
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
File: E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft (raw, json)
Hash identifier: YfT+hlYS4MLp7DbQORGe/7W2Kf2xiFH+zPCCr8lbr/Q=
Subject key identifier: DB:E9:F2:8A:58:5F:25:F0:3D:71:0A:6A:1D:BA:26:09:93:67:A8:E9
Authority key identifier: E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Certificate issuer: /CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Certificate serial: 32BEE0D18A09DF648F70BCD4B9A34D8550041817
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
Manifest number: C4
Signing time: Sat 03 Oct 2026 12:50:06 +0000
Manifest this update: Sat 03 Oct 2026 12:45:06 +0000
Manifest next update: Sun 04 Oct 2026 15:21:06 +0000
Files and hashes: 1: 3130332e3235352e3231302e302f32332d3332203d3e20313331363432.roa (hash: FaPlqa1DeUZTg3kaDmHEbki3z5vF9i3TucSszJSHI3U=)
2: E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl (hash: FoNuGHk1Qi29Pd5nAm6zsZOmD3DdrjPSwJaMjdEUy/4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:be:e0:d1:8a:09:df:64:8f:70:bc:d4:b9:a3:4d:85:50:04:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Validity
Not Before: Oct 3 12:45:06 2026 GMT
Not After : Oct 4 15:21:06 2026 GMT
Subject: CN=DBE9F28A585F25F03D710A6A1DBA26099367A8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:38:5a:d0:ba:bc:cb:84:56:55:ac:d0:80:
8b:28:73:d4:9f:0a:37:cc:c2:d3:01:b8:66:16:fe:
33:20:e8:69:17:fc:7f:09:3b:5a:fa:0a:b1:a8:d1:
d8:9e:12:08:9e:66:c1:17:89:95:d7:14:a9:6c:89:
b9:53:31:3f:1c:4a:9a:07:dc:d0:46:0a:5e:7d:e2:
44:8a:84:df:8b:f5:81:91:17:cf:c8:e8:11:cc:19:
a9:d9:2d:d4:ad:68:e0:b0:ec:a8:55:f7:c0:cf:07:
00:fc:e5:dc:2a:97:ed:ec:e6:1f:a8:64:78:b9:8c:
b6:42:c7:00:08:7e:57:29:95:c3:35:36:c9:8c:eb:
38:b4:a7:0b:3f:03:f3:d2:a7:3e:f4:02:3b:61:2d:
e0:f7:85:16:55:2a:c9:89:c5:80:05:6f:22:42:03:
9e:69:28:79:4e:ec:e6:2e:90:d0:20:1d:d2:ca:75:
71:4a:11:1c:33:38:4a:d0:93:e7:a6:5d:95:2c:27:
dd:fa:96:50:0c:80:35:4e:65:89:69:61:34:5e:35:
7f:d3:17:39:36:2c:3e:d8:6a:d6:84:2f:53:83:38:
35:39:51:16:ca:90:ec:df:cf:dc:3f:08:5d:42:03:
9a:2c:db:85:34:b1:f6:8e:34:0c:26:79:c7:bc:6a:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:F2:8A:58:5F:25:F0:3D:71:0A:6A:1D:BA:26:09:93:67:A8:E9
X509v3 Authority Key Identifier:
keyid:E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0e:0e:3a:c3:16:74:6b:e9:bc:d4:08:56:ca:a4:ed:f4:8a:
77:b1:73:4e:e7:71:2d:5d:48:41:1a:f7:50:d4:c4:b3:39:6c:
eb:52:33:e3:74:b5:8b:5d:de:41:e0:12:8c:9d:86:f1:a5:c1:
d2:2d:72:6e:fb:45:96:56:84:ea:d2:8e:b9:a5:3b:53:62:80:
fd:68:58:05:78:69:8d:d1:ae:27:ba:37:bc:23:a3:bf:35:b9:
4a:f1:8c:92:12:31:fa:56:cd:a7:cb:5c:1d:45:f6:af:68:20:
bd:ea:bf:85:92:90:33:fd:eb:6a:f9:a2:ee:ba:ea:71:e5:f2:
97:bf:ef:eb:7e:ff:55:4d:5a:59:0e:31:7d:84:b9:c0:6e:c6:
84:96:c5:d9:a1:e5:7d:b7:fc:3a:56:de:01:41:f5:aa:09:95:
e8:5a:54:33:ec:70:33:33:73:e8:f6:3e:5e:51:8d:cb:1e:98:
46:d9:51:5b:a5:f1:16:02:7b:9f:ef:ae:c8:2c:cc:2f:1c:48:
eb:1a:1f:89:5d:64:95:fe:5e:23:3a:32:6a:8d:77:4b:fc:46:
26:d6:04:5c:68:94:80:f1:23:f7:7f:0d:be:d3:1f:d3:dd:46:
5c:b1:78:6a:f8:fa:25:87:00:e8:38:9d:99:db:a0:7f:d9:ca:
43:ab:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:33:44 2026 by rpki-client