This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft File: Ay0zZk94CyxQHuYj57vx0iayYkg.mft (raw, json) Hash identifier: xpbO96vN0HFPEHbn+LG47YiCPJZ57gE4rbpRT1K0JxA= Subject key identifier: 9A:FC:38:8F:55:0C:54:93:0B:B8:20:CB:CE:8A:B0:11:BD:37:83:28 Authority key identifier: 03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 Certificate issuer: /CN=032D33664F780B2C501EE623E7BBF1D226B26248 Certificate serial: 0337 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft Manifest number: 0334 Signing time: Sat 20 Dec 2025 16:08:33 +0000 Manifest this update: Sat 20 Dec 2025 16:08:33 +0000 Manifest next update: Mon 22 Dec 2025 16:08:33 +0000 Files and hashes: 1: 8ZfoAC-4HgxFDTXyH0MLSDprEEA.roa (hash: GRERY2F31SD59yR8KOMvu8ZXUUiDnbwi8R+yP0Fsrqg=) 2: Ay0zZk94CyxQHuYj57vx0iayYkg.crl (hash: kZkHehoiozE3E2SmwKmtsbrymE/Kcif80Y3nXe8N88Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032D33664F780B2C501EE623E7BBF1D226B26248 Validity Not Before: Dec 20 16:08:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9AFC388F550C54930BB820CBCE8AB011BD378328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:91:55:64:8b:5a:7c:b6:4f:93:a5:b6:15: fb:d3:60:39:16:c1:50:a6:11:93:cb:be:50:18:ed: 49:d9:be:26:42:f4:cf:13:f0:7b:92:4c:4a:65:ce: 71:81:1a:ba:5b:be:1f:42:a1:ca:ea:31:89:82:59: 0b:8a:5e:02:2e:50:fd:5c:3a:1e:13:e8:6f:f7:33: 84:c3:36:8c:62:e3:f4:fc:8c:f5:91:02:c9:86:17: 28:8d:36:78:87:77:5b:48:c2:d8:85:92:f2:59:bc: 0d:93:95:69:7b:09:4d:d5:7b:ca:6b:e1:66:ce:a2: 07:c5:b4:95:38:75:b6:88:3c:56:9c:0d:52:cd:bf: 2b:08:f9:f4:5b:64:1b:98:a4:59:c4:5f:06:42:2c: d6:55:0d:36:04:73:35:b9:32:d7:ef:c7:89:4b:95: e6:d8:4e:fa:da:cc:04:ef:88:ac:8a:68:61:01:d2: 16:c2:69:8d:b6:d0:15:f2:4f:cd:39:53:4a:f3:e9: ba:d6:35:ed:4b:8b:8b:b3:11:ce:aa:4b:9e:e0:69: 01:b4:a6:46:22:4b:b8:ec:b0:17:2e:e7:60:ea:3a: 4a:8e:77:1c:85:20:5d:5d:9e:c9:10:e2:9b:e8:e1: e4:5d:96:1b:fc:7a:41:fa:c1:7f:05:f7:9f:4f:73: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:38:8F:55:0C:54:93:0B:B8:20:CB:CE:8A:B0:11:BD:37:83:28 X509v3 Authority Key Identifier: keyid:03:2D:33:66:4F:78:0B:2C:50:1E:E6:23:E7:BB:F1:D2:26:B2:62:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Ay0zZk94CyxQHuYj57vx0iayYkg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/Ay0zZk94CyxQHuYj57vx0iayYkg.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:85:5c:aa:f5:e9:28:fb:81:a3:14:72:01:a4:3d:f0:ff:af: 4e:cc:e3:f2:18:1c:ee:a4:9c:0c:ca:ef:2d:aa:1f:6e:72:e9: dd:47:05:fc:2a:b9:8c:79:3f:4d:f1:8a:23:80:85:2c:ea:db: 74:0c:fc:ea:5d:c1:2a:a0:88:54:0d:ad:6e:26:7d:4e:ab:69: e1:8e:2a:9f:c8:ce:96:8a:fc:f9:15:58:99:61:aa:6b:c5:7c: 74:be:7d:14:4a:2e:8e:f0:fb:00:ee:2d:58:46:8c:ab:40:78: 46:a3:e9:9c:58:06:7e:60:25:cb:14:30:05:da:93:33:71:3e: 0b:fb:1a:cd:88:32:cc:ca:a6:aa:a4:55:df:03:2d:63:3f:e1: f4:7a:e3:7b:09:25:62:df:d3:f0:7e:6a:d0:0d:86:0d:e1:c4: 01:bd:96:e1:f4:27:99:66:60:12:fa:ff:d9:68:65:42:ef:1a: 67:02:55:c9:5b:1f:c9:f2:83:d1:27:60:32:a6:2c:2d:ef:85: f9:76:62:c6:d6:cf:23:19:f5:21:fd:3c:b0:e7:62:88:8d:8b: 0f:ad:bd:32:04:3c:6d:10:da:2c:8b:77:bb:cf:0a:63:41:74: a1:3d:31:7a:1c:ce:2c:17:00:bd:ce:8a:44:fc:2a:f0:f1:c0: 53:13:6c:90 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDMy RDMzNjY0Rjc4MEIyQzUwMUVFNjIzRTdCQkYxRDIyNkIyNjI0ODAeFw0yNTEyMjAx NjA4MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlBRkMzODhGNTUwQzU0 OTMwQkI4MjBDQkNFOEFCMDExQkQzNzgzMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ4pFVZItafLZPk6W2FfvTYDkWwVCmEZPLvlAY7UnZviZC9M8T 8HuSTEplznGBGrpbvh9CocrqMYmCWQuKXgIuUP1cOh4T6G/3M4TDNoxi4/T8jPWR AsmGFyiNNniHd1tIwtiFkvJZvA2TlWl7CU3Ve8pr4WbOogfFtJU4dbaIPFacDVLN vysI+fRbZBuYpFnEXwZCLNZVDTYEczW5Mtfvx4lLlebYTvrazATviKyKaGEB0hbC aY220BXyT805U0rz6brWNe1Li4uzEc6qS57gaQG0pkYiS7jssBcu52DqOkqOdxyF IF1dnskQ4pvo4eRdlhv8ekH6wX8F959Pc9m/AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUmvw4j1UMVJMLuCDLzoqwEb03gygwHwYDVR0jBBgwFoAUAy0zZk94CyxQHuYj 57vx0iayYkgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOQU5H L0F5MHpaazk0Q3l4UUh1WWo1N3Z4MGlheVlrZy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQXkwelprOTRDeXhRSHVZajU3dngwaWF5WWtnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOQU5HL0F5MHpaazk0Q3l4UUh1WWo1 N3Z4MGlheVlrZy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO hVyq9eko+4GjFHIBpD3w/69OzOPyGBzupJwMyu8tqh9ucundRwX8KrmMeT9N8Yoj gIUs6tt0DPzqXcEqoIhUDa1uJn1Oq2nhjiqfyM6Wivz5FViZYaprxXx0vn0USi6O 8PsA7i1YRoyrQHhGo+mcWAZ+YCXLFDAF2pMzcT4L+xrNiDLMyqaqpFXfAy1jP+H0 euN7CSVi39PwfmrQDYYN4cQBvZbh9CeZZmAS+v/ZaGVC7xpnAlXJWx/J8oPRJ2Ay piwt74X5dmLG1s8jGfUh/Tyw52KIjYsPrb0yBDxtENosi3e7zwpjQXShPTF6HM4s FwC9zopE/Crw8cBTE2yQ -----END CERTIFICATE-----Generated at Sun Dec 21 02:17:00 2025 by rpki-client