
$ rpki-client -vvvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier: gi6CLyDYTkKs40xQ7d5U0V51U9Z8yW56pN4wCP/vl48=
Subject key identifier: AE:5A:72:81:2E:D4:D7:47:99:34:97:B3:4E:1C:D3:E2:71:AE:BA:9F
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer: /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial: 2EB14EAA59C8936D5DFE400DDB4FBEAFC596C72B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number: C0
Signing time: Fri 02 Oct 2026 08:01:06 +0000
Manifest this update: Fri 02 Oct 2026 07:56:06 +0000
Manifest next update: Sat 03 Oct 2026 09:15:06 +0000
Files and hashes: 1: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
2: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: qg+Mi9OQsUu8zB8+sKKoUEnqBITbImyqVcSmdkQxtik=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 09:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b1:4e:aa:59:c8:93:6d:5d:fe:40:0d:db:4f:be:af:c5:96:c7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Validity
Not Before: Oct 2 07:56:06 2026 GMT
Not After : Oct 3 09:15:06 2026 GMT
Subject: CN=AE5A72812ED4D747993497B34E1CD3E271AEBA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:bf:78:28:c5:68:7a:5a:2e:d8:48:59:23:
1c:34:b1:3b:00:4f:70:74:c7:41:8c:5f:c8:eb:be:
65:e8:c4:65:3c:3f:fe:a7:56:41:92:d3:0d:3b:1a:
3a:60:d8:76:42:c4:7a:13:b0:7a:0e:24:49:ec:42:
16:84:a3:be:ce:ab:9e:65:4c:35:66:82:6c:71:ae:
29:7c:e9:a2:de:dc:64:92:90:9d:d8:e0:00:1c:5d:
9f:fe:24:c5:fe:26:d2:90:c7:60:70:bd:24:c3:53:
7d:a9:a5:be:8b:14:97:59:30:c4:72:0f:cd:6c:0f:
66:8d:4d:f8:67:61:40:39:df:89:52:65:78:f1:35:
d8:b1:5c:61:be:dc:26:ef:2d:41:93:b8:11:85:15:
78:8f:a2:4e:01:e4:06:31:16:ba:71:a1:25:fb:9c:
75:94:3d:e3:6f:0a:48:b2:31:6b:18:ee:bf:d9:37:
52:04:42:24:5e:07:47:65:5a:84:46:b8:7b:1c:84:
f8:91:f9:90:e0:44:ce:59:fa:37:c9:19:bc:14:ff:
e2:0d:0e:5e:29:0d:3b:58:13:17:2d:07:f5:9d:ae:
cc:c9:72:ba:41:32:32:9f:27:e2:56:55:7b:2c:e4:
aa:cb:8b:01:1b:05:d4:4a:9e:33:ba:4c:98:32:b9:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:72:81:2E:D4:D7:47:99:34:97:B3:4E:1C:D3:E2:71:AE:BA:9F
X509v3 Authority Key Identifier:
keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:06:2f:4b:c9:0d:23:6b:74:50:b0:31:7e:2c:74:0b:20:
4b:a6:37:89:6e:16:b7:53:74:cd:2d:c5:1d:b9:9c:21:3d:a2:
cf:81:2d:db:9f:2c:63:fe:8b:d6:19:19:ca:c4:83:ed:a1:23:
3b:45:2d:37:38:ac:f6:d4:f2:d5:1a:bc:aa:f7:d7:71:db:b9:
4c:23:05:d7:6a:a8:b2:97:c4:b4:7c:fd:d5:ff:98:ac:42:61:
7d:f1:a4:f3:6c:42:cc:82:58:be:52:67:7d:32:ee:12:79:0b:
de:e8:a8:38:04:93:7c:31:7c:e8:e8:b3:4f:cc:6f:cd:a5:04:
c9:41:76:99:04:3e:ac:47:7a:f4:d0:7d:0b:5b:bc:ac:c6:ca:
ac:a3:f4:e3:aa:3b:d1:2d:cf:8e:09:9b:8a:73:f5:45:8d:76:
ec:a4:96:7f:ef:5e:64:23:c3:92:e0:19:e5:f9:a8:07:1f:c0:
c4:e0:ad:e6:0b:7b:1b:e7:3d:4a:0c:a3:dc:3c:9a:70:18:89:
10:26:45:17:1a:69:24:57:b6:d1:c5:ae:8f:b2:e2:b8:32:2b:
8d:c0:fa:4f:b6:dd:16:3f:64:d7:73:ba:2f:0e:07:c0:8a:4a:
7b:3b:c0:9d:d6:d1:fc:87:5c:64:7c:f4:e0:0e:01:ec:cc:e6:
1c:fb:80:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:53:22 2026 by rpki-client