This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
File: BYZiuNoF5AKfP6TValEh3UvWiYk.mft (raw, json)
Hash identifier: bBI7L+NLVSCTjEji4S+27uhOhcYGr8ISLDB/5MvbJYQ=
Subject key identifier: F7:0C:5A:B1:C2:DD:BB:51:D8:42:6D:C3:BD:D3:8C:4E:4D:14:AF:D2
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial: 0DB5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
Manifest number: 0D8E
Signing time: Sun 14 Dec 2025 10:08:35 +0000
Manifest this update: Sun 14 Dec 2025 10:08:35 +0000
Manifest next update: Tue 16 Dec 2025 10:08:35 +0000
Files and hashes: 1: BYZiuNoF5AKfP6TValEh3UvWiYk.crl (hash: k5Ijz611kerKI8XWv7T/ZOwmbIsDSf2I7a0W1bsYl1Q=)
2: Bp7DlH83PRR-yEjkZPpkgVFfIf0.roa (hash: uXP4HVljWOo3IwZtK92R0Iyr72D6ezbWedrPF+jz/WQ=)
3: JqEmmq0VmpkXKKXdOvnF1NYj20Y.roa (hash: jJpoHAk/MgdGdZZOsnSp0t/jZOlkQ4dfGrTOYPLQgKk=)
4: sQqRmA10GthuXGRkpTtX9n_ZBrI.roa (hash: 4obaoWU328k4rVD+yQS2KGDxmTQx10ZBoqdXf1RfRMI=)
5: sZA1fm-wZbNMumqy14nHa4o_nzk.roa (hash: LODsCOw5JbnVSKvTrhW9y71hWNHTJgXB6GmH0PRYIOw=)
6: viIqYla5qhIWLPHXwo121VMN1KU.roa (hash: YSQzEv6C/zNfCP0kp/B1q/pK49h48dyIoAUK2+xOAi0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 12:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3509 (0xdb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Validity
Not Before: Dec 14 10:08:35 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F70C5AB1C2DDBB51D8426DC3BDD38C4E4D14AFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7c:6f:3f:f8:6e:da:7e:ab:18:e0:82:07:0a:
fd:2b:3e:49:11:3f:09:e5:59:48:18:0d:80:c7:9d:
7d:59:46:a3:64:ca:31:fd:9f:06:de:36:31:f0:7f:
e1:61:bd:1e:99:0b:db:68:d6:8d:d4:d7:20:26:bd:
b8:74:ab:6a:de:de:8a:93:ac:a4:ed:09:f1:7d:aa:
b8:47:7f:7f:a0:8c:7c:e7:f6:3a:df:d5:4b:19:34:
16:49:3e:52:c7:0f:5b:a6:c2:8e:c4:9b:ba:e8:04:
5f:3d:69:0e:4c:0a:6f:51:fa:d7:64:5d:dd:7d:6e:
e9:d2:b7:59:be:6f:6a:4f:60:21:35:fe:43:05:20:
c0:3d:dc:fa:aa:e4:02:96:bf:04:85:9d:8e:21:fd:
0a:91:12:bd:54:3b:96:39:e5:46:db:be:fa:75:53:
19:b2:90:89:3a:86:43:93:1c:e9:b7:67:c2:81:12:
e9:33:1c:3e:57:96:81:56:8d:88:a7:9a:08:b8:ff:
8f:52:1f:b6:e2:38:79:b6:c1:83:61:37:23:e2:b4:
cb:03:ef:0a:d4:be:8b:88:81:46:e9:5b:f0:69:79:
6c:d8:51:0d:68:56:da:c8:45:d9:fd:13:25:b1:8a:
5d:cb:a6:7e:03:37:a5:2b:e0:d3:f5:cf:d1:97:fe:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:5A:B1:C2:DD:BB:51:D8:42:6D:C3:BD:D3:8C:4E:4D:14:AF:D2
X509v3 Authority Key Identifier:
keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:be:0e:6d:6a:67:a6:48:8b:93:7a:48:66:b6:c8:9b:15:
bf:0e:b8:96:7f:c5:9d:59:09:22:4a:06:f3:01:90:1e:25:15:
12:1d:29:bd:c9:b4:43:50:c2:02:57:21:16:f4:7c:b8:27:96:
5b:8f:64:eb:30:ad:62:5c:cc:51:88:2c:47:87:46:88:a4:8e:
3a:fd:08:8e:45:91:15:87:73:39:cc:74:42:05:b9:51:d1:3f:
fb:27:19:79:0e:7b:eb:ac:a3:4e:d8:40:2d:7c:a1:fc:59:28:
80:dc:f8:fa:53:d2:b4:1f:86:40:30:ec:34:7f:61:94:cb:e9:
af:3d:b7:63:4d:b0:95:bb:95:39:62:8a:c4:90:bd:d5:e3:18:
0e:0e:da:2f:7a:e0:e5:7d:8e:f4:0c:f1:4c:db:4f:87:bd:2e:
50:63:fc:c5:f8:b7:48:e1:a5:d0:19:05:40:bd:ac:65:f5:00:
b3:6e:1f:7c:30:b6:b9:5a:8f:dc:fb:4e:37:0f:da:9b:af:c3:
42:ae:d6:bf:5d:e5:89:ba:57:14:fe:9d:6d:8d:51:b8:a5:8f:
f1:c7:0d:b1:7f:0e:71:e8:2d:af:fc:dc:6f:98:d7:4d:e0:bc:
90:ab:db:9a:84:94:c8:1a:ac:82:16:ee:11:d3:03:4d:bd:bc:
07:4a:2a:ef
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDU4
NjYyQjhEQTA1RTQwMjlGM0ZBNEQ1NkE1MTIxREQ0QkQ2ODk4OTAeFw0yNTEyMTQx
MDA4MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3MEM1QUIxQzJEREJC
NTFEODQyNkRDM0JERDM4QzRFNEQxNEFGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvfG8/+G7afqsY4IIHCv0rPkkRPwnlWUgYDYDHnX1ZRqNkyjH9
nwbeNjHwf+FhvR6ZC9to1o3U1yAmvbh0q2re3oqTrKTtCfF9qrhHf3+gjHzn9jrf
1UsZNBZJPlLHD1umwo7Em7roBF89aQ5MCm9R+tdkXd19bunSt1m+b2pPYCE1/kMF
IMA93Pqq5AKWvwSFnY4h/QqREr1UO5Y55Ubbvvp1UxmykIk6hkOTHOm3Z8KBEukz
HD5XloFWjYinmgi4/49SH7biOHm2wYNhNyPitMsD7wrUvouIgUbpW/BpeWzYUQ1o
VtrIRdn9EyWxil3Lpn4DN6Ur4NP1z9GX/uG9AgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU9wxascLdu1HYQm3DvdOMTk0Ur9IwHwYDVR0jBBgwFoAUBYZiuNoF5AKfP6TV
alEh3UvWiYkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFV
L0JZWml1Tm9GNUFLZlA2VFZhbEVoM1V2V2lZay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQllaaXVOb0Y1QUtmUDZUVmFsRWgzVXZXaVlrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFVL0JZWml1Tm9GNUFLZlA2VFZh
bEVoM1V2V2lZay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBl
M74ObWpnpkiLk3pIZrbImxW/DriWf8WdWQkiSgbzAZAeJRUSHSm9ybRDUMICVyEW
9Hy4J5Zbj2TrMK1iXMxRiCxHh0aIpI46/QiORZEVh3M5zHRCBblR0T/7Jxl5Dnvr
rKNO2EAtfKH8WSiA3Pj6U9K0H4ZAMOw0f2GUy+mvPbdjTbCVu5U5YorEkL3V4xgO
DtoveuDlfY70DPFM20+HvS5QY/zF+LdI4aXQGQVAvaxl9QCzbh98MLa5Wo/c+043
D9qbr8NCrta/XeWJulcU/p1tjVG4pY/xxw2xfw5x6C2v/NxvmNdN4LyQq9uahJTI
GqyCFu4R0wNNvbwHSirv
-----END CERTIFICATE-----
Generated at Sun Dec 14 12:09:48 2025 by rpki-client