
$ rpki-client -vvf rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
File: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft (raw, json)
Hash identifier: IzUmecDsg+ZTg4e5RJq3JZR8h6bVOOdR/9w6qRgz3ss=
Subject key identifier: 8D:DF:C5:E9:76:11:B9:80:E5:4A:7C:54:B4:3F:1E:5A:84:F0:33:C5
Authority key identifier: E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5
Certificate issuer: /CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5
Certificate serial: 5C366719E591A6A1B2E0502139F6307CBDA5C834
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
Manifest number: 45
Signing time: Tue 30 Jun 2026 00:47:41 +0000
Manifest this update: Tue 30 Jun 2026 00:42:41 +0000
Manifest next update: Wed 01 Jul 2026 04:12:41 +0000
Files and hashes: 1: 3130332e3133362e3231302e302f32332d3234203d3e203137353032.roa (hash: iW1ZLD2xVMVzTgjKNYmVbGt8qDm7cZnk4mm0FDu/bKA=)
2: 3130332e3133362e3231302e302f32332d3234203d3e20313334383233.roa (hash: ORlTefciXfs7B8j/V1m0IX5sH4O69987zDEATqKs4Vg=)
3: E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl (hash: sRDtij8GAPvTMutAGKiAUYOfVbh09lJe9x8Ov8dJ/Rk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl
rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:36:67:19:e5:91:a6:a1:b2:e0:50:21:39:f6:30:7c:bd:a5:c8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5
Validity
Not Before: Jun 30 00:42:41 2026 GMT
Not After : Jul 1 04:12:41 2026 GMT
Subject: CN=8DDFC5E97611B980E54A7C54B43F1E5A84F033C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:7e:f6:49:c1:2b:a5:43:1a:3b:74:cf:65:
c8:e1:3a:d2:45:bb:c6:61:da:59:4c:96:ba:bf:12:
34:5c:e4:22:14:6a:c1:84:a1:d4:09:fd:e8:b2:8a:
63:be:d8:4c:28:32:ca:3e:e7:7c:d0:8d:34:73:d9:
00:2c:a2:28:8e:3a:7b:5b:55:f3:5a:4f:33:6d:02:
92:4b:67:b4:d6:08:70:d6:ac:b6:24:d1:57:d4:30:
d2:50:9e:62:21:69:98:9f:ef:14:23:00:44:e5:57:
86:83:c8:f9:cd:2b:57:04:c1:07:8c:65:42:11:44:
7d:52:a5:e5:c3:82:d5:69:4a:09:c0:b8:50:4e:23:
9e:fd:59:b8:98:7e:d8:c8:88:14:d5:c4:63:82:89:
01:95:36:66:17:64:14:21:75:65:a1:c1:e1:b9:1e:
69:27:0c:ee:1c:a2:17:53:f6:15:f9:6e:44:0e:96:
d5:4c:5d:44:49:48:43:42:ce:95:f4:01:c9:2c:63:
9d:9a:fe:10:fd:bc:d1:c5:f0:cd:4f:20:41:b4:00:
15:38:03:4f:50:98:3d:57:60:da:46:e5:55:e1:78:
97:3a:15:25:6f:e0:a1:84:63:ab:b1:23:9c:d8:25:
fc:07:34:c0:ad:f5:93:7a:66:ed:0f:3e:46:a7:7e:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DF:C5:E9:76:11:B9:80:E5:4A:7C:54:B4:3F:1E:5A:84:F0:33:C5
X509v3 Authority Key Identifier:
keyid:E0:69:CB:FD:23:4F:1A:B4:E5:40:FE:D5:E8:E3:A1:6D:0F:29:87:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KUANGSHIH/0/E069CBFD234F1AB4E540FED5E8E3A16D0F2987A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fa:3f:a2:aa:4c:ae:44:1f:f3:59:4b:5a:aa:fc:58:b7:d6:
c7:dd:b6:1c:68:ad:8c:f6:55:a1:55:6f:63:07:10:09:0c:8f:
71:4b:64:93:2a:62:ff:9a:0b:dc:a0:21:6f:f9:b7:ba:2f:e1:
2b:df:6f:fa:dc:30:4e:ee:18:50:68:1f:b5:b1:0f:9e:a4:a7:
12:28:ef:93:05:4d:c2:6c:cc:44:66:0d:85:ba:fd:39:31:fa:
b7:de:6b:83:de:28:ca:9a:79:c8:f3:df:2c:a9:5d:f1:c7:17:
34:42:f0:d1:50:52:39:8b:ea:9c:eb:41:4d:58:5a:b5:0b:0d:
89:c7:ca:41:00:11:f9:7b:0e:90:97:72:73:ef:96:c5:6f:f2:
6d:d8:5c:a0:03:c2:a0:21:15:ef:9e:c3:7b:25:38:0b:c4:aa:
3b:ef:60:69:3a:2a:8a:73:18:b1:80:b3:ce:40:f7:2c:bb:83:
7d:31:9d:f1:64:0d:96:f2:eb:1f:a0:9f:71:66:b9:a2:19:a3:
01:5a:26:4a:5f:f5:da:31:1c:6f:3a:be:67:4a:41:97:3b:41:
28:8f:29:46:78:5c:93:13:5d:90:0a:97:99:5b:1b:9f:ba:24:
b2:9f:b3:c5:47:ea:d3:9e:16:73:b9:d6:cd:07:04:2a:12:f0:
b9:08:1f:96
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUXDZnGeWRpqGy4FAhOfYwfL2lyDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQw
RjI5ODdBNTAeFw0yNjA2MzAwMDQyNDFaFw0yNjA3MDEwNDEyNDFaMDMxMTAvBgNV
BAMTKDhEREZDNUU5NzYxMUI5ODBFNTRBN0M1NEI0M0YxRTVBODRGMDMzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvn72ScErpUMaO3TPZcjhOtJF
u8Zh2llMlrq/EjRc5CIUasGEodQJ/eiyimO+2EwoMso+53zQjTRz2QAsoiiOOntb
VfNaTzNtApJLZ7TWCHDWrLYk0VfUMNJQnmIhaZif7xQjAETlV4aDyPnNK1cEwQeM
ZUIRRH1SpeXDgtVpSgnAuFBOI579WbiYftjIiBTVxGOCiQGVNmYXZBQhdWWhweG5
HmknDO4cohdT9hX5bkQOltVMXURJSENCzpX0AcksY52a/hD9vNHF8M1PIEG0ABU4
A09QmD1XYNpG5VXheJc6FSVv4KGEY6uxI5zYJfwHNMCt9ZN6Zu0PPkanfv37AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUjd/F6XYRuYDlSnxUtD8eWoTwM8UwHwYDVR0j
BBgwFoAU4GnL/SNPGrTlQP7V6OOhbQ8ph6UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VBTkdT
SElILzAvRTA2OUNCRkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdBNS5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FMDY5Q0JGRDIzNEYxQUI0RTU0MEZFRDVF
OEUzQTE2RDBGMjk4N0E1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1VBTkdTSElILzAvRTA2OUNC
RkQyMzRGMUFCNEU1NDBGRUQ1RThFM0ExNkQwRjI5ODdBNS5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACn6
P6KqTK5EH/NZS1qq/Fi31sfdthxorYz2VaFVb2MHEAkMj3FLZJMqYv+aC9ygIW/5
t7ov4Svfb/rcME7uGFBoH7WxD56kpxIo75MFTcJszERmDYW6/Tkx+rfea4PeKMqa
ecjz3yypXfHHFzRC8NFQUjmL6pzrQU1YWrULDYnHykEAEfl7DpCXcnPvlsVv8m3Y
XKADwqAhFe+ew3slOAvEqjvvYGk6KopzGLGAs85A9yy7g30xnfFkDZby6x+gn3Fm
uaIZowFaJkpf9doxHG86vmdKQZc7QSiPKUZ4XJMTXZAKl5lbG5+6JLKfs8VH6tOe
FnO51s0HBCoS8LkIH5Y=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:21 2026 by rpki-client