
$ rpki-client -vvf rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
File: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft (raw, json)
Hash identifier: AAmZXaXnfbvA8xoopGDZxmHpIkKeONlCgd0o3spURys=
Subject key identifier: 95:9B:5D:27:63:74:91:03:D1:F6:4A:72:8F:89:6F:85:B5:6D:3B:96
Authority key identifier: D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
Certificate issuer: /CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Certificate serial: 69F2D7C25D500F3C886F0D07D99CE7BCF48B646A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
Manifest number: 43
Signing time: Tue 30 Jun 2026 07:03:17 +0000
Manifest this update: Tue 30 Jun 2026 06:58:17 +0000
Manifest next update: Wed 01 Jul 2026 09:41:17 +0000
Files and hashes: 1: 3130332e3136322e38342e302f32332d3234203d3e203633383934.roa (hash: 64VWfWpwPEaWvDLB9FclOWVpeag/ViOxY6Yn4Un8azo=)
2: D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl (hash: HE7mV4oY8iI7rCM42hCKYdf5aO6Sm36FiLo2qMnOXis=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 09:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f2:d7:c2:5d:50:0f:3c:88:6f:0d:07:d9:9c:e7:bc:f4:8b:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D44F2A492A54CEF17E23EBCBA3BD57730005DBCD
Validity
Not Before: Jun 30 06:58:17 2026 GMT
Not After : Jul 1 09:41:17 2026 GMT
Subject: CN=959B5D2763749103D1F64A728F896F85B56D3B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:a4:b2:a4:60:87:a9:c0:62:60:e9:d0:3a:
74:d5:c1:f6:de:6a:c5:57:c6:ab:c9:94:18:56:28:
c5:ba:b3:98:15:b7:b6:3f:35:f1:c4:fd:0b:c3:79:
be:14:84:01:c8:08:6d:ab:e3:f6:2f:2e:30:2f:b7:
b4:99:d5:bf:21:19:ac:45:fa:c4:1f:f3:1c:1f:cc:
7e:ef:83:69:5d:25:2f:a0:0f:a0:e5:a9:37:5a:a5:
aa:11:1b:13:db:23:d9:15:5f:8d:b0:eb:26:d0:fe:
48:b8:c8:07:58:cc:a7:8e:a4:91:4e:22:ae:c6:bb:
17:74:e9:57:29:3b:45:47:72:4a:11:8e:a9:d5:14:
06:be:12:b7:26:f7:89:3c:6c:94:e9:4c:10:92:f8:
f2:93:fb:a2:9d:d7:57:80:a0:77:b7:d3:92:1e:78:
03:86:18:c1:51:ec:fb:b1:b8:f9:22:76:3b:fd:43:
ef:17:df:7a:04:a5:96:bf:be:4c:8f:61:03:08:39:
2a:2e:4d:7d:f1:9f:81:bc:2e:b2:0c:52:71:d4:45:
0f:a7:3f:90:af:68:d1:d1:fd:b3:19:a4:88:dd:75:
9b:09:78:e1:ca:03:26:fe:55:3b:51:08:d2:a9:db:
59:56:ff:b5:4b:0f:0c:93:45:2a:1f:d1:dc:d1:2d:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:5D:27:63:74:91:03:D1:F6:4A:72:8F:89:6F:85:B5:6D:3B:96
X509v3 Authority Key Identifier:
keyid:D4:4F:2A:49:2A:54:CE:F1:7E:23:EB:CB:A3:BD:57:73:00:05:DB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMCI/0/D44F2A492A54CEF17E23EBCBA3BD57730005DBCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bd:85:99:2e:54:23:09:d4:ab:25:cd:61:78:06:fb:50:4f:
74:a1:da:49:ed:3f:fa:15:2b:5c:32:98:3c:ad:7b:88:44:ff:
93:fc:72:9a:07:90:3d:d9:6d:3c:32:eb:e0:1f:12:50:39:67:
66:1e:4d:00:39:0b:7a:b1:3a:7c:07:50:cd:c6:1e:02:af:33:
7c:4c:28:ed:5e:2b:e5:44:e9:25:05:95:bf:44:6b:3c:14:36:
4f:40:55:f1:11:af:32:0e:87:00:6a:f1:f2:10:66:79:4e:dc:
7c:a9:89:72:5c:df:44:60:c8:03:06:8b:a5:2d:3e:0d:52:ca:
4f:76:f3:25:2b:e5:b6:07:56:ad:2f:0a:dd:1c:3e:d0:8f:db:
22:52:27:d2:ef:70:b4:5d:33:5a:11:2f:1b:03:3a:f9:2a:c5:
9c:85:0a:5d:f7:f0:43:ab:55:61:67:1e:73:79:a3:a8:f0:91:
5f:8f:b8:28:f5:3b:a9:13:e3:62:bf:29:77:05:51:94:48:de:
d8:69:bd:0f:cc:97:92:64:7b:07:38:ca:df:47:9b:eb:84:d2:
1d:a1:75:44:ab:b7:9e:53:fb:9c:fb:d4:25:82:cb:d7:f4:14:
6b:83:e3:9f:33:a1:4b:97:e7:be:a7:b3:68:d0:5f:7e:56:c6:
e5:dd:ad:6c
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUafLXwl1QDzyIbw0H2ZznvPSLZGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0RjJBNDkyQTU0Q0VGMTdFMjNFQkNCQTNCRDU3NzMw
MDA1REJDRDAeFw0yNjA2MzAwNjU4MTdaFw0yNjA3MDEwOTQxMTdaMDMxMTAvBgNV
BAMTKDk1OUI1RDI3NjM3NDkxMDNEMUY2NEE3MjhGODk2Rjg1QjU2RDNCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFqSypGCHqcBiYOnQOnTVwfbe
asVXxqvJlBhWKMW6s5gVt7Y/NfHE/QvDeb4UhAHICG2r4/YvLjAvt7SZ1b8hGaxF
+sQf8xwfzH7vg2ldJS+gD6DlqTdapaoRGxPbI9kVX42w6ybQ/ki4yAdYzKeOpJFO
Iq7Guxd06VcpO0VHckoRjqnVFAa+Ercm94k8bJTpTBCS+PKT+6Kd11eAoHe305Ie
eAOGGMFR7PuxuPkidjv9Q+8X33oEpZa/vkyPYQMIOSouTX3xn4G8LrIMUnHURQ+n
P5CvaNHR/bMZpIjddZsJeOHKAyb+VTtRCNKp21lW/7VLDwyTRSof0dzRLXAzAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUlZtdJ2N0kQPR9kpyj4lvhbVtO5YwHwYDVR0j
BBgwFoAU1E8qSSpUzvF+I+vLo71XcwAF280wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01DSS8w
L0Q0NEYyQTQ5MkE1NENFRjE3RTIzRUJDQkEzQkQ1NzczMDAwNURCQ0QuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvRDQ0RjJBNDkyQTU0Q0VGMTdFMjNFQkNCQTNCRDU3
NzMwMDA1REJDRC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNQ0kvMC9ENDRGMkE0OTJBNTRDRUYx
N0UyM0VCQ0JBM0JENTc3MzAwMDVEQkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL2FmS5UIwnUqyXN
YXgG+1BPdKHaSe0/+hUrXDKYPK17iET/k/xymgeQPdltPDLr4B8SUDlnZh5NADkL
erE6fAdQzcYeAq8zfEwo7V4r5UTpJQWVv0RrPBQ2T0BV8RGvMg6HAGrx8hBmeU7c
fKmJclzfRGDIAwaLpS0+DVLKT3bzJSvltgdWrS8K3Rw+0I/bIlIn0u9wtF0zWhEv
GwM6+SrFnIUKXffwQ6tVYWcec3mjqPCRX4+4KPU7qRPjYr8pdwVRlEje2Gm9D8yX
kmR7BzjK30eb64TSHaF1RKu3nlP7nPvUJYLL1/QUa4PjnzOhS5fnvqezaNBfflbG
5d2tbA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:07 2026 by rpki-client