$ rpki-client -vvvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json) Hash identifier: cN9d6M2PcVVWu49kDt9LhgDH6dFoVIyyoaP4jp+I0PQ= Subject key identifier: 78:C3:CE:09:EE:AF:45:CC:6E:DE:B4:3F:1D:B9:2E:00:A5:85:BA:37 Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Certificate serial: 374E3A1E11E207BE45CC26BD0B8F7971331C8073 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft Manifest number: BB Signing time: Wed 23 Sep 2026 16:08:10 +0000 Manifest this update: Wed 23 Sep 2026 16:03:10 +0000 Manifest next update: Thu 24 Sep 2026 18:20:10 +0000 Files and hashes: 1: 323430323a343736303a3a2f34382d3438203d3e20333936393832.roa (hash: xNniVHF2D5n4PRBYJLC1H1m4ixoVY/+fUm+4DZvFSao=) 2: 323430323a343736303a39633a3a2f34382d3438203d3e20333936393832.roa (hash: W+cJcGEBHA5nMvetfbU/MxRKQJYX8lMgJjfV6ST7azg=) 3: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=) 4: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: pq09Dp106A5+qKWVxTmy/Or7KK2enJIWpFXpyqVCcy0=) 5: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:4e:3a:1e:11:e2:07:be:45:cc:26:bd:0b:8f:79:71:33:1c:80:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD Validity Not Before: Sep 23 16:03:10 2026 GMT Not After : Sep 24 18:20:10 2026 GMT Subject: CN=78C3CE09EEAF45CC6EDEB43F1DB92E00A585BA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:4e:56:93:bd:2c:1b:17:c6:cf:5d:06:36: 89:a0:c9:a4:19:2d:cb:ff:6e:a7:3f:8d:82:ae:b6: 90:f6:5e:21:6a:21:26:2d:c0:ec:34:1d:b6:14:5f: 58:07:7e:32:1d:68:f7:90:f9:33:0e:5c:78:46:62: 52:21:77:66:a5:df:95:dd:7b:4e:89:95:c4:60:e8: ba:b9:84:73:ed:8b:8a:ad:be:d9:7f:14:ed:29:c7: 6f:9b:d1:1b:be:c5:ec:8e:fc:93:a4:ff:5f:c2:80: 2d:c9:cf:09:48:b3:ea:3c:f2:3a:ab:43:7f:74:c3: 0e:2d:a8:13:c2:6e:28:7e:5a:63:b3:77:c8:f5:f7: 6b:1c:10:25:c7:dc:4f:dc:57:a3:bc:31:30:3f:b8: e9:a2:27:a1:da:c6:61:eb:2f:8b:5c:14:fb:f2:a8: 96:ff:c9:0d:c5:66:ff:b0:32:60:bd:b1:d1:df:d0: 53:43:9b:be:48:b4:4d:97:1b:75:c9:62:4d:95:9c: 13:4f:b1:7c:e0:31:6d:54:38:22:e0:8b:37:d4:34: 85:63:56:4d:59:4f:e8:44:07:1f:db:1d:0a:44:8e: 7e:cb:e2:da:e6:90:5f:f5:3e:15:d7:e2:5a:d6:a4: 1a:dd:41:b2:eb:86:ea:bb:d2:4e:2e:84:6b:59:89: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:CE:09:EE:AF:45:CC:6E:DE:B4:3F:1D:B9:2E:00:A5:85:BA:37 X509v3 Authority Key Identifier: keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fe:e6:d7:0a:16:5b:54:54:62:33:a1:b9:84:09:19:e1:4f: 03:23:bf:14:5f:6a:72:4a:84:31:c7:c8:71:4a:c5:16:91:55: 71:1f:30:97:6e:42:b4:1c:95:91:d0:85:6d:d8:9a:f3:42:f5: d2:b2:7d:f7:49:5d:e8:ad:8e:16:ba:a5:6a:d3:d4:5d:9a:21: 2c:db:53:08:86:fc:3d:b9:39:71:6a:bf:4a:dc:3f:ce:49:4d: bf:bd:d9:99:b6:dc:9a:66:21:bc:97:6e:a3:7d:b4:00:2b:ae: d6:64:7e:16:59:bc:f0:24:c3:2d:5f:51:17:0f:8d:37:b3:0a: c5:36:48:f6:34:76:24:5b:b3:00:a9:7d:cd:e6:71:f8:41:f7: ca:0f:1d:68:a5:80:5a:71:d6:b0:41:6b:5c:a7:34:1d:07:be: 9c:93:6e:f5:8a:2e:51:b9:d2:3c:6c:2a:b2:38:0c:40:81:a6: 32:f3:6d:7d:c1:09:73:34:9a:05:30:a1:11:f4:b9:b8:fb:53: d5:35:a3:8b:e0:c0:8c:c4:08:1b:af:fc:6e:ba:65:f4:47:7c: c6:d2:65:8b:5d:da:68:98:16:ff:c9:bd:b7:55:ff:95:3a:b8: 51:72:5e:1f:cd:c7:76:fc:ed:90:c9:85:07:ca:a2:f8:20:11: 97:76:58:6c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUN046HhHiB75FzCa9C495cTMcgHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3Njc5 QUU1RTlGRDAeFw0yNjA5MjMxNjAzMTBaFw0yNjA5MjQxODIwMTBaMDMxMTAvBgNV BAMTKDc4QzNDRTA5RUVBRjQ1Q0M2RURFQjQzRjFEQjkyRTAwQTU4NUJBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5k5Wk70sGxfGz10GNomgyaQZ Lcv/bqc/jYKutpD2XiFqISYtwOw0HbYUX1gHfjIdaPeQ+TMOXHhGYlIhd2al35Xd e06JlcRg6Lq5hHPti4qtvtl/FO0px2+b0Ru+xeyO/JOk/1/CgC3JzwlIs+o88jqr Q390ww4tqBPCbih+WmOzd8j192scECXH3E/cV6O8MTA/uOmiJ6HaxmHrL4tcFPvy qJb/yQ3FZv+wMmC9sdHf0FNDm75ItE2XG3XJYk2VnBNPsXzgMW1UOCLgizfUNIVj Vk1ZT+hEBx/bHQpEjn7L4trmkF/1PhXX4lrWpBrdQbLrhuq70k4uhGtZidgNAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUeMPOCe6vRcxu3rQ/HbkuAKWFujcwHwYDVR0j BBgwFoAUZx2pX2fXA6jrwzMOeCcXZ5rl6f0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8w LzY3MURBOTVGNjdENzAzQThFQkMzMzMwRTc4MjcxNzY3OUFFNUU5RkQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3 Njc5QUU1RTlGRC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMC82NzFEQTk1RjY3RDcwM0E4 RUJDMzMzMEU3ODI3MTc2NzlBRTVFOUZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf7m1woWW1RUYjOh uYQJGeFPAyO/FF9qckqEMcfIcUrFFpFVcR8wl25CtByVkdCFbdia80L10rJ990ld 6K2OFrqlatPUXZohLNtTCIb8Pbk5cWq/Stw/zklNv73ZmbbcmmYhvJduo320ACuu 1mR+Flm88CTDLV9RFw+NN7MKxTZI9jR2JFuzAKl9zeZx+EH3yg8daKWAWnHWsEFr XKc0HQe+nJNu9YouUbnSPGwqsjgMQIGmMvNtfcEJczSaBTChEfS5uPtT1TWji+DA jMQIG6/8brpl9Ed8xtJli13aaJgW/8m9t1X/lTq4UXJeH83HdvztkMmFB8qi+CAR l3ZYbA== -----END CERTIFICATE-----Generated at Thu Sep 24 06:00:06 2026 by rpki-client