
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
File: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft (raw, json)
Hash identifier: wnvI6+CgDsLUJ/G31/Ax3bzQhbpxMD93/r8v2Wsc1wk=
Subject key identifier: 3D:AD:58:13:D0:ED:F0:5B:4B:E0:00:34:85:2F:D1:DE:A4:08:E1:BE
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Certificate issuer: /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial: 496771CB80D104D83DD2582D946DB0BED156C903
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 03:33:52 +0000
Manifest this update: Sat 13 Jun 2026 03:28:52 +0000
Manifest next update: Sun 14 Jun 2026 06:00:52 +0000
Files and hashes: 1: 3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (hash: a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=)
2: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl (hash: iMpPKYwLtU//2nt0xvFKoxhwipBI9mNmyz7M+uhDS14=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:67:71:cb:80:d1:04:d8:3d:d2:58:2d:94:6d:b0:be:d1:56:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Validity
Not Before: Jun 13 03:28:52 2026 GMT
Not After : Jun 14 06:00:52 2026 GMT
Subject: CN=3DAD5813D0EDF05B4BE00034852FD1DEA408E1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:d8:d4:72:71:66:a7:37:b8:c3:6c:f2:a4:
34:2d:50:96:9e:ec:c4:a5:85:23:81:c1:12:aa:56:
30:ae:cd:8c:20:bd:75:9e:ad:8e:88:d1:98:1e:40:
c1:b7:f8:00:d6:97:61:d2:c1:ab:e3:00:52:83:b9:
c7:4e:80:42:0d:5c:fc:bd:02:56:1e:d6:c5:09:ee:
b3:41:fe:1b:8d:75:4b:96:cf:42:36:4c:64:9d:61:
44:8b:9d:71:ab:dc:bd:5b:56:30:33:41:95:af:ef:
ba:17:44:f0:28:3e:98:59:ba:eb:b8:c4:a7:aa:c4:
47:43:61:c2:77:01:a4:cf:cc:4c:21:3b:29:8b:93:
90:93:c8:16:73:d8:e4:53:e0:51:32:d1:cb:86:74:
c7:1d:ec:23:64:ac:91:45:2f:df:a6:d8:15:e7:23:
b7:5e:e9:c6:6f:eb:36:ef:f5:5e:6f:68:ef:1d:e6:
2c:fb:1a:39:0a:2d:1d:81:22:fd:ef:81:e3:05:54:
06:80:3c:2a:e6:3c:6a:25:1c:1e:30:d6:13:c3:8c:
4e:79:20:09:7b:20:5c:b9:69:0a:03:29:1d:22:58:
22:b3:2a:1a:9b:c5:0e:44:68:70:3e:49:89:13:92:
50:c9:8c:e8:9a:15:f4:54:21:ec:5b:41:0c:b6:af:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AD:58:13:D0:ED:F0:5B:4B:E0:00:34:85:2F:D1:DE:A4:08:E1:BE
X509v3 Authority Key Identifier:
keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b1:fa:12:90:0b:76:d0:53:00:1f:d6:21:bc:6e:e9:59:a3:
6e:22:9c:aa:57:5e:20:2a:fc:a9:16:a0:b1:51:e1:8a:a5:66:
c2:0b:73:45:9c:c6:49:b8:87:27:7e:05:6a:80:2d:43:f1:3b:
a1:0a:6e:f1:b0:4e:45:13:3b:ce:4e:56:e4:18:09:32:93:26:
71:4c:d6:a3:20:40:98:7f:ff:cc:52:d7:0c:82:c8:aa:cf:ce:
74:f1:a7:72:3a:b4:8c:c0:3e:20:8f:6c:44:be:45:45:d8:40:
cc:b4:24:f9:e6:42:fd:88:53:a9:ee:7b:72:c3:ca:6a:1d:4f:
b3:cf:92:47:9a:0c:6a:94:0d:81:fb:c5:91:83:4a:c4:32:93:
62:71:d7:e0:60:a1:a6:2b:d7:cc:2d:3d:09:ed:b4:97:64:ea:
b1:ae:3f:1a:1b:0c:51:49:a8:72:0b:a1:0c:88:44:ad:d9:0d:
18:a2:72:6d:f8:9f:3e:cf:39:03:70:77:6e:69:e3:c1:49:13:
8a:f5:33:42:71:8f:30:b3:82:d0:80:d4:9f:ee:85:c3:da:aa:
9e:1c:bb:90:6d:22:59:c1:5e:32:31:66:53:0a:ec:22:03:cb:
4b:3d:df:80:d0:7e:77:9d:c0:61:02:79:2a:b9:d4:74:8c:d8:
10:6c:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:41 2026 by rpki-client