
$ rpki-client -vvf rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
File: C999B8723445B4125EE5DBE81A6066BA1C38037B.mft (raw, json)
Hash identifier: Q+pQrJMqX4djivypc3psdiuaGDEEauJnFkLoUl6uSeg=
Subject key identifier: EE:10:95:0A:0C:B1:F6:6A:E2:7E:43:EE:E0:93:27:E8:43:F0:6A:84
Authority key identifier: C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
Certificate issuer: /CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Certificate serial: 5B7B9B4243A9232E6DDC478E76811D3509439C22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
Manifest number: 04
Signing time: Tue 12 May 2026 11:10:27 +0000
Manifest this update: Tue 12 May 2026 11:05:27 +0000
Manifest next update: Wed 13 May 2026 13:08:27 +0000
Files and hashes: 1: 3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa (hash: M9aoM6gw7bRmaDPFcfOHzvO0XW597LcSAb+GMFBXN0s=)
2: 3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa (hash: no5UAwdRO4kjNGxbvYPZEaL3l8LMfiO9W7UwW9zvqIc=)
3: C999B8723445B4125EE5DBE81A6066BA1C38037B.crl (hash: FOKb7Sm6JFm7veRrLyEmO3JfSsEXqXgsn6Ny8Ak3X6s=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7b:9b:42:43:a9:23:2e:6d:dc:47:8e:76:81:1d:35:09:43:9c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Validity
Not Before: May 12 11:05:27 2026 GMT
Not After : May 13 13:08:27 2026 GMT
Subject: CN=EE10950A0CB1F66AE27E43EEE09327E843F06A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:91:fd:c7:d5:44:d3:58:36:8b:87:c0:c2:b3:
c9:66:07:00:2c:c7:4a:dc:3c:21:51:09:6e:74:8f:
e8:52:a6:62:87:c3:c0:39:e6:bb:e7:16:59:ec:1e:
ab:02:b1:de:30:e7:b1:5d:69:2f:a8:a5:b2:f0:6f:
a2:ad:3e:dc:c6:c4:d3:03:d3:38:ab:4c:e5:e1:88:
43:4a:31:9b:a1:1a:a1:31:22:9e:7f:1a:41:77:15:
d5:25:32:b7:a3:e3:d3:dd:b0:a5:c3:a5:80:e4:81:
83:fc:63:cd:b6:13:d1:8a:2c:e6:f9:0d:b3:5b:20:
69:78:78:6b:d6:39:1a:6d:f3:5c:f2:d0:08:c8:25:
c0:97:06:25:3f:ff:5d:77:84:1c:b0:02:54:e6:b2:
9f:26:93:56:51:00:23:b7:36:f3:7f:14:a9:2e:94:
e3:20:fc:55:c6:6b:9d:01:d6:bd:fd:c3:90:6b:03:
0f:fe:c1:3f:7e:55:01:9a:3e:2c:e6:5d:d4:0e:dc:
d4:71:ea:34:85:25:10:e8:c7:b4:21:f7:67:e4:00:
9f:0e:de:43:22:9d:be:1f:7c:92:eb:cf:c1:16:b2:
93:1a:07:b4:94:ad:9e:30:e8:ca:c1:1f:17:50:1a:
f5:83:82:f3:04:67:77:9a:61:13:a3:8b:bf:33:d6:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:95:0A:0C:B1:F6:6A:E2:7E:43:EE:E0:93:27:E8:43:F0:6A:84
X509v3 Authority Key Identifier:
keyid:C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bd:b9:7d:49:56:e5:8d:30:3d:f2:2e:5f:3a:cc:ad:03:5c:
25:bb:f3:95:4b:7e:b3:dd:48:8a:6e:23:9b:d5:69:d7:5b:e0:
19:07:e4:63:d7:37:e1:7c:42:87:58:64:61:53:5e:54:67:00:
1f:aa:71:01:72:c2:23:b2:46:f2:09:39:5a:79:75:c5:85:49:
44:bb:b0:50:80:21:97:41:d6:1e:5b:26:47:fa:4f:21:f4:4e:
ad:dd:10:9b:ae:b1:8a:4e:65:07:6e:6c:dd:b9:0d:3a:7e:d4:
07:2a:ad:7e:23:01:74:5c:73:40:ee:be:3b:64:5c:fa:21:84:
21:8b:80:d1:ac:d7:b0:1d:9a:28:7f:4e:a4:40:ce:66:94:37:
f1:6e:22:a2:e9:a5:35:cb:84:98:61:05:9a:0b:4e:66:1e:01:
5c:b2:b9:d2:ac:a2:c2:e3:90:dc:91:9f:af:ee:2e:aa:a0:e8:
72:59:69:6c:69:60:14:e5:a6:da:15:90:a7:8c:33:4f:5e:7e:
1d:be:cf:1a:7f:0f:0e:a9:76:a6:73:5e:eb:68:01:83:13:af:
0c:4c:d9:40:97:02:62:d0:47:cd:9d:3e:39:cd:e2:37:b8:d1:
da:94:87:61:9a:75:1e:39:2d:51:fe:a6:6c:77:ca:68:a8:97:
5c:ca:bf:9e
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUW3ubQkOpIy5t3EeOdoEdNQlDnCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OUI4NzIzNDQ1QjQxMjVFRTVEQkU4MUE2MDY2QkEx
QzM4MDM3QjAeFw0yNjA1MTIxMTA1MjdaFw0yNjA1MTMxMzA4MjdaMDMxMTAvBgNV
BAMTKEVFMTA5NTBBMENCMUY2NkFFMjdFNDNFRUUwOTMyN0U4NDNGMDZBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkf3H1UTTWDaLh8DCs8lmBwAs
x0rcPCFRCW50j+hSpmKHw8A55rvnFlnsHqsCsd4w57FdaS+opbLwb6KtPtzGxNMD
0zirTOXhiENKMZuhGqExIp5/GkF3FdUlMrej49PdsKXDpYDkgYP8Y822E9GKLOb5
DbNbIGl4eGvWORpt81zy0AjIJcCXBiU//113hBywAlTmsp8mk1ZRACO3NvN/FKku
lOMg/FXGa50B1r39w5BrAw/+wT9+VQGaPizmXdQO3NRx6jSFJRDox7Qh92fkAJ8O
3kMinb4ffJLrz8EWspMaB7SUrZ4w6MrBHxdQGvWDgvMEZ3eaYROji78z1vq1AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU7hCVCgyx9mrifkPu4JMn6EPwaoQwHwYDVR0j
BBgwFoAUyZm4cjRFtBJe5dvoGmBmuhw4A3swDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFBURUNI
LzAvQzk5OUI4NzIzNDQ1QjQxMjVFRTVEQkU4MUE2MDY2QkExQzM4MDM3Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9DOTk5Qjg3MjM0NDVCNDEyNUVFNURCRTgxQTYw
NjZCQTFDMzgwMzdCLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFBURUNILzAvQzk5OUI4NzIzNDQ1
QjQxMjVFRTVEQkU4MUE2MDY2QkExQzM4MDM3Qi5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAW9uX1JVuWN
MD3yLl86zK0DXCW785VLfrPdSIpuI5vVaddb4BkH5GPXN+F8QodYZGFTXlRnAB+q
cQFywiOyRvIJOVp5dcWFSUS7sFCAIZdB1h5bJkf6TyH0Tq3dEJuusYpOZQdubN25
DTp+1AcqrX4jAXRcc0DuvjtkXPohhCGLgNGs17Admih/TqRAzmaUN/FuIqLppTXL
hJhhBZoLTmYeAVyyudKsosLjkNyRn6/uLqqg6HJZaWxpYBTlptoVkKeMM09efh2+
zxp/Dw6pdqZzXutoAYMTrwxM2UCXAmLQR82dPjnN4je40dqUh2GadR45LVH+pmx3
ymiol1zKv54=
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:58 2026 by rpki-client