
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier: GKKqY/J5hSvqEoT8+1j5ynLViNbORd9USk0VFYo8YXg=
Subject key identifier: 0A:D8:4E:19:77:03:4D:F5:61:2C:EF:C7:9B:11:E6:37:27:C3:C5:6B
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 11C5BA330C78E1C109AA0AB377DE3E7D9CACEFBD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number: FC
Signing time: Fri 14 Aug 2026 16:12:16 +0000
Manifest this update: Fri 14 Aug 2026 16:07:16 +0000
Manifest next update: Sat 15 Aug 2026 17:14:16 +0000
Files and hashes: 1: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=)
2: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
3: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
4: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
5: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
6: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
7: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
8: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
9: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
10: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
11: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
12: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
13: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
14: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
15: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
16: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
17: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
18: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
19: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
20: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
21: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
22: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
23: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
24: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
25: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: 90rAVV6lIOUc0ntPqtXf+d0BEmRnhXuAQ6C7oXoN27o=)
26: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 17:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c5:ba:33:0c:78:e1:c1:09:aa:0a:b3:77:de:3e:7d:9c:ac:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: Aug 14 16:07:16 2026 GMT
Not After : Aug 15 17:14:16 2026 GMT
Subject: CN=0AD84E1977034DF5612CEFC79B11E63727C3C56B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:a9:9f:ec:9e:aa:fb:23:61:95:1a:2e:3f:
01:29:b4:f5:17:5d:d4:ef:5b:f3:68:7e:06:c0:7a:
08:9d:51:72:41:77:4e:6f:24:c8:4b:0b:e0:58:c8:
33:b2:52:b9:e0:47:a0:27:72:66:42:78:05:f2:df:
f6:a6:bc:41:45:f9:19:70:5f:65:e9:72:c8:46:60:
ca:7c:73:95:3c:27:36:f8:ed:6b:3a:74:df:89:be:
74:83:90:d8:58:9c:61:cf:63:56:ab:54:ae:2d:3b:
b7:8c:bf:e2:e0:1c:ec:ae:f8:a5:2d:67:cb:a7:f4:
35:55:da:41:fe:35:a4:15:17:df:ac:94:24:7f:8d:
47:2f:e4:af:73:ba:be:fa:da:a9:5a:c4:5d:37:f4:
65:c1:30:83:fa:09:82:cc:5b:ce:27:2a:b6:fe:6e:
9c:35:f8:77:7d:a7:e8:34:78:68:98:b7:f8:8f:a8:
9e:61:d6:f6:1b:0d:e9:43:2e:66:c8:72:81:3d:c0:
58:b6:d3:90:13:f6:80:c8:2a:51:51:8f:52:6a:0b:
0d:e0:8c:c7:d4:46:dd:4e:82:a2:27:d0:4a:b3:61:
21:32:9c:37:91:25:4d:c2:93:2a:6d:2e:49:9f:6b:
12:46:25:e6:57:41:d5:c6:2d:a8:38:09:04:a5:4c:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:4E:19:77:03:4D:F5:61:2C:EF:C7:9B:11:E6:37:27:C3:C5:6B
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:87:03:03:60:70:e2:6b:55:c9:67:45:53:78:da:79:c4:40:
8d:b2:52:44:fe:d2:7e:83:cf:76:18:8f:7b:14:93:a8:55:2f:
ae:4f:3d:7a:04:48:7e:c3:e4:82:9d:5e:79:19:eb:cb:a3:5d:
38:38:a1:12:af:7d:26:0a:02:36:78:5a:aa:2b:d5:c2:8f:c1:
54:78:f4:c3:95:58:d2:f1:65:57:f3:bc:c0:78:82:e6:6e:96:
73:9c:47:d6:0c:06:52:f8:fe:42:03:01:72:c8:bd:0f:e5:57:
6b:6f:b3:7e:52:33:42:95:51:84:5c:57:22:cc:1b:99:b3:2e:
c1:a7:a3:f4:98:2d:b1:b4:90:f2:4b:a6:cd:33:22:ce:bb:de:
75:9d:49:20:f3:a1:7d:59:37:f4:a9:74:c0:7b:07:b3:76:85:
2c:92:d6:d8:83:9d:43:3d:0e:e1:8c:5a:49:77:36:1a:10:6d:
a6:47:5e:c3:7c:28:07:1f:7c:d1:ff:f9:a0:a8:6d:09:9f:8d:
3f:71:a5:5d:d2:ae:5d:0e:f9:f1:15:46:26:56:e8:b6:3f:5a:
fe:2d:54:82:68:1e:2d:5d:7f:2e:91:07:2e:ba:7c:42:24:a9:
63:02:88:fd:8f:af:ff:89:db:ae:7c:a3:96:b3:a9:60:9e:c7:
c5:ca:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:33:55 2026 by rpki-client