$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft File: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft (raw, json) Hash identifier: Xw2MjbJpwnV9CmTzzDIby9YPSsi7nZmgFvlp+ybFVpI= Subject key identifier: 42:66:ED:D3:E5:71:84:2E:9B:70:0F:3A:76:4A:52:07:3E:EC:C6:B4 Authority key identifier: CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD Certificate issuer: /CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Certificate serial: 328C06C99EF36E378ACF1C046C68625F58A39430 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 10:23:11 +0000 Manifest this update: Tue 28 Jul 2026 10:18:11 +0000 Manifest next update: Wed 29 Jul 2026 13:07:11 +0000 Files and hashes: 1: 3130332e3132332e3138382e302f32342d3234203d3e203138303432.roa (hash: VGG3iALCYmsIo1frTwJ57vcG6Z53Cw4xXzO8I+lKQrc=) 2: 3130332e3132332e3139302e302f32342d3234203d3e2039393234.roa (hash: MkYfWxcvdtrJJbnLts1+66GKlU7GZ8ty9L0jiRzo53o=) 3: CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl (hash: jUk8hGphmNO0+QqrGNe+jFCdKSZ2HlA2l5CPOQzbI84=) 4: 3130332e3132332e3138392e302f32342d3234203d3e2039393234.roa (hash: ehfoOrBXE/RYfQPRqQV54VXyN1X6HRTFxmEyqkWRtOI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8c:06:c9:9e:f3:6e:37:8a:cf:1c:04:6c:68:62:5f:58:a3:94:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5A8100BA0994A2B807F5F4FB741C528EEACCDD Validity Not Before: Jul 28 10:18:11 2026 GMT Not After : Jul 29 13:07:11 2026 GMT Subject: CN=4266EDD3E571842E9B700F3A764A52073EECC6B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:f4:a0:3e:88:38:7a:fe:f2:5f:aa:48:6b: b3:f8:e0:32:68:c3:2f:3a:51:a9:9b:01:9d:b3:3a: 1c:fd:73:df:64:42:26:fb:dc:16:4d:84:f3:5b:2c: 06:cb:00:7b:ba:a3:41:4a:6b:7f:82:94:9d:de:7f: a6:41:42:9c:04:9c:b3:1b:81:eb:ba:86:55:ee:05: aa:36:fb:2d:4f:2b:23:55:d5:20:a9:a3:2c:e9:be: ba:64:9a:e4:58:34:96:74:9a:b5:4b:4b:40:0f:0f: cf:7b:b8:ce:63:92:9b:b2:df:92:06:6e:2b:69:53: b8:37:e3:d3:b2:59:60:c2:f6:35:7e:a9:56:73:bc: 4c:1f:f2:e3:fc:07:23:83:c2:fc:8d:be:45:0e:03: 48:5e:77:2c:a3:e6:37:48:4f:71:21:90:50:9f:f7: 52:f9:a4:61:d1:c1:c6:b1:a0:31:c0:32:c4:22:0a: 7b:99:24:3a:ee:1c:ac:ad:31:c3:58:6c:2a:6c:62: 63:e0:29:95:e6:3b:81:56:72:a0:63:47:0d:d2:1b: 42:47:85:a5:35:b0:26:88:c7:da:75:23:50:6f:72: ce:23:b9:9b:60:80:d3:c7:6b:0e:cc:2c:fa:3c:61: 1e:42:6b:4e:fa:5f:79:bb:ed:dd:94:17:5b:81:33: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:66:ED:D3:E5:71:84:2E:9B:70:0F:3A:76:4A:52:07:3E:EC:C6:B4 X509v3 Authority Key Identifier: keyid:CE:5A:81:00:BA:09:94:A2:B8:07:F5:F4:FB:74:1C:52:8E:EA:CC:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINALIFE/0/CE5A8100BA0994A2B807F5F4FB741C528EEACCDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fe:98:f0:7a:42:2e:c8:99:83:0e:19:fa:8b:e6:3e:b9:01: 1d:a4:07:8d:51:6d:a0:32:00:86:5d:e3:79:f5:c7:0c:36:6d: c4:60:b0:cc:ee:22:86:4e:4c:ec:5c:0b:cd:96:92:74:51:16: ae:a1:99:9e:ba:a7:99:54:f1:42:b4:57:8d:91:cf:0c:a7:23: c7:97:02:ef:38:31:23:95:c7:cf:89:88:b1:3b:d4:80:64:5c: 06:e8:56:86:d1:12:72:a4:4a:73:a1:d7:10:e0:44:38:80:6a: 25:48:a3:b8:e0:98:3c:6b:9c:f2:8c:79:ee:16:65:47:92:d3: 8f:fc:fe:d6:5e:49:8e:99:01:56:89:70:88:39:c1:e5:d7:48: 65:de:49:80:71:80:4d:6e:2d:b8:14:9e:b9:e2:23:63:3b:da: 6a:53:32:b7:74:0d:15:95:1a:34:0f:11:80:4a:97:cf:37:75: 76:90:85:d6:8d:04:4d:c5:7b:76:e3:84:1e:33:f2:0f:bc:81: 31:01:12:ea:2f:d4:a4:52:71:b2:37:7b:e3:bd:cb:60:d4:d3: 42:03:a6:88:1e:3a:af:7b:77:8a:b6:d2:7c:33:79:05:8c:8e: 6e:0f:de:bd:17:9b:fb:e3:f5:fe:96:e7:83:ca:48:24:bf:1f: 98:31:cb:1d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMowGyZ7zbjeKzxwEbGhiX1ijlDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4 RUVBQ0NERDAeFw0yNjA3MjgxMDE4MTFaFw0yNjA3MjkxMzA3MTFaMDMxMTAvBgNV BAMTKDQyNjZFREQzRTU3MTg0MkU5QjcwMEYzQTc2NEE1MjA3M0VFQ0M2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTfSgPog4ev7yX6pIa7P44DJo wy86UambAZ2zOhz9c99kQib73BZNhPNbLAbLAHu6o0FKa3+ClJ3ef6ZBQpwEnLMb geu6hlXuBao2+y1PKyNV1SCpoyzpvrpkmuRYNJZ0mrVLS0APD897uM5jkpuy35IG bitpU7g349OyWWDC9jV+qVZzvEwf8uP8ByODwvyNvkUOA0hedyyj5jdIT3EhkFCf 91L5pGHRwcaxoDHAMsQiCnuZJDruHKytMcNYbCpsYmPgKZXmO4FWcqBjRw3SG0JH haU1sCaIx9p1I1Bvcs4juZtggNPHaw7MLPo8YR5Ca076X3m77d2UF1uBM05DAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUQmbt0+VxhC6bcA86dkpSBz7sxrQwHwYDVR0j BBgwFoAUzlqBALoJlKK4B/X0+3QcUo7qzN0wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFM SUZFLzAvQ0U1QTgxMDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9DRTVBODEwMEJBMDk5NEEyQjgwN0Y1RjRG Qjc0MUM1MjhFRUFDQ0RELmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFMSUZFLzAvQ0U1QTgx MDBCQTA5OTRBMkI4MDdGNUY0RkI3NDFDNTI4RUVBQ0NERC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC3+ mPB6Qi7ImYMOGfqL5j65AR2kB41RbaAyAIZd43n1xww2bcRgsMzuIoZOTOxcC82W knRRFq6hmZ66p5lU8UK0V42RzwynI8eXAu84MSOVx8+JiLE71IBkXAboVobREnKk SnOh1xDgRDiAaiVIo7jgmDxrnPKMee4WZUeS04/8/tZeSY6ZAVaJcIg5weXXSGXe SYBxgE1uLbgUnrniI2M72mpTMrd0DRWVGjQPEYBKl883dXaQhdaNBE3Fe3bjhB4z 8g+8gTEBEuov1KRScbI3e+O9y2DU00IDpogeOq97d4q20nwzeQWMjm4P3r0Xm/vj 9f6W54PKSCS/H5gxyx0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:31:31 2026 by rpki-client