This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft
File:                     vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft (raw, json)
Hash identifier:          KhQboQoKKrJTLNV5yHf8qiSfVp42CCwnwYg4TX1Svl8=
Subject key identifier:   40:AA:00:3A:AE:D3:C0:43:B5:9B:08:D3:F4:9B:A2:33:CF:8B:E7:0D
Authority key identifier: BC:3C:BE:1B:08:67:14:C0:05:B7:33:0D:7C:C2:26:DD:03:D7:74:3A
Certificate issuer:       /CN=BC3CBE1B086714C005B7330D7CC226DD03D7743A
Certificate serial:       0D90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/vDy-GwhnFMAFtzMNfMIm3QPXdDo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft
Manifest number:          0D90
Signing time:             Sun 11 Jan 2026 22:14:24 +0000
Manifest this update:     Sun 11 Jan 2026 22:14:24 +0000
Manifest next update:     Tue 13 Jan 2026 22:14:24 +0000
Files and hashes:         1: vDy-GwhnFMAFtzMNfMIm3QPXdDo.crl (hash: kG+EKuuGCtxnw0TIbpkaGtx4XNBL7oKgXElFJgxig/8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/vDy-GwhnFMAFtzMNfMIm3QPXdDo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 18:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3472 (0xd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC3CBE1B086714C005B7330D7CC226DD03D7743A
        Validity
            Not Before: Jan 11 22:14:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=40AA003AAED3C043B59B08D3F49BA233CF8BE70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e3:f7:61:8b:bf:36:1e:92:ca:21:98:a2:8f:
                    ff:2f:c5:66:67:d2:57:89:92:4d:68:d8:d8:60:ad:
                    f5:fb:41:38:7b:18:54:b4:db:ad:25:a0:41:7a:b4:
                    e5:c1:17:a8:a0:ec:3f:1a:83:10:60:8e:a2:cb:eb:
                    e5:c4:b9:35:10:aa:7e:f4:9f:3a:05:ff:fb:16:86:
                    d5:de:b8:68:66:51:65:5b:55:ff:58:ff:96:cf:cf:
                    76:d0:aa:ec:f2:69:1b:d3:01:90:62:69:b5:a6:52:
                    84:43:d6:59:29:34:a7:c0:d8:21:1d:96:5d:c1:3c:
                    f5:f8:cb:d8:e9:e9:5c:70:88:04:98:43:9b:ab:54:
                    ed:3e:59:b7:2f:58:9c:60:6c:11:3b:7c:84:1c:35:
                    df:a2:c2:4b:ae:d7:99:74:ca:96:f4:b6:02:82:b9:
                    1f:97:20:83:50:f5:71:c6:d1:b0:70:93:e1:fc:ad:
                    5e:f3:de:ce:c0:3b:5e:c1:f7:46:4e:1f:1f:11:8d:
                    f1:72:28:8c:28:8e:47:62:bd:98:24:d9:81:6e:64:
                    5a:3c:70:20:20:2a:e6:57:e5:60:30:2f:76:41:25:
                    59:34:3a:42:23:48:e7:16:1e:38:72:53:74:d6:59:
                    de:99:6a:32:cd:35:06:5d:a0:28:04:76:85:fc:16:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:00:3A:AE:D3:C0:43:B5:9B:08:D3:F4:9B:A2:33:CF:8B:E7:0D
            X509v3 Authority Key Identifier:
                keyid:BC:3C:BE:1B:08:67:14:C0:05:B7:33:0D:7C:C2:26:DD:03:D7:74:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vDy-GwhnFMAFtzMNfMIm3QPXdDo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FITEL/vDy-GwhnFMAFtzMNfMIm3QPXdDo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:a3:83:7c:da:cf:57:51:e2:7b:db:22:00:e6:4b:23:82:7d:
         26:63:18:33:33:b6:71:af:58:94:76:12:02:1b:ed:a4:09:53:
         d9:1e:a8:19:89:a5:9f:c6:11:17:a3:4b:8e:d5:95:aa:c7:32:
         9f:81:c4:30:39:aa:89:dd:69:f0:bf:d1:b6:e0:d3:20:65:ef:
         1f:96:a3:bc:29:04:f0:a9:d5:d2:f7:85:be:c8:c6:18:b2:69:
         6e:82:a1:c9:ff:07:aa:f3:fc:b8:d2:a4:16:f1:24:1c:7c:e4:
         dd:08:00:cc:52:b4:60:11:94:46:e5:04:54:c4:f7:db:dd:70:
         2a:3f:6a:e1:e4:64:8d:94:8a:dd:bc:64:27:f8:11:6f:b8:2c:
         b2:83:26:23:f3:3e:fe:d3:69:60:37:e5:ce:9a:f4:0e:70:cc:
         68:6f:18:3d:b9:f5:6f:b2:84:fe:70:9e:d8:aa:7c:ec:38:a3:
         22:60:a8:24:6f:77:e9:ab:7b:55:03:1c:02:77:bf:c3:62:12:
         85:3e:c6:d1:fe:5c:12:8c:e8:82:9e:79:14:97:bb:5d:3f:8a:
         65:c1:9e:7a:89:c6:a4:ae:a4:5b:04:5d:a0:e5:91:a3:8d:ea:
         d9:02:b0:c2:2a:d2:13:27:9a:22:77:fa:49:54:93:b5:a8:20:
         6d:52:1f:52
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkMz
Q0JFMUIwODY3MTRDMDA1QjczMzBEN0NDMjI2REQwM0Q3NzQzQTAeFw0yNjAxMTEy
MjE0MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwQUEwMDNBQUVEM0Mw
NDNCNTlCMDhEM0Y0OUJBMjMzQ0Y4QkU3MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDo4/dhi782HpLKIZiij/8vxWZn0leJkk1o2NhgrfX7QTh7GFS0
260loEF6tOXBF6ig7D8agxBgjqLL6+XEuTUQqn70nzoF//sWhtXeuGhmUWVbVf9Y
/5bPz3bQquzyaRvTAZBiabWmUoRD1lkpNKfA2CEdll3BPPX4y9jp6VxwiASYQ5ur
VO0+WbcvWJxgbBE7fIQcNd+iwkuu15l0ypb0tgKCuR+XIINQ9XHG0bBwk+H8rV7z
3s7AO17B90ZOHx8RjfFyKIwojkdivZgk2YFuZFo8cCAgKuZX5WAwL3ZBJVk0OkIj
SOcWHjhyU3TWWd6ZajLNNQZdoCgEdoX8FnN9AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUQKoAOq7TwEO1mwjT9JuiM8+L5w0wHwYDVR0jBBgwFoAUvDy+GwhnFMAFtzMN
fMIm3QPXdDowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklURUwv
dkR5LUd3aG5GTUFGdHpNTmZNSW0zUVBYZERvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS92RHktR3dobkZNQUZ0ek1OZk1JbTNRUFhkRG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9GSVRFTC92RHktR3dobkZNQUZ0ek1OZk1J
bTNRUFhkRG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2aOD
fNrPV1Hie9siAOZLI4J9JmMYMzO2ca9YlHYSAhvtpAlT2R6oGYmln8YRF6NLjtWV
qscyn4HEMDmqid1p8L/RtuDTIGXvH5ajvCkE8KnV0veFvsjGGLJpboKhyf8HqvP8
uNKkFvEkHHzk3QgAzFK0YBGURuUEVMT3291wKj9q4eRkjZSK3bxkJ/gRb7gssoMm
I/M+/tNpYDflzpr0DnDMaG8YPbn1b7KE/nCe2Kp87DijImCoJG936at7VQMcAne/
w2IShT7G0f5cEozogp55FJe7XT+KZcGeeonGpK6kWwRdoOWRo43q2QKwwirSEyea
Inf6SVSTtaggbVIfUg==
-----END CERTIFICATE-----
Generated at Mon Jan 12 15:59:44 2026 by rpki-client