
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json)
Hash identifier: 0DvNTEUA0O//g0GJtW4qFXVSId+pe4tGRQjHrk5ogrI=
Subject key identifier: B3:BF:05:A9:A6:33:89:E0:FA:43:A6:70:C2:9D:D5:6F:9A:F8:93:B4
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial: 78C49DC4C5B7897312B95422A21A96C38DBAE711
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
Manifest number: FF
Signing time: Sun 15 Nov 2026 07:47:40 +0000
Manifest this update: Sun 15 Nov 2026 07:42:40 +0000
Manifest next update: Mon 16 Nov 2026 08:15:40 +0000
Files and hashes: 1: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=)
2: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=)
3: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=)
4: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: VqXLglDjmX9zpPRu0JRAherH/3cAgzce6HLoCz/ukcU=)
5: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 08:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c4:9d:c4:c5:b7:89:73:12:b9:54:22:a2:1a:96:c3:8d:ba:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Validity
Not Before: Nov 15 07:42:40 2026 GMT
Not After : Nov 16 08:15:40 2026 GMT
Subject: CN=B3BF05A9A63389E0FA43A670C29DD56F9AF893B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:ab:40:fd:68:f3:ff:e0:b9:88:fe:e1:73:
51:07:6d:ca:55:86:b0:c9:76:68:fb:45:21:7e:15:
c5:4f:dc:b7:ad:9a:d0:45:e8:58:47:e3:53:0f:14:
84:1a:c7:77:2e:4e:0b:76:35:c1:21:25:fe:e9:a2:
4a:82:c5:a6:e8:bf:73:4f:eb:43:9b:31:6b:76:3d:
78:ab:09:22:f5:d8:d5:47:48:75:79:94:ec:90:4d:
44:69:60:c8:db:d5:3d:ee:fd:13:86:bc:a1:72:b3:
c7:7d:23:f8:0b:a0:24:2a:83:41:ef:c7:4c:e8:52:
4d:98:e0:7b:49:55:22:2f:34:1c:26:e4:12:30:bb:
45:7f:37:11:16:fa:38:d1:e8:60:2a:63:84:44:40:
fc:0e:47:61:6d:3b:a4:1b:8f:6d:11:7a:72:50:16:
3a:9c:26:c4:b8:44:f2:ed:20:67:89:b6:1b:bb:41:
a5:28:32:da:24:6c:3d:62:00:78:19:aa:5e:59:08:
d2:63:3c:e9:4b:0c:9a:43:f0:48:91:83:5f:5f:8e:
84:0e:9c:7b:8c:cc:db:b3:25:07:75:bd:ae:f3:be:
e3:69:31:a1:9f:e5:fd:ed:e3:34:59:41:f4:46:d3:
d3:b3:d4:8f:1f:a2:af:88:2e:73:82:a3:97:e2:ec:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:05:A9:A6:33:89:E0:FA:43:A6:70:C2:9D:D5:6F:9A:F8:93:B4
X509v3 Authority Key Identifier:
keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4e:e8:b7:db:d9:80:4c:63:3a:0f:58:71:30:ca:89:58:d4:
08:be:5c:91:91:73:7f:b2:f4:74:f6:f8:3c:9f:20:85:d2:6f:
70:38:67:a2:48:e7:d7:e8:84:eb:f2:48:47:f0:a7:67:d8:35:
01:34:b4:94:00:3a:a3:c8:e2:fa:2a:6b:aa:97:f9:75:54:a6:
40:dc:d5:a7:51:ba:e4:f5:09:9d:80:96:7d:32:ef:07:bd:ca:
fb:a5:62:c6:fe:0a:63:33:74:e5:da:ff:a8:58:48:ea:c2:6b:
aa:cf:84:7d:dc:81:1c:f5:2a:53:c9:9e:76:7d:c8:30:67:a3:
5e:65:a5:33:ad:d6:af:da:c5:d4:52:a9:f5:ce:c4:e0:4a:14:
7c:32:c5:38:33:3c:19:c1:a8:52:3b:83:3c:44:2a:d1:c5:a4:
f7:9f:23:2e:bf:7f:fd:d8:50:66:f0:b3:ca:0a:04:59:bf:84:
77:4c:40:a0:66:da:51:d5:b0:07:9a:9a:6a:cf:5d:ff:d7:34:
47:06:87:e3:72:1f:8a:3f:14:3c:52:76:39:6c:4e:e4:a8:bb:
62:f0:d4:f9:35:86:82:43:8d:e5:84:fd:4d:8d:c5:46:a1:dd:
94:f9:60:e4:7b:a1:22:2a:c0:43:02:78:8d:ec:ce:bb:b5:2d:
dd:8e:8c:c6
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUeMSdxMW3iXMSuVQiohqWw4265xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYw
RDdFMzRGQzAeFw0yNjExMTUwNzQyNDBaFw0yNjExMTYwODE1NDBaMDMxMTAvBgNV
BAMTKEIzQkYwNUE5QTYzMzg5RTBGQTQzQTY3MEMyOURENTZGOUFGODkzQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsKtA/Wjz/+C5iP7hc1EHbcpV
hrDJdmj7RSF+FcVP3LetmtBF6FhH41MPFIQax3cuTgt2NcEhJf7pokqCxabov3NP
60ObMWt2PXirCSL12NVHSHV5lOyQTURpYMjb1T3u/ROGvKFys8d9I/gLoCQqg0Hv
x0zoUk2Y4HtJVSIvNBwm5BIwu0V/NxEW+jjR6GAqY4REQPwOR2FtO6Qbj20RenJQ
FjqcJsS4RPLtIGeJthu7QaUoMtokbD1iAHgZql5ZCNJjPOlLDJpD8EiRg19fjoQO
nHuMzNuzJQd1va7zvuNpMaGf5f3t4zRZQfRG09Oz1I8foq+ILnOCo5fi7FL1AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUs78FqaYzieD6Q6Zwwp3Vb5r4k7QwHwYDVR0j
BBgwFoAUGc0we5njlXYDLtogQwcOHw1+NPwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9O
LzAvMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xOUNEMzA3Qjk5RTM5NTc2MDMyRURBMjA0MzA3
MEUxRjBEN0UzNEZDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9OLzAvMTlDRDMwN0I5OUUz
OTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEBO6Lfb2YBM
YzoPWHEwyolY1Ai+XJGRc3+y9HT2+DyfIIXSb3A4Z6JI59fohOvySEfwp2fYNQE0
tJQAOqPI4voqa6qX+XVUpkDc1adRuuT1CZ2Aln0y7we9yvulYsb+CmMzdOXa/6hY
SOrCa6rPhH3cgRz1KlPJnnZ9yDBno15lpTOt1q/axdRSqfXOxOBKFHwyxTgzPBnB
qFI7gzxEKtHFpPefIy6/f/3YUGbws8oKBFm/hHdMQKBm2lHVsAeammrPXf/XNEcG
h+NyH4o/FDxSdjlsTuSou2Lw1Pk1hoJDjeWE/U2NxUah3ZT5YOR7oSIqwEMCeI3s
zru1Ld2OjMY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:58:31 2026 by rpki-client