$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft File: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft (raw, json) Hash identifier: c0LnzKgRygKKLg+vyVMA1ieCf7xT2hbQQleJaUQArO8= Subject key identifier: 4F:F5:63:7A:95:37:F6:4A:28:DD:9E:28:E1:E6:3B:F2:86:53:8D:D0 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 3C2DC0B775A40963D9363C6F65E7081EA2F33D6C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft Manifest number: 0131 Signing time: Wed 23 Sep 2026 10:47:18 +0000 Manifest this update: Wed 23 Sep 2026 10:42:18 +0000 Manifest next update: Thu 24 Sep 2026 11:05:18 +0000 Files and hashes: 1: 33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl (hash: SIqZ48iDjliyG+o/Tjj6el7+1DMmd4atUYY2UWpTYz0=) 2: AS136744.roa (hash: KmFFxCh7QltvylknLN6m9CZsIjFILUoeD8Jr/J0+GRM=) 3: AS17408.roa (hash: Q6z9Ubavej3zNqN4sh+89PMkaxrzUiPQg4hTXkVKGL4=) 4: AS9831.roa (hash: FWqKihPbwMeaIlZ7ThBn9asgGgR941PW7x3/Ort9ea4=) 5: AS132157.roa (hash: tFFi1vSrbwtrfFt/UyfwLLV2meCBJmoSlGLhs6pZWrY=) 6: AS137263.roa (hash: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA=) 7: AS21859.roa (hash: P/VRc3mKgDpqa0oxXnZb+Wejk0MLOhvIVYZXAyR8RBQ=) 8: AS18419.roa (hash: /dBUveC7fqyuZzMk38kcJmt+xDfVQjUD//1ye3Vr2s4=) 9: AS131273.roa (hash: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw=) 10: AS131607.roa (hash: Ko3377c28EF6ik+MPYsJpuviH/yggUoyqs69q5XaynQ=) 11: AS38851.roa (hash: YHsM/Rq4XjgIDmV2IQ8QRia9ohmb8bF1nSfYLTD2C8w=) 12: AS138915.roa (hash: uGsNun+BxX8ZT/vgZvX6thq65lHzhDxm5P5ef2BV7oU=) 13: AS131596.roa (hash: rDMwBtuoUrFSw4uCROJpFSHT6GaQFwx2GO67xaLVrX0=) 14: AS57976.roa (hash: OHhIkRujl/u3lh08F8Zhg5fPJywkv42cHFKXuXYHMaw=) 15: AS139750.roa (hash: GV5NMmRzHea6XnMsN0IxKMCLZBnQovc5+vQXwtuFXho=) 16: AS10133.roa (hash: 47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=) 17: AS131600.roa (hash: Hqjr0QNzCDAb58no3kyXToiKsdA+yAVu1DmUsHaYkdo=) 18: AS10085.roa (hash: iqrxvDsALP0o8cvNww3K9WEnd+8xt7iZ5T8XoOMTITQ=) 19: AS7532.roa (hash: XmGzEusu01Qc/t82T+l8B0d9yy7aFTUPd4r0xeo4QYE=) 20: AS131679.roa (hash: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI=) 21: AS142142.roa (hash: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM=) 22: AS131627.roa (hash: +LMBK9XHf+sI1+zmkbXs5kImDXCKh9N84fFmLCKnJu0=) 23: AS17651.roa (hash: saImIicoMhFhyAiu3X9cFqQpw4AOPcKEzXWMqV3wLV0=) 24: AS18186.roa (hash: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw=) 25: AS18046.roa (hash: VPK3WDXlrekfmZlMSkN9vlMyxOeqrzgD1jd03AJW0Aw=) 26: AS63199.roa (hash: K7p+/FAv1xE8+SKc9RiQCaNiZuYVks05xmlRCszBRLI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2d:c0:b7:75:a4:09:63:d9:36:3c:6f:65:e7:08:1e:a2:f3:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Sep 23 10:42:18 2026 GMT Not After : Sep 24 11:05:18 2026 GMT Subject: CN=4FF5637A9537F64A28DD9E28E1E63BF286538DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:a8:65:7c:6f:b2:d6:62:5d:e8:10:72:a5: 8f:8d:9c:f6:c8:17:92:9e:50:b7:d1:fd:bc:4d:b1: e2:87:29:a2:b2:3a:bb:cf:7a:a3:1f:01:30:9d:cb: 23:e9:40:f7:4a:ee:50:98:58:db:5e:b3:8c:03:6c: 1c:dd:24:bf:96:6c:d9:dc:64:a4:69:82:04:8a:44: a0:c9:d8:33:c9:23:ce:0b:39:59:82:a8:92:2b:76: 9a:51:0d:ed:b7:47:22:db:4d:03:af:bc:c7:97:83: 8e:5e:1e:61:e2:8a:90:19:3d:b8:40:d5:29:3d:b9: 10:2d:51:5c:bc:96:fb:b7:81:8f:1b:4a:07:a0:7c: 91:28:05:1e:3b:d2:a8:96:e3:ee:58:6f:b0:52:2c: cb:98:fe:bb:85:0e:8e:15:5e:f8:a2:cb:82:bc:11: c6:4a:fc:4c:c9:cf:72:5e:73:f4:d0:9e:f8:b3:e8: 97:99:41:ea:39:07:3f:99:df:74:40:bf:55:2e:df: b1:69:c5:d0:99:c2:40:af:be:d5:89:1c:0e:f6:f8: e0:24:d7:20:dc:49:b1:4e:e7:09:0c:02:f2:05:82: 72:3a:ed:0d:02:9a:fc:1f:85:dd:85:fb:c8:a9:1f: 7e:33:dc:75:ba:2d:cf:9b:35:aa:84:15:17:c3:fc: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:63:7A:95:37:F6:4A:28:DD:9E:28:E1:E6:3B:F2:86:53:8D:D0 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:9b:c5:cb:73:57:1a:73:1a:23:07:10:5a:78:41:ff:56:36: d9:88:80:f2:8e:ae:2f:1e:00:8b:c9:fd:c1:0a:52:36:9c:b2: 2a:b6:8e:b9:42:16:ab:0a:ac:c2:b1:9a:54:7b:a2:cd:70:3d: 77:19:e7:a4:ef:a9:fe:42:8f:9a:91:74:ff:ed:23:91:aa:2e: 80:05:f4:6b:dc:55:04:f4:6a:d1:d7:c6:05:18:bd:58:75:1a: cf:d6:5e:6d:85:a9:81:9b:61:d4:ba:02:2a:1a:7c:91:27:ca: 4c:6e:3d:6d:df:86:85:c1:8f:e0:97:bf:36:b5:27:c1:1a:d9: 52:54:8f:65:c6:7c:85:7a:f1:71:db:ea:b1:e4:03:98:18:39: 2c:42:a2:36:f4:ef:4b:1d:d4:9a:52:2e:f3:37:75:74:c6:cb: 98:95:6d:27:03:7a:29:e2:ab:75:85:3b:54:39:21:32:31:0a: dd:52:78:aa:bb:8e:5b:85:76:d7:30:47:4f:1c:41:ce:8c:a9: 8f:4b:aa:d5:11:a6:59:b7:a0:e2:19:2a:89:78:3d:e2:69:8c: cc:a2:14:33:04:f2:8b:51:c3:84:f7:e3:72:72:80:23:1f:0f: 25:93:c5:b5:ef:4e:e4:63:a4:d8:d5:65:b0:f6:1e:1b:b3:c8: 03:d7:fa:70 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUPC3At3WkCWPZNjxvZecIHqLzPWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA5MjMxMDQyMThaFw0yNjA5MjQxMTA1MThaMDMxMTAvBgNV BAMTKDRGRjU2MzdBOTUzN0Y2NEEyOEREOUUyOEUxRTYzQkYyODY1MzhERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUKhlfG+y1mJd6BBypY+NnPbI F5KeULfR/bxNseKHKaKyOrvPeqMfATCdyyPpQPdK7lCYWNtes4wDbBzdJL+WbNnc ZKRpggSKRKDJ2DPJI84LOVmCqJIrdppRDe23RyLbTQOvvMeXg45eHmHiipAZPbhA 1Sk9uRAtUVy8lvu3gY8bSgegfJEoBR470qiW4+5Yb7BSLMuY/ruFDo4VXviiy4K8 EcZK/EzJz3Jec/TQnviz6JeZQeo5Bz+Z33RAv1Uu37FpxdCZwkCvvtWJHA72+OAk 1yDcSbFO5wkMAvIFgnI67Q0Cmvwfhd2F+8ipH34z3HW6Lc+bNaqEFRfD/HobAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUT/VjepU39koo3Z4o4eY78oZTjdAwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wLzMzQ0E0QjVG NDI5NUI2ODEyMTI3QUY1NzYxQzZENzM1M0QxRjAzMTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFm8XL c1cacxojBxBaeEH/VjbZiIDyjq4vHgCLyf3BClI2nLIqto65QharCqzCsZpUe6LN cD13Geek76n+Qo+akXT/7SORqi6ABfRr3FUE9GrR18YFGL1YdRrP1l5thamBm2HU ugIqGnyRJ8pMbj1t34aFwY/gl782tSfBGtlSVI9lxnyFevFx2+qx5AOYGDksQqI2 9O9LHdSaUi7zN3V0xsuYlW0nA3op4qt1hTtUOSEyMQrdUniqu45bhXbXMEdPHEHO jKmPS6rVEaZZt6DiGSqJeD3iaYzMohQzBPKLUcOE9+NycoAjHw8lk8W1707kY6TY 1WWw9h4bs8gD1/pw -----END CERTIFICATE-----Generated at Thu Sep 24 03:08:06 2026 by rpki-client