This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft File: x1hCDPdi5IrXyqYOs53NYisftPY.mft (raw, json) Hash identifier: Anc/7YsLvqaaPCNZAdwuSmzUFMRsImNqJpNpsySpv+4= Subject key identifier: 3B:2E:15:28:E7:5A:4B:9A:45:45:79:55:8F:70:25:41:85:67:56:33 Authority key identifier: C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6 Certificate issuer: /CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6 Certificate serial: 01AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft Manifest number: 01AD Signing time: Sat 20 Dec 2025 19:38:55 +0000 Manifest this update: Sat 20 Dec 2025 19:38:55 +0000 Manifest next update: Mon 22 Dec 2025 19:38:55 +0000 Files and hashes: 1: YaQpCWAKC9tUppCHG9-rOfTu6bg.roa (hash: FMHp4ON7Uq3Fg/+iT+yTBDOUIs/Z7ZOuEXB1WvJ+5jM=) 2: bBSNn9sCzQJ-c6W6pbNOAisjYJQ.roa (hash: GMv3c2c3ddPdnP9XF6uQx6H8RorOB3gRV/gTV4C48uA=) 3: x1hCDPdi5IrXyqYOs53NYisftPY.crl (hash: WsJCbBLKARaq7ALXi9yultZSHd0CCE/iX440EveI8Ns=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6 Validity Not Before: Dec 20 19:38:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B2E1528E75A4B9A454579558F70254185675633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:1f:bc:16:1d:9c:c6:2f:56:f4:ff:ba:2b: b1:61:05:0c:4e:14:c0:9c:13:62:be:3b:df:1a:59: cb:cd:fd:61:c0:19:fb:93:ab:60:63:c7:76:cc:39: d8:3a:0b:9a:a2:36:65:53:87:76:e5:66:ec:6a:14: 02:39:f0:02:2b:ce:80:59:ab:34:53:30:8f:90:74: 46:c6:98:c9:40:8d:c7:ef:66:f9:0a:ed:63:06:0d: bc:a2:b8:ff:ce:72:47:4a:2a:b4:87:aa:50:c2:c0: c7:b3:24:54:c7:dc:9f:85:94:77:8c:94:eb:f3:74: 00:bc:5f:1b:71:75:f4:3e:c1:3d:44:9a:e8:50:96: 6e:5f:e8:f8:fb:78:08:0f:4e:bb:ec:a8:d5:ec:5e: d3:04:6f:f3:13:2e:55:7a:48:f1:42:df:6e:eb:c0: 35:87:5e:0e:53:c8:c1:52:27:0d:de:34:32:6a:66: fb:9b:71:f2:98:b6:fa:97:39:b3:6e:ed:9a:4e:1f: 8d:b4:ed:d7:58:20:d0:98:49:39:6c:b5:92:b9:54: 0f:b2:5a:d8:00:96:3e:d5:62:81:8a:67:a3:f5:68: c5:92:a5:cf:1a:dd:ee:5f:55:54:60:73:dc:6d:41: 09:c8:87:f3:e2:18:b5:55:42:38:20:97:12:c5:f9: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:15:28:E7:5A:4B:9A:45:45:79:55:8F:70:25:41:85:67:56:33 X509v3 Authority Key Identifier: keyid:C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:45:d8:84:81:12:5e:9a:c6:9f:1c:39:c0:09:2c:69:ee:63: 87:07:d0:8e:d0:e0:a9:10:0e:80:49:a9:1e:e5:6a:ce:f8:fe: b4:35:98:91:3a:b2:da:cf:84:f0:59:6b:ab:4d:53:9b:3d:04: 4f:89:6a:b9:3e:e8:39:a4:6d:19:3b:fa:21:3c:b8:81:5e:aa: 4a:70:d9:b6:4a:46:e1:a2:b0:c4:77:de:35:28:08:44:37:ff: cd:e9:61:ee:61:6a:90:9e:b8:27:d6:1e:0c:8f:4f:ed:99:c3: ce:42:3d:c6:15:1f:4b:f3:db:69:e5:e9:c8:90:a7:c7:92:33: 9e:c6:cf:0f:36:1a:70:7c:c6:86:b6:e4:8e:42:9a:15:64:4a: e2:87:19:c1:27:7f:8e:72:15:ed:e5:0f:24:d4:52:57:62:80: af:e9:ae:94:af:3e:de:b3:28:06:7e:ba:7f:e3:9d:e5:03:81: 0a:5a:7d:0a:31:d9:a1:a1:de:06:e2:28:cb:85:49:28:ac:35: c3:31:9f:0e:b6:8d:fb:fb:31:89:7e:96:8e:24:8b:89:1e:b4: c2:7f:fc:ff:a3:da:a2:cf:b6:63:c3:b6:88:8f:b0:3e:25:94: f6:d6:ba:8c:e6:d6:1a:bc:a0:db:96:5f:65:9b:54:e2:58:f7: 81:88:0b:37 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzc1 ODQyMENGNzYyRTQ4QUQ3Q0FBNjBFQjM5RENENjIyQjFGQjRGNjAeFw0yNTEyMjAx OTM4NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCMkUxNTI4RTc1QTRC OUE0NTQ1Nzk1NThGNzAyNTQxODU2NzU2MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYHB+8Fh2cxi9W9P+6K7FhBQxOFMCcE2K+O98aWcvN/WHAGfuT q2Bjx3bMOdg6C5qiNmVTh3blZuxqFAI58AIrzoBZqzRTMI+QdEbGmMlAjcfvZvkK 7WMGDbyiuP/OckdKKrSHqlDCwMezJFTH3J+FlHeMlOvzdAC8XxtxdfQ+wT1EmuhQ lm5f6Pj7eAgPTrvsqNXsXtMEb/MTLlV6SPFC327rwDWHXg5TyMFSJw3eNDJqZvub cfKYtvqXObNu7ZpOH4207ddYINCYSTlstZK5VA+yWtgAlj7VYoGKZ6P1aMWSpc8a 3e5fVVRgc9xtQQnIh/PiGLVVQjgglxLF+XuHAgMBAAGjggIBMIIB/TAdBgNVHQ4E FgQUOy4VKOdaS5pFRXlVj3AlQYVnVjMwHwYDVR0jBBgwFoAUx1hCDPdi5IrXyqYO s53NYisftPYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1RXL3gx aENEUGRpNUlyWHlxWU9zNTNOWWlzZnRQWS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev eDFoQ0RQZGk1SXJYeXFZT3M1M05ZaXNmdFBZLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvU1RXL3gxaENEUGRpNUlyWHlxWU9zNTNOWWlz ZnRQWS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDlRdiEgRJe msafHDnACSxp7mOHB9CO0OCpEA6ASake5WrO+P60NZiROrLaz4TwWWurTVObPQRP iWq5Pug5pG0ZO/ohPLiBXqpKcNm2SkbhorDEd941KAhEN//N6WHuYWqQnrgn1h4M j0/tmcPOQj3GFR9L89tp5enIkKfHkjOexs8PNhpwfMaGtuSOQpoVZErihxnBJ3+O chXt5Q8k1FJXYoCv6a6Urz7esygGfrp/453lA4EKWn0KMdmhod4G4ijLhUkorDXD MZ8Oto37+zGJfpaOJIuJHrTCf/z/o9qiz7Zjw7aIj7A+JZT21rqM5tYavKDbll9l m1TiWPeBiAs3 -----END CERTIFICATE-----Generated at Sun Dec 21 02:14:46 2025 by rpki-client