This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
File: cJhPAIyij2R120JjU7_RxDPYvBo.mft (raw, json)
Hash identifier: Tvpr/+4pOslKrgP6LQOs5FL0Egum9gOiEB8qMLpKsTI=
Subject key identifier: E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0E06
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
Manifest number: 0DC8
Signing time: Sun 21 Dec 2025 22:10:12 +0000
Manifest this update: Sun 21 Dec 2025 22:10:12 +0000
Manifest next update: Tue 23 Dec 2025 22:10:12 +0000
Files and hashes: 1: 0OPgjIQxyYaAlziY8aBRSapHceA.roa (hash: m1++edt1JXnMWpOMnABjJ0QBv2fTrt4qLr2hnc9qIIM=)
2: 3i9iKBeZv8ngHVcHxCYns2T8TMs.roa (hash: O/Cnu+z4Iybw2FTRPIx0OBJoOUBN2JkbXTyJM9r/J7g=)
3: 413N6uhzZCahA0siz5yQ-lFMQaI.roa (hash: W4rMqGma4dGUP809W+VjFoukSTcghTiqNG/pwkjsqiw=)
4: ASdLkizlDzFMaIeqeFgUMGL5pA4.roa (hash: PrABBi3He4t0rtANEcMbtGvbtrGQYrsKauzwVYValiY=)
5: GRDhvttAK_nsVjb0wuOu792ljFM.roa (hash: yfrSa/AGfxcAyohh3uwnQcUrSWrXFyv3IhKlKO3WdwA=)
6: I-3wj0xS0sz4_kUuqGYbyUZPGuA.roa (hash: dbmAAFrpg6OQk55wqHeW93p1GMEP6F5tP1+OSiBqt6w=)
7: cJhPAIyij2R120JjU7_RxDPYvBo.crl (hash: SO/U/LYSKu0xRU/hxo8Mdv4A9rWwVncwL3vQiacPLHM=)
8: db9yaVJSl1lOYeTn0PZiAYCGsWY.roa (hash: 5CWWsS3UmcTyC4bIwmHjQ8YVzavwuAT5O5zIdHnbrxw=)
9: f0LS-dXXQKjkcRZLMVuP9g3OkH4.roa (hash: TDDsd1oMj9nc0RE/KQmB03zOUIPZDBv4q9CB0VBHIOI=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 10:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3590 (0xe06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Dec 21 22:10:12 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=E9C602C2C3AB8879C82F5ACD6A4B0EACA020AA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:4a:e6:25:b3:c9:a8:72:89:ad:c7:e8:56:
3c:86:b4:8d:a9:ce:31:78:73:63:8c:c0:5a:40:91:
71:02:e9:57:06:67:78:de:2b:fe:e2:fb:d5:0e:8e:
b2:a0:ec:68:64:cf:ac:dc:7e:4c:d7:de:9a:e5:e9:
f2:cb:23:50:2e:01:3b:53:2e:83:33:ef:99:70:f9:
b6:64:e8:67:bc:04:c8:e3:c2:19:57:1a:f0:c6:44:
1f:e7:18:6f:e3:cc:e9:57:c0:8a:a6:d4:ca:46:ef:
89:49:09:3e:0c:77:de:08:05:16:58:6a:7d:df:cf:
47:b1:df:75:97:7c:2f:16:a2:e2:bc:9b:dc:07:8a:
40:f6:83:a0:47:ce:ac:6b:d8:26:8a:b2:77:19:6c:
9d:3e:4e:af:14:ae:9f:73:ec:d3:66:9c:e2:7c:29:
d5:18:b0:f8:d5:c0:25:11:0d:37:ef:44:0f:3e:c1:
e1:77:56:47:fa:79:3c:bd:82:c7:a8:72:e4:46:e1:
16:02:f0:03:98:ea:d5:46:a3:2b:85:d0:36:21:e6:
ab:c0:58:c3:35:b6:4f:76:ee:76:bf:89:34:b0:f8:
6a:ac:73:98:89:85:1c:a8:e2:bd:42:29:fa:a5:ac:
98:95:fa:aa:ae:22:25:1b:31:cd:b9:75:f1:b0:a0:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4b:af:0a:bc:93:80:e2:4f:b0:d7:4d:f3:e0:b2:e4:5e:9a:
b7:b0:50:83:7e:ef:a8:06:ae:35:b5:93:d1:c9:e4:f8:87:24:
c4:9a:5f:8b:ec:62:15:d4:d7:59:57:1e:45:90:df:ab:de:3e:
b4:e3:5c:89:8a:15:a3:57:d7:0b:a7:70:92:b6:3b:47:61:89:
43:fb:ed:79:fb:a6:9e:6a:94:75:cc:cb:4d:ce:4a:6e:86:97:
81:89:f7:73:b2:09:8d:87:5e:71:50:fe:97:5c:4e:57:14:37:
1a:40:5b:fb:b4:0b:93:cf:92:ef:e0:e7:03:1b:ad:1a:d5:3c:
a8:02:28:02:d0:5a:1c:61:1d:fa:1c:5d:2c:0e:b0:5e:39:61:
b8:0f:21:71:95:29:dc:93:89:cc:ed:d8:cb:98:ea:cc:d5:6c:
8d:32:72:f1:12:32:fa:1b:6e:84:05:e3:66:c7:3c:01:cb:9c:
66:ce:25:2c:be:5c:da:eb:ee:86:56:16:fd:5c:7e:2d:3c:91:
ad:c1:61:55:e6:9c:f0:5f:72:a8:37:e7:d1:7e:c5:d8:5d:a8:
54:7c:58:88:5a:b9:fb:aa:0c:80:0e:4f:b4:62:43:17:4b:69:
4a:d7:a3:58:38:78:e7:7a:27:66:51:f9:26:cb:bd:85:a9:0f:
2a:a5:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:34:18 2025 by rpki-client