This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File:                     36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier:          RldICucGz79m6q4b07FGhThSnFxH0RjLNMT3mcfdTII=
Subject key identifier:   E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       14D9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number:          1213
Signing time:             Fri 19 Dec 2025 19:37:52 +0000
Manifest this update:     Fri 19 Dec 2025 19:37:52 +0000
Manifest next update:     Sun 21 Dec 2025 19:37:52 +0000
Files and hashes:         1: 0EV9Waq_8Cf2qfNaIc6o1Ce1S7U.roa (hash: sYZtEfovuYI6eGXv2fre/IamCcA0mP3GieUs/1LghjE=)
                          2: 0f_-NuP5tkMNqydkxFRz-2kSLAE.roa (hash: qUkbl1kgH0GjE0cskLl2GwkscNyeE9C2Txp6pxLQpas=)
                          3: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: RgGH2BCMPkb0n/Ezo5l4LIY3USPKjRhMhpA/2WdSfAg=)
                          4: 3hmGqCK4MfQ8p--8Knz4PLEsf4I.roa (hash: Nr/0iXAvSXdC3uAy1eKOiiSrzdWZjWoevPteFP22oDA=)
                          5: 45QmnsqdWOqNKxUfS08P7N5eAaw.roa (hash: FLKv90LqqAqfzW4ka4s7u8EQzLV4bNEoQgjjXQI2gvk=)
                          6: 4XfHzwZwVYmznZ5CCJNJ3lOjuEI.roa (hash: bR4SxyCJGeiJnHEswyFDofE+8/L6j5PhW5a8nMPotCE=)
                          7: 4ng9rOnZd8Qfa2urqGtSsi7-EqY.roa (hash: rr8ai+tHPGty5BupOyE9DelxO6iE+XyM3irun6Qw408=)
                          8: 5lDuntK7WIoZk0sgHBscqc9RL6w.roa (hash: JX4YhXuPQCIu5bsUWEJxrMbMu1FR56LLIvAcdHfMem0=)
                          9: 6poRaXqgt55Rl75scc8dt9GYgFU.roa (hash: wrBU4bxFzolj7MZuMN4DA4dWHnxi8bNFU7yy8+z+tLg=)
                          10: 7cgFlrB-I3x7rwNyurRUPLuSXFc.roa (hash: 0WJpk0ysqUb+JUMnm0nuvedrbVPtH6mJtLLnf2PjEoY=)
                          11: AFcm7pM8j5ejCMlAh-5j8-sOEbc.roa (hash: rW1JSOnwV0njBGop5mlA7nJRWoQdJziVa3ds1Te44jo=)
                          12: AY_50U5vPMRrl8HUUZiPEYGKnto.roa (hash: YyY5kyPyrcgvMnbVZJIfrN9oOpX8/EgZ0i89QU4P1aY=)
                          13: IS2LrxQcXYojyogdnit3pCUydBw.roa (hash: Tm+olkR0aKGzvS4I3+QR4fxXgoLKRa9UwrX3bgTbZEU=)
                          14: IVibC69SMkVPpFh5VWNu00soZzc.roa (hash: 4mj7nxLKJP4DJj4m3Jnj5IvmoJabF77XGRvFCH7i908=)
                          15: J50ylXuhdas2KjTervlhvK74aq4.roa (hash: nkzyQg2rjHt4Go9O2O37cjw7Y67mlPRCQzf0lKj5t7I=)
                          16: O7EZ6j9V8cFiV9bX-EKBNkNR4Z0.roa (hash: 6gvliBqdvkpnm0vNb3P2yjHmVmhuLehtXWxM0187/5s=)
                          17: SbMnpJykKnyhfqRzZl_0BM-hFZs.roa (hash: 7rwtW35hihjLl/meUt1h7x94RGg2ejnRblaYIEqj3Ws=)
                          18: TaZFT0Z2aEjX_uleljN2tnB7EGA.roa (hash: PP4dO6TDk2s0Y0yKfFtB/rhNJMl15PM+18VPx1ms1bM=)
                          19: VPB09wxEXC4KnKhZaK6kgG661Nc.roa (hash: KuU6jWQ8Q2obz6ui/H5nMGWvB/CcAJ5QzqLfteaezWk=)
                          20: W75m8ClI26gr6u2_zu3FGxiwYc0.roa (hash: rW2O/DwhtBIHzeC1v1EuOht5gYqq1jj3/MARe13l5jU=)
                          21: WjmHjsiw-r6r7cX5rvtah7UBTmQ.roa (hash: sNcMjvLor2NKzVTpJSKI09p16/cORTksRWi6s+CJHpI=)
                          22: YRHxiXt805LQZ1d8Y2knw4hnN54.roa (hash: NISqLBuTIae3loWvUIDNUzIZtFP30DLGraPTFixxuSo=)
                          23: ZAiGeVD6b-J66tqwkFsZu7Vj4os.roa (hash: X0Wzw79OqatqPrnFcGfAjOJKu6KRgTGGpZArjlzvW0g=)
                          24: izVRQ7JLPoikKp5m-2SqYrAutUQ.roa (hash: HBf6u6pm8Xxecg4TSXECUcvkRPQipEAyoXUxPHY1K2M=)
                          25: pJjq3pyIvXmZeztb-Md32cWdUyg.roa (hash: DW0PhuUFIRLJdsO4y9RAlwKNkLnSI+uTSrtxRPJhTZI=)
                          26: rOGZLjbjSlreeIZF5L7GWnOuk8o.roa (hash: nDORMAu2z2xfsf6fMSR4gnyT7IrBcWhYPPY52y1jo/0=)
                          27: t-6GfITkRkCZ0DXF1cPUbmXyp-o.roa (hash: 0dRYHzwpqJViiMUMNEZdGm56VlcO6Z1ptTcdyNhGmmc=)
                          28: tgnHzXeLCJiXCAPJ_glUTv7OHS8.roa (hash: Y7G+AG2b8fGaiPrCf18XFNnHbbpuCoEv8RauRd/wso0=)
                          29: yzyNApNJEI49g97BvptpQk2LDZ4.roa (hash: TxxKBZ0glxRQ9j0CWLC8FZvuWkUNUyHuLNRZ5LUHCcQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 02:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5337 (0x14d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Dec 19 19:37:52 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
                    37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
                    53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
                    06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
                    28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
                    43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
                    65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
                    bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
                    79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
                    b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
                    c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
                    7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
                    eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
                    60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
                    56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
                    91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
                    21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:5b:4d:79:34:c3:13:38:fa:44:29:bc:32:c6:05:95:be:
         5d:8e:ff:03:5d:c5:37:97:59:53:02:22:05:bb:f3:3d:2a:61:
         79:40:e5:02:31:f1:17:47:27:ea:7b:bf:04:ed:30:2b:34:5a:
         d2:45:7e:bc:29:a9:c6:b2:93:3d:94:2d:e1:6b:34:1f:19:c1:
         25:e8:7d:f8:ed:ac:c7:82:76:98:be:62:ca:69:3d:6c:79:70:
         42:98:bc:3b:40:31:93:97:bf:6d:ef:37:bb:f2:8c:aa:98:f9:
         9d:57:00:2c:e3:98:c3:60:fd:64:44:8b:d6:ba:75:a7:49:a2:
         5c:a8:9b:f8:ab:3a:a4:30:9b:3a:19:e1:1c:d8:57:9b:f2:a4:
         bd:b4:69:ff:59:5d:55:0a:78:7e:9d:5d:81:2b:eb:a9:9a:f4:
         8a:dc:5d:2b:d8:1d:35:c1:7f:0b:cf:8f:c4:e1:b2:d9:d8:ca:
         6b:49:1a:c5:19:08:12:71:da:e5:80:cc:bf:e8:da:64:68:c0:
         d8:a5:9e:ec:08:5c:6a:c9:5c:f6:f6:45:19:94:e7:ad:0d:3f:
         1c:30:0d:05:a1:7b:ba:04:3c:7e:1f:dd:9f:0b:a5:33:70:8f:
         6e:e4:31:6b:e5:ee:81:79:50:83:57:0a:b0:a4:22:97:f2:67:
         9d:ff:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:09:42 2025 by rpki-client