
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier: 6GGaBhP4G2rDBZVFMEkILc/j96niRX+MxoZbdbrsxbE=
Subject key identifier: FD:C7:BA:41:B0:AA:85:98:F1:69:21:6C:2E:2B:B5:37:70:C8:7A:F3
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer: /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial: 23C046EBF03D3076BA5F48851C321271AA8D6C1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number: 0D
Signing time: Tue 12 May 2026 09:51:16 +0000
Manifest this update: Tue 12 May 2026 09:46:16 +0000
Manifest next update: Wed 13 May 2026 12:32:16 +0000
Files and hashes: 1: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: HNDgaZI6KTrW8/gj4k/Ff+z5wrypEXCTRN0SThDHzzo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c0:46:eb:f0:3d:30:76:ba:5f:48:85:1c:32:12:71:aa:8d:6c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Validity
Not Before: May 12 09:46:16 2026 GMT
Not After : May 13 12:32:16 2026 GMT
Subject: CN=FDC7BA41B0AA8598F169216C2E2BB53770C87AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:7d:90:10:86:bb:72:3a:da:c0:c1:bb:1b:
cd:f2:a1:a8:fd:09:24:6d:37:1e:df:74:68:32:e8:
b1:61:dc:f1:d9:f0:b8:8b:e6:d7:d3:9c:d2:dd:b2:
6f:f1:d8:c9:07:ae:a5:83:62:a3:cb:bf:99:ef:f4:
ed:ad:49:4b:3d:91:4e:03:8c:22:86:c9:8f:69:b2:
3b:30:ab:c6:e4:cf:c1:69:ff:f8:a6:35:a7:1c:a5:
c8:2f:24:d4:20:08:e1:52:dd:e7:1d:db:b4:c8:fc:
a1:23:e6:82:9c:9d:e2:4e:ea:29:38:7f:49:fb:9d:
fa:c1:40:f7:2c:51:17:d9:68:08:cf:a9:98:5b:3e:
7d:ff:4c:fa:88:13:9b:67:24:28:cb:70:22:56:d9:
93:52:5e:17:be:2a:27:53:09:3d:84:c9:7f:e8:38:
2b:d5:33:2d:f0:3d:43:44:b9:6f:e0:ca:c2:b2:e3:
ac:02:6f:ec:20:3f:e1:d6:31:05:27:84:9a:81:35:
05:1e:80:2f:06:a4:5c:de:1d:bf:d9:c2:66:b7:c7:
91:62:a3:08:b1:28:38:17:47:c3:a1:d7:bf:21:94:
70:60:b4:7e:11:5f:4f:cd:c4:e7:4c:4a:4b:bf:02:
aa:92:3a:db:1c:6e:12:57:2a:ad:15:6c:5e:93:6d:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:BA:41:B0:AA:85:98:F1:69:21:6C:2E:2B:B5:37:70:C8:7A:F3
X509v3 Authority Key Identifier:
keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ab:38:17:89:5a:0c:35:a4:ee:04:36:ae:85:96:fa:f5:ad:
9b:24:d3:ec:b0:de:40:0e:d1:c9:1d:19:36:40:e4:c5:b1:4e:
b4:bc:40:5b:b4:64:07:a8:72:92:a9:ca:04:36:83:a0:21:58:
c0:7b:78:47:c6:c6:4b:1f:e7:54:c9:c3:db:04:dc:6e:87:53:
79:c4:04:08:be:b3:4e:e6:b9:d7:a2:44:6f:f9:37:cb:fe:a6:
f7:64:2b:70:e3:6d:61:24:b5:2a:3f:1e:fc:3f:9d:af:08:b5:
5e:ff:5c:a2:30:f7:2f:84:ce:08:31:01:63:1f:12:02:72:ad:
ae:df:0e:17:83:e5:76:85:28:b1:e8:27:02:cb:a3:21:cd:e0:
52:cc:78:10:7b:1f:df:e1:9b:b0:4b:e9:2a:5f:56:5e:f8:3b:
c9:a9:33:a8:2f:e3:90:e0:45:9a:8a:cb:54:96:5f:72:06:4f:
2d:f4:28:21:95:95:08:e5:97:04:f6:c9:b6:87:80:ac:e2:67:
b7:f2:96:82:99:18:cf:e4:f6:27:91:45:b4:8c:eb:04:17:f8:
46:38:a3:f5:f3:ca:d4:c3:00:f7:02:a2:89:8d:cf:03:54:f9:
7b:be:33:65:fa:af:07:d6:87:03:72:69:16:67:ff:1e:62:03:
51:5d:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:02 2026 by rpki-client