$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json) Hash identifier: H8qJH9O8/s77yIhSbtdWDboX0ONfHs+kV6SQlviaWak= Subject key identifier: CD:52:DB:ED:48:C9:B7:F3:B9:48:63:9F:53:50:9E:A5:83:94:0D:43 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: CB9EFD81941C623D689A2E9CFA46BD8FF191D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft Manifest number: E5 Signing time: Tue 28 Jul 2026 15:19:17 +0000 Manifest this update: Tue 28 Jul 2026 15:14:17 +0000 Manifest next update: Wed 29 Jul 2026 16:18:17 +0000 Files and hashes: 1: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=) 2: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: TQ9YZCcU+Ae+ccJtlCeMqGXibX596lv8lc2yllpHWX8=) 3: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=) 4: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=) 5: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=) 6: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=) 7: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=) 8: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=) 9: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=) 10: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=) 11: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=) 12: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=) 13: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=) 14: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=) 15: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=) 16: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=) 17: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=) 18: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=) 19: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=) 20: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=) 21: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=) 22: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=) 23: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=) 24: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=) 25: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=) 26: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cb:9e:fd:81:94:1c:62:3d:68:9a:2e:9c:fa:46:bd:8f:f1:91:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Jul 28 15:14:17 2026 GMT Not After : Jul 29 16:18:17 2026 GMT Subject: CN=CD52DBED48C9B7F3B948639F53509EA583940D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:e1:bc:90:5c:dc:f5:67:98:77:01:2e:77: 00:f1:cc:e4:e1:1b:f3:a1:5f:55:eb:a6:29:31:6d: bc:10:98:24:37:08:8d:c5:62:67:1e:f5:5d:9a:bf: 39:ee:8e:d1:c2:95:34:0c:bb:53:25:3a:13:d5:f3: 25:d3:7c:a9:07:c9:b1:87:24:17:fa:a6:e3:3a:24: 84:eb:9d:3a:ed:c0:cf:44:98:a1:dd:05:91:af:11: 34:34:a1:d7:86:d2:e1:9d:18:ef:a1:0d:8d:1c:e6: 48:0e:34:cd:de:65:27:67:e3:5d:dc:8b:83:7d:92: e1:41:1e:a9:f2:3a:7f:eb:fb:88:fd:24:aa:73:85: b5:19:d7:cd:a8:bf:6f:2f:c8:30:bd:ea:16:70:3c: cb:eb:62:4b:0b:a1:0f:5f:a3:24:3e:c2:93:ee:e3: 4d:90:36:aa:7b:7b:a2:fa:91:7f:10:0d:1c:3f:96: e4:d4:76:bb:89:99:7c:ae:1d:14:8e:a6:e7:7d:4a: 5d:23:9d:37:6b:fa:1b:21:0a:47:aa:0f:0b:42:b4: e3:26:c6:1a:33:c3:69:21:c2:89:75:24:99:a6:be: 6b:01:df:a9:f5:7d:4f:1c:c3:ca:86:eb:a7:52:97: af:1d:2d:25:f6:04:fa:f9:22:70:15:2a:6f:23:a0: 88:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:52:DB:ED:48:C9:B7:F3:B9:48:63:9F:53:50:9E:A5:83:94:0D:43 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e0:9b:99:da:85:12:2f:e2:76:e7:0e:c2:ce:d0:81:ab:48: 1a:59:52:b6:e0:3c:38:7f:c5:7f:74:dc:b7:f0:de:ba:d5:f6: 60:f6:91:14:ab:ce:35:a6:47:e0:2f:e8:42:8a:d3:f5:a6:a1: 22:34:9a:cd:7b:41:05:77:21:96:a9:41:12:4c:61:c9:28:46: 12:5c:db:9f:31:77:0b:10:10:72:f6:3c:96:01:97:c4:09:6d: ce:b0:58:f7:9b:7e:43:6b:e3:ac:05:38:f5:83:11:44:b2:6a: 6a:63:ff:2b:8b:2e:26:c9:6f:69:33:81:49:ee:bb:99:08:9b: 6c:60:10:e8:46:63:b9:ab:b3:6c:64:e6:18:28:1a:13:60:69: 69:86:1c:fc:90:0a:03:45:c9:f4:22:e8:0e:63:d0:05:03:2e: 1f:f5:84:4b:a8:be:0c:eb:52:f7:68:dc:da:9f:b9:59:7e:b7: 94:84:91:4b:64:e6:57:05:49:44:fe:92:a2:58:98:a1:5b:78: 0d:3a:5c:e4:c4:dc:c6:63:00:3b:25:da:57:89:1f:77:68:e0: 31:73:dc:61:9e:8b:87:1f:3a:7f:2c:75:39:04:15:39:16:ca: c6:77:9e:1a:b1:94:70:22:c9:3f:e4:3f:c8:c0:0c:5b:12:82: 2e:50:62:f5 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUAMue/YGUHGI9aJounPpGvY/xkdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA3MjgxNTE0MTdaFw0yNjA3MjkxNjE4MTdaMDMxMTAvBgNV BAMTKENENTJEQkVENDhDOUI3RjNCOTQ4NjM5RjUzNTA5RUE1ODM5NDBENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hOG8kFzc9WeYdwEudwDxzOTh G/OhX1XrpikxbbwQmCQ3CI3FYmce9V2avznujtHClTQMu1MlOhPV8yXTfKkHybGH JBf6puM6JITrnTrtwM9EmKHdBZGvETQ0odeG0uGdGO+hDY0c5kgONM3eZSdn413c i4N9kuFBHqnyOn/r+4j9JKpzhbUZ182ov28vyDC96hZwPMvrYksLoQ9foyQ+wpPu 402QNqp7e6L6kX8QDRw/luTUdruJmXyuHRSOpud9Sl0jnTdr+hshCkeqDwtCtOMm xhozw2khwol1JJmmvmsB36n1fU8cw8qG66dSl68dLSX2BPr5InAVKm8joIiHAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUzVLb7UjJt/O5SGOfU1CepYOUDUMwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBA4JuZ 2oUSL+J25w7CztCBq0gaWVK24Dw4f8V/dNy38N661fZg9pEUq841pkfgL+hCitP1 pqEiNJrNe0EFdyGWqUESTGHJKEYSXNufMXcLEBBy9jyWAZfECW3OsFj3m35Da+Os BTj1gxFEsmpqY/8riy4myW9pM4FJ7ruZCJtsYBDoRmO5q7NsZOYYKBoTYGlphhz8 kAoDRcn0IugOY9AFAy4f9YRLqL4M61L3aNzan7lZfreUhJFLZOZXBUlE/pKiWJih W3gNOlzkxNzGYwA7JdpXiR93aOAxc9xhnouHHzp/LHU5BBU5FsrGd54asZRwIsk/ 5D/IwAxbEoIuUGL1 -----END CERTIFICATE-----Generated at Wed Jul 29 00:10:58 2026 by rpki-client