
$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json)
Hash identifier: 45Ni0GUjfEn8IRx4bRCNTFBudcyg2fGhgr2YOnuOuQY=
Subject key identifier: 49:80:D3:8E:66:7C:2A:D1:50:ED:DA:E9:46:BD:63:E7:EF:C0:A4:1A
Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Certificate serial: 21CFEA531EEC38E987A7F0B8240BABA2C080B165
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
Manifest number: 30
Signing time: Sat 13 Jun 2026 00:43:33 +0000
Manifest this update: Sat 13 Jun 2026 00:38:33 +0000
Manifest next update: Sun 14 Jun 2026 02:51:33 +0000
Files and hashes: 1: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: rqE4L0sXZgt9UAch5LfftcUlY0u9Xmp0UljTeBMBPHs=)
2: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=)
3: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl
rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cf:ea:53:1e:ec:38:e9:87:a7:f0:b8:24:0b:ab:a2:c0:80:b1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Validity
Not Before: Jun 13 00:38:33 2026 GMT
Not After : Jun 14 02:51:33 2026 GMT
Subject: CN=4980D38E667C2AD150EDDAE946BD63E7EFC0A41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:5a:98:bd:79:56:01:b3:5f:18:0f:61:97:
0d:65:c8:2a:08:73:35:57:9b:c3:d3:3a:0a:99:af:
21:40:82:1f:0d:92:57:8a:4d:51:7d:82:10:9a:93:
69:ea:05:eb:ad:12:7b:69:7e:3b:6e:86:94:1d:81:
08:b5:ac:0b:6d:19:31:8e:e8:bd:23:7c:f2:82:bd:
af:74:dd:de:4b:29:e4:69:95:f4:b7:4b:db:75:94:
00:66:2b:75:04:72:c0:e5:9d:6e:f8:ab:35:38:99:
0a:fa:01:7f:75:87:65:7e:84:a8:62:02:19:1b:3a:
e9:d4:19:4d:f5:73:36:71:a1:32:60:e4:61:3b:9a:
0c:6c:e5:1d:5b:ec:e6:46:e3:8f:60:d4:4e:a2:e8:
9f:6f:81:a3:33:c0:07:f9:54:81:28:bf:5a:c3:19:
06:66:ff:51:fc:9b:17:2a:7d:cf:93:7d:9a:09:94:
86:21:66:7a:f7:69:9f:0f:00:93:0a:1f:5c:b7:de:
a5:b8:db:64:e5:e6:7a:bd:38:23:0e:b2:12:53:cb:
3e:b7:fc:28:a7:ca:3d:ab:cc:61:2e:d0:a5:a2:02:
9f:bb:55:79:5c:dd:8d:7f:3b:0f:28:cc:5a:e7:46:
7c:0f:9f:d6:df:72:65:6e:7f:1a:9a:81:66:c0:c5:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:D3:8E:66:7C:2A:D1:50:ED:DA:E9:46:BD:63:E7:EF:C0:A4:1A
X509v3 Authority Key Identifier:
keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:72:9e:cd:bb:2c:90:6f:53:53:26:29:75:56:d5:f1:fe:
2b:4e:eb:bf:b5:cf:2e:23:3e:a2:5d:55:99:ba:ad:73:ae:be:
03:a8:4f:86:97:de:8c:17:3d:c7:eb:b9:de:91:5e:18:0b:60:
37:65:09:b7:94:c4:af:93:7a:a3:78:d9:9d:f1:bc:12:e4:09:
bd:53:cb:af:46:a0:fb:f5:7e:b7:8a:6a:92:f2:6b:99:da:23:
73:5d:5b:f6:ed:64:c2:f8:d7:99:56:53:59:0d:70:37:26:66:
9f:0e:f0:3e:25:98:e9:eb:be:26:65:93:33:1f:01:b1:eb:c5:
d3:53:97:c5:14:3e:74:22:b8:6d:19:2f:45:a6:f4:05:53:63:
1e:2c:f6:cb:40:78:4b:7c:37:00:8a:8c:92:a0:7e:5b:fd:d5:
bc:53:f5:3c:38:4f:c5:00:64:ea:2e:f5:72:a6:00:4f:8f:cd:
30:18:49:93:42:b3:1d:f6:e9:bd:35:44:c7:78:c2:cd:78:49:
25:ad:76:b2:2d:03:61:4e:2e:80:5d:a2:19:0f:3d:4b:75:66:
a4:c6:be:24:d9:2c:46:9b:ce:ef:9e:84:4b:ab:e8:0a:f5:7d:
6f:91:e0:2a:86:49:6a:15:ad:19:8e:b2:d3:1c:80:9a:e5:ac:
b0:af:2b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:35 2026 by rpki-client