$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json) Hash identifier: MGspYVnjYHLfaoj4H3bnpraVaRx2+z/AoucYUTsUvn8= Subject key identifier: 63:03:B1:D5:09:6F:36:A1:A6:4A:69:FB:74:28:22:7A:A7:1C:5B:25 Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Certificate serial: 02CD23CD58327E4BC8DD64AA60AAFA44A658603C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft Manifest number: 68 Signing time: Thu 23 Jul 2026 12:32:26 +0000 Manifest this update: Thu 23 Jul 2026 12:27:26 +0000 Manifest next update: Fri 24 Jul 2026 15:52:26 +0000 Files and hashes: 1: 323430323a343736303a39633a3a2f34382d3438203d3e20333936393832.roa (hash: W+cJcGEBHA5nMvetfbU/MxRKQJYX8lMgJjfV6ST7azg=) 2: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=) 3: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=) 4: 323430323a343736303a3a2f34382d3438203d3e20333936393832.roa (hash: xNniVHF2D5n4PRBYJLC1H1m4ixoVY/+fUm+4DZvFSao=) 5: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: +4lBNbP5AhyStaRMazP97F86KacKapKJ5gOGRIJ+Kzs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cd:23:cd:58:32:7e:4b:c8:dd:64:aa:60:aa:fa:44:a6:58:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Validity Not Before: Jul 23 12:27:26 2026 GMT Not After : Jul 24 15:52:26 2026 GMT Subject: CN=6303B1D5096F36A1A64A69FB7428227AA71C5B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:5b:55:77:4d:fd:ba:ca:5b:92:9e:a2:3b: 61:95:f5:25:00:41:4a:b2:c3:e1:31:49:c0:41:1b: 8a:23:63:b8:78:ef:a6:04:c7:b5:85:60:4a:0f:8e: 7f:2a:df:6d:11:12:3e:b0:63:89:16:d8:76:11:23: 46:bc:97:9a:1c:1f:74:6f:57:57:53:77:28:ce:98: 3f:0c:91:e9:9d:c3:0e:fc:2e:8f:f8:d3:23:11:ff: 0e:a1:3a:ef:24:00:ae:f2:9e:d9:38:db:84:26:10: 6f:57:88:b0:ed:22:c5:c5:97:fb:7e:42:3a:1f:3f: 1e:87:7d:21:d4:32:c7:5d:57:71:63:b4:c5:91:9a: f6:14:63:48:3b:29:4d:89:7f:e3:85:d4:9e:1d:f7: fc:63:ba:a7:79:ae:e0:57:a5:3b:49:21:6f:a2:7f: 88:64:d0:20:e1:e5:c0:64:87:1f:06:8b:be:79:01: 47:bf:cc:40:85:53:31:3b:d4:df:97:1a:61:dc:83: 2f:73:ac:ab:fd:38:db:da:d4:45:ea:fb:20:a4:d1: c3:de:98:1b:56:a7:d5:ea:05:2f:cc:96:25:8f:5b: 32:40:3b:a5:e2:ab:c2:73:cf:58:1f:23:22:79:1e: 76:2d:bd:38:42:82:2d:e5:42:3f:24:4b:90:0e:35: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:03:B1:D5:09:6F:36:A1:A6:4A:69:FB:74:28:22:7A:A7:1C:5B:25 X509v3 Authority Key Identifier: keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a2:3d:76:cd:bf:17:8b:f6:5b:75:30:35:81:26:6e:49:e5: 98:17:60:07:b7:45:54:9d:f3:49:61:73:f9:b9:cb:bd:31:e9: 27:ab:9e:4f:66:1f:aa:64:c0:89:6b:94:19:4e:31:61:e6:4c: 70:7b:f4:37:7d:95:3b:6a:cd:89:19:d4:c2:37:07:7a:1c:34: 2b:28:b4:df:aa:1e:0a:a4:88:aa:4a:e1:d3:58:76:c5:08:fd: 9f:b2:de:82:56:4e:51:66:65:89:56:f3:e8:0d:23:d1:79:38: cd:09:00:e7:d3:24:54:51:b7:00:70:72:4f:3f:f9:b1:60:47: f0:db:6a:68:15:b0:6c:d9:9c:4f:af:41:36:b5:18:cb:85:32: ee:5f:22:b1:72:1b:1a:46:26:d6:7c:f9:2a:be:a1:11:91:10: aa:7a:ce:0a:d3:06:b3:f3:6d:c4:76:78:ff:ab:93:91:4d:b7: 15:37:2c:ce:d9:4a:da:eb:9e:d3:85:62:5e:45:3f:35:0a:66: a6:32:2c:61:4c:aa:84:75:ac:70:45:47:b8:c1:d4:c7:02:cf: fa:f1:30:b9:21:4b:56:48:2e:9b:59:3f:58:61:3f:03:f9:d9: ec:fe:82:4f:e9:6d:ae:04:b1:c1:1b:07:0b:d8:45:10:c2:27: 94:c7:8a:7e -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUAs0jzVgyfkvI3WSqYKr6RKZYYDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3Njc5 QUU1RTlGRDAeFw0yNjA3MjMxMjI3MjZaFw0yNjA3MjQxNTUyMjZaMDMxMTAvBgNV BAMTKDYzMDNCMUQ1MDk2RjM2QTFBNjRBNjlGQjc0MjgyMjdBQTcxQzVCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OVtVd039uspbkp6iO2GV9SUA QUqyw+ExScBBG4ojY7h476YEx7WFYEoPjn8q320REj6wY4kW2HYRI0a8l5ocH3Rv V1dTdyjOmD8Mkemdww78Lo/40yMR/w6hOu8kAK7yntk424QmEG9XiLDtIsXFl/t+ QjofPx6HfSHUMsddV3FjtMWRmvYUY0g7KU2Jf+OF1J4d9/xjuqd5ruBXpTtJIW+i f4hk0CDh5cBkhx8Gi755AUe/zECFUzE71N+XGmHcgy9zrKv9ONva1EXq+yCk0cPe mBtWp9XqBS/MliWPWzJAO6Xiq8Jzz1gfIyJ5HnYtvThCgi3lQj8kS5AONentAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUYwOx1QlvNqGmSmn7dCgieqccWyUwHwYDVR0j BBgwFoAUZx2pX2fXA6jrwzMOeCcXZ5rl6f0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8w LzY3MURBOTVGNjdENzAzQThFQkMzMzMwRTc4MjcxNzY3OUFFNUU5RkQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3 Njc5QUU1RTlGRC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMC82NzFEQTk1RjY3RDcwM0E4 RUJDMzMzMEU3ODI3MTc2NzlBRTVFOUZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKI9ds2/F4v2W3Uw NYEmbknlmBdgB7dFVJ3zSWFz+bnLvTHpJ6ueT2YfqmTAiWuUGU4xYeZMcHv0N32V O2rNiRnUwjcHehw0Kyi036oeCqSIqkrh01h2xQj9n7LeglZOUWZliVbz6A0j0Xk4 zQkA59MkVFG3AHByTz/5sWBH8NtqaBWwbNmcT69BNrUYy4Uy7l8isXIbGkYm1nz5 Kr6hEZEQqnrOCtMGs/NtxHZ4/6uTkU23FTcsztlK2uue04ViXkU/NQpmpjIsYUyq hHWscEVHuMHUxwLP+vEwuSFLVkgum1k/WGE/A/nZ7P6CT+ltrgSxwRsHC9hFEMIn lMeKfg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:24 2026 by rpki-client