This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
File: u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft (raw, json)
Hash identifier: CI7i97g0+P06Wg/KV2e//lX/CyX6vi+kG+Y+nlL3jvc=
Subject key identifier: 5F:2E:A8:F6:BC:2A:32:CE:18:19:AD:42:C2:E6:0E:2D:B6:ED:B0:08
Authority key identifier: BB:F8:E5:35:22:40:97:17:87:80:6A:3E:53:A8:90:48:59:A9:F0:E7
Certificate issuer: /CN=BBF8E5352240971787806A3E53A8904859A9F0E7
Certificate serial: 01FA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
Manifest number: 01F7
Signing time: Wed 21 Jan 2026 03:45:33 +0000
Manifest this update: Wed 21 Jan 2026 03:45:33 +0000
Manifest next update: Fri 23 Jan 2026 03:45:33 +0000
Files and hashes: 1: nxPOB_142Cw5aIl7fWRINXa_Loc.roa (hash: oZQg3Mac5DRiFP+QaVGaZceQPEXpPsPnqOS7dI/2mA4=)
2: u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl (hash: uW74HW1brbnAziz18wtpk/UkZew2UsRl5nbEWVDbv6M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Jan 2026 22:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBF8E5352240971787806A3E53A8904859A9F0E7
Validity
Not Before: Jan 21 03:45:33 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5F2EA8F6BC2A32CE1819AD42C2E60E2DB6EDB008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:a3:25:d5:73:fe:23:56:af:9f:31:3d:98:
9c:39:b9:09:f9:35:63:31:52:3d:49:d4:d4:a8:e8:
4e:93:97:6f:59:a1:fc:73:d5:e2:fd:e7:17:f0:da:
95:a1:9c:24:cf:bb:13:2b:9e:52:3e:52:31:25:ea:
ce:28:a9:b3:20:9f:63:91:81:ae:e4:db:31:6a:ee:
83:db:1a:c0:08:c9:83:bd:78:f2:cc:9f:c1:98:57:
bc:64:9e:43:11:9b:4b:48:bf:f8:41:7e:af:15:b3:
18:c4:be:35:21:e7:68:9e:9d:ee:3c:6d:d5:3e:1d:
2e:ae:7a:48:9a:8d:b3:be:d6:05:9d:86:e2:83:48:
a6:e8:56:c6:04:6f:2f:25:9c:17:a1:f6:50:9a:29:
7c:35:13:d2:ad:b3:37:7d:e9:80:63:11:e4:fd:b0:
76:6a:3c:2e:9a:ba:d1:78:b0:7a:20:5f:83:37:64:
5b:51:de:28:73:e2:9d:2b:ae:56:9b:7f:89:a1:5a:
6d:05:ec:69:f7:01:eb:8d:b0:9a:37:ff:63:38:8e:
8b:e7:a8:8a:16:0f:84:c5:85:59:b6:a0:c6:94:c5:
41:5e:39:d6:26:28:ea:63:90:f9:4b:7b:f2:6b:f6:
81:9b:bf:f0:a7:c7:d2:3b:4e:6d:a6:9a:1c:11:93:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:A8:F6:BC:2A:32:CE:18:19:AD:42:C2:E6:0E:2D:B6:ED:B0:08
X509v3 Authority Key Identifier:
keyid:BB:F8:E5:35:22:40:97:17:87:80:6A:3E:53:A8:90:48:59:A9:F0:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:2d:73:93:ee:00:b5:41:73:fa:0a:9b:e0:d1:57:e6:96:e6:
01:cc:b8:1e:aa:7e:2e:db:78:91:3d:4c:ec:da:3b:41:71:0a:
e9:b0:71:01:ed:0b:de:5f:f8:59:a4:1c:f7:b0:6f:04:77:14:
36:c9:00:57:98:45:cf:92:8a:ee:a2:ca:06:3f:ba:ba:67:d7:
b8:bc:08:d3:66:e0:37:2f:ad:d7:72:19:7e:1b:14:ca:0f:01:
36:4d:12:e7:f5:c5:92:b4:d9:22:5c:18:ff:e0:64:b7:ed:8b:
76:80:e5:2f:0c:e6:f3:f6:ea:16:11:ea:c8:2f:73:cf:ea:be:
44:86:fc:d9:a1:bd:93:b9:8b:93:32:30:cc:ad:60:fe:a0:41:
0d:47:b8:98:f8:18:8c:f8:42:ec:7a:cc:08:0b:8a:1f:be:fc:
76:48:e3:b1:b8:2b:85:c8:10:4f:4c:24:59:22:01:f3:3c:46:
65:2d:a2:c4:3f:b8:be:20:1d:2d:4c:ec:50:ca:2a:13:43:b3:
ba:d9:9b:b4:3f:b1:f8:13:86:d6:6a:7f:30:74:4a:3b:65:3a:
6c:89:36:a2:de:22:7a:61:c3:ee:7e:11:ab:21:79:2e:4e:7b:
f4:e7:07:18:8e:1b:08:47:2e:df:97:05:c5:0f:eb:a9:30:79:
1e:2c:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:35:18 2026 by rpki-client