This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
File:                     0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft (raw, json)
Hash identifier:          wsWVj48PxG/e7YvMXoCHOl1jhaZtgF7Ksa4ml1wdp0M=
Subject key identifier:   E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F
Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Certificate issuer:       /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Certificate serial:       1ECF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
Manifest number:          1EC1
Signing time:             Sat 06 Dec 2025 16:36:10 +0000
Manifest this update:     Sat 06 Dec 2025 16:36:10 +0000
Manifest next update:     Sat 06 Dec 2025 22:36:10 +0000
Files and hashes:         1: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl (hash: Av3nJFnO1HFkOZ0g+EUBzxsqfZrCldEuTdrpwGKYIdk=)
                          2: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (hash: 9k9xyP9CPxo9MsTikLvIKyHQ14M5uC6zcos87s15VUk=)
                          3: u4ipF4WngsjqPN3tPnwfCdp59kc.cer (hash: 7uK3NHDPC/X97uov7qJRf3jVbeyqtL+TCaGkcN0Sh/M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7887 (0x1ecf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
        Validity
            Not Before: Dec  6 16:36:10 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=E056A7AFF9F72732A2275CB078DD072D62236F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:0b:34:55:73:ff:4a:78:ea:7a:f1:4d:13:
                    5c:91:ee:7c:ea:e3:23:ab:49:e0:46:6f:5e:0b:d5:
                    2c:73:ec:79:f3:fb:09:8c:43:b3:35:83:f5:55:e3:
                    13:25:82:f8:87:1f:c9:11:f2:d6:af:b6:fd:b2:d7:
                    4d:0d:e8:c6:c7:ad:73:cb:20:1c:b7:64:1e:e4:d6:
                    3e:ca:a3:ac:7e:c6:56:0b:2c:97:5c:be:00:39:af:
                    5a:0b:23:ba:a9:2e:5a:36:f6:d5:d4:69:34:96:47:
                    2d:c0:e9:03:7c:e5:0b:56:c1:a2:97:7a:43:67:48:
                    e3:ac:e7:70:27:7c:46:a2:09:f8:9d:8c:03:72:a0:
                    f0:03:1a:7c:38:6d:42:b1:f6:05:4d:ca:7e:ae:9d:
                    f8:86:44:2b:7a:1f:06:dd:9f:86:d6:e4:dd:9c:4e:
                    e3:b6:ce:cc:07:3a:a1:75:bb:b9:5f:2b:e5:7b:65:
                    0b:2a:6d:ab:07:f5:73:bd:71:6c:e8:58:77:2f:4b:
                    49:76:91:54:53:9a:e2:ab:8b:01:7b:32:e7:ae:b7:
                    e5:64:cf:b1:2f:eb:46:1e:2b:3a:9d:61:bc:0d:97:
                    1f:b5:7a:21:77:99:3e:fb:00:1c:e7:af:cb:98:d0:
                    78:80:68:a9:3e:0e:5a:5d:ea:1b:08:fd:78:71:48:
                    25:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F
            X509v3 Authority Key Identifier:
                keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:2f:06:1c:15:8a:6d:50:1f:07:d9:92:8b:c5:23:44:e3:
         2a:3c:dc:69:96:f0:ca:db:a1:77:c7:d0:10:5c:56:f7:ce:f7:
         bd:1c:8b:47:10:26:c6:9c:b2:ae:49:8c:f1:53:25:f7:2b:d8:
         86:84:0e:3b:ee:48:23:75:10:0b:b2:ed:52:df:7d:dd:27:ce:
         35:2e:4b:e0:b5:bf:b7:d7:e6:01:c7:f1:cb:ba:71:6a:2c:1a:
         2b:20:76:07:28:05:fd:79:26:2e:75:d9:1b:28:45:a7:9e:18:
         59:a4:a6:cb:09:c7:d5:83:73:d3:3b:ef:b7:52:11:9e:f5:a7:
         29:1b:96:1d:3b:e2:63:c7:13:1c:f0:f5:af:a2:5f:17:e3:ae:
         ba:4b:f8:4b:a5:04:e7:53:69:b8:9f:dd:bf:60:c8:ef:95:bb:
         b0:2b:a2:43:02:a2:04:c2:98:78:ad:b0:31:2f:20:48:c1:d8:
         98:dd:4b:58:e5:4c:41:ff:01:ef:03:e7:8e:9f:c7:e9:7c:35:
         f5:2b:80:b3:1b:08:bc:bc:1c:55:5a:71:e6:18:c4:0c:48:df:
         e3:53:c7:96:28:c9:a6:7d:96:57:be:1d:b3:3e:60:a7:5a:63:
         41:b0:8c:5a:ae:2c:e0:cc:85:40:8f:5b:93:d9:ff:b2:04:ac:
         59:a7:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:56:02 2025 by rpki-client