
$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
File: 4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json)
Hash identifier: /H/LMCyv3UcpT5ZMlfY5MpD+Bvo7bW/4QXvg3eDdyKY=
Subject key identifier: 26:6B:16:F7:3F:B5:81:EB:11:6E:66:5B:FE:24:58:73:69:02:1F:60
Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA
Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA
Certificate serial: 796042C5E1D6926D4A8B2DBA18BBB7A565F48E61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
Manifest number: 82
Signing time: Fri 14 Aug 2026 09:21:29 +0000
Manifest this update: Fri 14 Aug 2026 09:16:29 +0000
Manifest next update: Sat 15 Aug 2026 13:00:29 +0000
Files and hashes: 1: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=)
2: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: rpqIXu5i5YbUlYvgvlOSf0jCPbQc/D8NHyTW8HBRpiA=)
3: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=)
4: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=)
5: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl
rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:60:42:c5:e1:d6:92:6d:4a:8b:2d:ba:18:bb:b7:a5:65:f4:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA
Validity
Not Before: Aug 14 09:16:29 2026 GMT
Not After : Aug 15 13:00:29 2026 GMT
Subject: CN=266B16F73FB581EB116E665BFE24587369021F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:32:61:20:5b:62:9e:c0:d9:1e:3c:fd:6f:
ff:72:d8:ba:73:7e:e8:54:48:30:b8:96:e8:ce:2c:
94:ff:d9:eb:93:09:68:b3:14:ff:7a:5b:52:1f:e4:
09:f7:79:2f:9f:1e:03:7a:fe:f2:f0:0e:0d:07:8a:
8e:55:4d:dd:8f:00:11:97:2a:b3:35:1b:5f:5f:ba:
a2:c5:71:a1:34:75:4b:6e:18:60:bf:45:03:e0:79:
27:69:cd:dd:26:69:38:9b:3f:75:c8:c0:95:6f:49:
74:c6:52:b0:a9:22:8d:52:2b:38:e5:31:db:fa:56:
07:ea:f4:52:ca:8a:c8:45:ca:ab:28:8c:e4:61:7d:
f3:32:ef:55:11:5f:07:c5:cd:bf:b3:13:18:9b:ae:
fb:6a:d4:e1:e0:92:bb:d0:d4:13:a8:32:de:fa:84:
ac:8d:9f:03:d7:fe:f1:c9:56:5e:a1:2d:07:21:e8:
8c:4f:a7:ed:f3:45:c3:b8:f8:0d:28:02:21:31:4c:
4e:4e:f8:ba:74:28:07:35:d0:5a:7e:08:ef:2d:3c:
41:ab:b1:bc:3e:ac:0b:2f:96:30:63:06:67:60:00:
89:52:26:f0:6a:82:ce:e0:b3:d9:10:5f:af:ca:01:
ab:a2:38:ad:82:3d:e3:40:10:df:05:a2:66:5e:60:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:16:F7:3F:B5:81:EB:11:6E:66:5B:FE:24:58:73:69:02:1F:60
X509v3 Authority Key Identifier:
keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7a:57:fe:56:ee:35:a0:5d:fd:70:4a:8c:1d:20:de:b2:f9:
fe:c3:2c:43:e4:dc:88:f2:b0:bc:93:09:66:3e:76:93:15:9a:
0d:a7:5b:48:2d:99:71:30:68:d4:ae:95:40:bb:e7:4a:b3:02:
c8:0a:2a:01:91:1b:e1:1b:d7:1b:61:75:18:62:3d:2d:2c:00:
92:38:a6:ff:4f:6c:7a:7c:04:fe:05:51:8a:4c:06:b3:4e:71:
2f:5d:c6:3e:c3:80:f6:26:bf:0d:f8:c3:16:8c:e5:d4:ee:7f:
a5:82:d1:54:78:90:f6:1a:8e:35:70:2e:50:72:b6:c0:39:3d:
31:db:6e:18:d0:54:c0:d9:ee:79:62:3e:29:a2:44:25:5b:56:
6f:b9:1b:62:4b:24:3a:c8:0c:57:37:3e:0d:e9:d6:9e:1a:d2:
9b:38:51:9e:45:81:8b:82:55:09:06:f2:bf:f1:15:ed:9a:d2:
27:3a:c0:ce:42:ac:36:47:7f:1e:b1:ff:54:e2:71:32:3c:cd:
9d:79:ee:4e:c2:20:fb:79:20:e1:ea:da:1d:6c:6f:d5:45:4e:
95:46:e8:b2:e0:22:2c:3b:28:f2:c6:eb:5b:3b:91:90:ca:19:
f1:ce:42:a1:22:80:29:3e:29:bd:30:2e:db:f6:21:e0:5a:2a:
d5:85:6a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:26:45 2026 by rpki-client