This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft File: gz1b95tFxzDtFBy1OaUI0BqjCQg.mft (raw, json) Hash identifier: bepxJQZCL/vzKpezkRoCLsrWEUtNFSK1RPMuOWxIFKo= Subject key identifier: E5:39:83:19:13:E6:77:ED:1C:8B:5A:DC:3F:8B:11:E0:77:F6:DB:67 Authority key identifier: 83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 Certificate issuer: /CN=833D5BF79B45C730ED141CB539A508D01AA30908 Certificate serial: 0B57 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft Manifest number: 0B36 Signing time: Sun 11 Jan 2026 11:12:45 +0000 Manifest this update: Sun 11 Jan 2026 11:12:45 +0000 Manifest next update: Tue 13 Jan 2026 11:12:45 +0000 Files and hashes: 1: 5pVvW1I5Lgp_RKuIQ4OenuUijpI.roa (hash: G09AYv56qe3UDBrK/plI0qqj8WZRbXFUJXUhpNu2IdA=) 2: FC4deQmC_gi-KesTrLfwIanH48M.roa (hash: kV3FxWfeQvbZM5DXdR3XdWDjro7yQBU70WD9MlHa54g=) 3: Yt4-rzeOglJ4lYxRe0DmA96qa4I.roa (hash: XufuaZYkRwOhpwR50NCkgbAl1VmLCeMj8nMzL5jBC3g=) 4: gz1b95tFxzDtFBy1OaUI0BqjCQg.crl (hash: c+oH0Ww3gy/HfjNmGMXBdYI63BTsVxlZwG1yHVUFA3w=) 5: mFCKX647egMWRjaSvIGqI0RqwmY.roa (hash: hMiNbN8dpsTFf0y6Sui0mAW/IPUCVmEzv25ZNPcIEWA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 11:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833D5BF79B45C730ED141CB539A508D01AA30908 Validity Not Before: Jan 11 11:12:45 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E539831913E677ED1C8B5ADC3F8B11E077F6DB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:88:2f:20:e1:8b:2d:9c:a0:d4:51:31:26: 1c:7c:9f:b6:2f:16:26:f7:c8:d2:d3:e7:c8:11:95: 8f:22:0c:88:16:84:81:ba:87:e8:b2:89:da:0a:ef: 79:37:ca:b3:05:0e:67:6b:80:84:39:8d:b1:16:3e: 4a:68:45:a2:2d:70:8d:36:cf:e6:bb:3f:6c:ce:74: a4:3d:08:13:36:e2:a9:c8:e1:80:23:83:26:90:36: 6e:e4:ea:48:2f:f6:92:55:e6:d3:1b:fc:7c:9c:78: 48:58:e6:1e:01:78:0a:02:f4:c0:d9:68:04:e2:46: d3:0b:02:03:b5:6b:cd:ca:80:e9:71:a8:07:da:28: 53:2b:cf:95:e5:bc:3a:99:3e:f6:b0:44:d6:34:d6: 83:f8:6c:8b:68:20:6f:59:12:2c:1c:b8:dd:39:ae: 9f:34:26:fd:bc:b2:99:15:f3:42:85:2d:54:6a:27: 70:44:ff:5f:37:b4:8c:57:82:c2:13:b4:8b:f2:79: 3e:33:4a:63:51:bc:a8:16:2d:27:ca:3f:5e:22:d2: e1:67:56:01:dd:7d:b4:ef:c3:60:d4:84:11:5b:23: ad:c1:7a:82:08:32:bd:78:8a:81:d1:1b:8b:01:cd: 4e:0f:5a:32:15:ab:18:9d:71:af:a4:0c:7e:1f:65: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:83:19:13:E6:77:ED:1C:8B:5A:DC:3F:8B:11:E0:77:F6:DB:67 X509v3 Authority Key Identifier: keyid:83:3D:5B:F7:9B:45:C7:30:ED:14:1C:B5:39:A5:08:D0:1A:A3:09:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gz1b95tFxzDtFBy1OaUI0BqjCQg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HST/gz1b95tFxzDtFBy1OaUI0BqjCQg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9a:86:cc:4a:43:45:6c:e1:60:05:94:bb:0f:25:5c:33:b2: ba:9b:52:7c:1c:a0:26:65:b9:ca:7d:94:fe:83:29:e5:19:f6: 1d:d1:e9:21:04:dc:ba:4b:4b:03:0c:e9:aa:18:02:db:44:5e: 0b:02:fd:58:7c:d3:5b:d3:49:61:08:ff:b7:60:cb:cb:d4:92: 8b:16:18:ff:91:02:1a:da:44:8a:ea:18:80:b7:55:af:ae:19: 9c:a7:8b:17:f9:87:df:8f:6f:50:a7:92:4a:86:53:e3:05:38: b9:07:74:55:47:19:ac:02:fc:c5:83:cf:a6:38:a8:9a:24:7e: 3a:a7:73:92:ac:88:26:86:54:08:92:1d:0b:a6:8d:b8:62:b6: d7:f1:e5:f3:de:2e:16:9b:61:16:c0:73:b7:4b:eb:29:8b:2c: 35:fe:56:36:15:59:b5:d6:72:f2:0d:e1:c3:b4:ec:d1:c2:a7: 68:c1:08:d3:6d:a8:6e:6c:45:ea:61:1b:3e:f3:e1:2c:49:df: f1:ec:91:27:69:1a:12:39:17:d6:c6:0d:76:63:e9:57:9c:15: 47:7e:69:d2:31:da:cb:81:9c:8c:72:76:8f:fe:48:f8:35:74: 21:cf:21:72:29:37:23:88:db:64:bb:c2:23:2d:9e:87:fd:aa: 34:c4:1d:e8 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMz RDVCRjc5QjQ1QzczMEVEMTQxQ0I1MzlBNTA4RDAxQUEzMDkwODAeFw0yNjAxMTEx MTEyNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1Mzk4MzE5MTNFNjc3 RUQxQzhCNUFEQzNGOEIxMUUwNzdGNkRCNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCocYgvIOGLLZyg1FExJhx8n7YvFib3yNLT58gRlY8iDIgWhIG6 h+iyidoK73k3yrMFDmdrgIQ5jbEWPkpoRaItcI02z+a7P2zOdKQ9CBM24qnI4YAj gyaQNm7k6kgv9pJV5tMb/HyceEhY5h4BeAoC9MDZaATiRtMLAgO1a83KgOlxqAfa KFMrz5XlvDqZPvawRNY01oP4bItoIG9ZEiwcuN05rp80Jv28spkV80KFLVRqJ3BE /183tIxXgsITtIvyeT4zSmNRvKgWLSfKP14i0uFnVgHdfbTvw2DUhBFbI63BeoII Mr14ioHRG4sBzU4PWjIVqxidca+kDH4fZSALAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQU5TmDGRPmd+0ci1rcP4sR4Hf222cwHwYDVR0jBBgwFoAUgz1b95tFxzDtFBy1 OaUI0BqjCQgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL2d6 MWI5NXRGeHpEdEZCeTFPYVVJMEJxakNRZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Z3oxYjk1dEZ4ekR0RkJ5MU9hVUkwQnFqQ1FnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFNUL2d6MWI5NXRGeHpEdEZCeTFPYVVJMEJx akNRZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7mobMSkNF bOFgBZS7DyVcM7K6m1J8HKAmZbnKfZT+gynlGfYd0ekhBNy6S0sDDOmqGALbRF4L Av1YfNNb00lhCP+3YMvL1JKLFhj/kQIa2kSK6hiAt1Wvrhmcp4sX+Yffj29Qp5JK hlPjBTi5B3RVRxmsAvzFg8+mOKiaJH46p3OSrIgmhlQIkh0Lpo24YrbX8eXz3i4W m2EWwHO3S+spiyw1/lY2FVm11nLyDeHDtOzRwqdowQjTbahubEXqYRs+8+EsSd/x 7JEnaRoSORfWxg12Y+lXnBVHfmnSMdrLgZyMcnaP/kj4NXQhzyFyKTcjiNtku8Ij LZ6H/ao0xB3o -----END CERTIFICATE-----Generated at Mon Jan 12 07:42:41 2026 by rpki-client