This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
File:                     -cYtwWoyWUFWZBQsknjF3cTYKZ0.mft (raw, json)
Hash identifier:          EzYSQEafEFp0ySLfc1Au1ybhzuXXxhmRkrenltqv8u8=
Subject key identifier:   8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
Certificate issuer:       /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Certificate serial:       045B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
Manifest number:          045A
Signing time:             Sat 20 Dec 2025 20:37:45 +0000
Manifest this update:     Sat 20 Dec 2025 20:37:45 +0000
Manifest next update:     Sun 21 Dec 2025 02:37:45 +0000
Files and hashes:         1: -cYtwWoyWUFWZBQsknjF3cTYKZ0.crl (hash: kQswwhp6lUgsuDqYvqpPCesZ1XyL+6c4qb7HXwywMXI=)
                          2: kxBeYSb_ZeiKnHApCEprTQ_Xtdg.roa (hash: b1pGKiV/+rjh7ZuW+i3aObtQ3/1XF/k7DTND0Wey5uo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 02:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
        Validity
            Not Before: Dec 20 20:37:45 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8E8D3399F17ECC4FB0EFD3929F64822F5EDFEE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:6d:b7:f9:74:4f:df:37:53:3d:f3:9f:69:
                    98:c7:0a:93:a7:3a:bf:1e:7b:b3:88:36:ce:a8:81:
                    2b:9f:6a:ff:63:bb:6c:99:c4:d9:cc:7a:bc:7b:8d:
                    d9:0d:6c:c3:98:89:c0:3b:f1:a4:5b:4f:f3:58:f7:
                    8e:b1:d7:55:39:67:64:a2:07:db:e0:b3:e4:e8:63:
                    3b:17:8b:3b:33:e2:ee:96:fd:f6:d6:e9:61:86:58:
                    ca:82:b9:18:7c:21:f8:f0:12:f7:fb:55:9b:be:43:
                    86:4b:10:73:41:2b:21:6a:51:80:54:4e:6b:7d:71:
                    32:23:dc:b6:3f:34:b9:5d:06:5a:dc:77:f8:30:69:
                    71:d9:a9:1e:2a:ad:eb:16:6f:a2:38:0a:a5:25:10:
                    3f:24:27:0f:09:73:86:8b:31:dc:d4:16:d6:2d:82:
                    e6:a4:84:7f:54:fe:90:0c:d4:e0:55:7b:51:4d:0c:
                    8f:16:e6:bc:02:ad:31:d3:45:ac:a0:2f:50:cb:9b:
                    6e:5a:6a:d2:a5:f7:06:c1:f1:4d:14:ee:41:c8:aa:
                    6c:5d:df:61:3e:9f:a0:1d:92:27:e1:90:c9:4e:ef:
                    bb:55:81:b9:88:35:8c:27:ba:89:b3:14:84:a2:f7:
                    04:75:2f:b0:5c:70:9c:40:41:67:38:5d:b7:4f:ee:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8D:33:99:F1:7E:CC:4F:B0:EF:D3:92:9F:64:82:2F:5E:DF:EE:3B
            X509v3 Authority Key Identifier:
                keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2c:d8:09:63:4e:98:8b:a4:48:bd:dd:df:71:a0:01:34:e4:
         ae:8d:0c:f8:35:f9:8d:db:27:34:55:a4:0d:02:77:2b:fe:00:
         2a:1a:eb:db:20:6a:56:51:94:c3:4e:9d:f7:2a:68:c3:b5:cd:
         de:62:b8:a2:1f:43:1a:58:89:79:10:72:56:97:47:cc:5f:56:
         10:aa:e1:59:99:29:df:f6:6a:f1:b9:36:1c:64:01:a3:13:22:
         bc:84:cd:75:e0:d4:ef:97:cb:8f:14:b6:a2:7e:16:0b:cc:63:
         13:a5:73:34:3d:8f:7b:2d:fd:b5:2f:72:1a:73:36:1d:4a:d0:
         db:d0:70:23:f7:99:29:8e:0f:54:4c:06:83:f3:7f:ab:e9:dc:
         71:88:e3:56:42:eb:9e:cd:00:1c:38:ec:8d:37:40:2a:8a:45:
         a1:41:4d:6c:a7:4d:d2:d7:2f:2b:3c:4a:aa:89:9a:d3:2c:e5:
         fd:85:88:60:b8:83:16:0e:6d:0e:59:ef:16:21:24:86:c3:46:
         0d:af:a3:79:da:8f:88:3c:da:71:cf:e0:a7:53:68:15:56:5f:
         02:11:83:c9:3a:99:3d:4d:e0:d4:03:b7:b7:4d:3f:99:10:ef:
         9b:4a:32:6d:32:86:05:68:f8:ee:ee:7a:58:2a:2c:5b:b1:39:
         e2:dd:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:14:46 2025 by rpki-client