
$ rpki-client -vvf rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
File: 67919719E801E94CCA89D7569D37B67D252A261F.mft (raw, json)
Hash identifier: YOyjwNmC0FR6MtlUzoxRDEutWSwyYv8Qby98J8XgZ/8=
Subject key identifier: 99:82:D2:58:82:64:77:5F:F3:EC:04:B0:4F:5A:04:6D:71:5A:0D:10
Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F
Certificate issuer: /CN=67919719E801E94CCA89D7569D37B67D252A261F
Certificate serial: 5D47EE6B31D5080FFD7165F3A86B16AFFBD7CE78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
Manifest number: 64
Signing time: Thu 23 Jul 2026 13:02:30 +0000
Manifest this update: Thu 23 Jul 2026 12:57:30 +0000
Manifest next update: Fri 24 Jul 2026 16:36:30 +0000
Files and hashes: 1: 3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (hash: YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=)
2: 67919719E801E94CCA89D7569D37B67D252A261F.crl (hash: sqvF+smx2st00WlTuFZDbPbD3MjZncJolw+E5DKQooM=)
3: 323430303a353065303a3a2f33322d3634203d3e203633383933.roa (hash: W+Ffc6VUEComE7wKXCSRqfcLvgJdlvoiPW+6XMV3r6s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl
rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:47:ee:6b:31:d5:08:0f:fd:71:65:f3:a8:6b:16:af:fb:d7:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F
Validity
Not Before: Jul 23 12:57:30 2026 GMT
Not After : Jul 24 16:36:30 2026 GMT
Subject: CN=9982D2588264775FF3EC04B04F5A046D715A0D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:95:14:db:ff:45:d8:74:64:c8:45:73:3f:
36:61:a3:ac:fd:67:fc:37:bd:5c:34:0d:43:6f:2d:
af:1f:17:ed:4d:a9:a1:9b:e7:09:55:05:ca:2d:bb:
52:23:dd:f8:7c:75:89:4b:b5:ab:39:a4:6e:aa:75:
2c:f4:0b:31:6c:ac:5a:02:24:c3:56:a1:b1:a7:43:
d8:40:49:f4:1b:93:a3:4a:e1:c2:69:4a:95:6b:08:
d1:ee:20:8e:93:f2:dc:b7:11:1c:f4:f5:0c:47:68:
d2:e0:b9:7a:bc:f4:89:f3:38:40:00:72:b4:b7:4c:
32:43:f6:8b:ac:fa:69:df:ab:71:3f:2f:78:01:ae:
bb:b4:f1:dc:0c:3e:68:be:07:14:6a:c6:c3:b4:25:
a1:4e:43:fc:fa:91:dc:43:37:32:7f:a0:52:6c:5f:
c8:ea:83:57:43:fc:b3:dd:74:7b:79:7d:2f:a8:65:
84:40:f9:a9:ed:ce:98:f0:92:41:2a:94:71:db:3a:
09:f2:d6:7c:1b:0b:54:e9:8e:13:a0:95:e1:cd:71:
29:9a:f7:11:8f:42:46:7e:8d:86:ca:33:2d:31:a1:
a3:56:31:b6:21:79:ed:68:79:81:c9:7f:43:e8:48:
7e:30:81:e4:e9:a4:ae:3d:7c:22:d6:d9:9f:0a:87:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:82:D2:58:82:64:77:5F:F3:EC:04:B0:4F:5A:04:6D:71:5A:0D:10
X509v3 Authority Key Identifier:
keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:57:64:d3:62:dd:80:2d:9d:b1:51:21:f4:61:4c:13:9a:b8:
8b:9b:34:2b:41:c0:7d:cd:9d:03:02:ed:cf:d1:de:94:8b:9c:
fa:4a:71:1a:3d:b4:7c:65:3f:ba:26:36:2f:10:22:a0:32:2f:
f4:2f:ff:eb:bc:69:58:4a:90:8d:e7:cf:fe:08:1c:5c:f2:e2:
cc:5d:9a:51:7d:f0:89:8e:2c:4e:b6:6b:9e:1f:07:72:4c:8d:
c7:9b:fb:3c:8f:95:51:68:28:0d:fd:36:27:95:0a:3b:6d:30:
79:72:82:63:24:b8:4c:64:00:1d:a6:1e:ee:ef:26:46:18:9d:
0f:cb:ad:81:a0:bf:fc:1f:0b:34:cc:ce:9d:d4:68:4c:cc:1f:
86:f4:d6:32:ee:60:69:d4:ff:04:86:70:4a:c8:23:0a:ce:d8:
48:91:bf:6c:61:12:2f:02:40:82:7b:46:b2:f2:d2:ad:e6:53:
e2:c0:bf:12:e9:3b:4b:cc:01:3e:69:33:82:88:3b:be:f8:de:
9c:f7:a3:57:dc:62:2e:ee:03:a8:41:65:f0:87:94:05:27:20:
0e:9c:79:df:9b:b6:8d:23:3b:de:b0:b1:04:d4:14:e2:90:03:
17:6e:c6:4d:0a:63:a8:91:39:5d:2d:0b:39:e8:f2:5d:71:30:
cb:28:d6:42
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUXUfuazHVCA/9cWXzqGsWr/vXzngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2OUQzN0I2N0Qy
NTJBMjYxRjAeFw0yNjA3MjMxMjU3MzBaFw0yNjA3MjQxNjM2MzBaMDMxMTAvBgNV
BAMTKDk5ODJEMjU4ODI2NDc3NUZGM0VDMDRCMDRGNUEwNDZENzE1QTBEMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCot5UU2/9F2HRkyEVzPzZho6z9
Z/w3vVw0DUNvLa8fF+1NqaGb5wlVBcotu1Ij3fh8dYlLtas5pG6qdSz0CzFsrFoC
JMNWobGnQ9hASfQbk6NK4cJpSpVrCNHuII6T8ty3ERz09QxHaNLguXq89InzOEAA
crS3TDJD9ous+mnfq3E/L3gBrru08dwMPmi+BxRqxsO0JaFOQ/z6kdxDNzJ/oFJs
X8jqg1dD/LPddHt5fS+oZYRA+antzpjwkkEqlHHbOgny1nwbC1TpjhOgleHNcSma
9xGPQkZ+jYbKMy0xoaNWMbYhee1oeYHJf0PoSH4wgeTppK49fCLW2Z8Kh1/XAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUmYLSWIJkd1/z7ASwT1oEbXFaDRAwHwYDVR0j
BBgwFoAUZ5GXGegB6UzKiddWnTe2fSUqJh8wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENDMTIy
MzM0Mi8wLzY3OTE5NzE5RTgwMUU5NENDQTg5RDc1NjlEMzdCNjdEMjUyQTI2MUYu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNjc5MTk3MTlFODAxRTk0Q0NBODlENzU2
OUQzN0I2N0QyNTJBMjYxRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RDQzEyMjMzNDIvMC82Nzkx
OTcxOUU4MDFFOTRDQ0E4OUQ3NTY5RDM3QjY3RDI1MkEyNjFGLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
kVdk02LdgC2dsVEh9GFME5q4i5s0K0HAfc2dAwLtz9HelIuc+kpxGj20fGU/uiY2
LxAioDIv9C//67xpWEqQjefP/ggcXPLizF2aUX3wiY4sTrZrnh8HckyNx5v7PI+V
UWgoDf02J5UKO20weXKCYyS4TGQAHaYe7u8mRhidD8utgaC//B8LNMzOndRoTMwf
hvTWMu5gadT/BIZwSsgjCs7YSJG/bGESLwJAgntGsvLSreZT4sC/Euk7S8wBPmkz
gog7vvjenPejV9xiLu4DqEFl8IeUBScgDpx535u2jSM73rCxBNQU4pADF27GTQpj
qJE5XS0LOejyXXEwyyjWQg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:44 2026 by rpki-client