This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft File: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft (raw, json) Hash identifier: rU2ywFuFx3WbWpJfitUIn0cntA9U6LGSU5fyK5sfiOg= Subject key identifier: F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD Authority key identifier: 72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC Certificate issuer: /CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC Certificate serial: 027F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft Manifest number: 026A Signing time: Sat 20 Dec 2025 11:08:18 +0000 Manifest this update: Sat 20 Dec 2025 11:08:18 +0000 Manifest next update: Mon 22 Dec 2025 11:08:18 +0000 Files and hashes: 1: 0IPQOd93kD2kNOW5B2eNgJYsD54.roa (hash: KLYZPgwyxXuSMmommOv0Du/CrtAQFimGoYtBuKC+acY=) 2: V2-e3j-C2M3f-IPF48ND24nzbIA.roa (hash: hFVoewVj78NZRFxiWLt4Uyz69EdAufx67waMMJXCdog=) 3: aVgvYuH5mqDNAknvRRG8QJRB_fo.roa (hash: HZBCn7rlmkjdYKYwq31T1rqQc9gvODFhzjrSpTbz+tA=) 4: csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl (hash: TLjl1V0qy91g2cQ03HYDoKjbvb5nrnT/fs1P4Mzsock=) 5: uu5G7HGxzW5ia56tt4mJl8N--5g.roa (hash: PsvjgyT4iOLRHHYzlHQE2uNnieAJwEovjNKBvdJpGu0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C436BE92AE0ADCB314EBC1ACE319FF77BDA3FC Validity Not Before: Dec 20 11:08:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F391F465C8CB2177FC08739816F643F8C728A5BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:98:d2:0c:b8:66:38:9d:f1:d0:d9:06:52: f1:32:4e:de:a5:0d:6c:90:58:85:27:b4:e4:69:d4: 94:2b:67:9d:7f:ad:a5:0e:b1:5a:f3:47:be:71:5c: 17:34:92:50:e4:9a:d6:10:6e:d4:47:87:03:ff:75: ff:d9:1b:ac:2d:3c:b3:bc:44:f4:1c:75:f0:ee:39: f3:5b:39:2b:6d:78:06:1b:dd:ec:34:58:df:4e:f9: 1d:03:e0:e1:3d:e7:7d:e2:c2:63:aa:c4:dc:17:75: dc:d4:8a:37:36:d1:4e:31:af:3d:d2:0d:bf:8f:3c: 4c:4f:81:5e:c1:6f:6b:3a:77:99:28:0d:f2:ec:61: 24:8b:e6:54:42:c0:e3:6e:4e:73:03:ff:24:98:31: 27:27:aa:13:d7:ae:4a:2e:2d:e6:32:01:0b:81:24: 54:eb:c4:7f:cd:49:ae:b4:e5:d7:89:87:17:1e:ba: a0:9c:07:51:6f:8e:44:c0:df:1d:72:fd:d4:1c:8f: 13:6f:61:3b:77:a4:bc:2c:e3:e6:bc:05:80:08:18: 49:dc:5c:9c:24:46:b7:90:31:b7:ee:45:2b:7c:59: b1:b5:16:b7:12:21:14:5b:18:90:89:57:5e:44:43: 7a:c7:7f:c1:80:d3:05:88:1e:26:1f:6e:db:74:76: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:91:F4:65:C8:CB:21:77:FC:08:73:98:16:F6:43:F8:C7:28:A5:BD X509v3 Authority Key Identifier: keyid:72:C4:36:BE:92:AE:0A:DC:B3:14:EB:C1:AC:E3:19:FF:77:BD:A3:FC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JGZ/csQ2vpKuCtyzFOvBrOMZ_3e9o_w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fc:da:17:72:dc:f2:f8:64:83:23:a4:9c:3b:e6:90:fd:f0: bb:59:9d:3b:e1:c4:5d:7a:01:1e:07:2a:1e:59:d4:6a:d2:07: f4:b0:0d:70:fd:8e:f6:60:16:74:c1:f8:4f:4a:a1:5e:b2:58: b9:d5:ca:0e:69:5a:25:3d:4b:f6:fc:44:a5:cd:13:b3:f0:8b: 84:4b:00:62:61:2b:39:bc:5d:0c:f7:61:93:fe:aa:ea:57:59: 73:7f:75:0c:8e:5c:11:5c:d6:49:bc:4f:2e:ec:d5:de:4e:7d: c2:aa:39:a6:96:6b:52:01:51:a1:1d:97:a0:e3:46:1e:fe:0b: aa:3b:b1:05:8e:83:30:93:31:8c:ca:5b:78:f0:15:ac:48:8b: f7:04:43:3c:2f:91:85:bc:ae:66:83:19:3a:8a:ef:fd:57:b2: dc:6d:b5:a3:22:dd:a3:e9:02:33:b2:55:64:bd:15:77:70:13: 55:ba:39:4b:74:2f:7f:02:7b:e7:d1:79:52:33:34:82:31:d5: 3a:79:f0:06:32:c4:e0:ad:a5:5f:63:75:4c:f0:47:f9:1b:75: 45:08:4e:12:44:d8:4e:8c:ac:d4:43:73:8d:b3:41:45:8e:d1: cc:aa:e9:0f:10:d9:5b:39:c8:d6:f2:b8:3c:7d:be:67:bd:ed: 3c:f2:a7:6b -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzJD NDM2QkU5MkFFMEFEQ0IzMTRFQkMxQUNFMzE5RkY3N0JEQTNGQzAeFw0yNTEyMjAx MTA4MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYzOTFGNDY1QzhDQjIx NzdGQzA4NzM5ODE2RjY0M0Y4QzcyOEE1QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxsZjSDLhmOJ3x0NkGUvEyTt6lDWyQWIUntORp1JQrZ51/raUO sVrzR75xXBc0klDkmtYQbtRHhwP/df/ZG6wtPLO8RPQcdfDuOfNbOStteAYb3ew0 WN9O+R0D4OE9533iwmOqxNwXddzUijc20U4xrz3SDb+PPExPgV7Bb2s6d5koDfLs YSSL5lRCwONuTnMD/ySYMScnqhPXrkouLeYyAQuBJFTrxH/NSa605deJhxceuqCc B1FvjkTA3x1y/dQcjxNvYTt3pLws4+a8BYAIGEncXJwkRreQMbfuRSt8WbG1FrcS IRRbGJCJV15EQ3rHf8GA0wWIHiYfbtt0dp4pAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQU85H0ZcjLIXf8CHOYFvZD+Mcopb0wHwYDVR0jBBgwFoAUcsQ2vpKuCtyzFOvB rOMZ/3e9o/wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkdaL2Nz UTJ2cEt1Q3R5ekZPdkJyT01aXzNlOW9fdy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev Y3NRMnZwS3VDdHl6Rk92QnJPTVpfM2U5b193LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkdaL2NzUTJ2cEt1Q3R5ekZPdkJyT01aXzNl OW9fdy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd/NoXctzy +GSDI6ScO+aQ/fC7WZ074cRdegEeByoeWdRq0gf0sA1w/Y72YBZ0wfhPSqFesli5 1coOaVolPUv2/ESlzROz8IuESwBiYSs5vF0M92GT/qrqV1lzf3UMjlwRXNZJvE8u 7NXeTn3CqjmmlmtSAVGhHZeg40Ye/guqO7EFjoMwkzGMylt48BWsSIv3BEM8L5GF vK5mgxk6iu/9V7LcbbWjIt2j6QIzslVkvRV3cBNVujlLdC9/Anvn0XlSMzSCMdU6 efAGMsTgraVfY3VM8Ef5G3VFCE4SRNhOjKzUQ3ONs0FFjtHMqukPENlbOcjW8rg8 fb5nve088qdr -----END CERTIFICATE-----Generated at Sun Dec 21 13:25:01 2025 by rpki-client