
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier: BIn3g5C206kLmlWTIDxXpIqBg3ldXxXQ6PSU5uKJlg4=
Subject key identifier: 2F:0C:99:25:02:AA:98:F4:B4:B4:E3:7D:17:2D:0E:2A:63:BA:2C:DB
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 14D61B22A3236FE9DFEB22CE2976E2AA325DA0A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number: 7E
Signing time: Wed 13 May 2026 09:32:52 +0000
Manifest this update: Wed 13 May 2026 09:27:52 +0000
Manifest next update: Thu 14 May 2026 12:50:52 +0000
Files and hashes: 1: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
2: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
3: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
4: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
5: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
6: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
7: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
8: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
9: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
10: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
11: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
12: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
13: AS142142.roa (hash: cJofD+wgL+2D0dIIwDim3qcL1NmCazDSh7JhBNr3dNc=)
14: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
15: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
16: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
17: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
18: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
19: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
20: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
21: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
22: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
23: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
24: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
25: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: bkLxBRsg3KSK8V718aq2po4sgQZ4Xf39yUmRBu5OWHA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d6:1b:22:a3:23:6f:e9:df:eb:22:ce:29:76:e2:aa:32:5d:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: May 13 09:27:52 2026 GMT
Not After : May 14 12:50:52 2026 GMT
Subject: CN=2F0C992502AA98F4B4B4E37D172D0E2A63BA2CDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:9a:40:c7:5b:f4:5d:0e:f4:ed:12:2c:ac:
89:d2:44:c7:09:bd:23:cd:af:14:09:4c:02:64:c2:
ba:00:58:71:00:5a:6d:0e:4b:27:08:d2:e2:12:a0:
28:5d:65:57:53:21:70:73:05:7f:5d:e5:e0:bd:ae:
0c:d4:3b:4b:ee:1f:4c:5f:79:7e:3c:41:9f:7b:c7:
76:d0:b5:90:8c:12:8e:08:d0:99:a2:3b:1b:9a:1e:
25:c8:cb:d9:58:da:08:95:31:c0:b1:cc:bd:26:65:
34:3a:7e:a4:b4:9c:37:59:39:09:f9:80:11:e6:38:
0a:72:ae:c2:b7:b5:cf:71:d6:c1:20:80:9c:c9:28:
c7:dc:b8:c7:70:eb:dc:98:d4:f4:9b:34:e9:f5:83:
71:19:49:ed:67:2f:5a:27:a7:dd:3d:75:e7:e2:e7:
90:5e:fa:02:56:71:ed:5b:2c:a3:77:45:e0:7a:c5:
85:07:eb:87:f2:79:5d:d4:1b:28:6b:e0:45:15:62:
5f:57:f9:f3:6a:ad:e4:63:4d:9e:ae:bf:c3:d0:6c:
44:df:83:ac:9c:93:cd:85:4b:b0:db:58:fe:26:68:
d8:c0:53:46:5d:78:61:34:f1:cf:18:60:2a:a7:09:
a0:aa:04:93:b1:ba:dc:e1:9a:bb:b1:c4:8e:81:2a:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0C:99:25:02:AA:98:F4:B4:B4:E3:7D:17:2D:0E:2A:63:BA:2C:DB
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:db:0e:f8:06:3a:f9:0f:4c:09:8a:24:26:a5:3c:55:15:74:
e9:2c:57:a5:67:45:22:70:26:62:54:76:3a:b2:0c:ab:f4:3e:
dc:b2:cf:0a:98:f4:e4:35:da:71:a8:2e:48:a3:41:e6:f8:85:
3d:f4:bc:12:e6:85:c6:9e:c4:04:e4:a5:82:e5:9e:80:6f:7f:
0e:39:52:9a:eb:e3:71:fc:f9:83:ea:2f:1f:b2:42:48:a7:46:
ff:51:78:99:9a:f8:99:b6:9c:90:b2:0b:c3:8b:b4:4b:06:4d:
12:63:79:42:d7:46:fc:03:48:b5:68:c7:84:d8:df:5b:e3:19:
19:59:b1:40:84:48:90:75:24:c1:4d:2e:34:99:ed:35:2b:c5:
67:fc:5b:04:a0:4a:2d:c1:7b:52:0c:aa:24:54:d0:70:95:9d:
77:46:ce:c4:b8:3c:d3:6b:da:12:03:2c:2d:a8:2c:f8:03:05:
4f:26:a6:bf:40:52:1e:d9:4b:88:95:dc:94:d8:58:1d:3e:54:
7a:e8:11:97:8f:6c:66:ad:1f:fa:ae:5e:cb:a1:50:0e:c5:70:
00:98:5e:4a:76:db:68:18:41:49:ba:ef:32:96:d7:e9:de:75:
00:79:ef:35:98:45:c4:42:ce:d3:d3:8f:2f:85:70:f1:46:7f:
cd:9a:82:f4
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUFNYbIqMjb+nf6yLOKXbiqjJdoKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz
RDFGMDMxNDAeFw0yNjA1MTMwOTI3NTJaFw0yNjA1MTQxMjUwNTJaMDMxMTAvBgNV
BAMTKDJGMEM5OTI1MDJBQTk4RjRCNEI0RTM3RDE3MkQwRTJBNjNCQTJDREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1ppAx1v0XQ707RIsrInSRMcJ
vSPNrxQJTAJkwroAWHEAWm0OSycI0uISoChdZVdTIXBzBX9d5eC9rgzUO0vuH0xf
eX48QZ97x3bQtZCMEo4I0JmiOxuaHiXIy9lY2giVMcCxzL0mZTQ6fqS0nDdZOQn5
gBHmOApyrsK3tc9x1sEggJzJKMfcuMdw69yY1PSbNOn1g3EZSe1nL1onp909defi
55Be+gJWce1bLKN3ReB6xYUH64fyeV3UGyhr4EUVYl9X+fNqreRjTZ6uv8PQbETf
g6yck82FS7DbWP4maNjAU0ZdeGE08c8YYCqnCaCqBJOxutzhmruxxI6BKitTAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQULwyZJQKqmPS0tON9Fy0OKmO6LNswHwYDVR0j
BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt
VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx
QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG
NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS2w74
Bjr5D0wJiiQmpTxVFXTpLFelZ0UicCZiVHY6sgyr9D7css8KmPTkNdpxqC5Io0Hm
+IU99LwS5oXGnsQE5KWC5Z6Ab38OOVKa6+Nx/PmD6i8fskJIp0b/UXiZmviZtpyQ
sgvDi7RLBk0SY3lC10b8A0i1aMeE2N9b4xkZWbFAhEiQdSTBTS40me01K8Vn/FsE
oEotwXtSDKokVNBwlZ13Rs7EuDzTa9oSAywtqCz4AwVPJqa/QFIe2UuIldyU2Fgd
PlR66BGXj2xmrR/6rl7LoVAOxXAAmF5KdttoGEFJuu8yltfp3nUAee81mEXEQs7T
048vhXDxRn/NmoL0
-----END CERTIFICATE-----
Generated at Wed May 13 20:34:01 2026 by rpki-client