This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
File: paasOO5ow2TPeRiPBkJ-nHZtTBo.mft (raw, json)
Hash identifier: dgFchURW5yYU+KvXVMsGV5u59o8Nl/wn/gpUGhCn0Bo=
Subject key identifier: 33:32:3B:FC:44:4C:8F:10:31:AF:8A:F5:A8:65:57:05:2A:54:31:3D
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial: 037B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
Manifest number: 0365
Signing time: Sun 11 Jan 2026 20:13:36 +0000
Manifest this update: Sun 11 Jan 2026 20:13:36 +0000
Manifest next update: Tue 13 Jan 2026 20:13:36 +0000
Files and hashes: 1: Qt9atZ3GcC-y3iBsCuaMHsUopwI.roa (hash: LUMGOFfqaa3HagbagohUH6ixJDCnZTF4hbvYcOb/iu4=)
2: Z6ycjfuTcBGPJZzYsGzXqbfpoRo.roa (hash: KzPOBIDBX88MEw59F18toZ52VsgESFMtcMEmagXtMcA=)
3: bXWQ0rXcaoaHeNvxC-BHcAoiLxY.roa (hash: QRsF3kucUP+OXMuqwL3AiP/lc97FNfrCz9ZSRSQBvSw=)
4: jqtTJhcdV-81ChC3Gbo1Af4A6fs.roa (hash: zC3ANtNrrUq/EYkMZgwbMolrgVeo1/t8ESla62SW+so=)
5: paasOO5ow2TPeRiPBkJ-nHZtTBo.crl (hash: yTQzp5kl+BXGlcXyg1aOnN6UzJwj1L8NZWJGeOf7jMs=)
6: xxdB5TOoAzsa1oSkjoxT3mZ7aWs.roa (hash: UPiW5YYI1M/2XeF4T9kswVLihQKqmykSfxSuMCGaeFc=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 04:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891 (0x37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Validity
Not Before: Jan 11 20:13:36 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=33323BFC444C8F1031AF8AF5A86557052A54313D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:25:7e:e6:d6:f7:02:0e:63:5d:5c:72:3e:
23:11:dc:ee:cf:d2:be:cc:e4:52:09:90:ce:13:51:
50:df:b1:6d:d7:2c:8d:a5:6a:82:57:5b:f4:f3:99:
80:32:17:48:2f:13:55:cf:55:d3:fd:34:18:f2:21:
a5:cf:ff:c3:01:dc:46:db:71:d1:89:77:6d:b8:ba:
85:cc:a2:6d:d5:b9:29:e3:19:a8:78:72:16:2e:dd:
46:42:96:21:f2:05:14:5d:71:73:18:76:d9:eb:7d:
21:60:fd:86:c6:3f:51:8a:49:d2:46:86:9a:13:cd:
cd:10:43:98:d0:cb:bc:30:32:31:6b:99:a0:fd:1c:
c0:de:3b:a4:85:10:58:c5:76:a4:5a:cd:f2:11:e7:
15:69:92:68:a8:91:35:95:bf:af:5b:51:d7:2c:cf:
cb:9c:5f:2b:b0:06:98:b2:70:f9:ef:86:9d:70:2a:
dc:e5:ae:66:ac:0d:a1:e9:2b:7d:da:cf:2a:39:8f:
60:53:3c:75:8c:ce:b6:ca:52:11:af:1d:9b:70:54:
98:8e:72:4b:0b:8c:bc:bb:e5:c4:ca:e3:39:35:7e:
3b:d5:e0:39:b1:ea:40:40:0e:c8:fb:d4:0b:7a:b5:
fe:42:5e:b0:73:a8:af:8d:84:58:71:1b:65:79:3b:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:32:3B:FC:44:4C:8F:10:31:AF:8A:F5:A8:65:57:05:2A:54:31:3D
X509v3 Authority Key Identifier:
keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:71:c9:50:11:7d:a3:98:c0:01:39:6b:0c:a6:20:b5:0d:3f:
52:99:d7:96:e8:29:81:49:e4:23:bf:35:a6:e8:5e:d5:86:b4:
04:21:24:53:63:40:12:6f:22:35:ad:20:ec:74:ff:f2:ce:81:
bb:2b:aa:57:c4:fd:de:39:c1:42:51:1b:f5:83:2a:3a:c1:1c:
df:b7:19:8e:0f:47:b5:35:ac:d2:78:08:e9:2d:5c:ce:b2:8b:
76:5e:de:57:6a:74:da:c8:68:40:ce:d7:76:c7:17:a6:af:32:
18:1f:38:0c:20:e3:da:7a:13:63:a0:8c:80:5a:26:72:a4:f5:
0a:90:a0:59:1f:e1:ba:e6:b2:ae:94:cc:ec:b2:c5:6b:31:be:
69:49:12:8d:d8:d3:93:2c:53:de:5f:56:e3:ee:01:43:9a:38:
ab:c6:83:c7:b6:df:e7:15:52:d0:d5:cb:16:03:5d:c9:18:7a:
bf:52:2c:a1:db:96:13:67:24:57:8c:83:43:9f:71:1d:39:ac:
32:c8:5c:60:d3:6c:31:e9:c4:32:3e:19:c8:1a:a1:82:dc:18:
eb:d8:fd:21:25:a0:8b:81:0f:2f:b8:fe:14:f5:16:52:64:9d:
27:9a:83:21:c7:88:f2:dc:f3:0e:26:df:fc:d2:4a:da:82:03:
9b:07:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:56:50 2026 by rpki-client