This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
File: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft (raw, json)
Hash identifier: tmlRTlLaP4j6vSXOBxoVFOooCR/5Ruf2s11V/b770Tk=
Subject key identifier: B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
Authority key identifier: 43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
Certificate issuer: /CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Certificate serial: 03B1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
Manifest number: 03AB
Signing time: Mon 15 Dec 2025 20:36:48 +0000
Manifest this update: Mon 15 Dec 2025 20:36:47 +0000
Manifest next update: Wed 17 Dec 2025 20:36:47 +0000
Files and hashes: 1: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl (hash: t7vtcqMEW6qcB0+Ca6x4igMr3AAcN6CJpoEc+vk/AW8=)
2: UfKOZ2h5hVDq-J996AWvgJuf74k.roa (hash: ReuDPJcG6dTbXoELLRs6cHJyN6jJYQ3PmHw4NoD0Z9M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 07:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Validity
Not Before: Dec 15 20:36:47 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B71DB07054D3D63EB1D73CF6DA82C01F7DFDF137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:98:9c:ce:be:e2:9d:bb:4c:70:4a:fc:73:
3c:29:ba:79:69:9d:91:ad:b3:33:59:41:c7:be:15:
69:bd:87:da:03:8d:27:e5:d9:7c:0a:ce:de:12:f2:
4f:fb:e5:87:85:5c:7d:6f:42:6d:32:e9:ee:c4:3a:
d2:0b:05:ed:91:22:5e:53:ae:16:ba:3d:98:ff:37:
29:c0:c1:40:f8:4e:ad:47:da:34:e2:aa:0b:16:16:
0f:b7:d5:0b:70:2c:44:59:56:fd:55:56:12:bc:aa:
a7:c0:09:2a:c8:9f:ac:f7:4c:be:63:86:b8:ce:3a:
7c:59:ef:40:81:0a:99:1b:a7:e1:a0:98:9a:c7:47:
5b:e2:f6:00:22:8e:f0:5b:54:51:17:5c:78:bc:5b:
f3:d7:1b:ca:34:64:2c:40:2e:c4:01:8a:32:81:05:
e5:f5:b9:84:33:5b:00:57:4e:fb:2d:dd:8a:93:1d:
66:88:ec:75:62:b5:47:f9:ea:1c:b0:2f:91:85:03:
a4:af:f0:b8:7c:1f:b4:3b:b2:d4:e9:1d:36:08:85:
cc:a9:23:39:91:d7:1b:5c:ac:ea:05:0e:cd:00:fc:
6f:80:88:92:f4:55:28:37:fe:dc:f5:e2:36:3c:2e:
bf:68:76:c1:60:34:ef:99:b1:98:82:92:d4:02:e1:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
X509v3 Authority Key Identifier:
keyid:43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:67:29:eb:f6:97:0b:fb:4b:d2:b2:67:04:b7:88:24:7e:
82:5c:58:ca:36:08:86:2b:46:82:f2:12:a4:5f:3b:e7:06:6d:
43:48:fd:34:1d:bd:cb:3b:a5:b2:ef:c2:80:1e:f8:c1:9c:76:
dd:d3:c1:2a:92:de:ba:dc:d4:64:92:db:1b:2f:c0:2c:b2:b1:
bc:b8:22:85:2f:9a:b1:e3:a2:48:7c:e9:69:46:34:b9:60:b4:
77:62:11:66:e2:71:83:7b:f0:61:07:75:fc:a9:0c:27:44:5b:
9b:e5:15:11:f7:3d:9e:ef:32:cb:2a:6e:94:29:b5:70:41:84:
dd:68:a6:95:f1:42:bf:d2:7d:05:20:b1:de:89:83:52:03:c6:
7a:f2:fb:72:65:53:8a:92:88:92:90:e3:36:9d:8d:04:e9:19:
c7:b5:40:ef:06:9f:5a:a1:6c:d6:5b:60:18:71:32:a0:52:18:
11:29:85:2e:67:89:8c:89:f1:a0:5a:d1:f5:09:ed:46:6f:0f:
ca:ab:0d:77:4e:22:9e:f9:b5:0c:41:11:15:5a:fb:7a:ae:80:
38:a9:ec:95:e3:da:d5:05:96:c4:55:c0:71:85:29:72:29:04:
c8:db:ac:43:c6:dc:b6:8a:37:16:7e:cc:da:ea:04:b8:5a:62:
d1:db:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:47:27 2025 by rpki-client