This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
File:                     sso52NF7ENl9WlHg6i-fsbxAzZA.mft (raw, json)
Hash identifier:          s9LpS2DWKG2tgLPVRmRe6fR2W6kfh0/RhSK+fNqGpUQ=
Subject key identifier:   A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0ED1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
Manifest number:          0DFA
Signing time:             Sat 20 Dec 2025 09:38:15 +0000
Manifest this update:     Sat 20 Dec 2025 09:38:15 +0000
Manifest next update:     Mon 22 Dec 2025 09:38:15 +0000
Files and hashes:         1: 1M8XrsPQ7_UoB-5HXeE4v6C53tA.roa (hash: cJUt2nvbb/BSj6oCQY6Wue+mtmCZGtc+vkFISvTm/Ss=)
                          2: 4vxHRREJWNpi9vjz_CapmDGulWI.roa (hash: gl9yRRmraCp5SGJ5C8tKmurBQPpqQEsQE9JzJBgCxXg=)
                          3: 7neqAmTpPom0HTAGMY9NCvaDJIM.roa (hash: IjBrCIXGEFdDani+QvJtH5Hc+A/jPsnaYj/jBDDqf3M=)
                          4: DfUyHdZjjCZNikalitillbRExvY.roa (hash: 0OtlcCA/c6MRDxtJW1CTLuevfR5xp4o1r7QgZ7DYk9A=)
                          5: EpZF6ajuzIv0k7_dpiwu4FRiu-I.roa (hash: i/p9fhRhjnAQxmjh4klJG+b1VXl2E1plABNeKCf9yy4=)
                          6: FlTNjDGoO49tQ1Yb-qw5tYjBhLs.roa (hash: djD8UAarhzHKavzTIlKWY0AvkjkpqYqjqPGa5/2qHgg=)
                          7: GebhNwDUicHnTykceMKO0c9t92o.roa (hash: PYHKJT0j7RkG5QuSgeJK9DeXGWerWT4870BHDsSeVCs=)
                          8: H0TFJ28RvayVeC41mvi25wMdqc0.roa (hash: CJHJ8NLNHC47h2MGnbLw4Xk5QVSdRbIl/HX/9Ff9r5g=)
                          9: L7ooTkthLSQ099qVgVIbvOW189w.roa (hash: 0QA0YKtld+Zgj008W2ubvK0FfhdNUOu8e2bOYYoRK0g=)
                          10: N2vBFlZJu2yyc4L2EMwLtCN4wkE.roa (hash: D9846Ps/3qHt8UtTs6axKoOu73r/qUr/c6tbvQ2tDaA=)
                          11: OuXWb26C5YX__8HWvJAEDlUt3lQ.roa (hash: KGfZIxcIq5ODG+8puxvCZCj3QQR/6Saal+VwTXgZ6iQ=)
                          12: PVeeBJLovo9co2_VoYc0vBbbKIE.roa (hash: okHVRv/5tXfT3fG6yX7lHlmf4y+HQL8MHTAzPMNOjc8=)
                          13: Q9SBASj2UVFEFOJglG_xbgyqgGg.roa (hash: KNndLOoVuF9Yikal31W8GCHxNxFGDHgaLbYeyxwS8yw=)
                          14: XoKfkGiWBOl29SKC3TZKVZaIQ4U.roa (hash: J8EMtLItr7qFqEf6EqybR+0OnUkPmodK0NNdti/5jIw=)
                          15: Z-0friyJRa-GxHzPG6sUnthP2mg.roa (hash: riBnRXY50d88LkatPddbE9M/AcdKbYsUxrqJTTkSv6I=)
                          16: ZOu-6cdrouoB5ZZeu4bREpyb8BY.roa (hash: KfEe1BQeCKj1MAOtiC53QW7pPQgMQKFvtEb3NV5SGH8=)
                          17: bS63T15VKi8z3jI7Pzy-1ztaYIE.roa (hash: g83MthDDU96AnaQiMvlQy4TnxFShlMzjmV8Sqke4bVE=)
                          18: dU9nxreEUwX3Fak37F91AyVI4TY.roa (hash: wo/4qQmV9QLqqvux+b4EMYrLsfPaGymYe09+rSqZ9eA=)
                          19: dciPjex1zpZHM9esKFLkRcRsIvI.roa (hash: wftzWbgtLgveCLU/lG6+E+cTS6nwo95C38nJIT1zU+A=)
                          20: f7c4CoTsA82c7sKbrU0_MN4RBVk.roa (hash: Cyv8mG1vtl5BjV8/tSAUJAvKTkQeu7lD/Y3lATxvDtk=)
                          21: j5JU0hK9Yyc0pIapJbEh_dT2aJg.roa (hash: ipkldVWOSizOfqXmtdjlaT52RoVuDW+6K37ZUy+knx8=)
                          22: jghlrHBKsoI23SnieYV6XWAU13Y.roa (hash: QWv1vdhhe9v/NgEmumkV8FCmbv0+rSsg2Jd6EUXazRg=)
                          23: o1TbZl2MQsAYh3UB0ZtNvYVgMik.roa (hash: lFXxS3ZgEAakywivFh4pKw7buJ/zfEAzRWRNvn6j91U=)
                          24: sso52NF7ENl9WlHg6i-fsbxAzZA.crl (hash: iJkL4SZ3t8HRX7fjJp7EBWM57da5GjEPA+F/PU48qhs=)
                          25: tOZrbf10ur2vZNWR3LNqmpwSa9E.roa (hash: B2/J7ZrvLwPjtHkXlmtWIAOR7rhUiuzcf/fIhF2MXF0=)
                          26: tzhwZffEdsd3wrhbJDIH77ppfjw.roa (hash: sM6+c7i25LD7G/2EWyS7zuxtuH1ThU8/z/eP/8AnJmM=)
                          27: u-zvHfCO56zdczzjnCIO6FYe_vk.roa (hash: eAAgCwn7LWbCGH9e6xx1y1o8tiK4ot7Y1B7MfzY5VbM=)
                          28: xaZpfjEY94U4uz5NJCaJ8rF2uAU.roa (hash: C5zZGUT29SFkUccfWpXhsuI4nFJfxGtSdByD47v++1A=)
                          29: zvx1USsK3b4G6ipC56ATK-hoOXk.roa (hash: Pt1PP+KOeka1jFQE3ry7S8LLCIew98HnoowFfJspBsk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 15:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3793 (0xed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Dec 20 09:38:15 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=A3A2941162F1547E10FB8CAFB53654C81B20D764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:dd:63:7b:0e:33:10:fb:d2:3f:31:95:91:
                    76:b9:90:47:e0:a9:28:26:70:32:79:c5:7a:77:42:
                    18:11:a8:2a:37:79:82:93:ae:bf:71:30:c8:2a:e0:
                    e9:a4:81:ff:09:a5:95:c9:4e:b6:1f:44:98:6a:4f:
                    ec:cd:7b:cf:b8:10:70:6d:f8:48:43:26:3c:b2:f3:
                    ce:50:b4:7a:e2:37:13:f0:55:1a:6c:09:e2:03:1d:
                    66:ef:f5:56:e5:7e:7c:24:ee:5a:88:04:7c:84:d9:
                    e4:27:e2:88:2a:52:63:9e:7b:5b:19:10:5d:4d:36:
                    27:d7:2c:cd:7f:fb:2f:61:96:6b:e5:9a:b5:90:27:
                    bf:fa:f5:5c:f7:d5:39:59:b8:1c:70:35:23:66:d5:
                    d5:1a:4b:b2:e8:6c:1e:73:f6:3d:cd:bb:b7:fa:2c:
                    94:ee:a7:e4:50:28:0e:98:36:55:f6:c2:ed:11:33:
                    d8:e3:79:91:76:aa:01:7a:16:11:30:f0:fc:93:06:
                    e5:71:d7:ec:7a:42:69:22:fe:8f:a6:cb:f7:43:67:
                    6b:ca:c2:d5:a1:b3:52:72:23:a3:1a:07:55:fc:7a:
                    ae:22:62:10:6b:4d:1c:75:c8:02:20:81:1b:43:01:
                    dc:a1:eb:72:50:f2:2c:77:1c:d4:cc:f3:cb:52:b9:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A2:94:11:62:F1:54:7E:10:FB:8C:AF:B5:36:54:C8:1B:20:D7:64
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:12:d5:55:9c:0a:8c:3f:a1:0c:6e:2a:a2:f2:93:e0:23:56:
         8a:37:67:ff:80:30:dc:c9:8b:6e:b7:c9:b7:75:6e:c5:c0:96:
         fd:43:5a:97:90:30:f5:61:9b:ee:3f:53:48:ca:68:fe:63:eb:
         62:aa:5e:38:a0:ef:fe:6a:8b:eb:bc:58:83:d5:2e:e6:8d:d9:
         d4:dc:f9:17:2d:ea:0e:cd:cb:72:81:1c:12:c0:56:79:61:62:
         00:ab:69:29:f3:ab:e3:ec:8d:d2:ba:ee:53:0b:69:5e:72:7d:
         2c:01:cb:33:ba:65:4e:bf:8e:1f:6c:63:6a:ab:8d:64:81:fa:
         cf:8c:d9:9a:aa:8f:4b:7f:5b:04:d8:99:3d:92:b7:27:3b:b5:
         74:00:df:91:6f:70:cc:7c:15:3f:45:8c:71:9b:71:4d:cb:30:
         a4:37:14:7a:8b:74:25:ef:11:6c:1a:e0:7f:2e:cd:14:1f:15:
         22:b0:d9:71:48:4f:dd:92:f0:c4:89:4c:b9:b3:4b:7c:89:5c:
         b1:0d:d6:da:10:3a:ea:69:48:8c:c7:d5:f7:0e:b8:c6:f1:ca:
         4a:e3:a6:7c:70:dc:63:fc:c7:99:04:61:91:34:5a:a0:14:f3:
         60:e4:0c:fe:9f:38:dd:20:b5:ce:d3:4d:08:e3:9d:ee:b8:f9:
         35:d0:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:11:05 2025 by rpki-client