
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json)
Hash identifier: cQbOZ9nHlbpVztTOIMUaT0hOcxb/Za+W7hMeJhpWIzQ=
Subject key identifier: BB:87:C8:7B:71:84:0D:A1:F9:8F:E7:0A:6A:4A:F0:EE:61:DA:2A:10
Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42
Certificate serial: 0321FCE1148FF8E1219C95AC02275A3D3FB0F457
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
Manifest number: 48
Signing time: Tue 30 Jun 2026 04:08:04 +0000
Manifest this update: Tue 30 Jun 2026 04:03:04 +0000
Manifest next update: Wed 01 Jul 2026 04:39:04 +0000
Files and hashes: 1: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=)
2: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=)
3: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=)
4: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: ZY59wsRS/Fv9q3Cw1RqphlEG8vtWiDIR/4BxMsmptA4=)
5: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=)
6: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 04:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:21:fc:e1:14:8f:f8:e1:21:9c:95:ac:02:27:5a:3d:3f:b0:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42
Validity
Not Before: Jun 30 04:03:04 2026 GMT
Not After : Jul 1 04:39:04 2026 GMT
Subject: CN=BB87C87B71840DA1F98FE70A6A4AF0EE61DA2A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:18:ff:94:00:50:c2:c1:42:6c:85:47:52:
ea:19:7b:8c:96:6c:47:c6:41:79:b1:81:a4:25:33:
05:ca:f9:09:75:d3:3a:80:7e:cf:f9:8c:5f:ed:a5:
7e:69:bb:50:3d:5f:92:17:dd:1e:4a:45:16:9c:ff:
de:75:a2:3e:86:41:c2:e1:61:27:cb:19:59:5d:40:
e3:fd:f5:74:60:5d:99:fd:d2:27:d0:6b:37:20:c1:
58:31:52:e7:4f:8c:f0:3c:d2:c4:a3:81:80:02:07:
b0:3a:2c:99:5a:ac:6e:10:57:9b:56:aa:db:5d:05:
bc:9d:ec:0a:59:11:c3:37:3f:3e:7f:e5:33:37:98:
41:d8:1b:11:0a:5a:57:c1:c8:11:3f:8e:1d:06:03:
24:ee:36:f1:ae:c9:d6:9c:3c:e0:28:95:db:1b:56:
2d:25:96:58:49:81:9c:8c:45:4e:f8:e7:5c:19:aa:
4b:6d:97:7d:d9:f9:d9:9b:20:7d:b0:93:bd:19:7d:
aa:1e:99:76:4c:bf:81:15:ea:6b:82:18:ff:a1:5d:
23:01:90:e9:2a:f0:e8:c1:45:01:f5:e2:3e:4c:c8:
53:ce:05:9c:9a:e3:5d:4e:5f:34:17:a4:26:1d:b9:
a4:0a:32:74:52:3d:91:a6:7f:88:df:fe:6d:62:9c:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:C8:7B:71:84:0D:A1:F9:8F:E7:0A:6A:4A:F0:EE:61:DA:2A:10
X509v3 Authority Key Identifier:
keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:57:87:7c:91:c6:33:2e:a2:a4:87:7d:4e:ab:e1:ae:a7:d8:
9c:5b:02:81:d6:53:6c:24:b9:41:d8:44:99:35:fa:a3:00:01:
fd:c8:a1:a9:a8:24:c4:76:34:05:d7:ad:f4:52:54:db:f5:e6:
c0:bc:d7:30:e7:a9:c6:b2:ab:32:13:3d:26:24:2a:d9:dc:5d:
65:dc:0c:43:cd:95:ee:35:c5:57:d3:3c:02:65:d2:68:0a:af:
14:c0:7f:34:72:e2:90:fd:8d:1b:6c:57:e3:9c:88:7c:05:1d:
a8:ed:d2:1c:f0:d4:75:cd:01:d6:ac:08:bc:88:aa:02:39:43:
b9:89:d4:34:fb:40:70:68:10:d4:b6:e8:84:89:ac:a8:be:21:
79:30:1c:25:ee:b2:88:99:d1:34:fa:12:2a:f1:c3:55:98:58:
cb:83:9f:91:e3:14:ef:0e:1a:4b:00:4e:e4:58:16:52:1a:44:
2c:9d:cf:33:85:fd:3a:74:87:18:e2:9e:0e:7a:31:36:95:84:
a6:28:95:a5:d6:f7:0a:8b:d9:ba:bf:ca:87:4f:a6:22:e7:b1:
53:de:44:b3:7d:c4:0d:90:60:26:e1:f6:fa:bb:b3:b5:85:5d:
e1:66:37:d7:79:28:63:05:2b:13:86:22:f5:32:d2:d4:ca:ec:
5c:80:03:f5
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUAyH84RSP+OEhnJWsAidaPT+w9FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhERDcx
OEU3MEQ0MjAeFw0yNjA2MzAwNDAzMDRaFw0yNjA3MDEwNDM5MDRaMDMxMTAvBgNV
BAMTKEJCODdDODdCNzE4NDBEQTFGOThGRTcwQTZBNEFGMEVFNjFEQTJBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRphj/lABQwsFCbIVHUuoZe4yW
bEfGQXmxgaQlMwXK+Ql10zqAfs/5jF/tpX5pu1A9X5IX3R5KRRac/951oj6GQcLh
YSfLGVldQOP99XRgXZn90ifQazcgwVgxUudPjPA80sSjgYACB7A6LJlarG4QV5tW
qttdBbyd7ApZEcM3Pz5/5TM3mEHYGxEKWlfByBE/jh0GAyTuNvGuydacPOAoldsb
Vi0lllhJgZyMRU7451wZqkttl33Z+dmbIH2wk70ZfaoemXZMv4EV6muCGP+hXSMB
kOkq8OjBRQH14j5MyFPOBZya411OXzQXpCYduaQKMnRSPZGmf4jf/m1inFqzAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUu4fIe3GEDaH5j+cKakrw7mHaKhAwHwYDVR0j
BBgwFoAUQyc09AkgIFymRDo7mTCN1xjnDUIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdEUy8w
LzQzMjczNEY0MDkyMDIwNUNBNjQ0M0EzQjk5MzA4REQ3MThFNzBENDIuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhE
RDcxOEU3MEQ0Mi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRFMvMC80MzI3MzRGNDA5MjAyMDVD
QTY0NDNBM0I5OTMwOERENzE4RTcwRDQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFeHfJHGMy6ipId9
TqvhrqfYnFsCgdZTbCS5QdhEmTX6owAB/cihqagkxHY0Bdet9FJU2/XmwLzXMOep
xrKrMhM9JiQq2dxdZdwMQ82V7jXFV9M8AmXSaAqvFMB/NHLikP2NG2xX45yIfAUd
qO3SHPDUdc0B1qwIvIiqAjlDuYnUNPtAcGgQ1LbohImsqL4heTAcJe6yiJnRNPoS
KvHDVZhYy4OfkeMU7w4aSwBO5FgWUhpELJ3PM4X9OnSHGOKeDnoxNpWEpiiVpdb3
CovZur/Kh0+mIuexU95Es33EDZBgJuH2+ruztYVd4WY313koYwUrE4Yi9TLS1Mrs
XIAD9Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:49 2026 by rpki-client