:62:be:17:
ed:f4:bf:b4:a6:0c:cc:2e:dc:3b:f5:0b:8f:69:ab:87:22:4d:
ec:bf:0b:51:9c:9e:21:9e:55:7b:46:39:00:47:b5:35:09:29:
a5:89:9e:39:bc:1a:c3:b2:d0:00:92:f7:d7:1f:1f:88:aa:f2:
a8:fe:3a:42:1f:94:28:a8:b8:2a:35:89:6c:04:0b:aa:72:70:
fa:98:0f:d7:98:c0:5b:7b:97:86:4a:0e:77:1f:6a:18:96:42:
7a:1b:23:70:88:20:76:24:32:d2:6a:df:97:c4:0b:9a:ae:67:
74:44:8d:69:18:03:56:ab:7a:d1:08:61:08:f3:fc:d0:38:f9:
3f:5b:cc:26:1b:ca:39:3a:03:d1:06:b9:24:bb:e5:09:79:59:
28:ca:01:c9:30:85:66:0d:d3:81:7b:ad:86:0a:a1:66:9c:22:
72:2a:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:36:21 2026 by rpki-client