
$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
File: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft (raw, json)
Hash identifier: GV83UWZlw/dHiVkoPwji/btwLUPNJVDeN2Grp5LxOFU=
Subject key identifier: C9:86:FA:7E:02:6C:A3:52:97:D2:DF:BA:47:DE:91:C1:E1:E9:C3:3A
Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
Certificate serial: 38DBE0445A6073C43122CD0126FE8563F7E09946
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
Manifest number: 13
Signing time: Wed 13 May 2026 15:52:54 +0000
Manifest this update: Wed 13 May 2026 15:47:54 +0000
Manifest next update: Thu 14 May 2026 16:46:54 +0000
Files and hashes: 1: 3131372e35362e302e302f31382d3138203d3e2034373832.roa (hash: 8DMQSxYkXT39Wjc0+DxN6goaO03iNCXQLyzqirPMqAs=)
2: 36312e36372e36342e302f31392d3139203d3e2034373832.roa (hash: hP1Ce0puK87bnBkuUoZR08dKEnokYQB4baKFChuzk+E=)
3: 36312e35362e302e302f32302d3234203d3e203138313833.roa (hash: Z8hYEPWVHSTXdVxKiYoHCeRE+yhXuCK4vUjrYBstEPs=)
4: 3232332e3230302e302e302f31362d3136203d3e2034373832.roa (hash: MA9+ajK8aX1uKUtp2sxtKQhYTLC2td1kAHyxBVTGWcc=)
5: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (hash: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM=)
6: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (hash: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY=)
7: 3231302e3234312e302e302f31372d3137203d3e2034373832.roa (hash: KmWKCTE0ohasfgtfRxTrbUHfQbw/Y7nPMFINp2KhTpA=)
8: 3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (hash: 1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=)
9: C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl (hash: HsxDyyBLRxbvg4JuCvggWKWADJOfqojGNYQpjChZ7NA=)
10: 3132342e3139392e39362e302f32302d3230203d3e2034373832.roa (hash: 7acpyK5V9E2LR1y17/549QCIrRIx//QUMCroyuhMnD8=)
11: 3132342e3139392e36342e302f31392d3139203d3e2034373832.roa (hash: WuXDtugnIouFSIQBa95DW12JV+9YmfPeEhQ2M/9bHLw=)
12: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (hash: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA=)
13: 36312e35372e33322e302f31392d3139203d3e2034373832.roa (hash: aqyU1VbOW0v1AFwJhVg9uuI3iSWv7CEHxJprPdp3Meo=)
14: 36312e36302e302e302f31372d3137203d3e2034373832.roa (hash: RxtL1JrL62KxxH9+j1ZECsfg+3xXdkmccPO6Ql29WBI=)
15: 3131372e35362e302e302f31362d3136203d3e2034373832.roa (hash: MFCSbHbqKYuWPiPCKMVh2kx7z7XCHdm/WXFRairBaN0=)
16: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (hash: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w=)
17: 323030313a343432303a3a2f33322d3332203d3e2034373832.roa (hash: gE5uEPlvoHn4YAIcNC7yJMhL4DCCYf0nlEOkebni8Us=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl
rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:db:e0:44:5a:60:73:c4:31:22:cd:01:26:fe:85:63:f7:e0:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
Validity
Not Before: May 13 15:47:54 2026 GMT
Not After : May 14 16:46:54 2026 GMT
Subject: CN=C986FA7E026CA35297D2DFBA47DE91C1E1E9C33A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:b6:17:3e:05:00:52:33:b9:9b:82:9e:a9:
cc:b8:77:a5:4e:03:5e:8d:d9:9d:ec:74:a0:78:35:
37:21:9d:26:71:48:ed:7d:85:46:e5:92:6b:5c:d0:
08:0f:ca:31:8d:36:b9:ff:95:f3:d2:69:4d:7d:9a:
17:3e:cc:fa:43:a8:aa:d6:7d:d7:ee:67:77:94:28:
1a:ef:72:61:9a:3f:65:04:98:f9:50:05:90:86:6e:
1e:41:69:e0:b5:62:39:56:0c:dd:c1:32:3f:0e:ea:
b2:04:63:30:9a:ef:fd:52:3c:f4:3a:91:2a:e0:e0:
6c:17:1c:2c:6f:67:b3:54:03:98:40:11:0f:5b:69:
7d:7f:49:cb:8a:7f:8b:37:f4:0b:b6:22:93:a2:b6:
c4:fc:1d:a4:78:b8:e1:50:6f:4e:fe:6f:65:1c:a0:
a2:a9:91:4b:a1:ed:2b:06:2a:9d:fb:70:e2:81:3d:
c5:5e:90:a4:4d:d9:33:8e:55:f9:5a:29:09:82:4c:
d9:f0:55:e4:74:ce:0c:d1:49:d0:f2:05:7b:26:7d:
30:e1:91:20:57:27:c4:b6:07:fb:5a:23:ef:6f:c2:
2e:16:6f:50:9f:f1:2e:fd:05:2c:ca:d6:8a:d6:46:
2d:53:42:44:66:48:cb:fa:8d:49:1c:ae:5f:6b:d3:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:FA:7E:02:6C:A3:52:97:D2:DF:BA:47:DE:91:C1:E1:E9:C3:3A
X509v3 Authority Key Identifier:
keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:44:33:c5:d4:c0:ee:5b:59:63:12:90:42:97:15:31:b0:a5:
3b:0f:7a:60:88:ca:96:ae:a1:16:d0:f7:18:3b:07:f9:49:d5:
fc:f0:a0:9d:2a:60:ed:d6:20:81:89:85:ca:66:41:e7:36:39:
38:b5:17:20:06:26:86:8f:15:de:e1:eb:14:61:18:e2:8b:16:
f0:b1:c8:bc:1a:97:21:a2:3f:31:71:fe:e6:63:ee:6a:e3:80:
23:4c:7b:8c:2d:b1:6e:ea:fa:ea:fa:3c:c3:2c:eb:53:ce:42:
40:ef:cb:dc:32:d6:79:5a:3d:7b:bf:64:28:63:72:d0:b6:d3:
08:f5:e7:3d:ee:24:02:ec:e6:d3:f2:b5:b2:e2:9a:da:e9:1a:
25:bd:be:c7:a3:f9:94:83:db:f8:1c:69:11:91:56:f9:5b:3a:
24:60:11:ba:e3:25:8a:31:b2:ac:bb:2d:aa:eb:ac:e7:92:5a:
2a:13:72:4f:a6:ba:0c:c2:b4:93:a4:e4:37:a4:d7:30:f7:d9:
a9:c1:f9:12:dd:f8:58:98:cc:27:08:ff:50:37:8d:d8:73:72:
69:22:71:a9:f6:c4:0c:eb:b3:c5:a5:fe:85:5c:ef:6b:97:50:
4e:d1:0a:2d:9a:15:23:bb:b2:9d:35:98:1f:06:56:58:b7:0d:
c4:47:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:04 2026 by rpki-client