This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
File: SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft (raw, json)
Hash identifier: P9u/tFBUBn7WF6u0Dha+SX59WI9i+eJgVgtGoAj4Kts=
Subject key identifier: F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF
Authority key identifier: 4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97
Certificate issuer: /CN=4AC29EB919D071916D744665F29341B00A036297
Certificate serial: 0220
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
Manifest number: 021E
Signing time: Sun 21 Dec 2025 09:08:57 +0000
Manifest this update: Sun 21 Dec 2025 09:08:57 +0000
Manifest next update: Sun 21 Dec 2025 15:08:57 +0000
Files and hashes: 1: -rM84dFnltLzFCWPl4AGxt3d70o.roa (hash: OBYLVbSP/fiL5gNwYlwz1qku0qGFB8y4odJJJJFQvN8=)
2: Nqa0Qhn4yvrq5vNhQmcCw7hAdSE.roa (hash: Y5nBa0ULJqBAX+uCNVgjgWDOtFmo25XLO+BS2Ijf5+0=)
3: SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl (hash: 01FnugsXL0JtON8nLWGrpiK9NO5exB8a9BbO06RwGP8=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 15:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC29EB919D071916D744665F29341B00A036297
Validity
Not Before: Dec 21 09:08:57 2025 GMT
Not After : Sep 9 15:30:21 2026 GMT
Subject: CN=F49C525057A5F2379EFB80268997DF0D565AA5FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:80:7b:34:42:0e:d7:d1:dc:e6:32:8e:60:
41:68:d1:15:3a:4b:a5:91:8c:ea:07:06:b6:bf:3c:
46:7a:76:2b:dc:f2:32:23:e1:6c:c7:7f:ae:65:4d:
af:22:24:f2:cb:97:ec:f0:b6:fd:2a:79:e1:5d:2e:
e5:84:c4:5f:4f:df:87:44:dd:80:34:32:6c:64:9b:
d9:d1:74:07:ac:53:fe:9a:6c:2d:ce:1e:aa:ba:97:
8d:72:49:e6:14:43:de:12:db:32:df:4f:3a:bf:94:
9c:fe:83:8b:98:04:e7:b7:08:ef:b8:d1:45:eb:44:
a6:62:82:ca:76:e3:f4:3d:53:0a:22:65:95:0e:3c:
46:d9:03:f9:ac:56:21:67:aa:98:c9:1f:49:00:06:
94:09:88:d4:1d:48:d6:89:47:6d:61:a0:79:05:34:
2d:10:19:b9:69:5a:bb:99:3b:81:b2:75:cb:e3:e0:
98:62:13:04:21:eb:be:fa:fd:24:ec:54:55:ee:c7:
73:ce:aa:bd:b8:ff:81:a7:5b:26:ba:1c:c9:1e:e8:
de:b2:55:4b:b6:b2:a6:65:e9:50:33:fd:50:84:ba:
e6:9b:df:0a:72:9d:a6:a8:27:8a:f0:8a:c3:6a:d5:
42:c3:f2:5c:cb:75:c3:36:d6:3b:c1:52:14:3d:f6:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF
X509v3 Authority Key Identifier:
keyid:4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:fa:f7:fa:03:f7:50:5d:db:47:4c:be:a0:03:43:db:75:
6a:d8:bc:b8:a0:8c:fd:40:c7:25:38:07:1b:85:dc:b8:17:b0:
69:e6:7d:23:18:ec:88:db:93:2f:08:17:79:14:bf:0b:cf:fc:
45:f0:22:5f:44:53:2f:fc:5f:49:11:66:be:13:21:a0:2f:1d:
4e:a7:53:d3:9c:f6:d8:ac:77:cc:26:a7:62:c4:25:8f:68:7d:
e7:97:da:4f:6d:79:a5:c2:f0:68:8f:ab:57:2e:37:9e:5e:3a:
6c:b1:8f:42:05:17:fe:bd:45:90:a4:cd:e7:b1:39:b9:db:53:
b3:a9:67:16:bf:6d:14:e3:35:b5:63:7c:c8:55:fa:da:33:22:
13:22:df:25:5f:c5:76:50:07:38:c6:e9:47:ea:ac:8e:95:9b:
b3:89:ab:1a:f6:39:b2:26:96:f2:bc:7d:dd:57:db:65:3c:f1:
aa:fb:a9:33:8f:2a:d0:7a:09:c3:cf:11:27:6d:1e:57:49:29:
06:74:7c:ed:50:30:a1:27:09:09:e4:27:fa:76:a4:5e:ab:f8:
9c:71:e6:ee:32:49:c9:8e:3e:42:db:25:5c:a3:01:eb:bc:7b:
e3:e2:6b:5f:73:d9:fd:e7:57:76:88:16:f9:51:cd:2f:43:ed:
ed:a7:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:18:06 2025 by rpki-client