
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json)
Hash identifier: DfoD8oUm3yTipM7mvnnVUY+U/iJdrOnOs3NJZOs80oA=
Subject key identifier: FF:61:BA:D2:77:90:E4:F6:BE:D2:6A:10:17:C0:D9:25:A8:F3:1A:29
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial: 6D3BAA303398D896F9C922C948997179D311C971
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
Manifest number: 65
Signing time: Thu 23 Jul 2026 20:36:42 +0000
Manifest this update: Thu 23 Jul 2026 20:31:42 +0000
Manifest next update: Sat 25 Jul 2026 00:11:42 +0000
Files and hashes: 1: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=)
2: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: cbUdObwqRMcZAiNFcmsgEcN4CwYilcBw2l+V1kR0Vm0=)
3: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=)
4: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=)
5: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:3b:aa:30:33:98:d8:96:f9:c9:22:c9:48:99:71:79:d3:11:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
Validity
Not Before: Jul 23 20:31:42 2026 GMT
Not After : Jul 25 00:11:42 2026 GMT
Subject: CN=FF61BAD27790E4F6BED26A1017C0D925A8F31A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:a5:01:11:4f:bd:06:e3:70:b5:b1:b4:93:
19:b3:65:7e:37:ca:0e:a6:f2:dc:fe:76:96:78:b1:
57:4b:fb:b3:67:f1:b5:54:77:52:5a:08:80:7e:97:
98:46:90:d7:c4:94:97:21:38:07:bc:fb:f7:5d:b7:
00:1d:05:6d:0b:3a:06:c5:a9:90:2b:2b:32:df:8c:
7f:4a:20:b4:4a:29:23:d9:85:17:36:e7:a9:4a:76:
66:99:4b:24:73:b1:a9:1f:88:64:0d:4b:98:52:ab:
42:a6:d3:48:41:12:9c:c4:46:4d:52:b1:62:04:98:
46:3a:f1:08:46:d9:c9:ec:11:40:0f:73:28:a5:33:
e3:41:5d:4b:c9:1d:52:f9:cd:3a:3f:a3:88:41:03:
af:97:69:bc:04:a9:32:f2:53:9d:78:c1:6f:a2:e4:
b1:5f:0e:ff:31:bb:69:d1:1b:4b:50:6d:b3:f7:0c:
35:53:9c:2f:97:51:d7:c5:c9:76:32:ee:1f:50:8b:
ce:71:aa:88:e2:3b:7c:bd:dc:b1:9e:cb:21:bb:30:
99:56:8e:42:2b:81:48:c2:5d:74:7f:77:86:07:bb:
06:8c:4b:97:91:cb:36:bd:16:e0:a3:ca:cf:aa:af:
c3:13:e3:a7:49:ff:11:d8:b3:d6:e4:f1:36:bc:80:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:BA:D2:77:90:E4:F6:BE:D2:6A:10:17:C0:D9:25:A8:F3:1A:29
X509v3 Authority Key Identifier:
keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d6:d4:e3:3b:f5:6b:d4:8e:98:df:fb:11:d0:5d:a4:03:1f:
3d:10:be:8e:fa:f4:c2:73:f1:e7:43:32:e9:b6:9a:da:46:32:
66:eb:97:07:ee:90:f4:c3:75:80:b7:ec:30:0c:27:ab:49:4a:
1b:e5:b7:05:8a:3e:31:6e:62:96:e9:3e:34:9c:f2:af:15:bf:
6e:50:83:38:fc:ac:8b:90:20:4d:df:ce:3c:28:66:85:23:f5:
3f:88:c5:2e:71:e1:e2:6a:8d:64:89:ef:ad:e6:ff:e1:c2:97:
87:97:d9:f4:ba:b7:9b:94:b3:fa:b9:82:a8:30:14:83:62:47:
a7:87:98:68:28:37:66:ef:d4:12:bb:59:29:bf:a9:59:3b:63:
60:b6:5e:c0:5a:36:48:96:e8:53:3c:77:98:3a:6b:45:b8:6c:
16:ce:76:06:17:89:ed:27:95:03:a7:16:ef:6d:c6:88:2b:3d:
73:00:40:2a:33:78:05:9e:d9:50:4a:82:80:dd:e6:8c:fa:10:
8e:6b:37:92:2d:08:d1:44:02:3d:8b:0c:cb:bc:37:69:4c:43:
a4:2a:69:22:7c:7a:87:71:fd:42:c9:1f:8a:b2:f1:85:6c:d5:
6a:63:f7:2c:dd:83:15:2c:6c:97:07:01:5d:2e:20:16:8b:b1:
57:9f:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:38 2026 by rpki-client