This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
File: 4hRiP9Epy5cnQNOR2vORlvKt8r0.mft (raw, json)
Hash identifier: eSm8I5F5KxBl+MOYyYkN8715cvmLcXI8EWAHC8MGB28=
Subject key identifier: 5F:4E:01:3E:85:88:F2:0D:76:04:DF:EA:79:DA:C4:D6:4B:88:E9:AB
Authority key identifier: E2:14:62:3F:D1:29:CB:97:27:40:D3:91:DA:F3:91:96:F2:AD:F2:BD
Certificate issuer: /CN=E214623FD129CB972740D391DAF39196F2ADF2BD
Certificate serial: 01B2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4hRiP9Epy5cnQNOR2vORlvKt8r0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
Manifest number: 01AE
Signing time: Tue 23 Dec 2025 11:09:29 +0000
Manifest this update: Tue 23 Dec 2025 11:09:29 +0000
Manifest next update: Thu 25 Dec 2025 11:09:29 +0000
Files and hashes: 1: 4hRiP9Epy5cnQNOR2vORlvKt8r0.crl (hash: qt6IqEGDzBfsASfZZXlr4wweIuP7MPkKgJUMpJbsw/g=)
2: iSwRk6JX6sq0zUYdAiJaQJwTSNU.roa (hash: ZfvLyZSU7HOwGerGgBmUBGoPowZcffgpfXRcA2OibPk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/4hRiP9Epy5cnQNOR2vORlvKt8r0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 22:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E214623FD129CB972740D391DAF39196F2ADF2BD
Validity
Not Before: Dec 23 11:09:29 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5F4E013E8588F20D7604DFEA79DAC4D64B88E9AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:a8:8c:da:a4:d9:95:81:48:9d:98:2f:23:
36:0a:90:d7:70:72:d0:66:3b:92:cc:47:d1:62:8a:
61:2c:f3:fe:e2:cc:00:9b:2c:62:ff:19:9f:43:0a:
49:75:35:66:ab:6b:2a:9c:c6:38:70:dd:11:a3:c8:
ed:c0:34:19:e9:f6:84:d1:18:53:59:fd:90:94:4a:
1f:75:c2:cb:4f:40:04:94:aa:04:17:48:7d:db:b3:
ba:94:c3:97:d1:b5:c7:a1:a1:fa:97:cd:48:b6:b9:
de:2f:2d:0d:97:e1:75:ba:6c:26:fd:a6:a6:3c:a5:
7e:e5:59:c2:5d:8a:3a:37:5a:ff:df:a2:2d:28:46:
8a:47:d6:e6:88:b8:d2:90:68:42:b2:40:76:b4:90:
0f:03:92:34:db:47:05:77:c8:95:eb:8d:b2:05:0e:
a8:c7:47:57:4a:7a:47:f4:44:89:27:b7:ae:0d:bb:
aa:c8:ff:14:93:de:ae:4c:e6:94:b5:e7:e7:7d:95:
0e:bd:b2:86:37:c0:03:26:fe:de:77:54:ff:99:08:
47:0d:74:88:b6:31:5a:1d:02:e0:13:89:c5:4b:0d:
13:ab:39:5a:f7:3d:b6:d1:a7:cb:e5:19:37:bf:18:
1b:34:58:ee:dd:33:56:ac:0b:83:53:d2:f6:dc:28:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:01:3E:85:88:F2:0D:76:04:DF:EA:79:DA:C4:D6:4B:88:E9:AB
X509v3 Authority Key Identifier:
keyid:E2:14:62:3F:D1:29:CB:97:27:40:D3:91:DA:F3:91:96:F2:AD:F2:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4hRiP9Epy5cnQNOR2vORlvKt8r0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CJME/4hRiP9Epy5cnQNOR2vORlvKt8r0.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:da:61:41:88:88:29:e2:9a:1b:f8:55:48:a0:5f:53:dd:
a1:df:ab:ac:9f:c0:5b:82:48:ca:bc:fb:09:c4:5d:c5:41:43:
e5:df:ae:72:b5:fa:b8:5a:6b:cd:a6:2c:d2:1b:dc:57:7f:d3:
94:e2:49:14:4b:cf:ee:c9:f5:f4:11:4d:11:e9:6c:7e:dd:8b:
73:31:c1:40:de:d8:04:9b:89:c2:fa:30:ff:2c:70:1d:ad:f7:
dc:3b:55:9e:2b:ad:09:1b:e0:d2:eb:5c:c2:79:3b:d6:db:6e:
ce:0b:16:6a:3f:c8:45:c2:84:35:8b:39:6c:fe:0b:16:77:06:
99:61:45:b1:80:8d:2a:74:81:05:63:cc:c8:4c:1d:07:b8:6c:
91:76:4f:ae:60:a2:48:2e:df:23:42:bd:98:50:0f:06:bd:b2:
6d:b7:22:59:8c:dc:aa:18:e2:cc:94:d7:75:0e:80:f5:17:ef:
89:4e:84:e8:bf:3f:d6:a7:84:af:45:f5:3a:0c:e2:e0:1f:4a:
ac:78:7d:4b:68:bd:87:b7:74:1d:ed:d9:0c:a2:eb:06:0d:f5:
af:24:35:a2:d8:f8:99:19:42:a0:1c:3b:8f:59:2e:e5:1f:cc:
b4:af:59:6b:73:b2:96:50:98:f1:b0:52:7b:fa:a1:55:04:44:
8a:b8:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:30:34 2025 by rpki-client