
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier: lAdRAcT81kmffvaf5Mk8r0tQ0v61TwzW2GrOOK0O694=
Subject key identifier: D7:F2:7B:76:28:96:6F:CC:AC:6B:39:5F:6C:D8:F8:9C:69:33:74:C6
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer: /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial: 4A51CC907B485A76E47C4406B78D996B50145F41
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number: B6
Signing time: Wed 23 Sep 2026 19:02:02 +0000
Manifest this update: Wed 23 Sep 2026 18:57:02 +0000
Manifest next update: Thu 24 Sep 2026 21:19:02 +0000
Files and hashes: 1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: nL1q/Na9IGqwSE7n5QlgQ6Isx8cH4uVedFcfIer41PE=)
2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 21:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:51:cc:90:7b:48:5a:76:e4:7c:44:06:b7:8d:99:6b:50:14:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Validity
Not Before: Sep 23 18:57:02 2026 GMT
Not After : Sep 24 21:19:02 2026 GMT
Subject: CN=D7F27B7628966FCCAC6B395F6CD8F89C693374C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:cd:07:6e:b5:54:e6:dd:b1:e5:c9:de:13:
ea:ab:e8:04:85:f4:96:62:98:73:6e:f7:f8:6e:00:
da:c6:39:b0:5e:75:61:da:03:0d:b0:80:8a:21:92:
45:6b:1b:0c:70:3b:1e:fd:6e:7b:42:a7:59:b1:a0:
49:90:ec:2c:a0:9b:0e:fa:5d:a1:ae:59:70:f3:f2:
d5:53:91:62:ff:42:f7:20:0a:c6:09:97:89:65:53:
02:51:be:13:b5:3c:ef:9c:14:7b:17:22:31:97:6b:
ef:a2:1f:8c:56:02:29:c6:e5:37:df:c3:30:fa:c2:
73:3e:ba:16:4e:1a:5b:13:f4:a0:5a:16:0b:5f:bb:
ff:84:00:d7:9c:f9:36:13:35:cf:e7:dd:13:68:b1:
c2:e4:06:49:2e:a8:85:15:00:4d:61:46:7a:e0:81:
d7:7a:46:32:64:b9:17:06:28:8d:4d:31:98:b5:b1:
11:14:36:24:79:87:27:f4:01:f3:bb:e2:e8:35:3d:
b0:cb:bb:53:e7:08:5c:df:fe:ac:3d:f1:cc:d1:81:
2d:83:dd:9b:9f:35:71:3d:3d:27:47:df:46:09:a8:
f1:3d:d0:09:e1:30:cf:ce:79:60:4e:a1:65:9e:46:
fd:51:44:13:14:72:ad:3b:3e:55:be:f2:ef:47:c8:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:7B:76:28:96:6F:CC:AC:6B:39:5F:6C:D8:F8:9C:69:33:74:C6
X509v3 Authority Key Identifier:
keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:c2:36:db:99:03:67:a2:73:7c:d5:1e:29:d5:2a:2c:19:
16:10:85:3f:d3:95:bc:ff:bf:ce:08:a3:01:1c:78:8a:29:69:
25:e5:88:57:d4:37:4b:0a:70:4e:73:22:74:7a:77:a3:2b:b7:
54:5a:6c:b1:d8:c0:95:71:b3:38:83:68:fe:ef:ba:89:2c:6a:
91:87:7d:3a:46:4d:70:70:ce:d2:22:18:ed:cf:9e:aa:ce:7e:
bd:4b:f9:0c:71:49:7a:2b:d9:86:ee:8f:af:16:7a:10:b8:21:
e7:5c:1c:57:3d:6f:b6:92:38:23:26:55:7c:ee:58:b7:43:9c:
c3:0d:bc:f8:ff:98:b5:3c:87:a5:60:56:2c:0e:d6:29:3f:10:
7b:a8:aa:cb:90:c5:34:c7:43:a1:56:c3:49:6b:0c:71:97:b3:
a6:c6:c9:c3:e1:29:a5:e5:e5:41:a8:74:c6:f9:00:90:36:0d:
3f:fb:8a:2c:e2:e7:52:6c:17:e1:ff:f9:2a:51:e2:87:7e:d0:
98:d2:15:1d:90:0c:42:85:4c:88:50:69:4f:71:2e:82:3f:42:
fb:96:31:13:91:50:00:43:3e:30:ac:39:66:fc:b1:8c:8a:54:
c3:77:5e:91:33:83:69:3b:2e:13:26:60:30:68:65:21:bd:e0:
ee:a0:6e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:05:04 2026 by rpki-client