
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json)
Hash identifier: QB9Sin7iaknoZ5MvCfPxhBBvQgZjaYqU/iZyeFTwzVI=
Subject key identifier: A5:81:02:0E:FD:07:9A:11:AC:B2:4D:99:5D:A0:E4:2B:1C:BA:55:D4
Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42
Certificate serial: 553BBCEB840B54EA375C67B6C7F75AB30B02F1B8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
Manifest number: 85
Signing time: Fri 14 Aug 2026 12:11:46 +0000
Manifest this update: Fri 14 Aug 2026 12:06:46 +0000
Manifest next update: Sat 15 Aug 2026 15:11:46 +0000
Files and hashes: 1: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=)
2: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=)
3: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=)
4: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: yuHA2txGQNCzlZJU8pw2JkhxChyCo+4jU+n+TtqWk14=)
5: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=)
6: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 15:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3b:bc:eb:84:0b:54:ea:37:5c:67:b6:c7:f7:5a:b3:0b:02:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42
Validity
Not Before: Aug 14 12:06:46 2026 GMT
Not After : Aug 15 15:11:46 2026 GMT
Subject: CN=A581020EFD079A11ACB24D995DA0E42B1CBA55D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:2c:7b:14:5c:32:e9:44:01:43:10:32:84:
17:c9:b9:67:e9:36:35:39:2a:4b:32:aa:29:b2:ba:
84:6c:78:2c:11:25:97:70:64:68:ee:42:11:ab:0a:
a7:f5:47:1b:ad:30:af:3e:60:b5:df:9a:a4:ab:9b:
9e:e5:f2:95:c2:18:6c:ba:60:70:2c:2e:99:5e:82:
bb:11:ad:a5:9b:85:26:9f:ff:1f:21:ae:5a:1e:e5:
77:f0:3b:33:93:7b:fa:3b:7e:e3:ed:37:0a:18:37:
7f:15:0f:c7:be:d2:04:c1:e9:66:54:83:08:2c:79:
f7:69:05:fe:ca:9b:ab:87:b0:ab:42:0d:3c:20:95:
f1:53:d1:7c:8f:58:f2:1a:5c:a2:6c:eb:19:f5:90:
ec:20:16:1e:39:5a:1c:69:d1:30:56:b0:86:df:2e:
7b:f4:bf:8f:e8:e7:4e:f6:13:5d:59:82:dd:82:9d:
aa:d9:d8:a4:27:48:93:97:62:27:c4:0f:74:5e:07:
03:6b:df:28:36:70:27:1b:99:cf:aa:ae:b3:ab:46:
27:b0:98:00:c9:12:f5:29:77:c8:ed:a4:0e:8e:db:
1a:c4:c5:df:93:87:b6:3f:be:68:8f:d3:61:4e:ce:
7c:53:59:09:4e:60:4c:0c:fc:9b:2e:c6:b0:8e:77:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:02:0E:FD:07:9A:11:AC:B2:4D:99:5D:A0:E4:2B:1C:BA:55:D4
X509v3 Authority Key Identifier:
keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:21:c8:1a:c9:a6:de:7f:ae:36:0b:f1:99:08:cb:a8:3c:
5c:9c:37:f6:14:b8:f5:84:bc:51:ee:ef:36:9b:b9:48:7b:bc:
bc:3c:52:4e:6e:d0:35:aa:ab:47:14:c0:15:06:4f:53:7f:0d:
8d:77:45:00:3c:ec:cd:6e:97:27:18:4c:71:7d:f0:f9:15:36:
36:e0:ba:d9:ac:3d:da:05:e8:52:3d:fa:67:19:47:4a:fa:17:
c7:56:e3:71:23:30:3a:7e:73:c7:6b:60:9e:c7:28:dd:6b:5a:
ec:e8:8d:7f:60:92:a4:07:a9:91:5f:84:f4:ab:03:37:36:28:
ec:76:5d:c7:1c:ee:51:ab:82:95:e0:95:93:84:d0:7e:e5:7c:
0e:22:1b:c1:e2:ac:69:1e:bb:95:c6:aa:86:72:39:de:26:8d:
cf:03:99:1f:92:b4:18:e3:72:09:7a:9b:35:37:92:39:ae:48:
5e:fe:d6:d5:53:50:5f:d4:9d:71:d4:53:2f:93:f7:e1:db:36:
bd:f8:09:e3:6c:31:d1:14:ee:a5:a1:91:fc:07:b8:e3:3a:36:
d3:f7:ae:45:6a:6d:14:66:ec:78:e2:b7:77:d0:c1:92:fd:40:
8f:6d:21:e6:90:b1:de:59:f3:9d:c3:34:93:16:37:f9:5d:a8:
bf:63:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:20 2026 by rpki-client