This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
File: JxbruJW8hEeVpoTJZz6pgRRXdc4.mft (raw, json)
Hash identifier: vT4RJOUNQQDyPOBsbi4J9tmKFoMOmFuykweG9zjoXCo=
Subject key identifier: 56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
Authority key identifier: 27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
Certificate issuer: /CN=2716EBB895BC844795A684C9673EA981145775CE
Certificate serial: 052E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
Manifest number: 052B
Signing time: Tue 09 Dec 2025 22:06:08 +0000
Manifest this update: Tue 09 Dec 2025 22:06:08 +0000
Manifest next update: Thu 11 Dec 2025 22:06:08 +0000
Files and hashes: 1: JxbruJW8hEeVpoTJZz6pgRRXdc4.crl (hash: +od19B8NIb31kbRLjZZ7xwQNIuG2cL2vymj/6lyhfq4=)
2: us4CtYMcLNizAJqvEjWGqz9MViE.roa (hash: uoWSpKUcBib0AvSVDdnva4D/TdWXnF1RK5mhqLebwu4=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 12:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1326 (0x52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2716EBB895BC844795A684C9673EA981145775CE
Validity
Not Before: Dec 9 22:06:08 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=56A4BE2268D3D282D085473FC7351D966A184FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:cb:7c:90:bd:b6:b2:7a:48:54:71:04:b7:
3e:2e:49:a6:9d:3f:d3:85:37:64:a5:40:b5:2c:c6:
81:54:53:ce:bd:89:47:da:54:ab:66:b6:52:2d:09:
cd:d8:91:e1:ad:15:5c:eb:46:33:c1:73:5b:90:6d:
68:d9:42:92:de:6d:4d:b2:38:07:32:f6:6e:69:e5:
c9:50:49:70:51:ae:27:ce:be:ef:3b:aa:84:ba:7d:
87:e4:ad:10:22:c1:8a:f7:0f:83:ba:36:1d:b1:68:
2c:86:0b:f7:db:fb:0b:e3:e9:df:9c:42:65:a3:5a:
78:b7:07:92:0d:73:ac:2b:a7:40:9c:bc:4f:63:77:
80:ba:d4:61:65:e5:3b:be:d7:68:27:81:29:4e:5e:
c1:4c:cc:3c:3a:f5:ec:f0:6b:c7:28:70:17:b0:ba:
a2:35:9a:d9:62:15:c7:09:4e:da:c0:7e:38:a0:60:
67:a6:32:cb:cc:9f:c3:50:4f:17:c5:68:29:ca:7f:
4c:be:71:c1:5a:2c:56:e1:81:f0:c5:c4:b7:87:83:
2b:d6:53:44:8f:1a:3a:25:09:d0:e1:82:1e:06:77:
b3:6f:b4:a5:fd:b8:f1:ec:98:e4:d6:af:1f:55:32:
2b:e2:ae:fc:39:7c:36:dd:15:36:17:31:12:f0:6f:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A4:BE:22:68:D3:D2:82:D0:85:47:3F:C7:35:1D:96:6A:18:4F:C7
X509v3 Authority Key Identifier:
keyid:27:16:EB:B8:95:BC:84:47:95:A6:84:C9:67:3E:A9:81:14:57:75:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxbruJW8hEeVpoTJZz6pgRRXdc4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/JxbruJW8hEeVpoTJZz6pgRRXdc4.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:4a:7f:be:33:c3:bb:c2:8c:cb:b3:a8:52:38:58:4b:df:
8f:3f:d6:e1:54:3d:0e:bf:a3:7d:71:49:d9:c0:ea:45:3c:97:
d0:ff:af:ae:11:a9:f5:dd:cf:f8:08:6d:27:9e:9e:a7:6f:21:
68:dc:15:cd:0a:ce:22:65:5c:de:61:f6:0c:da:cd:fb:02:f2:
97:32:5c:0d:2d:98:c8:b3:d5:c5:00:bb:c4:21:9d:9f:16:c5:
0a:03:5e:41:6e:d3:99:f8:c0:bb:df:b9:5f:f1:a4:32:9d:18:
23:49:b4:22:1c:db:8a:f2:ed:5a:b0:6f:b9:8f:eb:62:8f:0c:
dd:d2:c6:8a:17:70:94:e6:54:95:b8:24:7f:69:4f:13:03:95:
49:6e:5a:73:64:cf:c3:9a:51:dc:6c:a6:09:b7:d5:dd:6b:2f:
a8:ed:f8:6c:f8:69:90:77:75:e2:de:35:20:94:35:3d:02:2c:
6a:91:1d:4f:b2:fc:a6:9e:d4:21:48:f7:ce:4a:57:cb:1b:03:
42:2d:ab:8b:83:46:82:9b:96:d7:ba:00:9b:fd:e2:61:14:55:
df:ad:1d:76:dd:0a:8e:9e:36:1b:8b:eb:3f:73:44:f9:7f:2c:
06:2a:30:83:9a:7c:8d:94:85:67:f8:e1:1b:a9:c2:ca:58:3f:
45:5a:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 08:59:46 2025 by rpki-client