
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier: NubItfyGHqLHSyedJel9/PCHJO9Jr+IAs7fEprEUpPw=
Subject key identifier: 78:29:2C:EF:D0:30:24:4D:81:69:61:DE:40:AD:AE:1B:D0:17:9E:44
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 30A76C5D0E9DB1791B9DB687296B9980A33AB222
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number: 012F
Signing time: Mon 21 Sep 2026 20:42:09 +0000
Manifest this update: Mon 21 Sep 2026 20:37:09 +0000
Manifest next update: Wed 23 Sep 2026 00:05:09 +0000
Files and hashes: 1: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
2: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
3: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
4: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
5: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
6: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
7: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
8: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: D61P6qKsQ2nDIpER8H2oIRwjgW5AaPmMzKO0UhAN52A=)
9: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
10: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
11: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
12: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
13: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
14: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
15: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
16: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
17: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
18: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
19: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
20: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
21: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=)
22: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
23: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
24: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
25: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
26: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a7:6c:5d:0e:9d:b1:79:1b:9d:b6:87:29:6b:99:80:a3:3a:b2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: Sep 21 20:37:09 2026 GMT
Not After : Sep 23 00:05:09 2026 GMT
Subject: CN=78292CEFD030244D816961DE40ADAE1BD0179E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:67:57:7f:d3:cb:30:81:34:39:29:a8:57:
35:8a:e1:ec:f9:0d:13:76:95:1d:18:6d:01:a0:79:
10:47:07:97:b5:87:f4:35:52:3f:07:de:22:0b:9d:
e1:e7:72:0b:76:a5:40:63:a4:52:43:51:ee:c0:0a:
0b:6b:38:d4:84:9c:ef:73:d1:c4:bb:06:49:c3:8f:
7c:d8:73:bd:95:af:ac:af:91:a3:cb:1c:10:a5:dc:
24:77:b8:15:4f:35:ea:9d:28:fc:6e:8b:82:72:63:
57:7e:a4:7b:16:d3:6a:59:bd:f1:b4:a7:ce:9d:65:
7d:79:80:e3:75:d4:74:f0:ea:2b:f8:0a:cd:e4:a4:
68:f7:2f:f8:ff:80:18:a2:d0:2e:78:68:6f:36:b7:
97:45:d6:92:81:ed:ea:5a:63:21:c4:87:23:02:db:
96:3c:09:99:de:36:12:2c:e8:7b:1c:c8:22:6e:08:
83:26:22:c3:f0:b2:a2:5b:35:4c:52:0c:cd:44:d9:
e8:d2:35:82:74:50:2d:a7:f7:31:37:79:df:52:5b:
1a:90:93:a3:87:1d:4d:0f:fc:46:7c:b0:62:5f:99:
b8:e3:8f:07:e2:a9:c5:71:0f:32:6f:ec:14:c4:df:
20:c2:48:87:70:a8:f2:50:23:ba:3a:d1:43:b3:56:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:2C:EF:D0:30:24:4D:81:69:61:DE:40:AD:AE:1B:D0:17:9E:44
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:17:3b:57:10:4c:85:e0:9a:f6:a8:66:33:af:33:34:df:d0:
4f:1b:3c:fe:a8:17:95:ad:b8:6a:29:4d:c1:2b:f9:e4:49:7c:
86:9c:a8:a5:53:e2:66:a8:62:1c:a5:1a:9d:77:7c:2d:4e:0c:
04:5b:8b:1c:ef:7a:ae:3b:30:7f:5b:b2:3f:e4:53:ff:47:93:
e7:6a:f4:3f:44:ec:57:af:c5:4a:a8:77:ec:0c:c6:9c:ad:e5:
45:ef:15:fd:c0:38:8c:1f:2b:86:1f:a5:54:a8:81:d7:29:c0:
b9:90:50:9e:08:8a:68:9f:ac:18:09:42:fb:50:f9:1f:ef:7e:
8e:51:fa:f6:e9:61:8a:a2:18:eb:8b:09:44:4c:d6:5c:23:bb:
32:5e:c5:73:fb:e9:17:a6:01:42:8a:0e:ac:91:a2:ea:36:c7:
bb:09:8c:80:98:21:a6:7a:f6:29:90:fe:56:84:52:e9:6b:a6:
d2:ad:87:83:d6:1f:12:8f:83:45:99:63:a3:85:e5:19:99:d4:
25:10:19:84:b5:71:2e:0b:8e:e7:06:70:79:60:64:5c:92:12:
de:aa:b6:ac:5f:5f:86:51:ed:3c:14:3b:ea:41:e8:eb:77:fa:
9e:20:3e:ae:c5:86:42:8e:12:de:04:87:1e:59:c7:44:7b:ba:
38:5a:80:92
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUMKdsXQ6dsXkbnbaHKWuZgKM6siIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz
RDFGMDMxNDAeFw0yNjA5MjEyMDM3MDlaFw0yNjA5MjMwMDA1MDlaMDMxMTAvBgNV
BAMTKDc4MjkyQ0VGRDAzMDI0NEQ4MTY5NjFERTQwQURBRTFCRDAxNzlFNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQGdXf9PLMIE0OSmoVzWK4ez5
DRN2lR0YbQGgeRBHB5e1h/Q1Uj8H3iILneHncgt2pUBjpFJDUe7ACgtrONSEnO9z
0cS7BknDj3zYc72Vr6yvkaPLHBCl3CR3uBVPNeqdKPxui4JyY1d+pHsW02pZvfG0
p86dZX15gON11HTw6iv4Cs3kpGj3L/j/gBii0C54aG82t5dF1pKB7epaYyHEhyMC
25Y8CZneNhIs6HscyCJuCIMmIsPwsqJbNUxSDM1E2ejSNYJ0UC2n9zE3ed9SWxqQ
k6OHHU0P/EZ8sGJfmbjjjwfiqcVxDzJv7BTE3yDCSIdwqPJQI7o60UOzVn0rAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUeCks79AwJE2BaWHeQK2uG9AXnkQwHwYDVR0j
BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt
VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx
QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG
NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMFztX
EEyF4Jr2qGYzrzM039BPGzz+qBeVrbhqKU3BK/nkSXyGnKilU+JmqGIcpRqdd3wt
TgwEW4sc73quOzB/W7I/5FP/R5PnavQ/ROxXr8VKqHfsDMacreVF7xX9wDiMHyuG
H6VUqIHXKcC5kFCeCIpon6wYCUL7UPkf736OUfr26WGKohjriwlETNZcI7syXsVz
++kXpgFCig6skaLqNse7CYyAmCGmevYpkP5WhFLpa6bSrYeD1h8Sj4NFmWOjheUZ
mdQlEBmEtXEuC47nBnB5YGRckhLeqrasX1+GUe08FDvqQejrd/qeID6uxYZCjhLe
BIceWcdEe7o4WoCS
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:22:49 2026 by rpki-client