
$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
File: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft (raw, json)
Hash identifier: xpzbW2xsEWB+jtTLUp1TlYzGwLCJw7TGrsBpqfrm44o=
Subject key identifier: B4:28:0B:08:EA:24:1E:7D:53:EF:FA:19:9E:FF:C4:44:4A:71:D9:8E
Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Certificate serial: 73637331BBA7B24D55EAB6CCEA0DD9845416061E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
Manifest number: 01CD
Signing time: Tue 30 Jun 2026 12:48:56 +0000
Manifest this update: Tue 30 Jun 2026 12:43:56 +0000
Manifest next update: Wed 01 Jul 2026 13:25:56 +0000
Files and hashes: 1: AS24614.roa (hash: G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=)
2: AS24165.roa (hash: 3FIiwNofmm4C5uRAP2kjrOtgHA40Oi5IQqIQn0zG3ZU=)
3: AS24163.roa (hash: OWbvhoRY5zy3ESQoCDYHmvYMcD23zu2mtSNG2tJQho4=)
4: AS24164.roa (hash: sIOeJGoPYIpl+PqRCZgUzjJTeH0hyt6alVKPdi1KsqA=)
5: AS24613.roa (hash: BOMFv12VWuDFcMo0MLAvEUpJABw6zTK+45yaZfd4C5Q=)
6: AS4662.roa (hash: l5YT6HkB93vM2G/iP6se4DxzXKxSOnbgp5YjONj14kg=)
7: 704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl (hash: w6bgu1KlQzNbuXJvHkRJiHvw9w1ZSUzExfx8A2ZiR50=)
8: AS9924.roa (hash: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 13:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:63:73:31:bb:a7:b2:4d:55:ea:b6:cc:ea:0d:d9:84:54:16:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Validity
Not Before: Jun 30 12:43:56 2026 GMT
Not After : Jul 1 13:25:56 2026 GMT
Subject: CN=B4280B08EA241E7D53EFFA199EFFC4444A71D98E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:99:59:83:89:7d:b8:cc:1f:a6:82:f4:62:
50:c0:97:ea:91:50:ce:6b:b4:18:68:de:4a:32:09:
58:1d:7e:2e:8f:10:05:37:7b:e2:dc:1e:66:1c:1b:
4d:de:9a:87:32:3a:e8:52:68:36:fb:c7:f1:27:4b:
3d:24:65:62:af:02:7f:32:20:29:d8:ba:39:06:25:
63:81:a3:a3:0c:a0:8d:64:e3:f2:46:0d:33:c6:db:
87:8b:aa:ab:30:ee:88:9e:2b:42:63:48:a9:ec:27:
79:40:6d:b7:e1:b1:47:45:21:26:df:4f:50:44:34:
54:88:d9:2f:b4:02:06:9c:da:6b:8a:54:7b:cb:c6:
5d:41:ae:8c:d9:60:af:c5:62:e9:97:1f:cd:67:4d:
f6:c2:a8:79:19:23:d9:12:5c:c0:28:18:5d:a2:68:
2f:f6:4a:15:30:92:93:19:59:0f:67:28:80:fc:df:
08:1a:47:81:34:d7:f8:7c:a9:e2:45:cf:85:bd:18:
f9:3d:9f:8b:89:0b:c1:b7:57:bf:ff:8c:92:0f:a5:
88:8a:50:13:a6:97:26:20:16:79:b4:78:78:9b:8e:
39:10:ec:4e:a0:3d:c0:77:10:b7:55:aa:76:0d:7f:
f0:35:1c:b0:3f:8e:6b:09:e2:da:de:3d:28:4b:4f:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:28:0B:08:EA:24:1E:7D:53:EF:FA:19:9E:FF:C4:44:4A:71:D9:8E
X509v3 Authority Key Identifier:
keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:2a:8c:00:43:74:6d:f4:e0:7f:53:79:af:3c:3e:b4:63:
c3:6d:29:7c:d1:83:c2:d7:ae:0d:1a:c7:8d:c6:c6:14:63:19:
36:a8:2a:73:54:ea:a4:0a:af:15:dc:e9:c9:46:f0:59:82:29:
3e:b9:c4:5d:fc:e7:83:34:de:de:3b:be:30:49:e2:3a:4e:7f:
3a:f0:0d:90:80:a7:ec:c4:23:d9:9a:c5:fb:d7:4c:b9:1b:3e:
4f:7d:46:10:0a:d2:d4:7e:62:10:b0:9d:53:eb:32:8e:95:52:
d7:19:76:94:55:bb:a3:0f:9b:0b:af:9f:ed:ab:4e:03:21:25:
2c:89:2a:be:4e:34:1b:de:63:d2:f4:cb:4c:e6:a3:3c:21:40:
3c:d9:76:8c:b1:45:a2:40:ac:df:c3:96:99:43:67:a9:2f:49:
02:45:7d:74:45:31:58:ee:76:ad:39:22:83:08:67:a3:d4:c5:
00:4d:53:e1:26:d9:e9:07:11:1d:94:77:19:48:a1:f3:d7:dd:
af:9b:54:1e:ff:45:7d:aa:7d:92:60:83:b7:74:38:f0:39:26:
c4:87:1b:ee:8e:75:95:9b:6c:b1:04:fc:b0:cb:56:94:9a:c0:
d5:c3:24:85:1d:7a:42:20:dc:c7:74:9a:3d:f3:28:16:95:26:
9b:cd:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:29 2026 by rpki-client