This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
File:                     IKzKhxhQA3Ov93tBSyPcal8UdO4.mft (raw, json)
Hash identifier:          GwD1GvwY+ryJ0+SYNc4Lc56ujDuAfK4tG0bPjdf5Fpg=
Subject key identifier:   63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
Certificate issuer:       /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Certificate serial:       03B5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
Manifest number:          03A9
Signing time:             Sat 06 Dec 2025 20:35:03 +0000
Manifest this update:     Sat 06 Dec 2025 20:35:03 +0000
Manifest next update:     Mon 08 Dec 2025 20:35:03 +0000
Files and hashes:         1: 8eQHvE5ba-O0_WE2XxhvrVPIDxE.roa (hash: AfAHjTEg+GdsHsUoe5gR4L9h7tpfLbQlG69JIrV3s54=)
                          2: FJkrjvet6pnYVHl1JNbcizxL0g8.roa (hash: BzeMzMG841+F32q3IBheqxZDU5E0CWxvuV3d5ezHa3s=)
                          3: IKzKhxhQA3Ov93tBSyPcal8UdO4.crl (hash: ixMpLKF3TF9uQIgm26KJVrq1DtqXYpwvpfUqmRiLR0g=)
                          4: Qt7hv1NDZ7Gd2WjM9G6YzzXrHwg.roa (hash: nb/dxdNTZanfGhB+PaoPWWRNDU9iTCTUbpnKTXzELgY=)
                          5: gn1GKghR4XaGzZzd9cX9fOI1Ek4.roa (hash: Eezi5ToGvvbLs3N8RzG6qj/i/tM/Y7p/7lECmZ5IsHE=)
                          6: s9tu_pDnJrSyKspE2pwZIYBI6D0.roa (hash: 77p9GLnmkRIDPz0ypfQ8Zc8Oh+HTvViv2j8ygqdj+Pg=)
                          7: wXFlY0DS7Tk9YVdbACjaAPlhD4M.roa (hash: UwyRgcLRscTitWw39H2TO4FRgn7CFSoaLuxrQlQibBg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
        Validity
            Not Before: Dec  6 20:35:03 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=637434BF3B3405E77125FEE5E8A7A7A80946E0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:74:48:cc:64:3a:a9:1e:7b:4b:a2:fc:06:
                    0c:d3:28:19:9c:e0:4f:77:be:b4:98:24:2d:4a:2a:
                    c8:39:4a:2c:16:95:9a:a7:6f:a7:15:21:ba:05:b5:
                    43:04:10:65:e2:f2:34:2a:90:32:12:80:a2:3a:30:
                    b5:35:a8:1a:bf:29:b0:01:c3:1b:7b:07:75:fb:b1:
                    7c:db:72:54:69:49:0a:d6:cf:de:ff:f5:72:4c:a3:
                    c1:04:88:1e:dc:37:70:0e:9e:76:60:03:1b:d7:53:
                    c6:cc:12:8d:28:df:db:dd:92:d7:71:d1:49:75:09:
                    5e:cb:b2:48:bb:11:46:ca:c3:4a:1a:e3:d1:a8:5e:
                    49:16:22:ab:f1:52:d8:1b:83:19:60:b6:b5:98:9f:
                    db:52:3a:bc:db:26:20:7d:92:12:d6:77:ed:64:56:
                    dc:77:0f:67:f0:27:9f:96:44:41:65:ab:31:1e:9c:
                    eb:20:51:79:68:0f:fe:04:d1:9f:35:d7:47:c4:42:
                    b2:2a:26:33:22:2d:ee:c1:de:e9:8c:67:af:34:b0:
                    c5:50:9c:e0:48:4a:c6:bb:8b:31:b0:bc:67:0d:33:
                    f5:b4:0e:ee:5d:4f:7c:50:20:93:9c:a3:c1:cd:42:
                    3a:d1:7a:a6:6a:3b:d7:1b:05:99:7e:79:71:6f:4a:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
            X509v3 Authority Key Identifier:
                keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5d:47:9e:26:30:43:3a:9d:e7:58:9a:84:27:af:0c:ee:9d:
         e1:fa:e3:db:6d:9d:06:19:31:25:30:c7:09:b7:a9:3d:91:27:
         85:fe:b7:f2:56:82:dd:e7:b2:f0:c1:0e:f5:1e:13:2b:8a:d1:
         fd:a3:c8:c3:15:2f:12:a9:1b:88:69:aa:1e:ef:0c:32:af:a6:
         75:1b:4e:b1:28:a2:b7:63:37:9f:37:23:c1:33:4e:54:a5:ba:
         9c:00:46:0c:33:e8:3f:5a:4f:bd:18:62:c2:be:ca:6b:fa:f7:
         6d:82:23:2d:b2:a1:a2:6b:81:28:9d:2f:23:e3:7f:2b:8c:3a:
         4e:64:f3:e7:85:f1:a2:14:4f:37:03:2f:9c:99:3f:51:b6:40:
         d6:d3:73:27:94:10:2e:eb:7e:9a:a6:e3:fa:12:9b:1c:06:0d:
         28:58:65:92:c6:30:ad:27:ef:c1:31:b0:6f:64:aa:dd:88:aa:
         d5:d7:28:cf:30:67:fb:fd:af:cd:97:3f:f7:76:d4:0a:b9:54:
         2b:b5:c0:da:79:59:65:00:24:ac:f3:7a:f9:bc:67:01:68:b7:
         33:51:d8:b2:57:f8:17:7d:08:7e:55:ca:63:14:8e:a4:74:64:
         a1:f3:90:5b:d0:c5:7a:3a:1a:a8:c1:9d:e9:d5:85:76:65:14:
         93:04:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----