This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft File: u4ipF4WngsjqPN3tPnwfCdp59kc.mft (raw, json) Hash identifier: CsiOYAGmKvAPqBz5PKmL0AJgydnupHEzgTiImVDznxA= Subject key identifier: 66:39:51:B8:A9:B0:B9:1E:5B:9A:16:A6:74:2C:65:00:14:86:AF:9A Authority key identifier: BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 Certificate issuer: /CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647 Certificate serial: 017D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft Manifest number: 0171 Signing time: Sat 06 Dec 2025 08:05:42 +0000 Manifest this update: Sat 06 Dec 2025 08:05:42 +0000 Manifest next update: Mon 08 Dec 2025 08:05:42 +0000 Files and hashes: 1: 52ut3In-YXQQoi-JtjiMWQ9hecA.roa (hash: yv/NORMRzHfHSbjTau202LX+6lWyLCcYpGSKn+HJTdU=) 2: LruPk8SFILGVDu8P988mDNMEoIQ.roa (hash: 84u4i8yBhiyTXI67FVMuZjP9O04VH8/EbdX0D4IhFHE=) 3: PQZ7xOezw9es6nQ420QMNGKpX4U.roa (hash: IyvsccRxuBqwNgfap88+e5yNbcD7cwI91LBDMhkh4W8=) 4: RYtRIf1OZ7FcjP6VpPnivzCCEP8.roa (hash: cbguKFdRhBeC+D0bEE6mLFOWdGTq+VmGn/2jIhlRjQU=) 5: u4ipF4WngsjqPN3tPnwfCdp59kc.crl (hash: aCAP+zwA2CHO/eJ0Kd/SK/GvE2+/ZDDanUMWI5iGz28=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 22:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88A91785A782C8EA3CDDED3E7C1F09DA79F647 Validity Not Before: Dec 6 08:05:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=663951B8A9B0B91E5B9A16A6742C65001486AF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:bb:13:b7:a6:a6:d3:af:4a:2f:ba:a8:f7: f3:0e:2f:f2:6f:53:d2:ba:a6:de:4d:ce:97:d5:40: a9:93:30:0b:1d:05:2d:3c:6e:4f:9a:44:d3:7c:21: f1:1e:a7:20:1a:2b:19:6e:72:42:35:77:03:6e:79: ca:32:d5:22:33:4b:3e:d6:87:c8:4e:3d:3d:a2:3a: b0:46:8e:87:5f:49:03:72:0f:51:48:80:8a:60:33: 55:96:43:01:1a:de:bd:f8:52:90:7f:87:17:d2:bd: 83:12:f9:b5:eb:3d:36:85:30:40:90:df:f5:f7:a8: 50:cb:16:17:bd:47:01:1e:97:20:36:7d:ef:79:07: d1:4d:63:d4:d3:dc:81:ac:cf:b7:99:dd:c7:5c:f0: 09:1b:8d:cb:62:ca:16:93:a4:58:8c:75:92:b5:1a: 7f:cc:0b:cf:60:df:cc:b5:ee:da:7e:96:3f:1f:83: 40:2a:9f:b8:85:0c:19:da:01:07:97:3e:ad:78:14: e2:93:e3:3a:9b:81:84:39:b1:5d:4b:00:69:a5:fb: 9e:ee:50:48:4c:3e:f5:f8:77:62:29:b0:bf:4c:ab: 04:f0:3e:b0:60:8f:d8:9e:a3:e3:54:2b:1a:fc:4a: 02:7b:8b:ff:ec:77:aa:0f:2e:4a:3c:c4:b7:2c:29: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:39:51:B8:A9:B0:B9:1E:5B:9A:16:A6:74:2C:65:00:14:86:AF:9A X509v3 Authority Key Identifier: keyid:BB:88:A9:17:85:A7:82:C8:EA:3C:DD:ED:3E:7C:1F:09:DA:79:F6:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u4ipF4WngsjqPN3tPnwfCdp59kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/u4ipF4WngsjqPN3tPnwfCdp59kc.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e9:37:25:8c:a7:2e:72:fd:d8:d9:26:1d:53:de:40:e9:47: 48:a6:69:52:22:96:1b:16:a7:e6:fb:9c:a1:b7:e9:89:75:58: 17:b2:60:55:ab:7c:71:0a:e0:33:4b:ed:ce:d2:3b:de:cd:71: 61:ac:fb:07:f5:8d:b5:ce:25:0b:93:eb:bb:33:77:1f:30:8b: cd:6b:51:75:02:78:02:ad:de:0f:7d:11:33:b0:43:19:57:47: ab:d1:88:b5:cf:1d:45:6a:41:9b:4c:ea:1c:ce:8f:84:75:83: 2d:19:dc:7b:93:6d:e6:a7:8f:3c:52:ef:6b:30:be:84:9a:8a: 8b:19:30:d9:26:15:ab:17:8a:36:7a:7a:25:63:90:81:e9:fd: 02:c2:0b:c6:e9:43:66:63:c7:81:cb:03:4b:c2:f1:fc:cd:96: 21:b3:51:d0:b3:57:3e:f9:85:22:b6:c3:49:91:a6:d8:fa:cc: 8e:de:5b:a9:63:45:06:8b:95:81:f0:49:77:2c:ba:72:46:50: e8:93:ef:32:d6:6b:64:ee:9d:ea:bf:8c:ab:6b:c3:dd:1b:63: 3e:da:7b:11:e1:c6:f2:08:96:67:d2:01:8b:bc:e3:bf:b5:ac: 6d:56:bb:6e:20:42:e5:14:b1:bf:6c:a7:88:55:57:67:dc:b8: 4e:b2:53:9f -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI4 OEE5MTc4NUE3ODJDOEVBM0NEREVEM0U3QzFGMDlEQTc5RjY0NzAeFw0yNTEyMDYw ODA1NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY2Mzk1MUI4QTlCMEI5 MUU1QjlBMTZBNjc0MkM2NTAwMTQ4NkFGOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcD7sTt6am069KL7qo9/MOL/JvU9K6pt5NzpfVQKmTMAsdBS08 bk+aRNN8IfEepyAaKxluckI1dwNuecoy1SIzSz7Wh8hOPT2iOrBGjodfSQNyD1FI gIpgM1WWQwEa3r34UpB/hxfSvYMS+bXrPTaFMECQ3/X3qFDLFhe9RwEelyA2fe95 B9FNY9TT3IGsz7eZ3cdc8AkbjctiyhaTpFiMdZK1Gn/MC89g38y17tp+lj8fg0Aq n7iFDBnaAQeXPq14FOKT4zqbgYQ5sV1LAGml+57uUEhMPvX4d2IpsL9MqwTwPrBg j9ieo+NUKxr8SgJ7i//sd6oPLko8xLcsKfjXAgMBAAGjggIHMIICAzAdBgNVHQ4E FgQUZjlRuKmwuR5bmhamdCxlABSGr5owHwYDVR0jBBgwFoAUu4ipF4WngsjqPN3t PnwfCdp59kcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3U0aXBGNFduZ3NqcVBOM3RQbndmQ2RwNTlrYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvdTRpcEY0V25nc2pxUE4zdFBud2ZDZHA1OWtjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL3U0aXBGNFduZ3NqcVBOM3RQ bndmQ2RwNTlrYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/ 6TcljKcucv3Y2SYdU95A6UdIpmlSIpYbFqfm+5yht+mJdVgXsmBVq3xxCuAzS+3O 0jvezXFhrPsH9Y21ziULk+u7M3cfMIvNa1F1AngCrd4PfREzsEMZV0er0Yi1zx1F akGbTOoczo+EdYMtGdx7k23mp488Uu9rML6EmoqLGTDZJhWrF4o2enolY5CB6f0C wgvG6UNmY8eBywNLwvH8zZYhs1HQs1c++YUitsNJkabY+syO3lupY0UGi5WB8El3 LLpyRlDok+8y1mtk7p3qv4yra8PdG2M+2nsR4cbyCJZn0gGLvOO/taxtVrtuIELl FLG/bKeIVVdn3LhOslOf -----END CERTIFICATE-----Generated at Sat Dec 6 18:56:39 2025 by rpki-client