This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.mft
File: ilfW8DVOpYoUk1K_JDMNZjBwL5s.mft (raw, json)
Hash identifier: y0vBkidz4NP1fiGsBFhVOxQIdM0rtmDwQbMjhBUwdYY=
Subject key identifier: E4:7F:BC:D4:0D:23:5E:41:A4:78:A4:3B:F6:B3:73:53:8D:DC:E9:23
Authority key identifier: 8A:57:D6:F0:35:4E:A5:8A:14:93:52:BF:24:33:0D:66:30:70:2F:9B
Certificate issuer: /CN=8A57D6F0354EA58A149352BF24330D6630702F9B
Certificate serial: 0216
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ilfW8DVOpYoUk1K_JDMNZjBwL5s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.mft
Manifest number: 020F
Signing time: Sat 20 Dec 2025 09:38:54 +0000
Manifest this update: Sat 20 Dec 2025 09:38:54 +0000
Manifest next update: Mon 22 Dec 2025 09:38:54 +0000
Files and hashes: 1: ilfW8DVOpYoUk1K_JDMNZjBwL5s.crl (hash: kmK5kvqH8YzG42QG8/zi4y3Orh1mZXJnb9sfsMaGw9s=)
2: uDxhDjnL-pmbSYYVgxv5lq2NY-U.roa (hash: WVgRb9G4nEZf0kGTnargnDA8wcCQCqCfs+MlmbKZa7o=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ilfW8DVOpYoUk1K_JDMNZjBwL5s.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534 (0x216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A57D6F0354EA58A149352BF24330D6630702F9B
Validity
Not Before: Dec 20 09:38:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E47FBCD40D235E41A478A43BF6B373538DDCE923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:3e:e5:3f:8b:43:f4:34:70:bd:ba:23:7f:
64:b0:7f:cf:5a:be:ce:6f:d4:ca:b5:de:ca:a1:8e:
76:10:37:cd:f4:dc:0a:66:d0:c1:df:eb:31:a6:bd:
93:37:6f:4c:e7:99:ac:cb:4f:54:67:96:7e:f2:a0:
60:00:67:ee:22:ce:14:e7:5f:36:07:d2:51:30:0d:
14:3c:f4:aa:f9:31:2b:17:ab:a8:2d:63:97:ca:8a:
90:1b:81:3f:28:ea:03:bb:a0:00:66:f6:e3:de:02:
a8:4d:60:95:8f:68:5c:42:4c:d5:32:79:66:94:d0:
0c:2c:8d:31:01:e6:b1:76:4e:08:cf:e3:42:36:eb:
07:bb:49:d5:80:b2:ac:0c:a0:ed:0d:09:dc:31:bf:
b4:8f:7e:e5:6e:5b:b5:f1:f9:4c:44:0e:01:ed:05:
bc:e6:de:de:d6:00:2d:09:8a:96:74:24:bf:5b:98:
38:6f:b2:8b:50:23:3f:7f:b0:02:7e:05:03:fe:e0:
b0:8e:b9:90:98:d4:8a:9b:b0:05:6d:b6:22:86:66:
52:b8:73:5d:c6:a1:59:e0:e4:5a:1a:9c:83:0a:41:
05:e6:ee:f1:49:76:10:e0:a3:0d:69:88:7f:36:70:
83:d5:bc:b6:0f:94:92:34:58:ad:80:63:d0:ee:b3:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:BC:D4:0D:23:5E:41:A4:78:A4:3B:F6:B3:73:53:8D:DC:E9:23
X509v3 Authority Key Identifier:
keyid:8A:57:D6:F0:35:4E:A5:8A:14:93:52:BF:24:33:0D:66:30:70:2F:9B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ilfW8DVOpYoUk1K_JDMNZjBwL5s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/ilfW8DVOpYoUk1K_JDMNZjBwL5s.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:dc:5f:27:46:f4:82:c1:ef:05:51:d6:e4:00:1d:3c:eb:
d3:d6:ba:90:6f:8d:29:cb:6d:4b:68:a0:dc:56:96:0b:6a:81:
bb:f1:50:cd:97:cb:34:1a:4e:c3:e1:83:f9:6d:a3:66:5e:7d:
81:be:cd:98:3b:f2:68:aa:09:af:04:87:ec:79:6d:05:13:45:
21:6c:15:a8:c2:0d:8e:4a:66:8a:f6:48:b5:ce:52:9e:74:9d:
d8:8c:f0:68:8f:10:34:94:1e:71:32:62:1d:80:2b:a9:2d:c6:
b2:89:36:b7:54:7f:30:ab:ee:57:cf:55:c9:6c:00:c6:8b:b5:
db:46:67:a2:e5:81:28:64:3d:22:96:63:48:db:3b:c4:30:74:
8e:94:3d:58:ab:17:83:02:68:07:3a:b5:2e:f3:d0:df:0e:4e:
94:c7:a2:0e:77:b8:37:84:b3:92:a0:cc:6b:24:57:91:fa:80:
5f:11:44:c3:46:31:67:c3:09:15:e1:4a:45:17:f9:29:96:e5:
3a:7a:85:72:0b:9a:cf:fa:06:1a:b2:f7:37:d2:65:ac:b5:bb:
4f:24:fe:2e:b9:17:80:eb:6e:48:c1:a3:f3:15:ea:48:6f:a8:
15:2d:62:e0:95:87:59:a2:15:b2:43:d6:ed:1e:10:4a:40:10:
65:a2:02:ba
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEE1
N0Q2RjAzNTRFQTU4QTE0OTM1MkJGMjQzMzBENjYzMDcwMkY5QjAeFw0yNTEyMjAw
OTM4NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU0N0ZCQ0Q0MEQyMzVF
NDFBNDc4QTQzQkY2QjM3MzUzOEREQ0U5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVIj7lP4tD9DRwvbojf2Swf89avs5v1Mq13sqhjnYQN8303Apm
0MHf6zGmvZM3b0znmazLT1Rnln7yoGAAZ+4izhTnXzYH0lEwDRQ89Kr5MSsXq6gt
Y5fKipAbgT8o6gO7oABm9uPeAqhNYJWPaFxCTNUyeWaU0AwsjTEB5rF2TgjP40I2
6we7SdWAsqwMoO0NCdwxv7SPfuVuW7Xx+UxEDgHtBbzm3t7WAC0JipZ0JL9bmDhv
sotQIz9/sAJ+BQP+4LCOuZCY1IqbsAVttiKGZlK4c13GoVng5FoanIMKQQXm7vFJ
dhDgow1piH82cIPVvLYPlJI0WK2AY9Dus0WtAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU5H+81A0jXkGkeKQ79rNzU43c6SMwHwYDVR0jBBgwFoAUilfW8DVOpYoUk1K/
JDMNZjBwL5swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElSVU4v
aWxmVzhEVk9wWW9VazFLX0pETU5aakJ3TDVzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9pbGZXOERWT3BZb1VrMUtfSkRNTlpqQndMNXMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSVJVTi9pbGZXOERWT3BZb1VrMUtfSkRN
TlpqQndMNXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8rc
XydG9ILB7wVR1uQAHTzr09a6kG+NKcttS2ig3FaWC2qBu/FQzZfLNBpOw+GD+W2j
Zl59gb7NmDvyaKoJrwSH7HltBRNFIWwVqMINjkpmivZItc5SnnSd2IzwaI8QNJQe
cTJiHYArqS3Gsok2t1R/MKvuV89VyWwAxou120ZnouWBKGQ9IpZjSNs7xDB0jpQ9
WKsXgwJoBzq1LvPQ3w5OlMeiDne4N4SzkqDMayRXkfqAXxFEw0YxZ8MJFeFKRRf5
KZblOnqFcguaz/oGGrL3N9JlrLW7TyT+LrkXgOtuSMGj8xXqSG+oFS1i4JWHWaIV
skPW7R4QSkAQZaICug==
-----END CERTIFICATE-----
Generated at Sun Dec 21 18:37:37 2025 by rpki-client