$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json) Hash identifier: 1kVAqd5LOHJq53V2DeLvG62RQ6Vb21dTo7jzDxyDLcU= Subject key identifier: 41:C1:1F:DA:B9:C6:39:98:2A:0C:4E:2D:AF:42:C5:61:EE:56:8E:1E Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Certificate serial: 2EBE47A98C8EC7266BD7738432C4617BB74ED0F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft Manifest number: 83 Signing time: Fri 14 Aug 2026 20:53:29 +0000 Manifest this update: Fri 14 Aug 2026 20:48:29 +0000 Manifest next update: Sat 15 Aug 2026 23:31:29 +0000 Files and hashes: 1: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=) 2: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=) 3: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: rzbz2Myy1hbE6wiXPkte3i2m7TBEyxXdPrByw+iSDzY=) 4: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 23:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:be:47:a9:8c:8e:c7:26:6b:d7:73:84:32:c4:61:7b:b7:4e:d0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Validity Not Before: Aug 14 20:48:29 2026 GMT Not After : Aug 15 23:31:29 2026 GMT Subject: CN=41C11FDAB9C639982A0C4E2DAF42C561EE568E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:96:11:df:8b:d0:23:61:69:5d:f7:40:93: dd:82:70:53:7b:29:54:df:44:19:22:57:32:c4:d8: a9:bf:6b:3c:15:86:0a:b0:29:8b:23:30:99:5c:00: ed:7b:bb:c4:b2:fb:ce:fb:35:ff:77:8d:c6:89:43: 61:72:e6:91:4e:b6:74:70:ad:3b:5e:49:a3:1b:07: 4c:91:35:8c:3e:f3:55:26:e8:63:8f:ac:24:74:a9: 96:51:1c:a5:62:ce:76:42:ae:35:e6:05:e7:52:9b: 11:59:02:cd:02:76:de:19:64:99:01:d3:f7:23:ec: 78:70:cc:48:99:2f:2b:07:93:40:c3:81:af:1e:d5: 08:7f:08:45:6e:2a:b5:61:c0:7b:a5:3c:d3:08:9e: 8e:f1:2c:3b:45:a7:45:d2:20:d7:2d:a3:88:79:aa: 1d:73:32:c7:5f:74:6d:e9:77:6f:7e:c4:3c:ae:d2: 1c:0c:dc:1f:fc:76:cb:e6:d9:21:ae:a5:bc:5a:95: ba:2b:d0:03:bc:77:fc:0f:93:6b:e6:a9:1e:af:0d: 98:f6:8c:bb:1c:84:9c:55:32:ae:91:2a:de:46:25: e7:c4:02:43:d6:91:bb:f5:1d:af:bc:e1:67:7e:5f: 37:51:cb:96:e2:e8:3b:19:94:c9:0b:8d:38:0d:8c: e2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C1:1F:DA:B9:C6:39:98:2A:0C:4E:2D:AF:42:C5:61:EE:56:8E:1E X509v3 Authority Key Identifier: keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:3f:1e:00:1a:49:de:99:d8:62:89:e1:40:73:a3:b3:60: 12:63:22:ca:0d:44:85:b8:0e:6e:da:e0:4d:b3:eb:fe:d4:31: 2b:19:51:0c:6c:95:c2:f3:32:5c:7a:dc:35:3b:5e:a9:97:52: d2:d8:45:40:b1:df:fc:3c:86:ee:45:8b:9e:39:a8:e1:ad:ba: 7f:46:23:f5:9c:2c:52:20:75:7a:ff:04:e6:22:98:4f:56:b6: 13:d5:91:cd:09:64:af:7e:3b:0b:06:0a:41:d2:36:3a:37:30: eb:26:57:04:51:c4:c2:43:8e:3c:3d:c2:b5:55:d1:d0:aa:22: 26:ba:ac:24:f0:6a:9d:96:84:38:8f:67:10:57:c5:32:2f:d7: 46:15:be:ee:71:5e:3e:d3:e6:ae:b8:e9:2b:ea:7d:3b:56:7f: 50:23:55:17:80:70:3d:90:38:5c:a2:c2:e8:f2:68:7e:85:dd: ea:0e:59:ba:14:a1:13:c6:00:74:ed:1e:74:bb:4b:a9:0a:52: 0f:3d:d7:0a:f4:97:03:28:a1:2d:be:6e:ca:b5:ed:e6:e4:bd: 26:5c:f1:ce:f1:28:b3:45:82:07:dc:6f:22:8b:a9:5b:40:08: a3:d5:ba:f9:49:d4:1c:35:20:a6:86:ce:74:6d:e0:37:49:19: 84:50:76:5a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULr5HqYyOxyZr13OEMsRhe7dO0PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4 RUVBQ0NERDAeFw0yNjA4MTQyMDQ4MjlaFw0yNjA4MTUyMzMxMjlaMDMxMTAvBgNV BAMTKDQxQzExRkRBQjlDNjM5OTgyQTBDNEUyREFGNDJDNTYxRUU1NjhFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcZYR34vQI2FpXfdAk92CcFN7 KVTfRBkiVzLE2Km/azwVhgqwKYsjMJlcAO17u8Sy+877Nf93jcaJQ2Fy5pFOtnRw rTteSaMbB0yRNYw+81Um6GOPrCR0qZZRHKViznZCrjXmBedSmxFZAs0Cdt4ZZJkB 0/cj7HhwzEiZLysHk0DDga8e1Qh/CEVuKrVhwHulPNMIno7xLDtFp0XSINcto4h5 qh1zMsdfdG3pd29+xDyu0hwM3B/8dsvm2SGupbxalbor0AO8d/wPk2vmqR6vDZj2 jLschJxVMq6RKt5GJefEAkPWkbv1Ha+84Wd+XzdRy5bi6DsZlMkLjTgNjOKtAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUQcEf2rnGOZgqDE4tr0LFYe5Wjh4wHwYDVR0j BBgwFoAUzlqBALoJlKK4B/X0+3QcUo7qzN0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFM SUZFLzAvQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9DRTVBODEwMEJBMDk5NEEyQjgwN0Y1RjRG Qjc0MUM1MjhFRUFDQ0RELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFMSUZFLzAvQ0U1QTgx MDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHyP Px4AGknemdhiieFAc6OzYBJjIsoNRIW4Dm7a4E2z6/7UMSsZUQxslcLzMlx63DU7 XqmXUtLYRUCx3/w8hu5Fi545qOGtun9GI/WcLFIgdXr/BOYimE9WthPVkc0JZK9+ OwsGCkHSNjo3MOsmVwRRxMJDjjw9wrVV0dCqIia6rCTwap2WhDiPZxBXxTIv10YV vu5xXj7T5q646SvqfTtWf1AjVReAcD2QOFyiwujyaH6F3eoOWboUoRPGAHTtHnS7 S6kKUg891wr0lwMooS2+bsq17ebkvSZc8c7xKLNFggfcbyKLqVtACKPVuvlJ1Bw1 IKaGznRt4DdJGYRQdlo= -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:50 2026 by rpki-client