
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File: CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier: 7fysmWEXPF5uFCHvOw3z9bz1VtudFTcF5VZeGpxru5M=
Subject key identifier: 6E:0B:F9:6C:9B:32:D0:51:92:10:3A:FB:C6:65:6A:BA:3A:97:D2:91
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer: /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial: 688A49030A06E0E7C46F8C913A2ED3C7D9D8FDB5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number: 45
Signing time: Tue 30 Jun 2026 07:48:21 +0000
Manifest this update: Tue 30 Jun 2026 07:43:21 +0000
Manifest next update: Wed 01 Jul 2026 10:07:21 +0000
Files and hashes: 1: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
2: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: vjbj+MYX3x2w7Rnj1VsRZ3KDjJMN3+/R4xgsnp1+kTI=)
3: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 10:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8a:49:03:0a:06:e0:e7:c4:6f:8c:91:3a:2e:d3:c7:d9:d8:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Validity
Not Before: Jun 30 07:43:21 2026 GMT
Not After : Jul 1 10:07:21 2026 GMT
Subject: CN=6E0BF96C9B32D05192103AFBC6656ABA3A97D291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:6e:bd:62:24:6a:0a:d6:0f:ff:a8:7b:90:
76:a7:1e:fb:01:86:d0:1b:b6:cb:bf:77:c9:4d:a8:
0f:f2:1f:50:47:fd:39:37:02:06:88:36:c5:72:56:
21:b5:49:9b:70:b9:13:08:ed:98:b8:0f:19:2b:0a:
0e:f8:19:62:1f:a8:ef:16:62:dc:5e:6b:a9:fe:82:
5e:a8:d8:3a:a8:99:49:bf:e7:f2:1a:96:5a:14:05:
8f:89:03:43:31:b2:cd:21:9e:e5:5a:cb:3c:ba:0a:
18:5b:e0:c2:ad:00:2a:42:82:f2:9a:f2:e6:4e:e5:
08:fe:fc:1c:6b:8d:c2:20:63:e5:7b:d5:dd:39:b2:
ed:1e:fa:95:da:04:72:15:f2:bd:91:73:83:f4:89:
d6:c3:fe:1b:69:4b:6a:6c:c1:3b:b9:0f:3c:48:25:
21:b9:e4:25:87:fb:84:0b:db:36:d3:8a:1c:86:49:
34:09:08:1d:1e:67:ea:70:89:75:ea:a5:bd:f3:a8:
e4:42:5e:3b:33:b3:32:41:25:e9:fe:3a:88:c2:fc:
16:20:ee:86:a0:7b:92:4c:ca:3b:06:70:7f:62:a5:
a6:4b:69:3a:84:01:bd:74:fe:f6:f2:1d:16:84:99:
6f:8d:71:3b:c4:ef:c6:15:3e:9a:99:f9:4c:05:9b:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:F9:6C:9B:32:D0:51:92:10:3A:FB:C6:65:6A:BA:3A:97:D2:91
X509v3 Authority Key Identifier:
keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:dd:44:c5:37:c0:3f:ad:21:00:3c:3b:21:7d:81:4a:bc:53:
93:ae:39:b8:85:c8:de:d1:c0:dc:af:42:48:f0:3e:fe:5c:5e:
76:7a:0c:10:7a:11:58:f4:31:e6:b5:a2:d7:5a:d2:99:00:0e:
cd:5d:b0:0a:36:5b:b9:fe:9d:8b:d6:8d:e5:c5:43:ca:aa:a1:
a2:07:63:49:2b:c3:9b:38:5d:02:3f:34:8b:61:35:92:ea:b2:
ce:08:18:f5:59:0c:d0:bb:d6:e3:2e:4e:ac:cc:02:5f:91:b7:
8e:e0:19:fb:ec:4a:85:1a:e0:38:16:8b:e1:e1:15:20:71:67:
25:f0:07:4d:76:bd:5e:f5:3f:e0:c0:72:96:ef:b6:0b:f4:08:
9d:90:56:2f:8a:7e:f5:b9:4d:c9:51:88:60:82:18:90:e5:0c:
55:01:73:63:7d:62:8b:17:fa:c1:bd:8c:12:8e:07:28:3a:58:
51:25:c3:b2:e8:7b:16:7c:82:3b:fe:d1:e9:07:bc:8d:ad:e0:
29:53:75:f1:2c:86:fe:66:0c:e8:2e:2d:41:12:9c:a2:76:c5:
58:23:be:a5:46:11:8f:23:70:a8:9d:a1:99:58:d8:32:ae:60:
73:50:5a:0d:30:3e:0a:6c:a3:8a:19:7d:7f:7b:1f:36:cf:14:
a1:7c:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:55 2026 by rpki-client