
$ rpki-client -vvf rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
File: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft (raw, json)
Hash identifier: xR3CGl8kTlbstT4lgM5pOl6a+7Ey2Nb22vUCehR76ZE=
Subject key identifier: 40:FA:AD:BE:23:B8:E9:67:7C:4C:6D:E1:82:DF:51:71:59:EA:A8:88
Authority key identifier: 47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
Certificate issuer: /CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Certificate serial: 6A7D6A50D85D462283BF85CBCCA1E69C433A43F0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
Manifest number: 32
Signing time: Wed 17 Jun 2026 04:21:45 +0000
Manifest this update: Wed 17 Jun 2026 04:16:45 +0000
Manifest next update: Thu 18 Jun 2026 05:58:45 +0000
Files and hashes: 1: 4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl (hash: qO8xmX+IyCOpiCT0ieXdWz75cUc/G4I+WIrgnq3zLy8=)
2: 3130332e35392e3232302e302f32332d3233203d3e20313331353935.roa (hash: ig0nyTBRvQZ8trj2POEoB3J8GO7jvHOYrg7pgT6kYDE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7d:6a:50:d8:5d:46:22:83:bf:85:cb:cc:a1:e6:9c:43:3a:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4703E44596DFB4A93F400A7B57126B31D5EC4CDA
Validity
Not Before: Jun 17 04:16:45 2026 GMT
Not After : Jun 18 05:58:45 2026 GMT
Subject: CN=40FAADBE23B8E9677C4C6DE182DF517159EAA888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:02:b4:78:09:4d:32:4d:25:0e:cd:bc:98:
c4:5c:11:5e:ec:f2:ea:93:7e:66:63:e0:b5:c7:a5:
73:73:2b:45:51:db:7c:7d:43:d5:57:f7:f9:f8:ea:
f0:5e:e5:37:8c:03:7e:f5:47:62:9b:68:e9:75:d2:
b5:79:1d:95:19:5d:86:29:51:b5:9e:d5:2f:e9:fc:
5a:21:70:e8:58:a6:af:ce:c8:ee:ac:76:28:4d:19:
19:7b:ec:5f:88:35:1e:a6:b7:89:5d:6f:bf:6d:bb:
74:3b:8e:c1:da:19:7a:26:66:a2:26:3a:ec:25:c3:
6c:82:9d:68:76:91:66:8a:c7:99:89:fe:86:8c:30:
48:87:f7:8c:fd:1c:5b:14:61:4b:1c:43:fd:6d:c7:
56:63:9f:7a:6b:e6:0e:5a:75:2e:8c:0b:38:1d:da:
bb:c1:03:4d:62:8b:dc:e3:9f:d6:9e:11:fc:70:8c:
4d:43:c7:39:c7:11:86:40:b1:76:5e:0b:79:6c:90:
ac:c7:a9:00:7a:ac:b4:c9:6c:b2:eb:a2:6c:91:16:
04:80:5f:7e:58:01:2c:64:0d:fb:35:3d:3b:09:4f:
1f:5f:c6:26:47:16:84:14:bc:f2:d8:c8:35:21:75:
87:76:b7:54:bb:e5:2c:ba:5a:8d:99:d1:61:e3:f4:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:AD:BE:23:B8:E9:67:7C:4C:6D:E1:82:DF:51:71:59:EA:A8:88
X509v3 Authority Key Identifier:
keyid:47:03:E4:45:96:DF:B4:A9:3F:40:0A:7B:57:12:6B:31:D5:EC:4C:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KTCFE/0/4703E44596DFB4A93F400A7B57126B31D5EC4CDA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d1:60:2f:0f:95:ec:f1:65:07:1f:0b:24:6f:87:b8:75:c8:
2f:a7:37:43:b0:bf:89:1d:88:25:ea:a0:1e:61:56:27:84:a2:
d9:8d:d8:35:d3:b6:91:16:52:02:95:94:d3:bc:90:4c:a2:79:
dc:1f:6b:ba:9a:2f:97:4f:6c:b0:ce:c9:b5:21:05:6e:46:b8:
c9:e1:3c:3e:56:3f:b3:9d:1d:25:89:2a:24:f0:55:e2:9f:b9:
cd:e7:fb:98:ee:30:a8:b2:9d:4d:c7:88:62:8a:56:d3:94:6a:
45:58:a5:7c:c9:2b:e5:55:53:a7:fd:b7:db:0d:e4:f6:d3:9e:
1f:b4:af:b2:ef:3e:91:28:db:da:27:e4:b1:a2:02:01:d5:7e:
e4:7c:12:be:cd:e2:9d:d2:95:ff:1f:d4:70:7f:ae:a0:ca:65:
58:0e:ba:13:6b:33:bc:e3:cc:fc:65:5f:ca:7d:65:aa:f0:8c:
db:cc:d8:b2:ba:8e:52:e2:83:64:da:cd:c1:38:8c:5b:0a:be:
22:d9:2c:f5:04:be:e8:97:46:00:eb:ba:07:a8:8d:88:62:5b:
a0:cc:07:9d:45:bd:40:2b:46:24:76:8a:d9:a2:b1:66:ae:a0:
a9:76:d9:ef:e9:b8:3e:ac:d3:15:be:7f:72:f7:33:3c:d1:db:
d7:aa:2d:ac
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUan1qUNhdRiKDv4XLzKHmnEM6Q/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwM0U0NDU5NkRGQjRBOTNGNDAwQTdCNTcxMjZCMzFE
NUVDNENEQTAeFw0yNjA2MTcwNDE2NDVaFw0yNjA2MTgwNTU4NDVaMDMxMTAvBgNV
BAMTKDQwRkFBREJFMjNCOEU5Njc3QzRDNkRFMTgyREY1MTcxNTlFQUE4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjAK0eAlNMk0lDs28mMRcEV7s
8uqTfmZj4LXHpXNzK0VR23x9Q9VX9/n46vBe5TeMA371R2KbaOl10rV5HZUZXYYp
UbWe1S/p/FohcOhYpq/OyO6sdihNGRl77F+INR6mt4ldb79tu3Q7jsHaGXomZqIm
Ouwlw2yCnWh2kWaKx5mJ/oaMMEiH94z9HFsUYUscQ/1tx1Zjn3pr5g5adS6MCzgd
2rvBA01ii9zjn9aeEfxwjE1DxznHEYZAsXZeC3lskKzHqQB6rLTJbLLromyRFgSA
X35YASxkDfs1PTsJTx9fxiZHFoQUvPLYyDUhdYd2t1S75Sy6Wo2Z0WHj9GFTAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUQPqtviO46Wd8TG3hgt9RcVnqqIgwHwYDVR0j
BBgwFoAURwPkRZbftKk/QAp7VxJrMdXsTNowDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS1RDRkUv
MC80NzAzRTQ0NTk2REZCNEE5M0Y0MDBBN0I1NzEyNkIzMUQ1RUM0Q0RBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzQ3MDNFNDQ1OTZERkI0QTkzRjQwMEE3QjU3MTI2
QjMxRDVFQzRDREEuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9LVENGRS8wLzQ3MDNFNDQ1OTZERkI0
QTkzRjQwMEE3QjU3MTI2QjMxRDVFQzRDREEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAp0WAvD5Xs8WUH
Hwskb4e4dcgvpzdDsL+JHYgl6qAeYVYnhKLZjdg107aRFlIClZTTvJBMonncH2u6
mi+XT2ywzsm1IQVuRrjJ4Tw+Vj+znR0liSok8FXin7nN5/uY7jCosp1Nx4hiilbT
lGpFWKV8ySvlVVOn/bfbDeT2054ftK+y7z6RKNvaJ+SxogIB1X7kfBK+zeKd0pX/
H9Rwf66gymVYDroTazO848z8ZV/KfWWq8IzbzNiyuo5S4oNk2s3BOIxbCr4i2Sz1
BL7ol0YA67oHqI2IYlugzAedRb1AK0YkdorZorFmrqCpdtnv6bg+rNMVvn9y9zM8
0dvXqi2s
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:26 2026 by rpki-client