This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
File: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft (raw, json)
Hash identifier: lLHFb8xn1XIGIZLl9WVW2WoaXhn+7fDC3ipProubhrU=
Subject key identifier: F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD
Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Certificate serial: 028E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
Manifest number: 0279
Signing time: Sun 11 Jan 2026 23:12:42 +0000
Manifest this update: Sun 11 Jan 2026 23:12:42 +0000
Manifest next update: Tue 13 Jan 2026 23:12:42 +0000
Files and hashes: 1: 0IPQOd93kD2kNOW5B2eNgJYsD54.roa (hash: KLYZPgwyxXuSMmommOv0Du/CrtAQFimGoYtBuKC+acY=)
2: V2-e3j-C2M3f-IPF48ND24nzbIA.roa (hash: hFVoewVj78NZRFxiWLt4Uyz69EdAufx67waMMJXCdog=)
3: aVgvYuH5mqDNAknvRRG8QJRB_fo.roa (hash: HZBCn7rlmkjdYKYwq31T1rqQc9gvODFhzjrSpTbz+tA=)
4: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl (hash: 3nQD63ymzi7fx5DMMufeObz62mZuXXbWM/BTjUM5OaU=)
5: uu5G7HGxzW5ia56tt4mJl8N--5g.roa (hash: PsvjgyT4iOLRHHYzlHQE2uNnieAJwEovjNKBvdJpGu0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Jan 2026 23:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC
Validity
Not Before: Jan 11 23:12:42 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F391F465C8CB2177FC08739816F643F8C728A5BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:98:d2:0c:b8:66:38:9d:f1:d0:d9:06:52:
f1:32:4e:de:a5:0d:6c:90:58:85:27:b4:e4:69:d4:
94:2b:67:9d:7f:ad:a5:0e:b1:5a:f3:47:be:71:5c:
17:34:92:50:e4:9a:d6:10:6e:d4:47:87:03:ff:75:
ff:d9:1b:ac:2d:3c:b3:bc:44:f4:1c:75:f0:ee:39:
f3:5b:39:2b:6d:78:06:1b:dd:ec:34:58:df:4e:f9:
1d:03:e0:e1:3d:e7:7d:e2:c2:63:aa:c4:dc:17:75:
dc:d4:8a:37:36:d1:4e:31:af:3d:d2:0d:bf:8f:3c:
4c:4f:81:5e:c1:6f:6b:3a:77:99:28:0d:f2:ec:61:
24:8b:e6:54:42:c0:e3:6e:4e:73:03:ff:24:98:31:
27:27:aa:13:d7:ae:4a:2e:2d:e6:32:01:0b:81:24:
54:eb:c4:7f:cd:49:ae:b4:e5:d7:89:87:17:1e:ba:
a0:9c:07:51:6f:8e:44:c0:df:1d:72:fd:d4:1c:8f:
13:6f:61:3b:77:a4:bc:2c:e3:e6:bc:05:80:08:18:
49:dc:5c:9c:24:46:b7:90:31:b7:ee:45:2b:7c:59:
b1:b5:16:b7:12:21:14:5b:18:90:89:57:5e:44:43:
7a:c7:7f:c1:80:d3:05:88:1e:26:1f:6e:db:74:76:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD
X509v3 Authority Key Identifier:
keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:18:f1:78:63:9a:87:60:35:ed:2f:00:33:c3:72:2d:ea:30:
bc:4b:cc:a5:3e:14:c5:7a:39:09:a1:5d:90:99:be:c8:e7:71:
d1:0e:e6:7e:16:bb:99:56:5c:e7:2f:49:25:47:41:e9:42:1b:
1c:8c:3d:5a:23:49:76:9d:f5:f0:a8:e0:01:4c:03:45:7f:9a:
c8:56:a2:12:1c:d3:dc:bf:04:92:50:49:10:e3:5f:8a:c4:93:
b9:16:c6:74:91:c2:2a:9f:65:7e:97:fb:55:03:e3:71:89:3f:
18:e8:fc:97:07:e8:11:44:87:99:94:bd:80:1b:cb:81:2e:2c:
3c:73:d6:6f:43:23:a3:ad:88:74:29:90:35:2f:c4:e7:60:90:
e7:6d:ce:35:57:a8:eb:6f:b1:00:08:7e:ac:13:59:03:27:c2:
24:e3:12:1a:a4:c4:04:ea:d7:a1:d4:0d:ec:cc:62:28:93:4e:
aa:bc:27:d5:49:60:e6:dd:5e:50:c1:25:7e:47:ff:f4:fc:bb:
95:9a:28:5d:60:b4:fd:82:01:f4:75:3a:cd:7c:7c:09:96:67:
55:bb:c7:83:9d:85:05:13:c7:06:61:4d:6c:c6:9a:cc:f0:4e:
a8:bc:35:e1:21:74:b8:6c:22:7f:a9:d2:3f:e2:df:a9:29:dc:
4c:94:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:58:19 2026 by rpki-client