
$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
File: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft (raw, json)
Hash identifier: eX3I9n1qZoqcKKoKee8oKlY1k9UKX2Ursq6dAdxnKYE=
Subject key identifier: 95:FF:09:3D:92:68:DA:DB:2E:2D:8C:B1:AF:FF:BF:49:FF:DE:CB:E6
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Certificate issuer: /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial: 4E44A98B6FE2F03A7C3BBEBC0C09C862D20E80B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
Manifest number: 04
Signing time: Wed 13 May 2026 08:47:49 +0000
Manifest this update: Wed 13 May 2026 08:42:49 +0000
Manifest next update: Thu 14 May 2026 12:36:49 +0000
Files and hashes: 1: 3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (hash: JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=)
2: D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl (hash: 1WMFC+EXuZCRl1S9C2u7Qozx+RKdtP99JnM3FmYGyqc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:44:a9:8b:6f:e2:f0:3a:7c:3b:be:bc:0c:09:c8:62:d2:0e:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Validity
Not Before: May 13 08:42:49 2026 GMT
Not After : May 14 12:36:49 2026 GMT
Subject: CN=95FF093D9268DADB2E2D8CB1AFFFBF49FFDECBE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:f9:00:db:80:00:7e:bf:fa:dd:e1:d1:7d:
c3:57:ed:21:71:c5:4e:02:2a:b0:f7:72:41:55:e9:
22:04:fa:fe:61:93:a6:30:c8:9b:87:ac:ab:58:16:
d7:42:3b:3d:64:36:ab:30:04:71:e9:ea:88:62:b2:
ed:bd:36:e0:6a:16:e3:51:99:fd:d9:a5:c5:f1:9d:
e8:ed:4d:1b:8c:f1:68:96:55:85:3e:dd:4e:7a:4b:
18:ed:24:d8:22:db:1f:71:23:7d:46:f1:88:97:0d:
da:52:84:b9:d9:4c:b8:1a:e9:8d:3f:ca:26:29:33:
2c:a6:ac:6e:77:91:d0:c2:47:c1:98:7f:44:d6:38:
b7:db:53:87:8f:7e:de:d1:cf:d9:ac:f4:92:e1:a6:
f9:f1:3c:73:19:fd:6c:d2:26:43:23:7d:ca:ed:6e:
f1:1a:f9:17:c6:81:e1:0a:6d:63:f2:39:f4:b0:cd:
51:d0:f4:bf:2d:7c:49:9a:ac:5e:35:27:5e:fb:13:
89:3d:8a:0e:5d:d5:95:41:5e:34:5d:f3:a9:63:57:
c8:30:b5:80:90:9a:45:0a:15:0d:41:fa:ef:72:11:
24:79:b5:2f:00:25:90:87:5b:e6:85:40:01:25:31:
5b:f2:63:f7:7a:d0:20:34:43:9b:f0:a9:ee:97:c6:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FF:09:3D:92:68:DA:DB:2E:2D:8C:B1:AF:FF:BF:49:FF:DE:CB:E6
X509v3 Authority Key Identifier:
keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e3:77:06:2c:b5:a2:35:83:f7:32:ed:b2:ad:3a:87:4f:a6:
a0:68:14:4e:8a:88:3b:65:9d:0c:19:89:9a:9c:9c:8b:9c:16:
ee:05:b2:99:b1:6d:11:eb:6a:23:2d:68:98:f0:2f:50:74:7e:
fb:f3:d9:5b:c7:a3:77:8a:88:cc:ec:af:d2:c6:94:d6:0b:b3:
f5:bf:65:f7:3d:d4:16:c6:dc:5a:50:fd:79:86:68:95:1c:d9:
16:fd:f5:4f:b5:25:bc:5e:d0:6f:3b:49:cf:ee:72:4b:20:3f:
39:39:f4:a0:c7:da:b9:a6:e9:6d:91:a3:e7:a9:3c:6e:ec:8c:
e5:12:a0:60:92:86:2f:b0:a3:90:02:0c:f6:1a:2d:8a:43:20:
0d:6a:6c:17:c7:c2:94:08:39:d5:11:e3:73:5a:2a:4c:97:86:
50:34:62:ba:6f:95:8a:07:76:b4:c8:ca:d4:84:46:36:a3:52:
16:9c:ec:d0:36:69:21:51:69:89:3c:dd:03:0c:ad:f1:3c:8b:
a0:0e:aa:03:d7:3d:e4:b4:e5:9a:1f:47:1c:b2:b3:d8:88:57:
71:8d:1c:e7:aa:2a:3c:78:58:1c:3b:4b:18:d9:03:30:67:fb:
53:fa:d8:b3:22:67:a6:30:86:63:40:3d:48:a2:7a:19:00:bf:
18:35:98:3b
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUTkSpi2/i8Dp8O768DAnIYtIOgLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBCNDU4Q0UwQkU1OEUyMTc3OUQ1QUNBMDk2Q0VGQ0VC
Q0VENUQxMjAeFw0yNjA1MTMwODQyNDlaFw0yNjA1MTQxMjM2NDlaMDMxMTAvBgNV
BAMTKDk1RkYwOTNEOTI2OERBREIyRTJEOENCMUFGRkZCRjQ5RkZERUNCRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiq/kA24AAfr/63eHRfcNX7SFx
xU4CKrD3ckFV6SIE+v5hk6YwyJuHrKtYFtdCOz1kNqswBHHp6ohisu29NuBqFuNR
mf3ZpcXxnejtTRuM8WiWVYU+3U56SxjtJNgi2x9xI31G8YiXDdpShLnZTLga6Y0/
yiYpMyymrG53kdDCR8GYf0TWOLfbU4ePft7Rz9ms9JLhpvnxPHMZ/WzSJkMjfcrt
bvEa+RfGgeEKbWPyOfSwzVHQ9L8tfEmarF41J177E4k9ig5d1ZVBXjRd86ljV8gw
tYCQmkUKFQ1B+u9yESR5tS8AJZCHW+aFQAElMVvyY/d60CA0Q5vwqe6Xxp4nAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUlf8JPZJo2tsuLYyxr/+/Sf/ey+YwHwYDVR0j
BBgwFoAU0LRYzgvljiF3nVrKCWzvzrztXRIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElBTkdD
QUkvMC9EMEI0NThDRTBCRTU4RTIxNzc5RDVBQ0EwOTZDRUZDRUJDRUQ1RDEyLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0QwQjQ1OENFMEJFNThFMjE3NzlENUFDQTA5
NkNFRkNFQkNFRDVEMTIuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSUFOR0NBSS8wL0QwQjQ1OENF
MEJFNThFMjE3NzlENUFDQTA5NkNFRkNFQkNFRDVEMTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS43cG
LLWiNYP3Mu2yrTqHT6agaBROiog7ZZ0MGYmanJyLnBbuBbKZsW0R62ojLWiY8C9Q
dH7789lbx6N3iojM7K/SxpTWC7P1v2X3PdQWxtxaUP15hmiVHNkW/fVPtSW8XtBv
O0nP7nJLID85OfSgx9q5pultkaPnqTxu7IzlEqBgkoYvsKOQAgz2Gi2KQyANamwX
x8KUCDnVEeNzWipMl4ZQNGK6b5WKB3a0yMrUhEY2o1IWnOzQNmkhUWmJPN0DDK3x
PIugDqoD1z3ktOWaH0ccsrPYiFdxjRznqio8eFgcO0sY2QMwZ/tT+tizImemMIZj
QD1IonoZAL8YNZg7
-----END CERTIFICATE-----
Generated at Wed May 13 20:36:10 2026 by rpki-client