This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
File: ftgwlnECe35vya4nucaMnE4pxXU.mft (raw, json)
Hash identifier: hJSgTI1xoMU4K5lUNPCRmNkjWaTqkX0zT+nRcNi7vgY=
Subject key identifier: 66:A9:74:07:81:77:DC:FD:04:3F:D9:68:DE:DF:E1:B1:80:12:D4:2F
Authority key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75
Certificate issuer: /CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575
Certificate serial: 0432
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
Manifest number: 042C
Signing time: Sun 25 Jan 2026 22:15:58 +0000
Manifest this update: Sun 25 Jan 2026 22:15:58 +0000
Manifest next update: Mon 26 Jan 2026 04:15:58 +0000
Files and hashes: 1: YpjaZC5LJccyTWPtUV5W8y7mQGY.roa (hash: eUalxOIeDjSTxJCisxHcY9I9f8YtwI2myu3jsK0kajc=)
2: ftgwlnECe35vya4nucaMnE4pxXU.crl (hash: J7Rih/cNgDqWutzqnPkxK48GWja7Lqd1pZnFt3bG6p8=)
3: iCkkndkB1R7qDlnU5hlkXI5uiCw.roa (hash: YZBdfebh6s1B6Biq68yu8yDii8XEt7a+stEGQfzarEQ=)
4: mKdR6--Ct0FenOYAQquVe1RtECw.roa (hash: xDLu6qxNzNW8m67vaBbUTurxrLTvcboUKmV8uB7NENk=)
5: td3jCjzHIYCL0-HvpN4nhdz2tvg.roa (hash: rBvJqif2TLaa20JqvQMoW3jO03c53tQSeUOcr0H7L0I=)
6: uNVqEJogHZSaPrKSieumrfhC8bk.roa (hash: dR9jkjn7FRhIqoQ74x6PlkHXiKpeC16K+bmQtEzwsc0=)
7: zWE-TE2amDOnjAMsPX6eFXUA-m4.roa (hash: DqCV7q/facD9tax0P/ph0uxpmehV8sHVuAE9yxMfhKM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 04:15:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1074 (0x432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575
Validity
Not Before: Jan 25 22:15:58 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=66A974078177DCFD043FD968DEDFE1B18012D42F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:2e:ce:01:3c:ee:31:ae:3d:11:9f:9c:1d:
2c:de:41:17:95:93:07:18:4b:f2:b5:7c:6d:99:11:
32:65:a7:b4:4c:d4:9c:5c:95:33:3f:41:56:f8:40:
75:39:d9:67:03:42:b5:3f:a8:3c:89:a0:f6:db:57:
34:6f:92:8d:6b:1d:38:b3:e2:58:1f:9d:02:05:1d:
40:a0:25:bc:00:bb:2f:ed:17:eb:bd:6b:3a:98:83:
02:d4:c8:37:39:bf:88:25:c2:b3:c9:51:43:ef:74:
5b:ce:74:f8:6f:85:79:7e:b5:a0:73:bc:45:16:ca:
5d:fb:4b:98:54:18:71:70:d2:f0:60:b5:d5:2f:a6:
cb:c0:4b:c9:37:05:0a:fa:02:09:06:99:f7:53:c7:
81:f0:7c:1c:56:ba:76:e1:0a:6a:49:5e:49:32:3e:
01:c3:8e:db:b7:69:30:a0:af:b7:17:d0:f6:47:22:
20:bf:7b:3c:90:ad:3e:35:8d:58:de:73:c7:55:88:
f1:60:00:98:90:ff:a4:e8:bd:62:12:14:de:ae:3a:
55:24:a8:d2:3d:f8:2e:6d:b0:23:91:7a:95:72:9a:
7a:ca:32:d1:e4:46:b1:67:77:bc:63:43:53:d9:08:
3b:86:bb:be:d3:a8:e9:b4:3d:1e:e4:da:7e:19:cf:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:74:07:81:77:DC:FD:04:3F:D9:68:DE:DF:E1:B1:80:12:D4:2F
X509v3 Authority Key Identifier:
keyid:7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:0d:f9:32:f4:8f:98:f6:35:b7:42:93:31:62:4b:49:4d:a3:
63:34:98:63:a5:ab:19:f9:cb:36:aa:bd:e6:e0:84:ab:b3:a9:
87:6d:3d:ab:41:eb:b8:80:d2:60:81:3b:82:88:eb:e2:ad:4c:
0d:71:97:5d:4c:e1:a7:10:7d:7f:1a:7b:e9:95:f9:4a:70:a8:
3c:05:5a:9e:2e:8f:d5:2c:23:e1:24:34:4e:32:9e:96:d5:5d:
ab:21:84:54:77:1e:11:d6:67:bc:e6:b0:42:89:4b:3a:dc:f5:
44:5f:e2:44:05:65:ba:77:da:8e:3c:dc:0c:c5:9d:91:56:01:
10:2c:d6:cf:e5:33:d9:f8:5b:7e:17:83:ab:b9:7a:22:20:cc:
a1:1f:87:c5:f9:40:93:d1:a2:1d:75:3e:9b:01:f6:4a:f0:70:
af:7f:1e:8c:1e:1a:f1:5a:62:cc:90:74:66:a1:cd:91:b7:ea:
b5:02:50:59:c1:2b:94:23:61:f0:d4:47:a7:60:17:03:9d:bd:
a5:50:e7:6a:ca:9d:a2:98:c3:d7:49:b7:d2:d6:bc:ad:06:13:
5b:54:66:80:a1:3a:f2:0c:f6:f9:01:65:06:4c:58:88:d5:90:
d6:29:f4:a1:8c:ea:c2:d4:65:e8:31:84:10:21:6d:24:c4:92:
a3:d9:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:41:32 2026 by rpki-client