
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
File: 432734F40920205CA6443A3B99308DD718E70D42.mft (raw, json)
Hash identifier: h5j6nF1L416HczZl9f+moO2yJh8qh7DsAvk6roxa9Nw=
Subject key identifier: B1:54:0C:ED:5A:1F:5F:E0:C2:8D:99:56:FB:11:D2:4D:6D:39:E0:BC
Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42
Certificate serial: 1DF44605481339AEA6140D0F1223AFC7CBE57DC7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
Manifest number: BD
Signing time: Fri 25 Sep 2026 15:48:31 +0000
Manifest this update: Fri 25 Sep 2026 15:43:31 +0000
Manifest next update: Sat 26 Sep 2026 17:47:31 +0000
Files and hashes: 1: 3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (hash: B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=)
2: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (hash: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY=)
3: 432734F40920205CA6443A3B99308DD718E70D42.crl (hash: XEuttaXe8JlfQv9LbkK5fZrd9n5m9ZbNfqpd3I8c85w=)
4: 323430353a613634303a313137333a3a2f34382d3438203d3e20313431313733.roa (hash: 87eGcMzsBcFERAr5N4m3uIfuCE9wu8GrAFKZcBGz6Qc=)
5: 3231312e37362e3138302e302f32332d3234203d3e203138303431.roa (hash: bbxNqJpcFoKQB8YEZ9k9dbWZhlMmSJIxxEto4IGtK6w=)
6: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (hash: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:f4:46:05:48:13:39:ae:a6:14:0d:0f:12:23:af:c7:cb:e5:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42
Validity
Not Before: Sep 25 15:43:31 2026 GMT
Not After : Sep 26 17:47:31 2026 GMT
Subject: CN=B1540CED5A1F5FE0C28D9956FB11D24D6D39E0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:8a:85:74:d6:9a:f4:b1:53:6f:96:9d:e5:
a2:a9:db:d4:ae:99:f7:04:48:17:33:f6:73:f0:3e:
6d:6c:46:b5:96:54:77:ca:ba:78:a5:ce:dc:da:fc:
7e:0b:f0:34:2f:68:3f:b7:00:d9:66:18:fe:8c:96:
7e:a8:93:d3:85:2b:68:85:07:45:f9:82:2b:98:23:
48:d6:9f:4d:11:44:90:1f:d4:07:f1:18:55:49:79:
a5:29:f6:a9:c8:1e:08:48:2a:b9:0b:23:71:75:39:
01:9c:db:a2:7f:45:4a:6d:33:87:4e:81:0a:2d:6c:
92:1c:04:10:ef:ef:6c:93:9b:1e:83:b8:9c:a2:cb:
3f:af:fb:9e:c7:a5:8e:82:99:95:d8:48:35:85:fb:
fb:66:df:b7:79:d9:4a:a9:52:8a:4b:23:18:f2:67:
2b:08:bc:36:27:7c:05:a2:2e:bf:b4:9e:76:59:bb:
4a:51:02:e9:b5:d5:28:40:3d:4f:eb:c7:d9:ea:18:
16:fe:bb:c4:35:61:26:d1:7e:91:26:ff:cc:99:ba:
2f:3b:89:c1:39:86:14:e9:3f:35:36:ed:d0:99:e6:
dd:b2:38:9e:44:0b:2f:ec:85:07:bb:68:f9:0f:dc:
26:a8:8a:a4:c4:f5:ca:aa:c1:a6:29:37:6b:b8:dc:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:54:0C:ED:5A:1F:5F:E0:C2:8D:99:56:FB:11:D2:4D:6D:39:E0:BC
X509v3 Authority Key Identifier:
keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2d:20:39:a5:02:ae:98:82:f7:95:6c:db:cc:97:32:97:71:
9c:eb:fa:38:79:d4:ff:3b:e7:e1:50:d1:47:0b:bc:f3:9c:b8:
05:57:84:91:08:7d:94:e1:a6:47:40:44:3e:38:f9:4a:8a:25:
5d:5f:39:13:84:ff:e1:a8:90:d4:e3:47:38:7d:a4:db:99:18:
e2:7b:9b:66:2e:98:1c:53:e1:28:b7:5a:e2:59:d7:fa:3b:4c:
00:69:24:0d:b8:28:7d:23:94:c9:24:d5:94:77:0b:99:e4:cf:
47:2b:78:9e:35:4e:43:2f:b4:af:31:fe:2b:24:08:d3:32:e0:
d9:46:a0:bc:dd:7f:9d:5c:a6:a0:29:a1:ba:a8:68:4a:5d:96:
c1:20:ac:0f:f3:82:79:a1:30:64:49:d3:c8:5c:3a:1f:6b:09:
24:ca:8b:0b:51:3c:15:1f:86:42:22:e5:6e:9e:c4:b5:96:98:
cd:7e:3d:71:64:61:0c:60:6d:a1:87:8c:20:bb:61:73:27:0b:
cd:8a:d8:a0:e2:3d:36:c0:58:98:6e:38:76:d4:df:39:61:ee:
fb:67:6e:e8:7b:62:bb:4c:fd:7a:11:21:3f:2f:31:9e:61:ed:
3c:2d:c0:b7:97:52:23:ab:27:44:fc:44:01:04:da:e9:09:1a:
c7:5c:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:00:47 2026 by rpki-client