This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.mft File: 7ThoX_PqH0ZoXeX1fGpLgQRIGJE.mft (raw, json) Hash identifier: 4A/bhFpjcpeawaYtavl8RX8kQ2UDylhm2Rl35swEIhI= Subject key identifier: 71:DF:29:B8:D4:5C:68:5E:E4:A7:11:99:D8:F2:68:2F:1F:0B:6F:D2 Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91 Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891 Certificate serial: 0DF3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.mft Manifest number: 0DC9 Signing time: Sat 20 Dec 2025 10:08:11 +0000 Manifest this update: Sat 20 Dec 2025 10:08:11 +0000 Manifest next update: Mon 22 Dec 2025 10:08:11 +0000 Files and hashes: 1: 3KR2KLrDureFuptZfN5eAPxUCHY.roa (hash: rjsJUvSdk4zpmy6XRGGsD+TrNpxEGiLljAEZjcusxEo=) 2: 7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl (hash: u+7VsdBsPGWBdhwsaEpOhCskcWr0JX1S3LPOjTaS4gI=) 3: 9U_K9Sfdp5hTaa2_wofSJBg6xCs.roa (hash: /r0Obls3XF73x0i86UR9hvXwRQ8EFzoxS8HZ1MvBMW0=) 4: DWTB2-GvtgHvhD1RHF9hA3KqZ4M.roa (hash: btiRYmHpBssMnZ3TvWOh3+TWy3+TcgnUa0i6iczhd5o=) 5: hlH_VnIkbulFHeU6sP-wZgm4aZo.roa (hash: aaeLthtZSFiyQgS6Kgy79ZiFYzKP92ooKUpjVPN8dnk=) 6: rJmPSzU1bDwD0NXDkPgueJ8_ihY.roa (hash: EwCHLdaF5ot3ZDNEwdbki0A7pktc98AD9EoThlAMbgk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3571 (0xdf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891 Validity Not Before: Dec 20 10:08:11 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=71DF29B8D45C685EE4A71199D8F2682F1F0B6FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:85:22:53:e9:0a:2b:04:7b:67:75:f6:32: 74:61:a4:9f:47:6f:c2:7d:1e:d0:33:be:37:d0:70: 2b:1b:37:a6:8d:6b:fe:0f:52:33:00:8b:ea:bf:dd: 11:f6:89:6e:40:ea:cc:3c:d7:e7:f4:e6:86:0f:d1: f8:ab:5f:21:7a:dc:c2:e8:60:ff:c8:ce:e7:4a:54: 7c:17:84:07:59:0c:9b:0a:76:77:7e:dc:e6:b1:85: f0:56:9c:0e:34:61:20:38:6a:21:fb:be:43:98:48: a4:84:34:9a:32:46:05:60:05:ca:56:31:32:2f:fb: 9f:c7:da:bb:54:8c:f1:15:59:1b:db:7e:5a:55:71: f6:d5:0f:39:a3:ea:47:8c:e1:9d:7a:fc:01:4a:c6: b1:e5:e0:c3:75:e0:46:f6:ea:9d:68:fe:2c:43:a6: 57:8f:f7:50:44:7c:bc:f2:30:95:8d:ca:af:24:ec: 4f:62:a1:16:99:7d:6d:23:19:96:4a:08:30:f0:ca: 24:31:91:32:aa:f1:48:79:63:05:1e:87:79:1e:b1: 34:a2:8f:dd:34:ca:ac:92:9a:be:97:46:98:95:4d: d8:43:e8:36:1b:bb:6b:ec:68:00:ef:c7:f7:c8:b8: 35:b3:a5:90:a3:0f:da:18:84:5d:36:35:fc:4b:35: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:29:B8:D4:5C:68:5E:E4:A7:11:99:D8:F2:68:2F:1F:0B:6F:D2 X509v3 Authority Key Identifier: keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5d:b2:3f:11:3a:c6:7f:9b:cc:a0:97:42:94:f9:bc:23:34: 45:f3:39:06:05:8f:be:8f:42:65:b9:2a:94:41:5d:07:4a:07: 30:77:0e:4f:10:a0:7d:1a:ae:9d:33:7f:bb:f0:76:a8:3a:2d: 6e:fa:4d:7c:6c:e8:6d:4b:32:1b:7a:31:4d:bb:e9:ff:2c:d5: a2:5e:d3:58:cb:d2:94:a9:42:37:b9:c6:0b:7c:34:4d:3d:f1: e2:06:1c:6a:76:33:df:4c:8f:f8:90:2a:b0:5a:ac:af:1d:70: 3f:8d:06:d5:d9:4b:ca:7e:20:e1:d1:46:84:69:e1:21:f6:c7: 18:b9:da:6a:16:8d:d4:ea:a7:44:f9:8f:00:71:f1:de:47:7e: f2:a7:b5:a5:69:6a:f0:3a:3f:08:38:8c:9a:d4:61:11:61:66: fc:39:33:2c:6a:62:46:0e:da:8a:ed:85:a4:3b:fc:89:92:07: 21:b9:fb:a8:09:86:32:90:76:f3:d9:c5:db:94:59:ec:3c:44: b2:89:bc:77:7f:bd:96:d5:4a:e1:0f:97:15:74:e8:da:6b:bd: 62:1f:d0:98:77:d8:a7:0c:3e:96:dc:22:b2:09:b7:40:e4:7f: 8a:20:ce:24:57:7b:20:49:2f:a8:4e:13:2b:1e:d4:06:28:eb: 8b:a6:90:6c -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICDfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQz ODY4NUZGM0VBMUY0NjY4NURFNUY1N0M2QTRCODEwNDQ4MTg5MTAeFw0yNTEyMjAx MDA4MTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcxREYyOUI4RDQ1QzY4 NUVFNEE3MTE5OUQ4RjI2ODJGMUYwQjZGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSQoUiU+kKKwR7Z3X2MnRhpJ9Hb8J9HtAzvjfQcCsbN6aNa/4P UjMAi+q/3RH2iW5A6sw81+f05oYP0firXyF63MLoYP/IzudKVHwXhAdZDJsKdnd+ 3OaxhfBWnA40YSA4aiH7vkOYSKSENJoyRgVgBcpWMTIv+5/H2rtUjPEVWRvbflpV cfbVDzmj6keM4Z16/AFKxrHl4MN14Eb26p1o/ixDpleP91BEfLzyMJWNyq8k7E9i oRaZfW0jGZZKCDDwyiQxkTKq8Uh5YwUeh3kesTSij900yqySmr6XRpiVTdhD6DYb u2vsaADvx/fIuDWzpZCjD9oYhF02NfxLNfZzAgMBAAGjggIDMIIB/zAdBgNVHQ4E FgQUcd8puNRcaF7kpxGZ2PJoLx8Lb9IwHwYDVR0jBBgwFoAU7ThoX/PqH0ZoXeX1 fGpLgQRIGJEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNIQy83 VGhvWF9QcUgwWm9YZVgxZkdwTGdRUklHSkUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzdUaG9YX1BxSDBab1hlWDFmR3BMZ1FSSUdKRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05DSEMvN1Rob1hfUHFIMFpvWGVYMWZHcExn UVJJR0pFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAHNdsj8R OsZ/m8ygl0KU+bwjNEXzOQYFj76PQmW5KpRBXQdKBzB3Dk8QoH0arp0zf7vwdqg6 LW76TXxs6G1LMht6MU276f8s1aJe01jL0pSpQje5xgt8NE098eIGHGp2M99Mj/iQ KrBarK8dcD+NBtXZS8p+IOHRRoRp4SH2xxi52moWjdTqp0T5jwBx8d5HfvKntaVp avA6Pwg4jJrUYRFhZvw5MyxqYkYO2orthaQ7/ImSByG5+6gJhjKQdvPZxduUWew8 RLKJvHd/vZbVSuEPlxV06NprvWIf0Jh32KcMPpbcIrIJt0Dkf4ogziRXeyBJL6hO Eyse1AYo64umkGw= -----END CERTIFICATE-----Generated at Sun Dec 21 17:17:11 2025 by rpki-client