This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
File: lle2DWn8KCKE7gt1fS6_azqFWiA.mft (raw, json)
Hash identifier: HwW46+L4G9tzShcgDrz8U0Y6Ez7w7qtGKsSDkJNJZss=
Subject key identifier: BA:02:EB:AC:09:6F:4F:DC:3F:71:98:53:A6:1C:31:BE:E1:EF:DB:ED
Authority key identifier: 96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20
Certificate issuer: /CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20
Certificate serial: 0165
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
Manifest number: 0163
Signing time: Sat 20 Dec 2025 21:09:02 +0000
Manifest this update: Sat 20 Dec 2025 21:09:02 +0000
Manifest next update: Sun 21 Dec 2025 03:09:02 +0000
Files and hashes: 1: J8hSLLzm5jiY4n8ZoFBY8qv2TlY.roa (hash: K9uASHy/f7hYroRXCwiv67ugUzkSrVLCJa14XITQMSk=)
2: lle2DWn8KCKE7gt1fS6_azqFWiA.crl (hash: /x5zFicBMSkPgd47KI1HLNFnDgHnZpyM5IgxVj5s1GE=)
3: t3tiofQcmqhcOlYiAmP2lMf7SZg.roa (hash: wxIS1O0DBxOT15cj9dI5yTt83r7GyCybe3RuLYKUpd0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 03:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9657B60D69FC282284EE0B757D2EBF6B3A855A20
Validity
Not Before: Dec 20 21:09:02 2025 GMT
Not After : Oct 7 15:30:24 2026 GMT
Subject: CN=BA02EBAC096F4FDC3F719853A61C31BEE1EFDBED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:4a:9d:98:1f:cb:3f:c9:ff:c2:cb:4a:ee:
b3:dd:de:93:39:5a:ee:82:f8:6c:40:3d:28:61:35:
dd:51:11:7a:6f:71:ec:fb:29:9e:74:89:2a:13:5d:
a1:32:fe:cd:01:7d:f6:0d:47:9a:c5:75:96:5d:12:
5b:43:46:ac:1e:f5:18:03:79:97:98:32:05:82:b9:
01:ff:45:f4:0f:90:f7:08:27:81:8e:03:f4:c3:46:
11:92:de:5f:e2:79:84:23:cf:38:94:01:91:c8:5a:
c8:c0:fd:44:79:db:0a:08:c4:87:05:c8:d5:22:f9:
90:bd:9b:35:59:52:6e:72:ed:07:ce:b2:7f:63:73:
35:47:16:1b:49:78:59:e3:86:b6:d9:c6:2b:28:a8:
96:67:20:7e:a6:f2:98:9c:9b:d2:2c:59:42:56:2c:
e2:ef:bd:90:cb:82:67:e9:62:8f:83:83:81:7f:41:
84:c3:6e:f1:f2:7b:a7:ad:94:11:e9:0a:89:46:8d:
8d:69:d9:dc:43:bd:83:2a:c8:b1:c0:27:4d:c8:0a:
7b:5c:e1:32:67:a0:f0:79:04:70:3e:2f:f9:bb:9a:
c5:01:4f:b5:12:6f:8e:3d:3b:01:4c:0f:bf:8e:6e:
a3:96:6b:02:21:9f:c0:2a:ff:0c:0e:cd:0b:f3:a2:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:EB:AC:09:6F:4F:DC:3F:71:98:53:A6:1C:31:BE:E1:EF:DB:ED
X509v3 Authority Key Identifier:
keyid:96:57:B6:0D:69:FC:28:22:84:EE:0B:75:7D:2E:BF:6B:3A:85:5A:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lle2DWn8KCKE7gt1fS6_azqFWiA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZUSO/lle2DWn8KCKE7gt1fS6_azqFWiA.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:54:dd:6f:13:14:f3:a8:c7:77:08:f3:1b:57:12:a7:99:
1b:f6:16:76:b8:ba:ad:4b:e7:82:ad:42:4d:41:31:20:b0:7a:
27:c7:82:71:72:67:bd:bd:8a:1b:ba:be:fa:a6:5f:3a:bd:c6:
6d:cb:fe:ad:78:c2:7d:d8:b5:fb:f8:bc:4d:f8:55:b1:a8:fc:
96:e5:68:9d:73:a4:f9:9e:14:21:16:35:15:76:ab:2f:39:e8:
44:40:64:3b:de:33:b7:d2:60:ad:6a:ef:22:cf:e3:58:10:3b:
91:69:9c:f9:c4:32:3e:a8:bd:5e:d6:12:14:14:52:40:4a:09:
8b:5b:5e:d3:3f:18:a0:1b:b2:66:d3:ac:fe:3d:c1:73:c1:8d:
1b:9d:db:ca:31:87:1b:d5:e3:c7:9a:d9:9a:7f:b0:a4:af:90:
dd:d9:e8:04:6b:da:c0:a7:39:1f:59:e5:1d:e0:16:c4:8f:fc:
cd:3d:77:f0:6b:2d:c1:25:97:97:02:69:e6:9b:13:6c:f1:29:
45:18:c8:20:24:fe:1a:a7:4b:90:19:8f:94:a1:96:75:a7:a7:
19:bc:98:5f:8a:88:b6:e4:fa:d4:6b:8c:42:c6:62:22:7f:c7:
04:48:70:20:ba:c3:13:5f:8e:33:c8:d9:9d:2b:d1:09:10:69:
84:5e:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:15:06 2025 by rpki-client