
$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
File: E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft (raw, json)
Hash identifier: uLi7B2j50zJEkPmP2NB//ksF0N0PLpliD/Z/K+7ET/I=
Subject key identifier: F0:08:5C:BF:A0:65:B8:3B:B0:1C:7B:DD:7C:EC:E2:43:4E:1A:F9:83
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Certificate issuer: /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial: 3D823ECD47D68940F6C1A1802F4874BF1FB23630
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
Manifest number: 4A
Signing time: Tue 30 Jun 2026 07:18:18 +0000
Manifest this update: Tue 30 Jun 2026 07:13:18 +0000
Manifest next update: Wed 01 Jul 2026 08:01:18 +0000
Files and hashes: 1: 3130332e3139362e3137322e302f32332d3332203d3e20313331363537.roa (hash: NpkKgZKgQzFsbjfJX1vZdhNyqUb+xH2r7dgMGqJtZg8=)
2: 3130332e35312e38392e302f32342d3332203d3e20333936393832.roa (hash: 7NHk4ptta4FPEJ/NYsRwLzG7cQkZ9gd7Kxadg42nT8M=)
3: 3130332e35312e38382e302f32342d3332203d3e20333936393832.roa (hash: c66ljepWyfaVVSJPo172SyefLPJobqLPYK+Xd4H6D0k=)
4: 323430303a633961303a3a2f33322d3438203d3e20313331363537.roa (hash: duqlFQARu8jUfndJSdntYMhiK6YR6wczF3YaKirO3Fc=)
5: E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl (hash: SIYH9u1cfpEUxKnUeCp3phhaH4BiWmvQqJx2jDK2yXs=)
6: 3130332e35312e38382e302f32332d3332203d3e20313331363537.roa (hash: vAjwRathCa+mLRNCd0gEZIFCoZ7Q7I8qAI8wyykUzQo=)
7: 3130332e35312e38382e302f32332d3332203d3e20313334383233.roa (hash: 3MhCCA9x4cSH+VWvwThmSDFRAUojv21Q6ESF/FUc02s=)
8: 323430303a633961303a3a2f33322d3438203d3e20313334383233.roa (hash: roZf74LZTjPC37WNB8hAfHKXR+n61h+kMwdr2WeTD/c=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:82:3e:cd:47:d6:89:40:f6:c1:a1:80:2f:48:74:bf:1f:b2:36:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Validity
Not Before: Jun 30 07:13:18 2026 GMT
Not After : Jul 1 08:01:18 2026 GMT
Subject: CN=F0085CBFA065B83BB01C7BDD7CECE2434E1AF983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:e0:d4:19:5a:94:a7:0e:07:9f:ee:18:ae:
d4:44:fe:3a:c5:f6:99:b7:b3:a3:e3:3c:97:2e:b5:
1e:6e:4a:6b:64:74:02:7e:47:4f:7b:87:7b:d9:a5:
b4:86:76:63:15:f2:0b:eb:a8:ad:42:22:fa:19:90:
d6:9b:90:d5:eb:3f:e8:6e:e3:07:1d:f3:d8:a0:c2:
40:9f:ea:10:a5:f0:b8:d8:2c:c4:5b:df:f9:e9:8f:
73:be:9b:c3:43:88:07:16:b6:c5:1c:a3:aa:f1:4d:
6b:46:fb:5d:59:a8:ff:04:f2:9f:4c:a6:06:ea:8d:
26:5f:39:48:dc:5c:28:cf:fd:8d:54:fd:7e:0e:da:
c1:db:18:e4:49:d7:8d:8f:38:04:07:84:e4:0f:54:
a9:5c:dc:97:9f:c3:0a:15:ac:04:70:b6:48:48:72:
6e:a1:7d:c6:ae:a4:4b:7c:9f:7e:4b:1c:dc:5a:66:
e6:9e:9e:08:7b:b0:41:8e:75:ea:f2:8f:04:ae:40:
d5:39:62:e8:30:76:00:8f:10:aa:1f:1e:83:cd:b7:
26:22:15:9a:f5:1c:6d:6b:34:ef:63:6c:e4:74:50:
24:00:b6:4c:29:1c:1d:a2:c1:59:0d:64:67:fa:14:
e7:f0:5f:c9:79:75:f8:88:e9:02:4c:46:0a:ea:48:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:08:5C:BF:A0:65:B8:3B:B0:1C:7B:DD:7C:EC:E2:43:4E:1A:F9:83
X509v3 Authority Key Identifier:
keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:11:c0:8a:ac:9e:95:bf:65:cf:8a:ab:b8:fb:8a:8c:38:
0a:7c:96:e3:cb:fa:2f:81:53:cc:04:17:60:31:11:d2:8b:17:
00:46:e2:51:50:dd:e3:1a:5f:b0:e9:33:a8:8c:dc:2a:43:a8:
a7:0b:48:ea:e0:06:ff:eb:30:42:0b:31:30:b8:ae:cd:42:aa:
77:61:e6:e3:44:c9:42:11:28:78:02:34:7d:cf:7b:4b:a1:d2:
9e:b4:af:8d:4d:7a:43:35:e5:08:9d:31:e2:47:c9:f5:4d:d9:
48:c4:36:5e:18:70:76:f5:e8:e8:83:6b:98:5d:79:82:b5:15:
fa:14:35:7c:f3:58:e6:7e:af:6d:33:a7:be:cc:33:dc:09:5d:
1e:59:62:08:73:1f:60:82:4d:e1:a4:36:e0:66:b3:20:98:f1:
37:be:43:a6:4d:b8:26:a0:14:f0:15:21:e1:55:7d:df:03:aa:
e7:3e:e8:b2:b6:a0:f0:0b:61:b4:58:1c:24:8f:c7:b8:01:ff:
17:eb:b1:6e:26:1b:c6:33:bf:d2:2b:70:19:14:bb:d1:4e:20:
36:bf:29:84:ec:34:68:58:88:22:78:b9:fa:9f:a8:6e:a8:cb:
6b:f3:af:29:2e:6f:99:c3:a4:e6:72:76:16:cf:bc:04:f6:76:
55:c1:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:16 2026 by rpki-client