$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json) Hash identifier: Xm67p8rlSWM1fmQ+NMcOVFMZ8glHJf9zjSTLwgp14c0= Subject key identifier: 19:C4:88:CB:0D:81:88:8A:82:FB:A4:9C:E7:B9:34:6C:7A:09:92:C6 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 42B66EC0AE185B936F45695509CB94F61EAE5BCB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft Manifest number: 0130 Signing time: Tue 22 Sep 2026 16:07:57 +0000 Manifest this update: Tue 22 Sep 2026 16:02:57 +0000 Manifest next update: Wed 23 Sep 2026 18:44:57 +0000 Files and hashes: 1: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: hdu2MITx7qSUGZlwsJhhxnaOqaleIO9b+TK0+J6+BRw=) 2: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=) 3: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=) 4: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=) 5: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=) 6: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=) 7: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=) 8: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=) 9: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=) 10: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=) 11: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=) 12: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=) 13: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=) 14: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=) 15: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=) 16: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=) 17: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=) 18: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=) 19: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=) 20: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=) 21: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=) 22: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=) 23: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=) 24: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=) 25: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=) 26: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 18:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b6:6e:c0:ae:18:5b:93:6f:45:69:55:09:cb:94:f6:1e:ae:5b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Sep 22 16:02:57 2026 GMT Not After : Sep 23 18:44:57 2026 GMT Subject: CN=19C488CB0D81888A82FBA49CE7B9346C7A0992C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4e:63:2c:28:93:4c:be:76:d6:99:76:02:89: 0a:7e:98:90:c6:9f:11:48:1e:2d:1e:20:c2:8a:11: 7a:c1:93:fe:a0:71:56:75:8a:6d:fb:58:a6:a9:4d: d5:f8:a1:8b:56:15:ba:2a:9d:c5:a2:4e:3c:76:76: 68:99:d3:2e:d1:b1:96:56:d5:ab:a4:6a:fd:cb:ba: c2:4f:72:94:25:b1:07:b8:58:f3:58:28:ac:05:88: 6d:57:05:a3:26:9c:c8:f1:59:e2:f2:af:a3:71:f9: 79:d3:c1:eb:9d:00:2b:6e:d4:fe:22:48:ea:c8:f6: 4c:49:48:58:a8:87:7a:70:91:44:41:44:31:62:ec: dd:40:9c:d2:84:a0:54:e3:96:78:25:e1:cb:6c:1a: 92:6b:ec:3c:fa:30:13:dd:6b:07:a2:f4:8f:27:07: c7:ed:57:03:b5:94:47:9a:e1:3c:af:9a:6f:2c:96: df:67:10:69:cb:84:a0:f4:68:69:d0:f6:ff:a1:52: cf:d7:e6:d3:2a:b8:68:be:06:2a:ac:1c:fb:f2:a3: 91:1c:0e:c4:20:0d:b6:08:67:22:34:ae:e5:2e:3d: 58:49:28:5e:1b:8a:b9:e4:bf:dd:35:88:dd:d3:27: e2:c1:f7:84:5b:08:91:44:b9:57:2d:04:62:0b:7b: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:88:CB:0D:81:88:8A:82:FB:A4:9C:E7:B9:34:6C:7A:09:92:C6 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:15:63:22:9d:d7:12:50:38:2f:2a:2d:71:53:8e:eb:04:60: b3:af:9c:d7:06:df:b7:0f:64:e8:66:c5:18:1b:2b:57:75:b7: 0a:f2:4f:f5:fe:c0:a7:f4:da:32:c3:a1:ca:8b:01:1f:29:b0: 09:43:a7:cc:50:8c:ee:ff:0e:13:ec:e7:7f:ef:61:57:b0:df: 51:9c:17:72:7d:fa:48:92:c9:60:70:96:2f:90:b0:d2:ae:c4: 50:8a:95:f8:5c:68:49:77:06:95:b3:58:7a:f9:17:d3:ed:2d: 39:d9:cd:16:3b:ca:8f:dd:37:47:96:83:56:87:9a:ea:86:e0: 22:42:1b:bb:02:0b:18:c7:e5:da:05:c6:1f:22:af:b2:ba:b0: 1f:76:c3:3b:3f:6b:56:db:6c:3a:8f:14:fc:73:d1:8d:83:97: e0:da:cb:60:65:c4:b0:e4:fb:bd:d8:26:d7:05:74:d0:f1:36: ee:55:91:6f:da:dd:d1:20:af:c6:6f:2c:dd:72:e4:c1:95:cc: 95:3f:2e:d9:b9:22:ad:b6:cc:ed:a2:b0:dc:c4:61:b9:25:95: 4e:1e:1f:13:89:72:31:d2:1d:10:12:72:29:b7:10:e7:b5:1b: 67:45:01:3e:e0:a5:39:10:52:ad:33:5e:eb:ea:ea:f8:4b:c8: 53:6c:d7:df -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUQrZuwK4YW5NvRWlVCcuU9h6uW8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA5MjIxNjAyNTdaFw0yNjA5MjMxODQ0NTdaMDMxMTAvBgNV BAMTKDE5QzQ4OENCMEQ4MTg4OEE4MkZCQTQ5Q0U3QjkzNDZDN0EwOTkyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoTmMsKJNMvnbWmXYCiQp+mJDG nxFIHi0eIMKKEXrBk/6gcVZ1im37WKapTdX4oYtWFboqncWiTjx2dmiZ0y7RsZZW 1aukav3LusJPcpQlsQe4WPNYKKwFiG1XBaMmnMjxWeLyr6Nx+XnTweudACtu1P4i SOrI9kxJSFioh3pwkURBRDFi7N1AnNKEoFTjlngl4ctsGpJr7Dz6MBPdawei9I8n B8ftVwO1lEea4Tyvmm8slt9nEGnLhKD0aGnQ9v+hUs/X5tMquGi+BiqsHPvyo5Ec DsQgDbYIZyI0ruUuPVhJKF4birnkv901iN3TJ+LB94RbCJFEuVctBGILe/JJAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUGcSIyw2BiIqC+6Sc57k0bHoJksYwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEFWMi ndcSUDgvKi1xU47rBGCzr5zXBt+3D2ToZsUYGytXdbcK8k/1/sCn9Noyw6HKiwEf KbAJQ6fMUIzu/w4T7Od/72FXsN9RnBdyffpIkslgcJYvkLDSrsRQipX4XGhJdwaV s1h6+RfT7S052c0WO8qP3TdHloNWh5rqhuAiQhu7AgsYx+XaBcYfIq+yurAfdsM7 P2tW22w6jxT8c9GNg5fg2stgZcSw5Pu92CbXBXTQ8TbuVZFv2t3RIK/GbyzdcuTB lcyVPy7ZuSKttsztorDcxGG5JZVOHh8TiXIx0h0QEnIptxDntRtnRQE+4KU5EFKt M17r6ur4S8hTbNff -----END CERTIFICATE-----Generated at Wed Sep 23 07:42:58 2026 by rpki-client