
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
File: CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft (raw, json)
Hash identifier: UpjD1/zJP5GxZwE8Ao/ZOhMT1szibBwATrghFKBhWvk=
Subject key identifier: 9D:DD:15:EA:9B:D7:04:9E:A4:F3:FE:B0:4A:4C:44:98:33:9B:B5:AE
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 0134F6704A22DD3D42588905650E8F355F9A55E7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
Manifest number: 7F
Signing time: Tue 28 Jul 2026 03:27:23 +0000
Manifest this update: Tue 28 Jul 2026 03:22:23 +0000
Manifest next update: Wed 29 Jul 2026 05:56:23 +0000
Files and hashes: 1: 3231312e37362e3138362e302f32332d3234203d3e203338303432.roa (hash: 3Ay4JL1xheIDlwalZgSaaVSELk/2rTlAgpIQb9jIwnE=)
2: 3130332e3234362e3231382e302f32332d3234203d3e20313334383233.roa (hash: OzJYK1jOl/dVvskD0N+jBQ6FAS7v+8gWPkXtAjUfvn0=)
3: 3130332e3132332e3133342e302f32332d3234203d3e203338303432.roa (hash: M2N3duptFA+bV1Le2KfMm0NhGumIDIKQ5uH8Mkm1Ayk=)
4: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (hash: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=)
5: 3230322e3135332e342e302f32332d3234203d3e203338303432.roa (hash: VcodHH9y1x00L8sP0YZKCLZqgzyOTw8vizvrWxB7jj0=)
6: CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl (hash: 4gYhDV7GPmmQaiQ8ZQaZbkdj3PJWX9D7pnzvrPgoXe0=)
7: 3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (hash: uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=)
8: 3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (hash: TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=)
9: 3130332e3132332e3133322e302f32322d3234203d3e20313331313531.roa (hash: H4J8aYtZ2lQXywkXl0ThjqAPLa0AaGzOIFqfGA0h3G0=)
10: 3130332e3230382e3139362e302f32342d3234203d3e20313331313531.roa (hash: h+x2L34XmnxLWmEu1m747gZYQB4caW32b27vqV/vxXE=)
11: 3230322e3134382e3232302e302f32332d3234203d3e203338303432.roa (hash: Qf23TJE1nXjdkeX0xoNGfVGqhO6JSGDcdHqoaJWF4Yw=)
12: 3230322e3134382e3232302e302f32332d3234203d3e20313334383233.roa (hash: jOramKZ+p8IwNeLLsXerl9TVbe7RADM835SAcBWesfU=)
13: 3230322e3135332e342e302f32332d3234203d3e20313334383233.roa (hash: NsOmt7pVltLDLNJkJQMI9iOFOR3amJKV3SLzyoPvcPU=)
14: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (hash: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=)
15: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (hash: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=)
16: 3130332e3133372e32322e302f32332d3234203d3e20313331313531.roa (hash: g4jmTDzhH5yCftN+Hf4jeZwkiWF2fHHHW5/2kNZmhdo=)
17: 3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (hash: IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=)
18: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (hash: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 05:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:34:f6:70:4a:22:dd:3d:42:58:89:05:65:0e:8f:35:5f:9a:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: Jul 28 03:22:23 2026 GMT
Not After : Jul 29 05:56:23 2026 GMT
Subject: CN=9DDD15EA9BD7049EA4F3FEB04A4C4498339BB5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:bc:eb:80:99:7e:ae:70:92:cc:44:c8:0f:
1b:70:c1:a3:5c:6d:ed:4a:37:cd:a0:e2:bd:05:f4:
13:93:45:25:48:ac:39:91:c0:92:c7:a4:64:6c:10:
c9:2b:c6:82:57:0b:41:e9:90:f0:c5:c4:a1:5f:e7:
17:ff:18:30:aa:d0:03:71:48:8c:90:36:34:eb:d1:
df:2d:55:ec:10:ec:9d:29:3c:ec:ec:70:8f:07:21:
63:a5:82:54:90:bd:6c:2e:99:38:62:66:96:ac:3a:
05:41:09:ba:26:fb:55:d3:6e:42:12:e9:45:af:1d:
76:d8:9f:11:b9:62:04:c9:13:f6:a5:48:8b:63:eb:
c3:c4:9c:a6:eb:5f:08:a4:d1:38:c5:56:3f:f1:92:
58:41:d2:c5:97:d9:bf:3a:1b:26:0f:f3:ff:3d:39:
c7:f3:53:5f:98:ab:30:81:53:49:41:8a:fd:47:3c:
3e:df:dd:3c:4c:09:1f:a1:95:d0:bd:fa:4a:99:65:
75:1e:77:cd:40:7f:ea:59:bf:72:3d:eb:22:f5:09:
4d:b4:20:49:82:64:02:b0:b7:85:19:f5:bb:04:ae:
f4:de:f8:30:d8:3d:11:eb:16:5b:ea:01:b9:3d:00:
58:f7:78:e2:97:c2:30:5b:e4:c4:4b:15:f0:f4:3f:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:15:EA:9B:D7:04:9E:A4:F3:FE:B0:4A:4C:44:98:33:9B:B5:AE
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d4:fe:f0:cc:92:dd:07:47:e9:20:9b:fc:4d:68:e2:3d:70:
b3:0d:0e:c0:99:f2:6f:51:43:95:4b:aa:1c:8d:d3:cd:e2:af:
8c:d4:b3:53:34:4a:b8:4c:8b:d9:7d:c5:59:f8:39:c5:9c:77:
e7:1d:f4:c1:ca:54:a4:65:b2:34:27:0a:b5:44:c0:65:8b:1f:
4c:f2:29:c9:21:ef:57:49:29:ee:3d:61:f0:e4:44:a5:91:ca:
64:62:02:f4:5e:fe:fb:e3:ce:c9:1d:e5:60:86:74:f1:76:c1:
e1:db:29:33:63:ad:11:31:3c:f0:3f:5e:d0:15:73:8f:ba:15:
e2:0f:17:71:8b:00:18:97:9d:29:15:55:cb:b4:f6:38:3c:f0:
1e:41:88:44:73:17:34:de:13:cf:f9:95:29:d4:88:90:e2:a2:
56:e6:06:2e:ff:40:9d:3b:5b:b5:aa:44:09:3c:4d:46:a9:79:
cd:aa:5c:26:1b:a3:8f:fc:6a:27:e7:b4:7e:c9:e8:fe:69:20:
bd:e2:e3:61:f3:7b:f6:db:0c:16:9b:d2:6b:a7:d2:0b:63:9f:
b6:85:16:f0:c8:41:a0:eb:d0:f4:7c:42:e8:3b:ee:86:46:52:
01:75:a7:cc:7b:d8:65:d1:a1:4f:8e:4c:b4:40:cb:45:d5:24:
b9:40:f3:f0
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUATT2cEoi3T1CWIkFZQ6PNV+aVecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE
MTQ0RkVBRTAeFw0yNjA3MjgwMzIyMjNaFw0yNjA3MjkwNTU2MjNaMDMxMTAvBgNV
BAMTKDlEREQxNUVBOUJENzA0OUVBNEYzRkVCMDRBNEM0NDk4MzM5QkI1QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5t7zrgJl+rnCSzETIDxtwwaNc
be1KN82g4r0F9BOTRSVIrDmRwJLHpGRsEMkrxoJXC0HpkPDFxKFf5xf/GDCq0ANx
SIyQNjTr0d8tVewQ7J0pPOzscI8HIWOlglSQvWwumThiZpasOgVBCbom+1XTbkIS
6UWvHXbYnxG5YgTJE/alSItj68PEnKbrXwik0TjFVj/xklhB0sWX2b86GyYP8/89
OcfzU1+YqzCBU0lBiv1HPD7f3TxMCR+hldC9+kqZZXUed81Af+pZv3I96yL1CU20
IEmCZAKwt4UZ9bsErvTe+DDYPRHrFlvqAbk9AFj3eOKXwjBb5MRLFfD0P8QxAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUnd0V6pvXBJ6k8/6wSkxEmDObta4wHwYDVR0j
BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1
QzQ5OUZEMTQ0RkVBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC9DRTExQkRENDRG
NjY3NzY2MjRDNEQ5QkUxNDVDNDk5RkQxNDRGRUFFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNT+8MyS
3QdH6SCb/E1o4j1wsw0OwJnyb1FDlUuqHI3TzeKvjNSzUzRKuEyL2X3FWfg5xZx3
5x30wcpUpGWyNCcKtUTAZYsfTPIpySHvV0kp7j1h8OREpZHKZGIC9F7+++POyR3l
YIZ08XbB4dspM2OtETE88D9e0BVzj7oV4g8XcYsAGJedKRVVy7T2ODzwHkGIRHMX
NN4Tz/mVKdSIkOKiVuYGLv9AnTtbtapECTxNRql5zapcJhujj/xqJ+e0fsno/mkg
veLjYfN79tsMFpvSa6fSC2OftoUW8MhBoOvQ9HxC6DvuhkZSAXWnzHvYZdGhT45M
tEDLRdUkuUDz8A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:49:03 2026 by rpki-client