
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json)
Hash identifier: U/Oh2Nvh13Hm8Od/xfEMhtsAbKh0ECcai3fmjVDGM/M=
Subject key identifier: 94:CE:08:0B:44:12:07:AF:5A:04:A3:15:7E:43:AF:3B:43:9A:4B:B8
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial: 765A29E6B58ED2954A4C08901A2235B04109D16C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
Manifest number: DE
Signing time: Thu 23 Jul 2026 14:58:01 +0000
Manifest this update: Thu 23 Jul 2026 14:53:01 +0000
Manifest next update: Fri 24 Jul 2026 16:42:01 +0000
Files and hashes: 1: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=)
2: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=)
3: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=)
4: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=)
5: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=)
6: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=)
7: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=)
8: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=)
9: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=)
10: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=)
11: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=)
12: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=)
13: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=)
14: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=)
15: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=)
16: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=)
17: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=)
18: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=)
19: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: SFWPjcmCz+5vVO8hRnwF5s/sSEm2ISHhXLMW8sdZAow=)
20: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=)
21: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=)
22: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=)
23: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=)
24: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=)
25: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=)
26: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5a:29:e6:b5:8e:d2:95:4a:4c:08:90:1a:22:35:b0:41:09:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Validity
Not Before: Jul 23 14:53:01 2026 GMT
Not After : Jul 24 16:42:01 2026 GMT
Subject: CN=94CE080B441207AF5A04A3157E43AF3B439A4BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:aa:42:af:e7:ab:22:1a:46:88:a3:96:4f:
f2:d0:39:c1:0f:ca:74:12:ae:c5:e7:9d:fa:74:da:
cf:9e:7a:81:e9:e1:06:b3:b9:e9:e7:6e:6b:ed:fa:
ee:1e:9a:61:7e:65:3a:76:d0:81:a3:da:33:1c:f8:
11:17:5a:8e:bd:db:14:65:8a:cd:7f:82:73:ef:f0:
c6:10:da:be:2b:32:86:23:67:71:9b:c8:d4:d1:98:
9d:79:a4:49:ce:43:41:71:60:38:4a:a2:26:4a:f8:
2a:81:c2:c2:c6:cf:43:3c:30:20:49:c5:f2:bb:be:
2f:3d:cf:80:4b:08:14:12:a1:29:ea:c9:df:fc:f5:
d3:ce:9d:d8:c1:6d:0b:a2:6c:0e:5c:14:85:ae:45:
43:b5:01:ec:9e:08:5c:0f:c6:c5:b7:6a:64:ed:f2:
94:25:af:ca:3d:5c:b2:d5:6c:49:af:9f:71:1b:b6:
a5:13:cb:95:0f:88:fe:3a:ef:07:ad:93:57:3d:04:
de:2b:91:3b:51:a1:5e:18:9e:fa:9d:01:f5:eb:89:
22:02:16:54:a3:99:61:76:e5:a1:69:4e:4f:21:59:
6a:77:fc:e3:9f:72:e0:fb:4f:0f:52:e4:5e:bd:79:
cf:d9:17:33:10:69:9d:bb:49:53:e8:10:8c:f1:27:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CE:08:0B:44:12:07:AF:5A:04:A3:15:7E:43:AF:3B:43:9A:4B:B8
X509v3 Authority Key Identifier:
keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:26:a3:84:0e:58:ca:97:b0:0a:92:e0:68:df:5f:ee:c0:fb:
2a:72:76:78:8f:2f:62:55:bf:f1:22:42:ae:c8:8f:cf:4f:c3:
e6:cd:81:e4:2d:69:86:76:75:2a:6f:83:a0:df:5c:b5:f8:cf:
ed:b6:6b:f6:95:76:fe:b6:1b:95:2d:49:6f:de:41:e2:15:20:
c7:f8:11:a6:d8:90:9d:fc:e2:5e:ca:43:dc:ab:ad:aa:62:4c:
45:f5:ae:0b:58:d5:be:44:6d:ca:60:91:3b:cf:ee:67:95:76:
b7:fb:6e:94:8c:00:77:ff:46:f9:28:a4:93:f6:08:c8:94:d8:
a2:58:ac:8d:63:37:8a:35:08:dd:a1:98:0e:58:86:42:34:3d:
f9:c6:b9:96:b7:63:c0:45:04:b4:1d:52:36:07:aa:9c:f7:18:
e3:5f:54:ca:78:2a:2b:00:6f:5e:48:91:24:f9:5d:92:6c:c8:
52:c1:fc:3d:7a:25:ce:c4:d4:a7:f6:8e:a0:db:56:ae:87:1a:
34:3b:90:af:6d:72:d8:2e:2a:1f:1e:06:41:bf:18:df:7d:67:
94:25:bf:ae:63:84:42:bf:83:ca:51:ab:b1:61:fa:f3:fe:b4:
3c:93:70:e1:61:6f:38:f0:d7:9c:7c:35:85:78:82:06:7f:d8:
ef:e5:85:55
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUdlop5rWO0pVKTAiQGiI1sEEJ0WwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz
RDFGMDMxNDAeFw0yNjA3MjMxNDUzMDFaFw0yNjA3MjQxNjQyMDFaMDMxMTAvBgNV
BAMTKDk0Q0UwODBCNDQxMjA3QUY1QTA0QTMxNTdFNDNBRjNCNDM5QTRCQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7apCr+erIhpGiKOWT/LQOcEP
ynQSrsXnnfp02s+eeoHp4Qazuennbmvt+u4emmF+ZTp20IGj2jMc+BEXWo692xRl
is1/gnPv8MYQ2r4rMoYjZ3GbyNTRmJ15pEnOQ0FxYDhKoiZK+CqBwsLGz0M8MCBJ
xfK7vi89z4BLCBQSoSnqyd/89dPOndjBbQuibA5cFIWuRUO1AeyeCFwPxsW3amTt
8pQlr8o9XLLVbEmvn3EbtqUTy5UPiP467wetk1c9BN4rkTtRoV4YnvqdAfXriSIC
FlSjmWF25aFpTk8hWWp3/OOfcuD7Tw9S5F69ec/ZFzMQaZ27SVPoEIzxJ0m7AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUlM4IC0QSB69aBKMVfkOvO0OaS7gwHwYDVR0j
BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt
VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx
QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG
NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2JqOE
DljKl7AKkuBo31/uwPsqcnZ4jy9iVb/xIkKuyI/PT8PmzYHkLWmGdnUqb4Og31y1
+M/ttmv2lXb+thuVLUlv3kHiFSDH+BGm2JCd/OJeykPcq62qYkxF9a4LWNW+RG3K
YJE7z+5nlXa3+26UjAB3/0b5KKST9gjIlNiiWKyNYzeKNQjdoZgOWIZCND35xrmW
t2PARQS0HVI2B6qc9xjjX1TKeCorAG9eSJEk+V2SbMhSwfw9eiXOxNSn9o6g21au
hxo0O5CvbXLYLiofHgZBvxjffWeUJb+uY4RCv4PKUauxYfrz/rQ8k3DhYW848Nec
fDWFeIIGf9jv5YVV
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:45 2026 by rpki-client