$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json) Hash identifier: ZYc8O+UC5Nv/J1Xj9K/z7wtigQUu6NxJaM2q053Enbw= Subject key identifier: EB:CF:4B:BC:13:E4:DC:36:98:A6:18:0F:56:30:E9:AC:05:9C:E0:D2 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 1364FF666B959464E3B1A79B3051353B8E9DE75B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft Manifest number: 013A Signing time: Wed 30 Sep 2026 01:08:44 +0000 Manifest this update: Wed 30 Sep 2026 01:03:44 +0000 Manifest next update: Thu 01 Oct 2026 05:02:44 +0000 Files and hashes: 1: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=) 2: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=) 3: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=) 4: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=) 5: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=) 6: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=) 7: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: wrc04Wq7+goWv+C/7SOJZnSJvsnAr97DWQ0CZiTU9Bo=) 8: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=) 9: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=) 10: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=) 11: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=) 12: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=) 13: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=) 14: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=) 15: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=) 16: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=) 17: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=) 18: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=) 19: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=) 20: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=) 21: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=) 22: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=) 23: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=) 24: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=) 25: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=) 26: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 02:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:64:ff:66:6b:95:94:64:e3:b1:a7:9b:30:51:35:3b:8e:9d:e7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Sep 30 01:03:44 2026 GMT Not After : Oct 1 05:02:44 2026 GMT Subject: CN=EBCF4BBC13E4DC3698A6180F5630E9AC059CE0D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:3c:83:84:c2:32:fe:1b:5a:b3:96:3c:34: 3f:5e:61:7f:5f:89:1b:5b:54:1c:93:ba:b7:3d:a4: 3e:94:0c:7d:12:6a:c1:92:dc:6d:90:8f:ae:79:9d: 32:d5:c7:b2:cc:6f:5d:7d:cd:42:14:27:67:23:ce: 39:4f:77:e6:2c:5c:72:52:58:2b:9a:bc:96:08:83: d6:a8:26:5f:17:02:99:0a:d2:a8:44:25:34:fe:a3: bd:a9:b6:80:70:3b:ee:e5:87:f7:6b:d1:39:18:f2: 1e:c8:3e:1a:f3:0d:b1:e3:76:5b:5f:43:ea:c8:6e: 67:1c:a9:09:92:ff:35:00:f0:c5:3e:d3:f2:64:9b: c7:f4:31:ff:a0:c5:fa:3a:b1:ef:23:db:ee:19:08: 30:4d:66:31:ea:c1:14:79:f1:7a:cf:10:0b:29:8d: 2a:55:5e:8a:67:3d:e9:d7:9b:41:49:20:d4:1d:26: 79:28:ba:1a:45:83:e1:ca:96:50:48:d1:ca:6b:85: f7:55:ab:d2:75:2e:2d:60:f4:45:c7:3b:54:cf:ad: ec:51:6f:d9:0d:ff:7e:8f:8a:b1:ca:11:c4:0e:8a: 62:fb:c2:8c:2b:9e:36:a8:a6:a8:f1:35:9b:c3:18: a8:46:ed:c5:07:9c:8e:6a:6f:c2:2d:b4:0f:15:b7: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CF:4B:BC:13:E4:DC:36:98:A6:18:0F:56:30:E9:AC:05:9C:E0:D2 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:43:ce:94:d1:ff:1b:c1:83:cd:4b:85:78:7e:7b:2c:14:4f: 1d:0e:01:b2:16:32:85:fb:a8:54:47:51:41:59:3a:35:72:07: 4f:57:49:e5:36:af:3f:22:e9:66:64:b5:e0:da:a7:4a:1c:28: ce:cb:74:0c:c6:5f:62:0b:c4:7c:e0:af:da:39:ab:6b:bd:ac: 44:a6:06:f1:82:03:72:55:12:e2:8d:9e:b9:64:12:a0:a8:63: 08:17:73:1f:35:7d:77:c5:7f:db:3d:23:2a:e4:95:74:fe:cf: 8b:3e:02:d1:24:8a:94:37:23:30:3c:13:79:81:7d:16:d5:78: 4b:a0:0e:72:b1:d5:10:6a:ef:60:47:15:1b:ff:1e:62:98:25: 23:90:91:9b:f2:ef:89:f8:34:1e:6b:56:d8:3b:eb:1f:af:95: 39:82:7b:cb:b5:e8:19:64:ce:42:73:5e:70:4a:c0:64:62:d0: ef:1f:8b:23:02:f3:7e:ae:94:65:f4:c5:06:06:60:c8:3f:37: 0e:ee:17:33:7c:98:14:99:0f:6e:52:56:2b:d1:da:7d:f8:9d: 83:dc:ae:a8:09:6e:86:4f:06:17:f0:5c:f4:2a:d2:67:01:f0: b8:f5:27:b6:32:fe:04:61:3f:5b:06:6e:86:27:c2:6a:94:1b: cd:56:24:38 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUE2T/ZmuVlGTjsaebMFE1O46d51swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA5MzAwMTAzNDRaFw0yNjEwMDEwNTAyNDRaMDMxMTAvBgNV BAMTKEVCQ0Y0QkJDMTNFNERDMzY5OEE2MTgwRjU2MzBFOUFDMDU5Q0UwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1TyDhMIy/htas5Y8ND9eYX9f iRtbVByTurc9pD6UDH0SasGS3G2Qj655nTLVx7LMb119zUIUJ2cjzjlPd+YsXHJS WCuavJYIg9aoJl8XApkK0qhEJTT+o72ptoBwO+7lh/dr0TkY8h7IPhrzDbHjdltf Q+rIbmccqQmS/zUA8MU+0/Jkm8f0Mf+gxfo6se8j2+4ZCDBNZjHqwRR58XrPEAsp jSpVXopnPenXm0FJINQdJnkouhpFg+HKllBI0cprhfdVq9J1Li1g9EXHO1TPrexR b9kN/36PirHKEcQOimL7wowrnjaopqjxNZvDGKhG7cUHnI5qb8IttA8Vt8aVAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU689LvBPk3DaYphgPVjDprAWc4NIwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJQ86U 0f8bwYPNS4V4fnssFE8dDgGyFjKF+6hUR1FBWTo1cgdPV0nlNq8/IulmZLXg2qdK HCjOy3QMxl9iC8R84K/aOatrvaxEpgbxggNyVRLijZ65ZBKgqGMIF3MfNX13xX/b PSMq5JV0/s+LPgLRJIqUNyMwPBN5gX0W1XhLoA5ysdUQau9gRxUb/x5imCUjkJGb 8u+J+DQea1bYO+sfr5U5gnvLtegZZM5Cc15wSsBkYtDvH4sjAvN+rpRl9MUGBmDI PzcO7hczfJgUmQ9uUlYr0dp9+J2D3K6oCW6GTwYX8Fz0KtJnAfC49Se2Mv4EYT9b Bm6GJ8JqlBvNViQ4 -----END CERTIFICATE-----Generated at Wed Sep 30 09:02:06 2026 by rpki-client