
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier: LDKBsRlYbVj2gAw19+n9tZP2XIG8AEeZjUoUVv/FlfU=
Subject key identifier: 3E:1A:B0:EA:B3:48:FE:4B:90:D3:C7:FC:77:1B:D9:76:32:AB:F5:75
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer: /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial: 03155D0EAF77F9EA3B3C9E24C73E4A76925D9389
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number: AE
Signing time: Wed 09 Sep 2026 11:52:31 +0000
Manifest this update: Wed 09 Sep 2026 11:47:31 +0000
Manifest next update: Thu 10 Sep 2026 13:43:31 +0000
Files and hashes: 1: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: SQhE1z7TacWWdqDUxZBmwkLp78BV7srMiLMmNvJ9y00=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:15:5d:0e:af:77:f9:ea:3b:3c:9e:24:c7:3e:4a:76:92:5d:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Validity
Not Before: Sep 9 11:47:31 2026 GMT
Not After : Sep 10 13:43:31 2026 GMT
Subject: CN=3E1AB0EAB348FE4B90D3C7FC771BD97632ABF575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:30:40:b7:7e:6b:3f:8b:2e:3e:3d:0c:c5:
34:3a:a5:27:2f:f1:32:d2:0b:76:7a:ef:f9:47:f6:
e2:da:49:e7:d7:4e:3f:99:5f:d7:7b:d2:5d:85:54:
94:47:3d:9b:64:d1:13:d0:18:6d:c9:bb:dc:dc:17:
21:9f:0c:2c:4d:18:79:cd:0a:15:b4:10:fd:27:5e:
1d:14:fb:68:4a:fe:4e:97:83:6d:36:a8:a0:de:fd:
75:b0:87:8d:c0:98:1d:7c:a1:5f:df:2f:7a:4e:46:
57:4e:83:f7:1c:97:83:09:ad:20:c0:75:44:fb:0d:
83:d1:7b:93:4f:75:fd:83:57:bf:dd:95:7b:33:e8:
c4:05:0c:04:25:5d:e9:76:9d:82:f3:5f:98:38:c6:
58:c6:64:2a:6b:a2:e6:5f:8c:f1:22:b0:26:cf:d6:
79:0b:ca:5a:d4:a2:ab:02:74:93:a5:44:1f:6c:23:
94:5a:21:f8:6b:6f:f7:e4:c1:36:b0:2b:65:a0:86:
95:17:56:f1:19:f9:8e:40:76:96:82:8a:26:9f:52:
68:02:af:d2:65:e4:e7:de:47:c6:72:99:f9:8e:b3:
d2:e8:ec:bd:82:9e:03:d4:3a:85:be:57:15:54:25:
c9:cc:11:1e:3c:72:28:f2:98:1c:ad:15:69:0c:e2:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:B0:EA:B3:48:FE:4B:90:D3:C7:FC:77:1B:D9:76:32:AB:F5:75
X509v3 Authority Key Identifier:
keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e7:a9:35:ce:44:04:81:bb:c6:d7:34:00:46:78:cc:f4:56:
3f:66:da:fb:01:8b:ef:5f:27:83:0d:fc:e3:2f:5e:e5:3d:c5:
1a:e4:eb:9e:b4:6b:92:95:29:65:a1:29:cf:17:99:59:41:6d:
48:66:49:80:2c:61:f8:7d:4f:2b:14:a7:78:54:6d:ef:95:0f:
d1:6b:4a:e2:ec:98:08:3d:cf:a4:56:58:a6:b8:d5:1e:bd:07:
63:49:bb:1a:3b:ff:e2:40:b1:6b:1f:17:df:55:43:34:3b:3b:
25:6e:66:2b:b2:b3:45:33:cd:1c:63:75:c1:88:bb:3d:71:a5:
4f:bf:a2:be:bb:c9:1b:96:cf:7b:53:b8:3f:61:3b:42:e9:3d:
93:85:b8:72:f6:6d:5b:a8:17:85:16:58:92:af:75:41:38:d7:
89:2b:b5:5b:e9:e6:6c:4e:8f:bc:e5:ef:e0:42:7c:6b:2d:32:
99:3a:32:21:11:f7:f6:4c:b0:21:89:1e:e5:ce:86:fc:2b:b1:
69:29:2a:a5:0f:8b:02:fc:9e:70:cf:c1:1e:ee:14:80:83:36:
cd:35:e2:56:0e:ea:d1:7b:aa:36:5f:68:32:83:77:3a:d5:62:
66:fa:a5:5f:7e:73:64:d8:1c:c0:96:46:14:fd:5f:4c:27:60:
25:29:e8:9d
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUAxVdDq93+eo7PJ4kxz5KdpJdk4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NFNzU5RjQ1RTJF
N0U0MjFBMzAeFw0yNjA5MDkxMTQ3MzFaFw0yNjA5MTAxMzQzMzFaMDMxMTAvBgNV
BAMTKDNFMUFCMEVBQjM0OEZFNEI5MEQzQzdGQzc3MUJEOTc2MzJBQkY1NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunDBAt35rP4suPj0MxTQ6pScv
8TLSC3Z67/lH9uLaSefXTj+ZX9d70l2FVJRHPZtk0RPQGG3Ju9zcFyGfDCxNGHnN
ChW0EP0nXh0U+2hK/k6Xg202qKDe/XWwh43AmB18oV/fL3pORldOg/ccl4MJrSDA
dUT7DYPRe5NPdf2DV7/dlXsz6MQFDAQlXel2nYLzX5g4xljGZCprouZfjPEisCbP
1nkLylrUoqsCdJOlRB9sI5RaIfhrb/fkwTawK2WghpUXVvEZ+Y5AdpaCiiafUmgC
r9Jl5OfeR8ZymfmOs9Lo7L2CngPUOoW+VxVUJcnMER48cijymBytFWkM4gcfAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUPhqw6rNI/kuQ08f8dxvZdjKr9XUwHwYDVR0j
BBgwFoAUlbGmJHmzbBQU/xfOdZ9F4ufkIaMwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t
Q0hBTi8xLzk1QjFBNjI0NzlCMzZDMTQxNEZGMTdDRTc1OUY0NUUyRTdFNDIxQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzIvOTVCMUE2MjQ3OUIzNkMxNDE0RkYxN0NF
NzU5RjQ1RTJFN0U0MjFBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMS85NUIx
QTYyNDc5QjM2QzE0MTRGRjE3Q0U3NTlGNDVFMkU3RTQyMUEzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ueepNc5EBIG7xtc0AEZ4zPRWP2ba+wGL718ngw384y9e5T3FGuTrnrRrkpUpZaEp
zxeZWUFtSGZJgCxh+H1PKxSneFRt75UP0WtK4uyYCD3PpFZYprjVHr0HY0m7Gjv/
4kCxax8X31VDNDs7JW5mK7KzRTPNHGN1wYi7PXGlT7+ivrvJG5bPe1O4P2E7Quk9
k4W4cvZtW6gXhRZYkq91QTjXiSu1W+nmbE6PvOXv4EJ8ay0ymToyIRH39kywIYke
5c6G/CuxaSkqpQ+LAvyecM/BHu4UgIM2zTXiVg7q0XuqNl9oMoN3OtViZvqlX35z
ZNgcwJZGFP1fTCdgJSnonQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:18:30 2026 by rpki-client