This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft
File:                     H4d5g1J0cOIA1a4GoBWIITVV_uY.mft (raw, json)
Hash identifier:          2ouLniM+Zxp+zsOsY0ohamzBKdPo8fMkRZq11i6n+vQ=
Subject key identifier:   86:F9:0A:C1:D1:2D:A9:2B:9F:F6:88:D0:61:E0:27:30:68:0B:85:7F
Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
Certificate issuer:       /CN=1F877983527470E200D5AE06A01588213555FEE6
Certificate serial:       03B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft
Manifest number:          0396
Signing time:             Sun 25 Jan 2026 10:15:21 +0000
Manifest this update:     Sun 25 Jan 2026 10:15:21 +0000
Manifest next update:     Tue 27 Jan 2026 10:15:21 +0000
Files and hashes:         1: 6xb5GIogFcLPLXnAO7uTPNGN-eE.roa (hash: kflATpPFlJE3DKWOtuDB50wPQhdlGCWIcRQ6V3dTnKc=)
                          2: H4d5g1J0cOIA1a4GoBWIITVV_uY.crl (hash: BUsL3+gN+UEZYnYAZSASsZp7FF2dFRmnQblBsJd8LGs=)
                          3: TYx2l_8z_nAq2QEus0U2e9VUv_k.roa (hash: 7CBhEIM0DVkZC40w7yGKlReYMKtOASvRG7tVqSHiGD8=)
                          4: Yuy0l4pnnBzAIOsP9xCrl4oiL4c.roa (hash: +Ynuii0mJidSKGaAA8fJlN+edGoofTL8lYarYgp9WuA=)
                          5: hOPcBiZH-Xxa2ZkMj3xYYtkN3jY.roa (hash: +6aW6GMUeZt3K5PvZTf8p40PBEfp2BfYhg71iTnq3Tk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 23:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6
        Validity
            Not Before: Jan 25 10:15:21 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=86F90AC1D12DA92B9FF688D061E02730680B857F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:da:9a:5c:b9:82:9f:85:e0:67:ea:b6:71:b0:
                    99:fa:b3:2e:dc:9d:d4:9d:a8:70:d2:9b:6e:76:7f:
                    89:d2:d1:99:9b:aa:e5:9f:60:9a:4b:28:a6:22:10:
                    65:e1:9b:02:bf:46:18:75:1e:7f:53:77:da:9d:af:
                    6b:2b:26:ed:ce:a4:0d:47:d9:56:5d:75:17:53:08:
                    47:ca:b9:dd:4d:9f:81:dd:eb:30:5e:1c:96:74:e4:
                    49:f3:ad:0e:1d:c8:d5:f0:01:f5:28:87:3c:f9:f4:
                    74:c5:dd:d9:77:7f:b8:eb:7b:40:0b:b1:c6:a1:c0:
                    e7:91:f6:e9:27:77:e3:68:af:60:03:58:65:9a:58:
                    9b:e7:bf:a2:6e:cf:c8:3e:e1:87:ee:12:5f:32:52:
                    14:d5:64:12:64:31:be:26:f2:ee:12:83:49:f6:ca:
                    3b:f0:0c:c5:e2:a8:df:24:ea:db:3f:03:42:38:ca:
                    be:b0:73:73:2b:d1:d0:64:e4:35:31:c9:09:b3:f2:
                    9c:3a:22:b6:91:07:fa:6b:76:74:7e:e9:9f:46:cd:
                    b8:be:5e:1b:c3:69:f2:70:97:88:22:7d:52:0d:c2:
                    12:22:64:df:c4:4d:58:d6:e6:0d:ce:7a:9d:ef:82:
                    51:28:ba:16:ab:d5:84:79:60:9b:8f:76:dd:96:31:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:0A:C1:D1:2D:A9:2B:9F:F6:88:D0:61:E0:27:30:68:0B:85:7F
            X509v3 Authority Key Identifier:
                keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:40:c0:69:6c:79:e8:a5:e9:4a:6c:06:6b:b1:9d:60:3c:f8:
         a1:c4:a2:bc:d3:ae:7f:9c:18:31:13:27:9b:ff:25:ed:31:ee:
         b0:a6:1b:71:57:62:d4:62:71:44:f4:97:b0:b4:24:dd:0c:77:
         21:8b:39:9d:69:e2:47:fd:f5:cc:3a:d7:10:9f:99:94:c9:9b:
         79:88:39:c0:eb:66:28:03:41:3f:c0:56:e7:00:73:d9:18:cd:
         04:f5:2a:a0:e1:6f:d6:00:d7:6d:5e:77:ac:aa:c2:00:52:f8:
         82:67:55:96:64:d0:ec:86:ac:2c:c5:9c:e1:59:78:32:f4:15:
         d3:b8:34:72:89:c1:49:8e:e4:75:ee:5c:4a:31:1f:7a:58:a9:
         46:40:75:90:62:29:3c:48:61:08:54:21:78:5f:cd:0a:ce:f0:
         25:57:f3:fb:d5:66:1a:2f:ba:0c:fa:17:88:56:91:e9:37:50:
         4a:75:e0:da:24:07:b2:0f:a4:da:eb:e4:ff:29:27:93:0b:91:
         c2:2e:97:30:f2:0d:46:af:d2:a3:d9:b7:dd:03:26:72:80:90:
         01:53:48:ca:54:92:eb:fe:e8:e0:05:25:db:ae:ef:4a:41:75:
         d6:83:6a:d1:ff:f1:69:70:92:93:81:3a:89:b8:6f:fa:29:e2:
         34:1a:48:9d
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY4
Nzc5ODM1Mjc0NzBFMjAwRDVBRTA2QTAxNTg4MjEzNTU1RkVFNjAeFw0yNjAxMjUx
MDE1MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg2RjkwQUMxRDEyREE5
MkI5RkY2ODhEMDYxRTAyNzMwNjgwQjg1N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDw2ppcuYKfheBn6rZxsJn6sy7cndSdqHDSm252f4nS0ZmbquWf
YJpLKKYiEGXhmwK/Rhh1Hn9Td9qdr2srJu3OpA1H2VZddRdTCEfKud1Nn4Hd6zBe
HJZ05EnzrQ4dyNXwAfUohzz59HTF3dl3f7jre0ALscahwOeR9uknd+Nor2ADWGWa
WJvnv6Juz8g+4YfuEl8yUhTVZBJkMb4m8u4Sg0n2yjvwDMXiqN8k6ts/A0I4yr6w
c3Mr0dBk5DUxyQmz8pw6IraRB/prdnR+6Z9Gzbi+XhvDafJwl4gifVINwhIiZN/E
TVjW5g3Oep3vglEouhar1YR5YJuPdt2WMYxxAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUhvkKwdEtqSuf9ojQYeAnMGgLhX8wHwYDVR0jBBgwFoAUH4d5g1J0cOIA1a4G
oBWIITVV/uYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1BTWVMv
SDRkNWcxSjBjT0lBMWE0R29CV0lJVFZWX3VZLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9INGQ1ZzFKMGNPSUExYTRHb0JXSUlUVlZfdVkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DUFNZUy9INGQ1ZzFKMGNPSUExYTRHb0JX
SUlUVlZfdVkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkDA
aWx56KXpSmwGa7GdYDz4ocSivNOuf5wYMRMnm/8l7THusKYbcVdi1GJxRPSXsLQk
3Qx3IYs5nWniR/31zDrXEJ+ZlMmbeYg5wOtmKANBP8BW5wBz2RjNBPUqoOFv1gDX
bV53rKrCAFL4gmdVlmTQ7IasLMWc4Vl4MvQV07g0conBSY7kde5cSjEfelipRkB1
kGIpPEhhCFQheF/NCs7wJVfz+9VmGi+6DPoXiFaR6TdQSnXg2iQHsg+k2uvk/ykn
kwuRwi6XMPINRq/So9m33QMmcoCQAVNIylSS6/7o4AUl267vSkF11oNq0f/xaXCS
k4E6ibhv+iniNBpInQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:41:20 2026 by rpki-client