Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
File: 671DA95F67D703A8EBC3330E782717679AE5E9FD.mft (raw, json)
Hash identifier: FYkr1FtqaJc8k9LC1hC4gpq5daqhLXsaE0aXmEc3Ov4=
Subject key identifier: 8E:A7:29:34:7D:BC:7A:9A:75:E0:D6:ED:B5:35:D4:B7:7F:01:8E:BF
Authority key identifier: 67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
Certificate issuer: /CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Certificate serial: 7959BF27FBE91B78A264B9CC1DE8A0D7AFC68DF1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
Manifest number: 05
Signing time: Mon 11 May 2026 17:57:49 +0000
Manifest this update: Mon 11 May 2026 17:52:49 +0000
Manifest next update: Tue 12 May 2026 20:50:49 +0000
Files and hashes: 1: 671DA95F67D703A8EBC3330E782717679AE5E9FD.crl (hash: qQz6O81FSsxH16Of8N/Gc61sOOIoc2OjOUSCz7ypXfA=)
2: 323430323a343736303a3a2f33322d3438203d3e20323132393639.roa (hash: C3SLp2cLKJEoSfOCrv1QENdxIJcJ56ZPXagR0nS+hok=)
3: 323430323a343736303a3a2f33322d3438203d3e20313532363136.roa (hash: lKmthCTTisqjHpuoP2bikfzfGXpUjgsnHNJya4mfXq4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:59:bf:27:fb:e9:1b:78:a2:64:b9:cc:1d:e8:a0:d7:af:c6:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671DA95F67D703A8EBC3330E782717679AE5E9FD
Validity
Not Before: May 11 17:52:49 2026 GMT
Not After : May 12 20:50:49 2026 GMT
Subject: CN=8EA729347DBC7A9A75E0D6EDB535D4B77F018EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:b0:4e:e9:f4:c3:8a:ef:fa:6e:e5:6e:d7:
7b:8c:8b:76:bf:fd:4f:3b:3a:62:61:60:92:db:9b:
5a:66:21:dc:f4:2a:ca:64:b5:8b:3c:df:3e:c3:4a:
e5:8b:2b:c7:76:2e:6a:c1:69:a3:a7:73:3c:58:40:
ca:39:3a:8d:dd:a7:c8:12:a4:ef:ec:63:1a:bf:a1:
0f:b6:e4:1d:68:e2:33:74:c4:0f:76:7b:6d:1d:aa:
d6:61:18:a2:9e:78:49:16:fd:d5:60:52:2b:06:d7:
89:9c:8c:8b:95:97:d1:6b:78:53:f8:c8:eb:df:85:
94:2b:a4:b9:40:8f:29:5b:bb:91:48:ed:36:c3:22:
7f:19:ba:a2:9f:5a:41:d6:00:e0:22:cc:95:8c:5d:
0f:55:9f:46:70:d5:ff:26:d6:77:c3:d6:98:36:db:
da:2d:67:c2:eb:db:e6:9e:e8:7e:8b:38:f3:9b:57:
31:a2:6e:1d:24:73:19:91:19:b0:37:c4:85:b8:9b:
d8:18:c5:1f:f8:61:8a:d0:c0:32:9f:6e:da:b1:45:
a2:9e:0e:ff:af:44:75:36:f3:91:d3:26:b0:71:c1:
cd:c5:60:25:b1:42:28:c4:76:49:b6:0c:b9:8b:6a:
b7:9e:23:5c:30:0e:f1:8e:31:41:41:d0:6a:97:8f:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:29:34:7D:BC:7A:9A:75:E0:D6:ED:B5:35:D4:B7:7F:01:8E:BF
X509v3 Authority Key Identifier:
keyid:67:1D:A9:5F:67:D7:03:A8:EB:C3:33:0E:78:27:17:67:9A:E5:E9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/671DA95F67D703A8EBC3330E782717679AE5E9FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/0/671DA95F67D703A8EBC3330E782717679AE5E9FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:fa:29:72:c1:a3:72:77:cd:40:31:ea:47:a5:d3:b6:be:
3f:f8:50:3a:8f:16:27:62:fe:41:63:34:bf:93:24:5b:15:73:
1b:77:e7:f4:a7:55:7b:5b:46:75:8d:f6:8a:cb:b1:69:13:0b:
7e:19:c1:dc:43:31:21:ce:ff:ed:35:83:04:83:0d:0b:4a:bc:
67:80:30:a8:a4:00:b6:f1:86:78:f5:79:e8:2a:af:35:b6:c7:
e4:f0:31:7a:a0:19:aa:77:0a:d0:49:b0:58:81:ad:f8:aa:60:
9c:35:80:ba:13:be:b6:b1:b5:9f:d1:dc:ad:a5:64:ca:90:57:
8b:4c:ca:ca:81:1b:8d:20:49:8e:72:4f:88:0e:9a:db:62:e4:
a7:4d:48:32:d4:5e:04:79:1d:ff:0c:21:31:c4:9c:46:f8:98:
ed:6d:4c:94:10:55:b4:5d:d1:f0:1c:85:fb:1a:f9:bf:b9:46:
59:69:98:c5:76:07:fa:a5:9a:14:a4:c9:9e:2e:ea:6f:b6:ac:
e5:1c:7b:67:c9:a5:69:09:49:16:c1:54:63:40:5c:aa:81:77:
b8:c4:92:64:bb:78:65:50:cf:3e:b7:b7:9f:65:63:4f:a3:e9:
f2:38:58:a2:ac:3f:7f:57:0d:a9:f5:c3:51:76:cc:4c:20:8e:
1e:bd:20:2b
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUeVm/J/vpG3iiZLnMHeig16/GjfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3Njc5
QUU1RTlGRDAeFw0yNjA1MTExNzUyNDlaFw0yNjA1MTIyMDUwNDlaMDMxMTAvBgNV
BAMTKDhFQTcyOTM0N0RCQzdBOUE3NUUwRDZFREI1MzVENEI3N0YwMThFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiO7BO6fTDiu/6buVu13uMi3a/
/U87OmJhYJLbm1pmIdz0KspktYs83z7DSuWLK8d2LmrBaaOnczxYQMo5Oo3dp8gS
pO/sYxq/oQ+25B1o4jN0xA92e20dqtZhGKKeeEkW/dVgUisG14mcjIuVl9FreFP4
yOvfhZQrpLlAjylbu5FI7TbDIn8ZuqKfWkHWAOAizJWMXQ9Vn0Zw1f8m1nfD1pg2
29otZ8Lr2+ae6H6LOPObVzGibh0kcxmRGbA3xIW4m9gYxR/4YYrQwDKfbtqxRaKe
Dv+vRHU285HTJrBxwc3FYCWxQijEdkm2DLmLareeI1wwDvGOMUFB0GqXjxb1AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUjqcpNH28epp14NbttTXUt38Bjr8wHwYDVR0j
BBgwFoAUZx2pX2fXA6jrwzMOeCcXZ5rl6f0wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8w
LzY3MURBOTVGNjdENzAzQThFQkMzMzMwRTc4MjcxNzY3OUFFNUU5RkQuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvNjcxREE5NUY2N0Q3MDNBOEVCQzMzMzBFNzgyNzE3
Njc5QUU1RTlGRC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMC82NzFEQTk1RjY3RDcwM0E4
RUJDMzMzMEU3ODI3MTc2NzlBRTVFOUZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBj6KXLBo3J3zUAx
6kel07a+P/hQOo8WJ2L+QWM0v5MkWxVzG3fn9KdVe1tGdY32isuxaRMLfhnB3EMx
Ic7/7TWDBIMNC0q8Z4AwqKQAtvGGePV56CqvNbbH5PAxeqAZqncK0EmwWIGt+Kpg
nDWAuhO+trG1n9HcraVkypBXi0zKyoEbjSBJjnJPiA6a22Lkp01IMtReBHkd/wwh
McScRviY7W1MlBBVtF3R8ByF+xr5v7lGWWmYxXYH+qWaFKTJni7qb7as5Rx7Z8ml
aQlJFsFUY0BcqoF3uMSSZLt4ZVDPPre3n2VjT6Pp8jhYoqw/f1cNqfXDUXbMTCCO
Hr0gKw==
-----END CERTIFICATE-----
Generated at Tue May 12 23:27:38 2026 by rpki-client