
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
File: CEF74285903EEA3346FB1E74872895A4CE8D1742.mft (raw, json)
Hash identifier: g4GG7Oqq9XKjL6cdvhw5QPQrI4zY0ixhMXlxN93fd9c=
Subject key identifier: 23:D1:35:21:00:DD:9F:2E:3D:BB:4C:BE:DD:43:30:53:89:55:C8:A1
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Certificate issuer: /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial: 6727182A44037382937D772D29CDB9762FCA2900
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
Manifest number: BA
Signing time: Fri 25 Sep 2026 00:29:53 +0000
Manifest this update: Fri 25 Sep 2026 00:24:53 +0000
Manifest next update: Sat 26 Sep 2026 04:02:53 +0000
Files and hashes: 1: 323430323a323665303a3a2f33322d3438203d3e2039393138.roa (hash: P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=)
2: 3230322e3133332e36382e302f32332d3234203d3e2039393138.roa (hash: iN6E9FfraXQT/WqBz/UUplfXGRYfrwEtSBMCkEDIi4Q=)
3: CEF74285903EEA3346FB1E74872895A4CE8D1742.crl (hash: UlNk4ythny8pO/hY1sKG3D5iKg033qGPDrZx+UJ3I3o=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:27:18:2a:44:03:73:82:93:7d:77:2d:29:cd:b9:76:2f:ca:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Validity
Not Before: Sep 25 00:24:53 2026 GMT
Not After : Sep 26 04:02:53 2026 GMT
Subject: CN=23D1352100DD9F2E3DBB4CBEDD4330538955C8A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:ab:47:1c:c5:19:bc:c0:ac:f0:7f:21:8a:
9a:05:e8:cf:15:24:eb:9c:95:81:13:84:c2:5e:47:
9d:57:6d:02:ea:f1:7e:97:93:53:67:29:28:12:79:
2b:e1:e1:09:c9:0d:bc:fd:98:cf:6f:83:95:d6:39:
54:b3:fd:83:ee:7b:8c:00:35:d6:99:2f:8e:36:ee:
9e:2c:4b:52:8f:5e:ea:bc:b1:0a:b7:12:a9:d4:14:
dd:81:0b:96:e0:34:83:3a:24:e1:42:8b:6c:da:01:
7d:dd:5f:cc:a4:1e:31:e8:fa:e4:38:fb:c0:de:b7:
58:2c:72:1f:9a:94:4e:de:15:32:1a:82:58:f6:5b:
5e:49:12:2d:d9:eb:17:11:22:80:70:b2:1b:b3:57:
e2:56:45:64:ea:a6:9c:d1:80:ce:30:04:66:01:ed:
94:1a:fc:e6:a4:57:aa:fd:e4:32:64:b1:12:f1:f7:
f4:08:5f:e9:40:8c:e7:06:33:ca:1a:c4:fb:c5:d9:
17:b4:7a:5b:cc:fc:8d:60:6f:4f:b9:f3:92:e4:39:
dc:f3:94:46:b3:40:eb:e4:a5:70:14:20:1a:db:c5:
91:ee:1f:b4:d3:07:41:b5:bd:d0:54:09:87:16:83:
82:da:0a:7f:d1:16:23:79:3f:95:3a:8b:0b:ba:d8:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:35:21:00:DD:9F:2E:3D:BB:4C:BE:DD:43:30:53:89:55:C8:A1
X509v3 Authority Key Identifier:
keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:71:56:1e:a2:ad:28:a6:72:be:5c:43:ab:44:9c:ae:d5:e6:
bc:c8:a9:37:5e:b2:df:63:81:7b:98:b8:ea:6a:15:7f:a0:4e:
09:57:82:8e:f7:58:ee:58:51:8d:cc:46:1b:5f:2e:33:21:16:
56:9c:66:0f:df:7a:66:20:7c:43:88:68:b3:c7:01:f7:12:73:
95:e1:22:e6:fe:d6:e6:e4:c2:93:f9:ff:49:ad:df:c5:af:88:
70:76:50:86:bf:f8:39:9d:35:29:84:01:b4:22:34:9e:f0:5e:
25:19:77:17:2a:d9:25:f1:01:f0:21:1c:cf:c4:76:e0:c3:5f:
c8:ee:71:9a:12:48:bb:ec:50:dd:1a:6c:4a:7f:af:b6:38:e8:
cb:b7:8f:ed:70:ab:7a:bc:fd:b8:2c:33:05:da:be:eb:48:74:
78:ed:ab:53:b1:81:85:10:eb:14:4f:27:ef:87:fc:2a:2f:95:
a5:31:5c:a6:2e:3d:a5:2c:6b:b5:8a:d1:52:cc:b6:bd:cd:8b:
c3:c9:d8:e2:73:f1:61:9f:50:79:98:75:8d:b9:18:a3:9f:32:
43:bf:09:86:92:5b:b6:bb:ad:aa:1a:c4:19:77:75:15:57:de:
b8:ad:48:5a:d3:eb:d6:c5:ea:fa:e0:07:a9:a6:f7:3d:14:5e:
0e:25:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:35:15 2026 by rpki-client