
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier: /VfJFht6ERVn9OExy/t4rZxA2PV4aCO072Bjuu5uHYU=
Subject key identifier: 0F:76:D8:67:4B:8E:F6:E7:8E:55:4C:92:13:39:DB:67:CF:11:45:55
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 0C774AD03A84E7481B82F4D4BD1ADA32CB8A272A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number: BE
Signing time: Tue 30 Jun 2026 05:53:13 +0000
Manifest this update: Tue 30 Jun 2026 05:48:13 +0000
Manifest next update: Wed 01 Jul 2026 07:52:13 +0000
Files and hashes: 1: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
2: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
3: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
4: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
5: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
6: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
7: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
8: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
9: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
10: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
11: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
12: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
13: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
14: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
15: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
16: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
17: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
18: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
19: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
20: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: z2i+2B3WYX4iPUQG6JFatphPiK8MzlyST50pNygXaIg=)
21: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
22: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
23: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
24: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
25: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 07:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:77:4a:d0:3a:84:e7:48:1b:82:f4:d4:bd:1a:da:32:cb:8a:27:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: Jun 30 05:48:13 2026 GMT
Not After : Jul 1 07:52:13 2026 GMT
Subject: CN=0F76D8674B8EF6E78E554C921339DB67CF114555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:30:11:2b:66:bb:e0:b3:a0:b9:c1:97:bc:
1a:a7:51:0a:d1:be:1e:18:95:78:ee:c4:80:b2:65:
58:8e:b1:a2:33:96:fc:10:c3:df:34:8b:cf:27:86:
0a:06:82:7a:47:9c:77:86:e6:70:da:9f:82:f7:28:
56:7a:87:91:77:1b:bc:f8:a7:53:91:a2:cf:9e:59:
bc:45:03:65:7e:e6:86:09:de:a2:da:49:f3:62:47:
c7:49:c7:7e:e7:a7:f2:e4:b2:e0:b4:91:1a:0b:22:
c9:ec:9d:1e:e9:06:da:93:f7:ac:f0:53:6e:9d:95:
3d:1d:2e:4d:93:c7:c1:4c:bf:cd:9d:b1:81:d6:7e:
b3:f4:92:b8:ac:4e:09:ef:92:de:c5:55:d8:a7:8e:
aa:66:82:2f:e3:d3:71:25:8c:fc:5f:3a:d1:cf:53:
1f:2e:2a:e7:77:51:df:45:15:97:a0:17:b1:b6:a4:
01:91:b9:97:88:4e:9e:fb:ba:99:f9:aa:f3:c8:f6:
0d:aa:c9:18:a3:68:50:a2:e4:8d:da:11:4d:8a:cf:
e5:e5:68:30:05:ac:a0:19:67:37:6d:5e:72:d2:6d:
92:67:ef:9e:43:16:e6:4c:38:89:69:8a:34:9b:44:
55:b4:4f:a8:19:0a:55:a4:56:95:1f:e9:4e:6a:ee:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:D8:67:4B:8E:F6:E7:8E:55:4C:92:13:39:DB:67:CF:11:45:55
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:21:24:ff:12:09:e0:e5:db:be:94:53:6b:dc:b6:fa:53:
86:08:19:d2:7b:40:0c:4d:a7:a2:94:a4:43:40:59:e0:d5:41:
2b:f3:02:1a:06:a5:bc:e1:1f:ab:b8:32:f4:b9:51:3a:43:ef:
0f:a6:a8:24:0b:b3:2d:c4:b5:65:1d:b8:2e:02:5e:b3:bc:de:
49:85:25:86:8e:ba:10:46:d2:81:14:a7:8f:d7:6d:26:8a:ee:
b1:b4:c4:b2:85:af:41:59:cc:17:d7:2c:39:e2:73:c0:1b:77:
a0:ee:71:b8:63:af:5d:b6:b1:91:c8:29:32:b7:c6:31:4f:8f:
0f:3d:1f:c9:b7:93:f5:f7:82:60:d9:0d:67:de:c3:aa:2d:7b:
a7:d6:dc:36:00:2f:dc:f5:98:89:54:39:7b:dc:a4:90:70:e3:
17:65:73:df:e6:21:e0:bf:93:f4:b6:52:f0:6c:c2:46:57:00:
17:d4:8f:79:65:cf:37:04:6f:4e:fb:c6:02:d5:0d:fa:0f:18:
c1:a3:b8:a9:7c:d0:a1:d4:56:1c:1d:01:5c:fc:76:25:ce:15:
8b:7f:59:9c:d8:53:e6:18:c7:0c:b8:4d:6d:b0:69:e9:e1:29:
4c:a1:21:11:ca:ce:84:3f:c7:f8:1b:55:2f:8b:1c:af:ce:9b:
a5:e6:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:59 2026 by rpki-client