This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
File: Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft (raw, json)
Hash identifier: tkN/urTuQD01VqwOkQn+HNeB9NUOKP7IbeWJLAEPrEU=
Subject key identifier: 36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0DF5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
Manifest number: 0DD0
Signing time: Sat 10 Jan 2026 10:12:27 +0000
Manifest this update: Sat 10 Jan 2026 10:12:27 +0000
Manifest next update: Mon 12 Jan 2026 10:12:27 +0000
Files and hashes: 1: 1NvRIIgsw36jv1JPruOnfe6B5l0.roa (hash: wr3wO5pomnNqcHXEV81x9pHMfpgLRKocC+eB8odzGOM=)
2: Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl (hash: 2qc5RfRUddCWq9AMkeVRI8Htrw/VtaW9PBeNDS9CyM4=)
3: G-5dGJndFPFIremaQBKGeQKwP8Q.roa (hash: B+r3PMQY8uNMEqm8kK8RjU1199TgiLGEM15rS1U0OGg=)
4: Htxl_uoKAitIQFAJGQAgxPhPNvk.roa (hash: 4PmV98CZgMZWAzeosi+ZZUuYXqKRNzTjh9rXffo9sH0=)
5: I7qwI1gfHdruaMYPjd4UjAzM860.roa (hash: KoRXGMrjBVfQWe2i4f9nTPNoh8jjf6pAhx14M5muY60=)
6: KKgUhz5JbyNufz1xuD3J3xbebvs.roa (hash: kbZEbvVI6dBggqmORJ0fOYZHz3Cqdm34XYO3IXze8kI=)
7: UFlnU4ikGwoLgzaep6hE8NmifZw.roa (hash: y5mFasOvnGkNoWDCHh8uVuNT8BOc9XOeXztFBTtKPKA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Jan 2026 01:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3573 (0xdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Jan 10 10:12:27 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=3620F5F391F2D3F876E92D338CF436A3F96A536C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:59:0a:c7:b0:89:f4:cf:cc:dd:4a:80:17:
b7:2e:96:a6:db:53:a3:d3:64:73:82:a5:ab:fa:b1:
0c:d9:2a:a0:72:ae:41:98:81:ef:b3:34:f5:6f:dd:
25:6a:17:50:15:8e:df:50:28:a1:7b:e7:58:84:2f:
92:6c:eb:91:8b:b8:d3:50:30:09:14:8e:93:b7:ff:
9a:be:d2:55:ec:0b:c4:c7:de:92:9a:5d:23:48:69:
44:6b:31:aa:1f:32:6f:5e:68:ed:18:bc:bd:33:fb:
6a:02:4b:a3:fd:e1:4e:50:5a:0f:9a:3f:37:48:71:
b3:e0:40:aa:4e:37:78:c9:69:c5:c2:90:09:3b:53:
53:d4:f8:8b:eb:e7:eb:60:4c:ce:ae:c1:21:99:d4:
c9:e0:17:ab:7e:81:e5:81:35:2f:41:10:07:d7:a8:
f6:ca:b2:d1:9b:22:36:e4:82:05:f2:0f:20:97:d4:
34:91:51:82:ca:cf:bd:83:a8:e3:30:4a:58:cc:ac:
02:fb:ac:26:d5:e4:3e:3e:25:a5:af:92:de:cc:3e:
a3:49:ea:29:15:d8:07:f0:39:2b:3d:39:c9:e3:c9:
14:c7:2a:27:29:e5:23:6e:d1:a2:45:be:13:22:e7:
2e:d1:b5:18:da:94:0f:c0:b6:a1:9a:74:70:3a:1e:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:F5:F3:91:F2:D3:F8:76:E9:2D:33:8C:F4:36:A3:F9:6A:53:6C
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1e:f7:b6:ca:b5:7f:93:19:45:c0:7c:47:bb:35:a8:c7:0c:
8e:af:c2:82:b2:e1:46:e7:43:37:a2:72:95:6d:44:36:60:9f:
30:48:28:8c:6b:85:db:e2:99:1a:bf:2e:53:ca:ee:d2:9d:b7:
68:79:8e:9d:39:fe:72:3b:df:33:99:fd:60:5b:4a:e1:dd:5a:
97:69:16:61:9d:01:8d:74:ea:6e:50:10:43:b9:3a:99:4d:20:
07:9b:50:62:ec:cd:a6:04:eb:ab:c7:88:01:15:c2:a7:cb:89:
b7:40:ee:ca:4f:d9:b9:83:96:b4:34:f9:7a:5e:cd:ff:a8:32:
bd:00:6c:85:50:8b:82:50:68:5d:78:fb:25:2e:6f:7e:ea:e1:
82:ae:e4:b9:e4:20:f4:6a:9c:c8:fe:28:97:b5:14:bd:eb:74:
b0:fe:fe:c2:c7:5f:dc:de:66:30:84:ad:8a:28:e5:86:87:99:
d9:80:03:71:f4:88:38:fb:5b:d4:0e:62:2e:4f:b4:17:83:f8:
e5:6c:61:8c:31:db:17:df:c1:c2:04:33:8e:0e:d3:d4:09:99:
26:0e:1b:41:0b:fe:41:5d:18:14:c5:45:79:fa:b4:4f:c5:04:
e5:09:a4:b6:f2:27:fa:e0:60:ab:e9:fc:d9:d8:aa:00:f8:53:
cf:aa:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:16:54 2026 by rpki-client