This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
File: IKzKhxhQA3Ov93tBSyPcal8UdO4.mft (raw, json)
Hash identifier: 4q41d/BeCXcrXNsDkWhtdbN99kHtDeYfEZo8ClPoVHM=
Subject key identifier: 63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Certificate serial: 03D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
Manifest number: 03C7
Signing time: Tue 20 Jan 2026 21:14:10 +0000
Manifest this update: Tue 20 Jan 2026 21:14:10 +0000
Manifest next update: Thu 22 Jan 2026 21:14:10 +0000
Files and hashes: 1: 8eQHvE5ba-O0_WE2XxhvrVPIDxE.roa (hash: AfAHjTEg+GdsHsUoe5gR4L9h7tpfLbQlG69JIrV3s54=)
2: FJkrjvet6pnYVHl1JNbcizxL0g8.roa (hash: BzeMzMG841+F32q3IBheqxZDU5E0CWxvuV3d5ezHa3s=)
3: IKzKhxhQA3Ov93tBSyPcal8UdO4.crl (hash: 6GsX0qIKLxXYUDsWoLqwSZrk9eYL2ELacGCHP7AlD84=)
4: Qt7hv1NDZ7Gd2WjM9G6YzzXrHwg.roa (hash: nb/dxdNTZanfGhB+PaoPWWRNDU9iTCTUbpnKTXzELgY=)
5: gn1GKghR4XaGzZzd9cX9fOI1Ek4.roa (hash: Eezi5ToGvvbLs3N8RzG6qj/i/tM/Y7p/7lECmZ5IsHE=)
6: s9tu_pDnJrSyKspE2pwZIYBI6D0.roa (hash: 77p9GLnmkRIDPz0ypfQ8Zc8Oh+HTvViv2j8ygqdj+Pg=)
7: wXFlY0DS7Tk9YVdbACjaAPlhD4M.roa (hash: UwyRgcLRscTitWw39H2TO4FRgn7CFSoaLuxrQlQibBg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979 (0x3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE
Validity
Not Before: Jan 20 21:14:10 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=637434BF3B3405E77125FEE5E8A7A7A80946E0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:74:48:cc:64:3a:a9:1e:7b:4b:a2:fc:06:
0c:d3:28:19:9c:e0:4f:77:be:b4:98:24:2d:4a:2a:
c8:39:4a:2c:16:95:9a:a7:6f:a7:15:21:ba:05:b5:
43:04:10:65:e2:f2:34:2a:90:32:12:80:a2:3a:30:
b5:35:a8:1a:bf:29:b0:01:c3:1b:7b:07:75:fb:b1:
7c:db:72:54:69:49:0a:d6:cf:de:ff:f5:72:4c:a3:
c1:04:88:1e:dc:37:70:0e:9e:76:60:03:1b:d7:53:
c6:cc:12:8d:28:df:db:dd:92:d7:71:d1:49:75:09:
5e:cb:b2:48:bb:11:46:ca:c3:4a:1a:e3:d1:a8:5e:
49:16:22:ab:f1:52:d8:1b:83:19:60:b6:b5:98:9f:
db:52:3a:bc:db:26:20:7d:92:12:d6:77:ed:64:56:
dc:77:0f:67:f0:27:9f:96:44:41:65:ab:31:1e:9c:
eb:20:51:79:68:0f:fe:04:d1:9f:35:d7:47:c4:42:
b2:2a:26:33:22:2d:ee:c1:de:e9:8c:67:af:34:b0:
c5:50:9c:e0:48:4a:c6:bb:8b:31:b0:bc:67:0d:33:
f5:b4:0e:ee:5d:4f:7c:50:20:93:9c:a3:c1:cd:42:
3a:d1:7a:a6:6a:3b:d7:1b:05:99:7e:79:71:6f:4a:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:74:34:BF:3B:34:05:E7:71:25:FE:E5:E8:A7:A7:A8:09:46:E0:F7
X509v3 Authority Key Identifier:
keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:85:5c:4b:af:93:80:59:ec:bf:86:d9:44:7a:be:d5:47:c1:
f3:51:4d:a9:e8:05:9a:b2:16:bf:df:17:fd:34:42:9e:be:6f:
c5:c0:e5:91:87:c5:38:3f:11:21:93:35:ef:62:b9:6b:44:f4:
3a:36:55:63:1e:d4:c2:72:eb:72:a0:3e:5a:a2:f3:a6:82:17:
ad:64:92:a5:7f:57:25:8b:1a:ac:16:6b:17:d6:73:dd:5d:70:
f6:e7:e9:03:85:cc:a6:73:43:f1:32:90:58:a5:cb:1d:2d:e3:
1b:89:52:79:a6:5a:50:a7:24:80:15:30:84:bf:8c:68:75:d7:
b9:71:c9:27:7b:b6:ab:88:84:aa:99:7f:e0:46:a7:4f:d6:34:
e9:d0:fd:ee:ff:7f:0b:0f:46:66:34:84:de:c9:67:1b:cd:9b:
5e:c2:4b:52:3d:56:9a:69:0b:d4:57:3e:17:91:c6:fd:66:72:
d6:e2:b8:56:a2:1d:16:e3:8b:cf:0e:44:fb:41:8a:b2:3c:bc:
41:95:e9:54:57:07:49:61:d2:ed:27:0d:20:bb:96:08:37:a1:
53:e7:54:59:0f:ef:cd:c1:4f:1d:c5:71:40:06:22:62:28:f5:
68:e1:7b:13:0b:d3:22:96:1f:31:ea:be:0d:cb:66:fa:67:6d:
48:d5:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:46:36 2026 by rpki-client