
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json)
Hash identifier: rKcFUrmdG9kn+0kXeI6VSPh5jMQ7FMJFgemW37qxE1c=
Subject key identifier: EF:8E:E4:1C:9B:36:AA:8B:3E:10:4F:D8:90:9C:05:A4:54:DB:3D:24
Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Certificate serial: 43EBF0AD36FFD61218F5C13DD3D9593486B167AD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
Manifest number: B5
Signing time: Mon 21 Sep 2026 07:21:30 +0000
Manifest this update: Mon 21 Sep 2026 07:16:30 +0000
Manifest next update: Tue 22 Sep 2026 09:39:30 +0000
Files and hashes: 1: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=)
2: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: EN+1iSufiHNJZWOzigWjf5uU/32EZUUJzVDt7wjcF3Y=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl
rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 08:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:eb:f0:ad:36:ff:d6:12:18:f5:c1:3d:d3:d9:59:34:86:b1:67:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Validity
Not Before: Sep 21 07:16:30 2026 GMT
Not After : Sep 22 09:39:30 2026 GMT
Subject: CN=EF8EE41C9B36AA8B3E104FD8909C05A454DB3D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:95:0b:59:9c:27:65:bd:37:f3:c9:03:aa:
f9:19:3f:0d:7a:25:4b:87:fb:a2:3d:60:bd:ae:fb:
bc:4b:d9:63:56:ec:d9:34:84:ac:75:ac:c8:b2:9a:
45:28:3c:b3:a1:4d:77:9f:92:81:48:b8:01:3e:66:
79:c0:08:fe:84:2a:8d:21:7d:59:70:3e:e6:ff:12:
4a:4d:c0:45:8b:35:d8:11:63:75:7c:f6:d2:f0:87:
7d:35:7a:f0:cd:a4:ff:e1:d1:36:1b:65:58:dc:b7:
c2:2b:5c:38:e0:ed:15:32:11:e7:ee:6f:0b:78:71:
2a:9a:3d:b1:da:9d:7b:03:12:70:24:f9:c3:68:78:
dd:71:b2:43:17:f4:a1:cf:b8:63:28:2b:b5:41:40:
a7:4a:97:5e:35:91:0f:03:97:0d:3d:7a:39:0d:cb:
ee:8c:f1:16:a9:a7:b1:7a:df:19:23:51:c5:e8:24:
c6:a8:f7:65:78:d2:8a:03:fe:20:a1:3f:95:10:98:
cd:f7:ab:c5:2c:1a:30:24:bd:47:6d:76:df:6c:43:
2c:dc:ad:b4:ec:5a:b3:2d:18:0c:4f:57:0b:49:f3:
c9:b3:48:22:d8:9c:a1:4d:71:4f:f3:d3:db:0c:d7:
a8:e7:d4:b3:91:4e:53:f8:96:4f:16:5d:18:11:74:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:E4:1C:9B:36:AA:8B:3E:10:4F:D8:90:9C:05:A4:54:DB:3D:24
X509v3 Authority Key Identifier:
keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:8e:f0:fa:4b:ac:b4:53:3a:52:37:69:90:6c:d7:fa:ac:
d6:d0:fe:7b:17:e7:43:c8:8e:d3:81:85:03:1e:66:3f:09:c6:
bc:24:0e:84:3c:86:06:95:96:13:c4:d1:2f:02:f3:5c:49:fe:
95:eb:2d:c5:d2:c1:e5:ec:56:71:f3:26:e7:87:da:28:06:8a:
c9:03:d1:59:cd:67:fe:54:13:33:dd:71:ff:1d:6c:31:be:23:
60:05:1d:86:00:be:2b:f6:3a:f2:36:b4:1a:2d:a2:9a:fe:81:
f9:83:95:d7:75:d2:ae:c7:85:0a:aa:0e:bc:c4:31:37:ce:ff:
af:4b:8e:f6:95:9f:c7:e3:fe:73:0f:af:23:20:47:8c:8e:c7:
24:f3:e1:92:c0:ff:ab:10:a9:cc:1c:76:7e:fb:1e:b9:7b:11:
46:d6:8d:09:c8:91:7f:d0:d1:b5:01:91:8c:8f:3d:87:08:be:
86:b7:3d:a9:6e:4c:41:58:66:99:ec:08:cf:69:10:42:9c:ce:
cc:f3:6e:e1:0c:85:b1:91:0f:e5:d9:f1:e1:2c:34:61:dc:6c:
7a:e1:68:7c:00:c6:e3:49:b2:65:6b:89:93:c7:0b:84:e3:9a:
6a:87:be:48:3d:22:2e:5e:f6:95:78:9d:37:40:1b:db:08:67:
6e:77:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:46 2026 by rpki-client