
$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json)
Hash identifier: glhIJfZnWgEygWqc3ii+OcNQLsNvlKxXkclATB22T5o=
Subject key identifier: C9:41:E2:C7:C2:68:CF:40:91:6A:2F:6D:C2:5E:7D:AD:5E:6C:73:D7
Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Certificate serial: 7530F6FC7027B3FA1072893E667DA5F351026594
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
Manifest number: 85
Signing time: Fri 14 Aug 2026 16:57:23 +0000
Manifest this update: Fri 14 Aug 2026 16:52:23 +0000
Manifest next update: Sat 15 Aug 2026 18:42:23 +0000
Files and hashes: 1: 323430323a343736303a39633a3a2f34382d3438203d3e20333936393832.roa (hash: W+cJcGEBHA5nMvetfbU/MxRKQJYX8lMgJjfV6ST7azg=)
2: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=)
3: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=)
4: 323430323a343736303a3a2f34382d3438203d3e20333936393832.roa (hash: xNniVHF2D5n4PRBYJLC1H1m4ixoVY/+fUm+4DZvFSao=)
5: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: l5hiGahTL2R6AaxHy1HoqYEDUxudgUdFih4S2s6/SGY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl
rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 18:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:30:f6:fc:70:27:b3:fa:10:72:89:3e:66:7d:a5:f3:51:02:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Validity
Not Before: Aug 14 16:52:23 2026 GMT
Not After : Aug 15 18:42:23 2026 GMT
Subject: CN=C941E2C7C268CF40916A2F6DC25E7DAD5E6C73D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:4f:5b:dd:84:ae:8d:39:f8:2b:02:74:50:
2e:c7:d0:70:25:c4:a2:3d:d5:7b:56:73:27:da:a4:
54:0c:c6:cb:c2:c1:21:49:83:2b:40:b5:5c:73:c0:
8b:ae:f7:fb:d0:80:0c:15:cd:e5:c8:6c:d2:d5:f2:
2e:9a:89:8e:02:df:08:6b:bd:41:2f:3d:59:76:fb:
6c:00:cc:ac:f0:49:32:5a:c8:78:d1:87:f7:ff:6e:
49:ff:14:c4:6e:c8:15:59:c8:6a:84:8f:d2:1d:65:
21:6a:3a:3c:be:0b:4b:27:72:d5:a3:31:ea:4f:d9:
f9:8f:0c:e7:1b:0a:be:48:ee:b1:33:39:69:0d:7c:
ed:94:42:33:aa:52:16:80:b5:16:a1:dd:a1:cd:4c:
86:58:b2:7e:13:11:43:ba:68:bd:73:39:26:10:55:
f3:ad:63:3d:0c:c7:03:da:8e:e8:b6:df:bd:02:1e:
d4:90:b2:39:05:ab:ec:35:9c:6a:a3:c5:7a:63:f3:
2c:f7:43:66:fb:26:42:80:e9:d5:b8:bb:d1:06:79:
89:95:3c:bb:d0:ab:d6:f9:83:5a:5c:90:ce:97:48:
55:30:02:b5:d0:bd:bf:9a:c6:52:8c:14:75:75:29:
f9:68:35:5b:6d:cb:c1:ba:a4:64:f5:82:1b:16:1f:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:E2:C7:C2:68:CF:40:91:6A:2F:6D:C2:5E:7D:AD:5E:6C:73:D7
X509v3 Authority Key Identifier:
keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fa:b6:f9:18:41:3b:b2:87:49:d0:af:74:1b:0e:26:18:fb:
a3:32:7c:e3:73:0e:65:e5:dc:cb:8b:25:3e:a5:d3:a5:97:95:
ab:4e:bf:67:e9:73:14:f8:ff:c9:3b:17:99:2d:dc:ef:ad:f8:
00:ec:db:f5:ad:d6:0d:ab:26:82:66:99:a2:1f:ee:2b:d1:59:
da:03:9c:16:d9:4b:ec:9b:72:98:63:da:a9:37:3a:2e:c7:81:
16:f6:d3:9f:c6:0a:7c:ce:a7:a1:19:cd:6c:82:f4:c7:57:50:
ae:28:82:52:b5:ec:7e:3c:cf:12:28:25:c4:4f:97:1c:4b:4b:
21:bc:0c:3a:c9:bb:2d:c4:ff:b9:7a:1e:14:66:a8:2f:97:cc:
6f:aa:e0:88:fe:5c:f2:24:81:4a:30:28:3e:62:52:16:eb:1a:
c2:3b:23:ac:e5:90:35:f3:b3:1e:8c:fa:86:7a:8d:ab:cd:10:
10:4a:50:1a:ef:31:3b:fd:10:42:3d:43:d3:bd:03:66:e5:ed:
1e:bf:da:13:7d:1f:bb:bf:fb:57:f1:7e:21:9b:7e:8d:45:90:
9a:c8:69:33:86:76:16:5d:3e:e1:c9:b1:0e:17:dd:b4:ef:82:
7b:e5:68:91:49:56:cf:60:ed:db:8b:5f:f7:51:eb:32:a3:e1:
fe:16:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:32 2026 by rpki-client